last executing test programs: 7.902392543s ago: executing program 4 (id=3932): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000240)=0x1, 0x4) pipe2(&(0x7f0000000200), 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3c, 0x1, 0x0, "6906007722366ccee4ba568ea4f8011fd3454ad23d0000a5ce00000000000002", 0x50323234}) 7.741943334s ago: executing program 4 (id=3934): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) 7.576639071s ago: executing program 4 (id=3937): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x10, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty, 0x200}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @initdev}, &(0x7f0000000280)=0xc) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="3be5fe3ef39ad7dcf3eef9c24bcfc5922d227aec46ec5cec703bcf8f1022b63452c95cf6c0798c5f8d3936a92a6bcbfcf3e2a56a2032331812c53c488334863b89e1cb45188fd33f57d6a66121e5c2eef61cb337467a094e8f6f47b1fadb3770ce786cfdbcbf737698162ebd52", 0x6d}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRESOCT=r5], 0x1d8}}], 0x1, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r7) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.303941774s ago: executing program 1 (id=3938): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="05000000000000000000020000000a000900bbbbbbbbab660000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x800, 0x9, {{0x12, 0x4, 0x0, 0x2c, 0x48, 0x64, 0x3f, 0x0, 0x0, 0x0, @multicast2, @empty, {[@rr={0x7, 0xb, 0x0, [@rand_addr, @local]}, @lsrr={0x83, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x14, 0x47, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @end, @timestamp={0x44, 0x8, 0xe, 0x0, 0x3, [0x0]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xa, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 7.164407401s ago: executing program 1 (id=3939): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec72007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa749c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068210ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b220e3e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb08000000a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8852a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7124d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856f83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f350d000033cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15f91dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa00002ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f399e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f950e3b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa120800c329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 5.953816642s ago: executing program 2 (id=3943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000140)=[{r4, 0x19f23}], 0x1, 0x0) socket$kcm(0x2, 0x0, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000140), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="63813855a901faa76eedf02412f1d31807000000000000a600000071100000000000009500000000000000641778e3d74294002a58acf9af06f8bd8f51fe4a0f9919a5cb8da2c801d8a6d23a847bdacbdaf558cedb6566b36dfb26068b6a42924567e34cd633a7b4498594db0f9ee41116f1be00000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 4.495036339s ago: executing program 0 (id=3947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x20000800) syz_clone(0x80228400, &(0x7f0000000200)="01439abecdcf2e44353ac1c6a805e93e052e0eed27a15a56e30f68047907c3ab0eff38a5808ad3781ccc", 0x2a, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="135108dbe56038a3a646ac402f9ed1dff6bc8c84d4384431acfac44c71c4f3ba72089687362d493e64d03444408ba1489eb797ffe91f65852407250bea90c8ee904400ca35ef79ff2202454c68c580e7602837028d49359c05bd05517fca7207a0e6e07f0432daa97e0a7e7574cd18d0bb55e258372cb1715fd20071ca2a499ed871f0b487efd2f75b403c12dd0a13dc7c15f0e752233378e3aadec09149c45505f8d76a2c6e5b88915c61bf6fa903d3d9bed215e08dbcb1e12ce8fdd0a323487978c50db341282dcdd8c91750309c666daf0461270b62127435e8242a1b6ff7dac7150c3734c24deb2d52ee271f4dcd723036e574ed6e19e0dd81e7f775421aaa9f2ebf3ff8791045d9ae34594708df54de3f4333a30039d9d0349bb256171cdfb511dc52f4b49804762a88c864b450ffe7cf4569e0a187f1ca6f9998e4a5bff9218d9e53904b4942e92fee931db1cc7da55cb49896b9f4fa30eabb560c3b23c84dbf5dd9bc98a884a79201604c48d93101bc50d8f2b901640bcf90de3c136f916378d249a872a3c3b8c4fefd52455c1fb6082f88d3aa7ce1854fa3d0e3e049697f18cd5282d3214eb0ad4157d452c465d53c7a22ec7fb109857d4dfed87b22ca1b76893a118a195f355f220ac3b2269881950b9c0861e35a81a10b909bf9c72e3279d51d89a21412fd77e39e97f3b55e75ae6843ec91090d4345804020d9b521d5997757d6667822655f6fbfd52bb5b8b1dfc57a2d7f76c4cd122c3db931a2f244b8dddff6e6f7edc4918b933602411e2250cfa92123f8ce3e37f030ce4ef2562ef5bc6c0b3bf86b003373129fa750cdf95a331edd63c3660f2007bf7649c51e86814214d03a603aa7711a5928ec32df54d194951dee45a349f403c65306bbe1c888f37d21301ed199500f1c8085b226286262f2af2e97abe8c4ae8ec541d6a11f813e1f02d3cd7f27d1b76951ca4072a081a617871fd8de53012c0cc9dbf2aa455441adfd96fdbc87faf11a17a93677ac73adb5eb82eaec60a7294c54618a9889361dfa6f00bd2497947f15a47875dc1f1acbf8510286bff1be092c63ecf9ad36e0dad69e7423666f02b52a43f4b374f3eb7904148748a50a622f13e31da42d7ebf9306a25b4d4e8de4635dda1f9f52f6a5dfe941095a2dd5e8bba6032edc09332e87036b6f0e26212d5f0f7d9bc0228d1369a9db241cd5ece72ae955b952effbb9992c98eea89d1443794fc8569ea35ecab4e6150a14306f4323707145cbe7f13023894ab6f2bbcdd1bc687aa406a2b00df2d41fa921e94132e8f3c13f7fd3b4c6b6f23ef97181dbd757cc4092bf7cfed419d5d8f6cdfd6ae328c4a474928e32fe5a63af30a4807055627854a30df367962c3367fefa098b18d92e2e873a9aef7fbd56288e45a2b05ea47c92b18041a1b8bef0a4ebe242733b6462f6ede1f4f5ec6c4ecb7250366c3216de7e2752ceeab102c655507da8e3bc018da666beceeb7c258b8f2de77d042c6df2c509b626c3895b9b6786b6cef09975ff56a24dd1cccbc3688c561b58a5b887529ab88d52b79c717394757d516ca16e80e933bc96bc046b400f534681345ca700140b7204cec133c7ab0eb276af418133806b48e25b3ba9abcc0df8d8c1fad65973b263ed38c0da45ad438431f3be028bb66cfb34976d7afe0f1815221cb445889b110d792ee7e59356025f80a1e296ce1605b045fd40e9ea103831756f843d50b0d654e75fc7947751f5d4ed74741cb67e0f84d67c5b144e6385d093599a355ab4e0ad63fd52716c84c0392e665fed6abe6852a0c2dfd8c0c4726b09132ba4b52c375f82769c03f46da451a438983ee0ba71d297222b5e005c530c05a3d4d71837dcde6a429832110e791948242e79c25350a13f5ce083ca9b25aa4d626fae1977cb7f6dec98c3146b12150d17aee5ea3f9366c332927210e7b8dbec5421ccb2759ca8af8136087fc857f851e464708a1eb939f0c361c8d622f85d405b139e5c5320be3e883b25ebb4273acdc17ca1d9884fbc961cbfc446b4bb6aa55f53ce7f26778f8847011755222bed010a479e9a42ee010932c8147e82fe9f74c41b325f24b4a80f0fb226fff42469a0b892f5ae967bbe45188350de2d44b0a1bf31dd965b84b135e46e2f34f8856f11c6428df69934b4622ab344af66f6411505bd2b2dfd7de45174dbb5b1b7916fd5ec3bf0482abfc59280d1ffb3241224c2fa9a119283c764392e4f5ec6ff575d971e7d03069f7277ceeaffef5ba0541bcaa6c9aa0b73d49142f81bd128b67d671e89c6d1a40659c0755958e68f86bc49813f2d8c6311916150743558c8606560bfa955af7218336a932ba7c198adb0d5fd7e51563593d4e0fc7a1ffc305cd9c74dd9d012f5fea1f18a0a4ba4b241d080df8648cf3b9215a173338e3259bc320dd647cdd4b7b3e20d4b8db34127a969ac225eb147b2a5b4f2cfca658fbf8c35754fb5454eb2ca6d97044bb95df30cecfd2a9a8eec6860f969f606f3c8fd21b276a460c1bc940356b948a35e6c3e4c0da88bc60bca2908a6ade34a0f479ab1c676e2f89c8b4133aec2e2915ec5c5e9e807de5a298ca11e7ea62459154951a8f9ff9937165090a2089ee095429ec24cd0eab73253d7b8e64dd575205b6c731bda82812993346974c6745322d1dc959a21877a4a2d7cfedb66dc37115c4d5434d861811a7e0d46d4e329847bd335b51c6d6b0494806ee64ff79ead2c5eb8d011c7f8fa2bf813aa8535143cdcfde99855072729bc88e98ac17e0edd22ce5f0fc557dd988e6b320ecff8d8d405a59e1a11981e61f8137f49545b918f8196330a7fa2bb9186ce3c656cdea5b531923cb2b8e975d06254a1a1d289ac1f4070a4121b46babea73b6874b81d9085b5ca397db98c58d6f72f41e20b92df0049bab48f6a390fb2d364a60d1709afe0ab5e8dc999503a3afd2afbb0f6dcbdd294b75dbaea5388bf714fd7221cddc4bfa8aaf37796589abfca14acab14533d824fc4769748bbe1b1f9c04971ec9bb0ff28640bd2695def883f55c131e65817e92fd88293270af773b63a76a6bda1f95d08100f7266589a5b1b2b11910e391d57d4da99340d7905898197860e58c6c588ac1bb958242c919fc4d604877f16780d58ae25a015bc25b0f08e2cf0e381f36736095ee6cc0ed81dc61bcf449f30494c095e6eff807257c7b7a785987cbfeebd37432ee0bb549f39e2dd03d03a4cdb1fd42dc3988b7f374ea17449a042c413b66be423e5e39b2641067677fb895a90c313e824f6afc6629fa3cbe7f4c419de6cb38be15ef9175c6d641a174bc109d97a463b1e1afe0e9ff0804cdcc61e8de1088bf2ab69a7e87e224e5db8381b86d3cab271a815290cfcfb8086a8af02cd9ce0e1bc03c2a4f047a8bcc4e952189a7efa0f70ffbc98e03fe725cb97f4dfa93ba847f49e6c7b2ee9519d42db952564c652725162b76b66f2d1716cbbb399ad19b299739de504f83037dc59506d5b2e3ce5e4198fd532a7aeba32f83f784df46a9adf3443c0c29c3770dd6c8c0857bfb904c3835d92be2d8ff39cd362a427c8b5c5203e148a6ceb76eb47258ed58f1b6c1a1bef133fa8b34fcb32f68789054f89b81cbec6189fb2a9f4d68afe0a1e50a23684cbf4e93cc134b4ad398446f4612e9669b203358ecd285ab323143b5056a86002e6966000b4a8e23ba180832a67bf0a0d82edd60474df024422edaf4fcaad21792f04c6b062a6265eb7d17155ab0b8895ecee61a182e2f42ac169b342e1cee59b954b6dfcb3a31a0d62d1005bc87a29589d3a980dd31a3d11217c8dd19d7ccf60a5af88bf03ee5aa17565f872e9236efc66c9f8100625bce61e17d006d72f6976100ae5a0e6a92af726ca3c080b2d644aefecf9322130ee0ff42926d165de997261c86bcab910edaa54134aa9501cc115d3f6c4eb5988ab1ead6571dd442089a0b97321047175f883ce33e69b55a31836d548386c395213a1367e07a07e5de166425edbd5c5629a82037be28c11b7d93fe2b1c0f715defacf7c7d24773dae38f5d7b183a7e695df0239bc91fa3f14dfa430c751b5a0ee8bc03f71bbd006869438d01a79563bc280778dc23074638118059c15e862d6a3ad9cd6b25bcbe66f1f71b9e29e28042186bf12b62ecc204d82717cf344845921083524ae930a3442c06476b739a7adc39b8aede79a1ab2a507c20b0e56703d263cb859ae817e45b4d6dfa47cf2050d01a6438ece199ea2b7102579d3aed5e88f65eee179e2d786063dd549ac85d9720855baa7e909d00c0e258e10cd4399b30aae3086e938af6fa28f13778b612add2bfa17da61fe1ef7f7bafc3d9e781a34a95251d33b8f14d73a8831c5aa7bdf1bf4850be1aeccfb0a183c16aa0321780c3540070f0cd2a245167b5d9d7570ed87087bce3121a5ed2c02cf7609621e6f1ed1dd04900e4cac66592fcfb7706f05056b208148c9770a59bea352fee9ba2c0030990b7597e180169906e3f98552a9968b51e7211ca7bdfa7dd8d174ef716c505fd4aad44d06847581506908ddf4f92c3c5ca9b5a8d9fac93e5042524dbcad87af07bd779d3765c8d31e37c7d2bfb9176385f38acb032d8ace4ac2ce061e74e8012c68ac4211fb6c8852a670e7d06279029cc8c0e1d4aa52b05eda0fe2b958f4b019763634baa64cdc6ecb3e998d47880eac23967f5c22d2de9ff5dc6f9b67509911192faa68d54d606eca06223f5ec35ea1791b10439a423c84771ebedc9c0f09047a35078031d9a48b9ddf15cdda89fae0951a5ab522be062b4f536260ca7533272933a2feea0db5a288ea2b6790e41655ab3777aaa1507f900517efdca958180d56004f69f5683b25e6b1d9be7f8f9ab29d865823f338efd9e995b97d6787915bcd654693e56c3272af83f79757012f610e676647459855258030599395e7b8fc9c1a7178df805d77205dcca4f87008269480a8119ae6e0d8bb4caf34965dc5005ba6e596ea9ca93f04a46c2e22966ec13e1edb0f3248effacf9ab56c29848138c17653ec09ed1315d5924889671b8f3a075ed14f6c4b539e7ada940aca6ec4c606d217fda1d7a9bd4471cf75a869f6dd9fe849480b8d5e86e89eb5f828ee284d82f2fde7caa17f12ce24a3974ea564c4ab633ed88c3fff329c6b22af81e5372b677e530925c54e1aa2dab48d3df5704a018a31c1f6e1c7b2e02762459b39366728e6c68b82dbd9b155af92cff79ddd24ef05cc4a740ea552d0e9d252cab5cfa1c2a958fa6809b44c775e06a60570035f8dee0a33c0e83ba97c12a166b529de33f11cb313ae9fc824ddf0a05e9801073a4465927bd29e24b0750a17f8a4280a139c2c61282734ecc4d2419e58cb22aeac22784ea29067747bb3f316d97e816b19968c246084b3995802ad8eae9965e12aee69504db5483d5667234ef61016234cb2a49636173f6a8a654d994e222ef3b850d1d544886f216b8b4b8f445daa965e8ae2f944b593e004f6cf6e18712b8af10d64c7a83a7aff5a21b0defb8cfebfdbfae01de52469aeca7036f86a378f915bc1e6da75dc036443f712751bddd7068979acf2070e564f92b80367c109fadbaf83382a61cebe6051cf138c2fde01a15859f785fe23189a4331e5b7acdbc59664bc1d5f7ab96f34039fd9bed11c38972c9230edf440758bc493a879314bcc7e8a6b68c655632d2fcd3ccccd49b6b10e5e3a93ce87e40dc30a614fc897873fdaa799f54f5461170ed65a8cbf06df5c7d7b11680c330ec2da24feab8b6ddaaee37980fcd46af8d9d9") socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000012c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000001400)={&(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x2, 0x5}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1d, 0x0, &(0x7f00000015c0), &(0x7f0000001600)='syzkaller\x00', 0x2, 0xde, &(0x7f0000001640)=""/222, 0x41100, 0x4f, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0x8, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x3, 0x0, &(0x7f00000017c0)=[{0x1, 0x1, 0xb}, {0x2, 0x4, 0x1, 0xa}, {0x1, 0x3, 0x6, 0x6}], 0x10, 0x7}, 0x90) pipe2$9p(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r6, &(0x7f0000001900)={0xf, 0x1f, 0x1, 0x2}, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b00), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r9, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040041}, 0x5c004) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001dc0)={'pimreg1\x00', 0x1000}) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e40), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ec0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r12, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x661}]}, 0x24}, 0x1, 0x0, 0x0, 0x180}, 0x0) 4.167959714s ago: executing program 0 (id=3948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x80201) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="5d9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x8000001fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdf}) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.996547842s ago: executing program 1 (id=3949): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="05000000000000000000020000000a000900bbbbbbbbab660000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x800, 0x9, {{0x12, 0x4, 0x0, 0x2c, 0x48, 0x64, 0x3f, 0x0, 0x0, 0x0, @multicast2, @empty, {[@rr={0x7, 0xb, 0x0, [@rand_addr, @local]}, @lsrr={0x83, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x14, 0x47, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @end, @timestamp={0x44, 0x8, 0xe, 0x0, 0x3, [0x0]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xa, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 3.939981232s ago: executing program 3 (id=3950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f00000003c0)) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000400)=ANY=[], 0x8, r5) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x20, @empty, 0x4}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES8=r6, @ANYBLOB="445f3c18a4a083659c94c2953e029c7bfac535f2ec72680b53dd5fd8f649aac13b5fff796c11fd73cb398ee7c6e01ebd84a7919b85aeb4b293946598714ad3488ddbaef26b5dfff2ba52804d1fa0d4c5d608b7b99a401606245182ff15b100ec1e0751a7c244f424d03a9a034e9e73aa96d6596b5b1180722622d302cec9d7d5277b56fac9c36988592b3a0b4866c145f5d45dfbf4224fd5bb444066"], 0x448}, 0x1, 0x0, 0x0, 0x40014}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) write$tun(r7, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000700)="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", 0x1b8, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7e840000000000008aa0560e97d0b369303403a46c26dc"], &(0x7f0000000080)='syzkaller\x00', 0x404, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.684405165s ago: executing program 2 (id=3951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006100)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) 3.558519488s ago: executing program 4 (id=3952): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010102}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000100000b18d264339929d441b3cbd4f5c4da6294f2720702a68e4bee94c34c69207ed52305a73575774cf60e9420013e97472efc25d9daee4e3a9eba8bdc39ef9a0a55aff5a93228a81ec612ba43272d560597c3ff2e93f6c35b7c204224b8313fc2d39cd220b8f2249084f9d985947e0d0ace5961e03e6943f5b4ce95fca462574bf3f1f601f9274c4ce37f2", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) 3.526480376s ago: executing program 1 (id=3953): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7ffc2001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x6}, 0x90) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5c, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffff64b}, 0x48) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040), 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.208021284s ago: executing program 0 (id=3955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)) poll(&(0x7f0000000140)=[{r4, 0x19f23}], 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000140), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="63813855a901faa76eedf02412f1d31807000000000000a600000071100000000000009500000000000000641778e3d74294002a58acf9af06f8bd8f51fe4a0f9919a5cb8da2c801d8a6d23a847bdacbdaf558cedb6566b36dfb26068b6a42924567e34cd633a7b4498594db0f9ee41116f1be00000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 2.122156305s ago: executing program 2 (id=3956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x24}, 0x24}}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) (fail_nth: 2) 1.726650833s ago: executing program 4 (id=3957): r0 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3c, 0x1, 0x0, "6906007722366ccee4ba568ea4f8011fd3454ad23d0000a5ce00000000000002", 0x50323234}) 1.725953769s ago: executing program 3 (id=3958): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0xc800) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000080)=0x5, 0x4) (async, rerun: 64) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="95885a0a6e3df31b478387880195d52817515e7db3b62c2400d6799094da84fb2c0364d8de6d4fbe588086c500949d0e2fbbb84044fa2be0609a", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x90) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async) personality(0x0) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) (async, rerun: 64) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64], 0x134}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x9}, 0x0) (async, rerun: 32) r5 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) (rerun: 32) pwritev2(r6, &(0x7f0000000c40)=[{&(0x7f0000000400)='o', 0x1}], 0x1, 0x0, 0x0, 0x37) 1.587665502s ago: executing program 2 (id=3959): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000100000b18d264339929d441b3cbd4f5c4da6294f2720702a68e4bee94c34c69207ed52305a73575774cf60e9420013e97472efc25d9daee4e3a9eba8bdc39ef9a0a55aff5a93228a81ec612ba43272d560597c3ff2e93f6c35b7c204224b8313fc2d39cd220b8f2249084f9d985947e0d0ace5961e03e6943f5b4ce95fca462574bf3f1f601f9274c4ce37f2", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) 1.584843804s ago: executing program 4 (id=3960): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec72007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa749c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068210ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b220e3e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb08000000a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8852a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7124d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856f83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f350d000033cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15f91dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa00002ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f399e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f950e3b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa120800c329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 1.54541604s ago: executing program 1 (id=3961): mknod$loop(0x0, 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000380)=',r\x9b Y\xffH\xdbq\x04\x01`\xe8\xcda\xcf\a\xa2\xa4\x8f\xd6\xe5~\xe9\x05 eG\xb5R\x19\xfa\x94\xa33\xc7\xc8\tp\x1f\x13L\xad8f\xbc\x8c\xa1\xf2Y\xa0\xdd\x1b\xe9\x9ca\x922nc\xaa\xfd\x90\xcf\xbcL\xf4\x98[\xafS3\xd3\x1fltivQt4\xd5\x028\xee\xe9$\v\x9ef\x9b]\x92St\xdd\x99mv1\x96\xd0\xf2G.\xcf(\x85FDC\xe5\xa2\x8e[UTq\ty\x9ds\x1e\x14\f<;\xd7f\x13\x83~Y\x99\xf1\xff\x1d`C\x9f\xc7Q\xe9\xe4\x85\xbf\x15\xe7\xf6]\xff\x84F\x00\x9a\x88\x81\xca\x9e\x18$2\xfa\xe5\xea/i\xeb\xd4h\xdb\xe5*r00\x85\n\x10q\xca\xa9E\xf4!\xee8\x86>\x9fIo\xddD\xc8\xcfu\x81\xd8\x90\xde\x13\x13\xf6\xa6\x8a\x06xb\xcb\x14\x106r2q\xf7\x9a\xac\xfe\xc8]\xc7\xcb:\x15\x99\xf5\xb0\xb0\x88\x85\x92\n\xcd-\xe7C\f\xd0\x8b\xda\xa7\x05\xaa5P\xa1\x8a\xae\xb8]') 1.385618959s ago: executing program 1 (id=3962): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 1.31212287s ago: executing program 3 (id=3963): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00', @ANYBLOB="05000000000000000000020000000a000900bbbbbbbbab660000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x800, 0x9, {{0x12, 0x4, 0x0, 0x2c, 0x48, 0x64, 0x3f, 0x0, 0x0, 0x0, @multicast2, @empty, {[@rr={0x7, 0xb, 0x0, [@rand_addr, @local]}, @lsrr={0x83, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x14, 0x47, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @end, @timestamp={0x44, 0x8, 0xe, 0x0, 0x3, [0x0]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xa, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 978.037012ms ago: executing program 3 (id=3964): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010102}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x380000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000100000b18d264339929d441b3cbd4f5c4da6294f2720702a68e4bee94c34c69207ed52305a73575774cf60e9420013e97472efc25d9daee4e3a9eba8bdc39ef9a0a55aff5a93228a81ec612ba43272d560597c3ff2e93f6c35b7c204224b8313fc2d39cd220b8f2249084f9d985947e0d0ace5961e03e6943f5b4ce95fca462574bf3f1f601f9274c4ce37f2", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) 950.392479ms ago: executing program 0 (id=3965): r0 = socket(0x21, 0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r3 = dup2(r2, r1) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close_range(r1, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r9 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="47ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r10, &(0x7f00000001c0)=""/136, 0x88, 0x29) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) write$binfmt_aout(r6, &(0x7f0000002140)=ANY=[], 0xff2e) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000600000000000000000000000000000000000000000000000000000000000000000000002f00000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff0000000000008bdbd70d1c0496799ec47505726541060000000000000000000000000000000000000000000000000000000000000000000000ffef000000000000000000000000000000000000000000000000000200000000000000000000000000000002000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb00000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000a37155e4844ccee500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000000000000000000000000000000000000000000000000000726564697265637400"/2376]}, 0x9c0) 848.805378ms ago: executing program 2 (id=3966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1a}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c020000120001"], 0x24c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0xd, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0xc0045878, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 455.993632ms ago: executing program 2 (id=3967): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) open_tree(r1, 0x0, 0x1100) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x0, 0x4}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000d00)={"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"}) pipe(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x677c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) 444.339534ms ago: executing program 0 (id=3968): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000002c0)={0x18, r3, 0xff3f, 0xd4b1}) 275.761654ms ago: executing program 3 (id=3969): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_cache\x00') ftruncate(r3, 0x4000000000000000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001780)={0x58d, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f00000013c0)=""/83, 0x53}, {&(0x7f0000001440)=""/65, 0x41}, {&(0x7f00000014c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/19, 0x13}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/191, 0xbf}], &(0x7f0000001740)=[0x6, 0x7, 0x9, 0x9, 0xefe8], 0xa}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008864"], 0x0) 0s ago: executing program 0 (id=3970): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x4, 0x0, 0x0, @prog_fd}, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0], 0x60}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x80, {{0x1e, 0x4, 0x2, 0x13, 0x78, 0x65, 0x0, 0x2, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x2, 0x11, "51dadda1ad2675c9b73dc31c44c485"}, {0x0, 0xa, "5d3ac9d54de2d2ab"}, {0x0, 0xe, "615c9373a8606dfa4e6fed6d"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x57, 0x3, 0x8, [{@broadcast, 0x6}, {@private, 0x1000000}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001080)=ANY=[@ANYBLOB="380100000d3f51ad89034b85da00000000ac1e0001000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800010078636263286165732900"/240], 0x138}}, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, 0x90) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{}, 0x4}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000002000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000e80)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200004000000000000004b7e4822ba7e672a20b809383f176816b151c81ddaee124b6435454d4c8ef06fb564962124a20eacff2c513559c944fbbc12a57795a711a8ba3b41cc5173c2c97ee84c0712051ba8ad749c3ec7521fd73f8e6b84107c26b10e8a50c3e26ec0565d8e7d3f7d8526c8673d4d48c4ff58b6184c8efe74918b916271d3c12f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x300) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) kernel console output (not intermixed with test programs): 16249][T19255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1187.222069][T19255] __sys_sendmmsg+0x374/0x740 [ 1187.226769][T19255] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1187.231972][T19255] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1187.238295][T19255] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1187.243498][T19255] ? finish_task_switch+0x1e5/0x870 [ 1187.248685][T19255] ? lockdep_hardirqs_on+0x99/0x150 [ 1187.253871][T19255] ? finish_task_switch+0x1e5/0x870 [ 1187.259061][T19255] ? __schedule+0x17b6/0x4a10 [ 1187.263758][T19255] ? __pfx___schedule+0x10/0x10 [ 1187.268624][T19255] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1187.274608][T19255] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1187.280925][T19255] ? do_syscall_64+0x100/0x230 [ 1187.285681][T19255] __x64_sys_sendmmsg+0xa0/0xb0 [ 1187.290532][T19255] do_syscall_64+0xf3/0x230 [ 1187.295110][T19255] ? clear_bhb_loop+0x35/0x90 [ 1187.299781][T19255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.305663][T19255] RIP: 0033:0x7f6043377299 [ 1187.310064][T19255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.329663][T19255] RSP: 002b:00007f60441d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1187.338082][T19255] RAX: ffffffffffffffda RBX: 00007f6043505f80 RCX: 00007f6043377299 [ 1187.346048][T19255] RDX: 0000000000000002 RSI: 0000000020004780 RDI: 0000000000000003 [ 1187.354008][T19255] RBP: 00007f60441d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.361971][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.369944][T19255] R13: 000000000000000b R14: 00007f6043505f80 R15: 00007ffdfac01cc8 [ 1187.377942][T19255] [ 1187.833762][ T5269] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1188.050330][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 1188.059965][ T5269] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1188.073169][ T5269] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1188.092458][ T5269] usb 1-1: config 0 has no interface number 0 [ 1188.106145][ T5269] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1188.136987][ T5269] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1188.918133][ T5269] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1188.949521][ T5269] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1188.958668][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.025132][ T5269] usb 1-1: config 0 descriptor?? [ 1189.182139][T19258] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1190.457773][T19285] pim6reg: entered allmulticast mode [ 1190.506013][T19285] pim6reg: left allmulticast mode [ 1190.657599][T19290] netlink: 4120 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1191.391858][T19291] vivid-009: kernel_thread() failed [ 1191.735515][T19305] x_tables: duplicate underflow at hook 3 [ 1192.096860][T19315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.748987][ T5269] usb 1-1: USB disconnect, device number 63 [ 1194.430052][ T29] audit: type=1326 audit(1722321494.364:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19343 comm="syz.3.3272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f64777299 code=0x0 [ 1196.619748][ T8] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1197.360989][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1197.482309][ T8] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1197.520934][ T8] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1197.560481][ T8] usb 3-1: config 0 has no interface number 0 [ 1197.773792][ T8] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1198.017651][T19402] FAULT_INJECTION: forcing a failure. [ 1198.017651][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.041018][ T8] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1198.072225][T19402] CPU: 1 UID: 0 PID: 19402 Comm: syz.4.3285 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1198.073094][ T8] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1198.083008][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1198.083027][T19402] Call Trace: [ 1198.083036][T19402] [ 1198.083046][T19402] dump_stack_lvl+0x241/0x360 [ 1198.083079][T19402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.083101][T19402] ? __pfx__printk+0x10/0x10 [ 1198.083131][T19402] should_fail_ex+0x3b0/0x4e0 [ 1198.129651][T19402] _copy_from_user+0x2f/0xe0 [ 1198.131926][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1198.134257][T19402] bpf_test_init+0x11f/0x180 [ 1198.147963][T19402] bpf_prog_test_run_skb+0x2bb/0x1820 [ 1198.153370][T19402] ? __pfx_lock_release+0x10/0x10 [ 1198.158416][T19402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1198.164237][T19402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1198.170058][T19402] bpf_prog_test_run+0x33a/0x3b0 [ 1198.175085][T19402] __sys_bpf+0x48d/0x810 [ 1198.179329][T19402] ? __pfx___sys_bpf+0x10/0x10 [ 1198.184102][T19402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1198.190086][T19402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1198.196416][T19402] ? do_syscall_64+0x100/0x230 [ 1198.201183][T19402] __x64_sys_bpf+0x7c/0x90 [ 1198.205598][T19402] do_syscall_64+0xf3/0x230 [ 1198.210097][T19402] ? clear_bhb_loop+0x35/0x90 [ 1198.214774][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.220663][T19402] RIP: 0033:0x7f8e78177299 [ 1198.225069][T19402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.244691][T19402] RSP: 002b:00007f8e78fc8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1198.253114][T19402] RAX: ffffffffffffffda RBX: 00007f8e78305f80 RCX: 00007f8e78177299 [ 1198.261080][T19402] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 1198.269129][T19402] RBP: 00007f8e78fc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.277090][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.285050][T19402] R13: 000000000000000b R14: 00007f8e78305f80 R15: 00007ffde1dcebe8 [ 1198.293027][T19402] [ 1198.311751][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.345291][ T8] usb 3-1: config 0 descriptor?? [ 1198.351035][T19380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1198.443898][T19407] team0: Port device macvlan1 added [ 1198.477273][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 1199.383288][T19421] FAULT_INJECTION: forcing a failure. [ 1199.383288][T19421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.402859][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.1.3290 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1199.413666][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1199.423724][T19421] Call Trace: [ 1199.427106][T19421] [ 1199.430043][T19421] dump_stack_lvl+0x241/0x360 [ 1199.434729][T19421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.439946][T19421] ? __pfx__printk+0x10/0x10 [ 1199.444536][T19421] ? __pfx_lock_release+0x10/0x10 [ 1199.449578][T19421] should_fail_ex+0x3b0/0x4e0 [ 1199.454288][T19421] _copy_from_iter+0x1f6/0x1960 [ 1199.459141][T19421] ? __virt_addr_valid+0x183/0x530 [ 1199.464253][T19421] ? __pfx_lock_release+0x10/0x10 [ 1199.469310][T19421] ? __pfx__copy_from_iter+0x10/0x10 [ 1199.474607][T19421] ? __virt_addr_valid+0x183/0x530 [ 1199.479718][T19421] ? __virt_addr_valid+0x183/0x530 [ 1199.484832][T19421] ? __virt_addr_valid+0x45f/0x530 [ 1199.489952][T19421] ? __phys_addr_symbol+0x2f/0x70 [ 1199.494979][T19421] ? __check_object_size+0x49c/0x900 [ 1199.500261][T19421] file_tty_write+0x4bb/0x9c0 [ 1199.504948][T19421] vfs_write+0xa72/0xc90 [ 1199.509194][T19421] ? __pfx_tty_write+0x10/0x10 [ 1199.513967][T19421] ? __pfx_vfs_write+0x10/0x10 [ 1199.518761][T19421] ksys_write+0x1a0/0x2c0 [ 1199.523110][T19421] ? __pfx_ksys_write+0x10/0x10 [ 1199.527975][T19421] ? do_syscall_64+0x100/0x230 [ 1199.532742][T19421] ? do_syscall_64+0xb6/0x230 [ 1199.537426][T19421] do_syscall_64+0xf3/0x230 [ 1199.541936][T19421] ? clear_bhb_loop+0x35/0x90 [ 1199.546617][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.552528][T19421] RIP: 0033:0x7fdb07d77299 [ 1199.556958][T19421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.576569][T19421] RSP: 002b:00007fdb08b9a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1199.584991][T19421] RAX: ffffffffffffffda RBX: 00007fdb07f05f80 RCX: 00007fdb07d77299 [ 1199.592970][T19421] RDX: 00000000fffffdef RSI: 0000000020001040 RDI: 0000000000000007 [ 1199.600937][T19421] RBP: 00007fdb08b9a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1199.608913][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.616904][T19421] R13: 000000000000000b R14: 00007fdb07f05f80 R15: 00007ffd4c5a06e8 [ 1199.624906][T19421] [ 1201.667705][ T8] usb 3-1: USB disconnect, device number 66 [ 1207.963659][ T8] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1208.373457][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 1208.404091][ T8] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1208.421117][ T8] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.436871][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1208.888114][T19494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.055236][T19494] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1210.399584][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40 [ 1210.441604][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.490423][ T8] usb 3-1: can't set config #1, error -71 [ 1210.544357][ T8] usb 3-1: USB disconnect, device number 67 [ 1211.104679][T19517] 9pnet_fd: Insufficient options for proto=fd [ 1211.306549][T19523] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1211.370631][T19523] netlink: zone id is out of range [ 1211.429877][T19523] netlink: del zone limit has 8 unknown bytes [ 1215.982392][T19565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.097266][T19569] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1216.706543][T19574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1217.067959][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1220.358978][T19636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.454845][T19637] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1220.932280][ T5268] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1221.159726][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 1221.169912][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.182627][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.192591][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1221.209088][ T5268] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1221.234632][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.160199][ T5268] usb 1-1: config 0 descriptor?? [ 1223.103907][ T5268] usbhid 1-1:0.0: can't add hid device: -71 [ 1223.117534][ T5268] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1223.236567][ T5268] usb 1-1: USB disconnect, device number 64 [ 1226.421149][T19706] [U] ^R [ 1226.512572][ T5266] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1226.741182][ T5266] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32541, setting to 1024 [ 1226.780612][ T5266] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1226.815398][ T5266] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1226.863845][ T5266] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.879725][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1226.898104][ T5266] usb 5-1: SerialNumber: syz [ 1226.928340][T19703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1226.953192][ T5266] cdc_ether 5-1:1.0: skipping garbage [ 1226.962190][ T5266] usb 5-1: bad CDC descriptors [ 1230.275299][T19758] input: syz0 as /devices/virtual/input/input66 [ 1232.524123][ T5296] usb 5-1: USB disconnect, device number 55 [ 1233.164254][ T5267] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1233.283393][ T5266] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1233.407927][ T5267] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 1233.417879][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.426240][ T5267] usb 1-1: Product: syz [ 1233.430676][ T5267] usb 1-1: Manufacturer: syz [ 1233.439507][ T5267] usb 1-1: SerialNumber: syz [ 1233.498454][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.515615][ T5267] usb 1-1: config 0 descriptor?? [ 1233.523169][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.525699][ T5267] usb 1-1: selecting invalid altsetting 1 [ 1233.544729][ T5266] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.553829][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.562087][ T5267] flexcop_usb: set interface failed. [ 1233.580656][ T5267] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 1233.608973][ T5266] usb 5-1: config 0 descriptor?? [ 1233.626901][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1233.705770][ T29] audit: type=1326 audit(1722321530.638:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19779 comm="syz.2.3382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x0 [ 1233.768063][T19771] lo: left promiscuous mode [ 1234.714218][T19792] netlink: 'syz.1.3384': attribute type 12 has an invalid length. [ 1234.749584][ T5296] usb 1-1: USB disconnect, device number 65 [ 1235.281522][T19810] [U] ^R [ 1235.332878][T19811] tmpfs: Bad value for 'huge' [ 1236.744377][ T5263] usb 5-1: USB disconnect, device number 56 [ 1238.172752][T19831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3393'. [ 1238.239144][ T29] audit: type=1326 audit(1722321534.828:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19836 comm="syz.1.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb07d77299 code=0x0 [ 1238.260511][T19831] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1238.959785][T19853] netlink: 'syz.2.3397': attribute type 12 has an invalid length. [ 1239.876191][T19862] tmpfs: Bad value for 'huge' [ 1240.099023][T19865] FAULT_INJECTION: forcing a failure. [ 1240.099023][T19865] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.112316][T19865] CPU: 0 UID: 0 PID: 19865 Comm: syz.0.3402 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1240.123106][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1240.133185][T19865] Call Trace: [ 1240.136484][T19865] [ 1240.139431][T19865] dump_stack_lvl+0x241/0x360 [ 1240.144143][T19865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.149370][T19865] ? __pfx__printk+0x10/0x10 [ 1240.153989][T19865] ? __kmalloc_node_noprof+0xb7/0x440 [ 1240.159390][T19865] ? __pfx___might_resched+0x10/0x10 [ 1240.164699][T19865] ? __asan_memset+0x23/0x50 [ 1240.169332][T19865] should_fail_ex+0x3b0/0x4e0 [ 1240.174035][T19865] should_failslab+0xac/0x100 [ 1240.178737][T19865] __kmalloc_node_noprof+0xdf/0x440 [ 1240.183941][T19865] ? __kvmalloc_node_noprof+0x72/0x190 [ 1240.189403][T19865] __kvmalloc_node_noprof+0x72/0x190 [ 1240.194686][T19865] alloc_netdev_mqs+0xa49/0x1000 [ 1240.199631][T19865] register_vlan_device+0x218/0x4a0 [ 1240.204826][T19865] ? cap_capable+0x1b4/0x250 [ 1240.209434][T19865] ? __pfx_register_vlan_device+0x10/0x10 [ 1240.215175][T19865] vlan_ioctl_handler+0x2b9/0x9d0 [ 1240.220213][T19865] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1240.225765][T19865] ? __asan_memset+0x23/0x50 [ 1240.230352][T19865] ? smack_file_ioctl+0x2a1/0x3a0 [ 1240.235372][T19865] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1240.240915][T19865] sock_ioctl+0x683/0x8e0 [ 1240.245241][T19865] ? __pfx_sock_ioctl+0x10/0x10 [ 1240.250089][T19865] ? __fget_files+0x3f6/0x470 [ 1240.254758][T19865] ? __fget_files+0x29/0x470 [ 1240.259358][T19865] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1240.264317][T19865] ? security_file_ioctl+0x87/0xb0 [ 1240.269428][T19865] ? __pfx_sock_ioctl+0x10/0x10 [ 1240.274279][T19865] __se_sys_ioctl+0xfc/0x170 [ 1240.278877][T19865] do_syscall_64+0xf3/0x230 [ 1240.283385][T19865] ? clear_bhb_loop+0x35/0x90 [ 1240.288069][T19865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.293961][T19865] RIP: 0033:0x7f6043377299 [ 1240.298375][T19865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.317979][T19865] RSP: 002b:00007f60441d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.326388][T19865] RAX: ffffffffffffffda RBX: 00007f6043505f80 RCX: 00007f6043377299 [ 1240.334349][T19865] RDX: 0000000020000000 RSI: 0000000000008983 RDI: 0000000000000003 [ 1240.342309][T19865] RBP: 00007f60441d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.350273][T19865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.358239][T19865] R13: 000000000000000b R14: 00007f6043505f80 R15: 00007ffdfac01cc8 [ 1240.366217][T19865] [ 1241.543882][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.550354][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.187013][ T29] audit: type=1326 audit(1722321538.455:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.2.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x0 [ 1242.465628][T19894] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1242.489188][T19896] netlink: 'syz.1.3408': attribute type 4 has an invalid length. [ 1242.526322][ T29] audit: type=1326 audit(1722321538.714:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.3.3409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f64777299 code=0x0 [ 1242.585364][T19896] netlink: 'syz.1.3408': attribute type 4 has an invalid length. [ 1244.105268][T19919] netlink: 'syz.1.3412': attribute type 12 has an invalid length. [ 1244.572969][ T5267] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1244.580663][ T25] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1244.781248][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.792723][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.810900][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.821116][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.845358][ T25] usb 1-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1244.860249][ T5267] usb 3-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1244.869625][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.877873][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.933436][ T25] usb 1-1: config 0 descriptor?? [ 1244.967318][ T5267] usb 3-1: config 0 descriptor?? [ 1245.477757][ T5267] usbhid 3-1:0.0: can't add hid device: -71 [ 1245.485066][ T5267] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1245.519856][ T5267] usb 3-1: USB disconnect, device number 68 [ 1245.848851][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 1245.891209][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1245.928967][ T25] usb 1-1: USB disconnect, device number 66 [ 1250.111408][T20008] FAULT_INJECTION: forcing a failure. [ 1250.111408][T20008] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.125966][T20008] CPU: 1 UID: 0 PID: 20008 Comm: syz.3.3435 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1250.136771][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1250.146828][T20008] Call Trace: [ 1250.150191][T20008] [ 1250.153116][T20008] dump_stack_lvl+0x241/0x360 [ 1250.157802][T20008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.162998][T20008] ? __pfx__printk+0x10/0x10 [ 1250.167584][T20008] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1250.173049][T20008] ? __pfx___might_resched+0x10/0x10 [ 1250.178337][T20008] should_fail_ex+0x3b0/0x4e0 [ 1250.183013][T20008] should_failslab+0xac/0x100 [ 1250.187692][T20008] ? hash_ipportnet_create+0x2fa/0x1040 [ 1250.193240][T20008] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1250.198528][T20008] hash_ipportnet_create+0x2fa/0x1040 [ 1250.203905][T20008] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 1250.209707][T20008] ip_set_create+0xa5c/0x1900 [ 1250.214379][T20008] ? ip_set_create+0x45e/0x1900 [ 1250.219221][T20008] ? trace_raw_output_contention_end+0x3a/0xd0 [ 1250.225374][T20008] ? __pfx_ip_set_create+0x10/0x10 [ 1250.230478][T20008] ? trace_contention_end+0x3c/0x120 [ 1250.235775][T20008] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1250.240970][T20008] nfnetlink_rcv_msg+0xbec/0x1180 [ 1250.245992][T20008] ? kernel_text_address+0xa7/0xe0 [ 1250.251094][T20008] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1250.256302][T20008] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1250.261777][T20008] ? netlink_deliver_tap+0x19d/0x1b0 [ 1250.267055][T20008] ? netlink_unicast+0x7be/0x990 [ 1250.271984][T20008] ? netlink_sendmsg+0x8e4/0xcb0 [ 1250.276914][T20008] ? __sock_sendmsg+0x221/0x270 [ 1250.281755][T20008] ? ____sys_sendmsg+0x525/0x7d0 [ 1250.286682][T20008] ? __sys_sendmsg+0x2b0/0x3a0 [ 1250.291434][T20008] ? do_syscall_64+0xf3/0x230 [ 1250.296104][T20008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.302191][T20008] netlink_rcv_skb+0x1e3/0x430 [ 1250.306962][T20008] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1250.312420][T20008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1250.317709][T20008] ? safesetid_security_capable+0xb2/0x1d0 [ 1250.323511][T20008] ? bpf_lsm_capable+0x9/0x10 [ 1250.328179][T20008] ? security_capable+0x90/0xb0 [ 1250.333028][T20008] nfnetlink_rcv+0x297/0x2a90 [ 1250.337710][T20008] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1250.343428][T20008] ? __dev_queue_xmit+0x2da/0x3e90 [ 1250.348534][T20008] ? __dev_queue_xmit+0x1763/0x3e90 [ 1250.353726][T20008] ? kasan_save_track+0x51/0x80 [ 1250.358575][T20008] ? do_syscall_64+0xf3/0x230 [ 1250.363247][T20008] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1250.368352][T20008] ? __dev_queue_xmit+0x2da/0x3e90 [ 1250.373458][T20008] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1250.378832][T20008] ? ref_tracker_free+0x643/0x7e0 [ 1250.383850][T20008] ? __asan_memcpy+0x40/0x70 [ 1250.388431][T20008] ? __pfx_ref_tracker_free+0x10/0x10 [ 1250.393813][T20008] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.399009][T20008] ? skb_clone+0x240/0x390 [ 1250.403430][T20008] ? __pfx_lock_release+0x10/0x10 [ 1250.408474][T20008] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1250.413935][T20008] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.419137][T20008] netlink_unicast+0x7f0/0x990 [ 1250.423903][T20008] ? __pfx_netlink_unicast+0x10/0x10 [ 1250.429181][T20008] ? __virt_addr_valid+0x183/0x530 [ 1250.434459][T20008] ? __check_object_size+0x49c/0x900 [ 1250.439736][T20008] ? bpf_lsm_netlink_send+0x9/0x10 [ 1250.444845][T20008] netlink_sendmsg+0x8e4/0xcb0 [ 1250.449614][T20008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.454896][T20008] ? __import_iovec+0x536/0x820 [ 1250.459744][T20008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1250.465020][T20008] ? security_socket_sendmsg+0x87/0xb0 [ 1250.470501][T20008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.475778][T20008] __sock_sendmsg+0x221/0x270 [ 1250.480453][T20008] ____sys_sendmsg+0x525/0x7d0 [ 1250.485215][T20008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1250.490528][T20008] __sys_sendmsg+0x2b0/0x3a0 [ 1250.495153][T20008] ? __pfx___sys_sendmsg+0x10/0x10 [ 1250.500271][T20008] ? vfs_write+0x7c4/0xc90 [ 1250.504717][T20008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1250.511139][T20008] ? do_syscall_64+0x100/0x230 [ 1250.515907][T20008] ? do_syscall_64+0xb6/0x230 [ 1250.520600][T20008] do_syscall_64+0xf3/0x230 [ 1250.525132][T20008] ? clear_bhb_loop+0x35/0x90 [ 1250.529822][T20008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.535715][T20008] RIP: 0033:0x7f8f64777299 [ 1250.540129][T20008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.559726][T20008] RSP: 002b:00007f8f65503048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.568155][T20008] RAX: ffffffffffffffda RBX: 00007f8f64905f80 RCX: 00007f8f64777299 [ 1250.576210][T20008] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1250.584171][T20008] RBP: 00007f8f655030a0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.592134][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.600270][T20008] R13: 000000000000000b R14: 00007f8f64905f80 R15: 00007ffe3bb5a978 [ 1250.608257][T20008] [ 1250.791398][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1251.227147][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1251.799033][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1251.820209][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1251.829484][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.868463][ T5268] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1251.873062][T20006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1251.897687][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.385777][ T25] usb 1-1: USB disconnect, device number 67 [ 1255.389970][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.410873][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.420920][ T5268] usb 5-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1255.457216][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.478505][ T5268] usb 5-1: config 0 descriptor?? [ 1255.851484][ T5268] usbhid 5-1:0.0: can't add hid device: -71 [ 1255.858873][ T5268] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1255.939435][ T5268] usb 5-1: USB disconnect, device number 57 [ 1257.435950][T20064] 9pnet_fd: Insufficient options for proto=fd [ 1257.641185][T20070] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1257.659804][T20070] netlink: zone id is out of range [ 1257.667836][T20070] netlink: del zone limit has 8 unknown bytes [ 1257.931764][T17865] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1258.331261][T17865] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1258.552517][T17865] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1258.563923][T17865] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.573929][T17865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.591278][T20067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1258.619302][T17865] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1259.599827][ T5263] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1260.043858][ T5263] usb 4-1: Using ep0 maxpacket: 8 [ 1260.161639][ T5263] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1260.713106][ T5263] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1261.214969][ T5263] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1261.648752][ T5263] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1261.679945][ T5263] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1261.734091][ T5263] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.821235][ T5263] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1261.830339][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.075316][T19799] usb 3-1: USB disconnect, device number 69 [ 1262.138329][ T5263] usb 4-1: usb_control_msg returned -32 [ 1262.155507][ T5263] usbtmc 4-1:16.0: can't read capabilities [ 1262.422583][T20108] bridge_slave_1: left allmulticast mode [ 1262.436770][T20108] bridge_slave_1: left promiscuous mode [ 1262.460911][T20108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.548965][T20110] netlink: 'syz.1.3459': attribute type 11 has an invalid length. [ 1263.671401][ T25] usb 4-1: USB disconnect, device number 57 [ 1263.778590][ C0] eth0: bad gso: type: 1, size: 1408 [ 1263.788686][T20131] 9pnet_fd: Insufficient options for proto=fd [ 1264.295198][T20139] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1264.416843][T20139] netlink: zone id is out of range [ 1264.441906][T20139] netlink: del zone limit has 8 unknown bytes [ 1266.598574][T17865] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1266.750365][T19799] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1266.900755][T17865] usb 5-1: device descriptor read/64, error -71 [ 1267.010454][T19799] usb 2-1: Using ep0 maxpacket: 8 [ 1267.032553][T19799] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1267.052915][T19799] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1267.067467][T19799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1267.079042][T19799] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1267.112139][T19799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1267.136075][T19799] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.153740][T19799] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1267.170894][T19799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.216546][T17865] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1267.409906][T19799] usb 2-1: usb_control_msg returned -32 [ 1267.422048][T17865] usb 5-1: device descriptor read/64, error -71 [ 1267.422099][T19799] usbtmc 2-1:16.0: can't read capabilities [ 1267.743035][T17865] usb usb5-port1: attempt power cycle [ 1268.494797][T17865] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1268.570437][T17865] usb 5-1: device descriptor read/8, error -71 [ 1269.008036][T17865] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1269.259768][T17865] usb 5-1: device descriptor read/8, error -71 [ 1269.290834][ T9849] bridge_slave_1: left allmulticast mode [ 1269.299566][ T9849] bridge_slave_1: left promiscuous mode [ 1269.305408][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.329994][ T5263] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1269.338739][ T9849] bridge_slave_0: left allmulticast mode [ 1269.348145][ T9849] bridge_slave_0: left promiscuous mode [ 1269.357119][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.394242][T17865] usb usb5-port1: unable to enumerate USB device [ 1269.537197][ T5263] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1269.555480][ T5263] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1269.574941][ T5263] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1269.584197][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.620304][T20196] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1269.642664][ T5263] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.674681][ T5267] usb 2-1: USB disconnect, device number 46 [ 1269.694782][ C0] eth0: bad gso: type: 1, size: 1408 [ 1271.855464][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.163690][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.276388][ T9849] bond0 (unregistering): Released all slaves [ 1272.576241][ T25] usb 4-1: USB disconnect, device number 58 [ 1272.633874][ T9849] IPVS: stopping master sync thread 14630 ... [ 1272.839116][T19799] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1273.326670][T19799] usb 3-1: Using ep0 maxpacket: 16 [ 1273.395567][T19799] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1273.423833][T19799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.442526][T19799] usb 3-1: Product: syz [ 1273.450833][T19799] usb 3-1: Manufacturer: syz [ 1273.455533][T19799] usb 3-1: SerialNumber: syz [ 1273.513679][T19799] usb 3-1: config 0 descriptor?? [ 1273.530512][T19799] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1273.555074][T20249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.682355][T20251] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3496'. [ 1273.707894][T20251] openvswitch: netlink: Flow key attribute not present in set flow. [ 1273.924076][ T9849] hsr_slave_0: left promiscuous mode [ 1273.937755][ T9849] hsr_slave_1: left promiscuous mode [ 1273.948290][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.965896][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.975636][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.992040][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.059035][T20259] 9pnet_fd: Insufficient options for proto=fd [ 1274.091791][ T9849] veth1_macvtap: left promiscuous mode [ 1274.107294][ T9849] veth0_macvtap: left promiscuous mode [ 1274.113444][ T9849] veth1_vlan: left promiscuous mode [ 1274.136770][ T9849] veth0_vlan: left promiscuous mode [ 1274.183818][T20232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.209818][T20262] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1274.219664][ T25] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1274.232276][T20232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.249848][T20262] netlink: zone id is out of range [ 1274.291198][T19799] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1274.441343][T20262] netlink: del zone limit has 8 unknown bytes [ 1274.468129][T19799] usb 3-1: USB disconnect, device number 70 [ 1274.507632][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1274.524097][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1274.540811][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1274.577693][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1274.610195][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1274.624769][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1274.636535][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.653433][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1274.670048][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.949998][ T25] usb 5-1: usb_control_msg returned -32 [ 1274.963473][ T25] usbtmc 5-1:16.0: can't read capabilities [ 1276.679682][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 1276.848847][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 1277.370388][ C0] eth0: bad gso: type: 1, size: 1408 [ 1277.408895][T19799] usb 5-1: USB disconnect, device number 62 [ 1278.996180][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1279.307889][T20296] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 1279.317534][T20296] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1279.331707][T20300] vlan2: entered promiscuous mode [ 1279.345343][T20300] geneve0: entered promiscuous mode [ 1279.368895][T20312] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 1279.416793][T20312] bond1: entered promiscuous mode [ 1279.422332][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1280.583130][T20336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1280.605274][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1280.632493][T20335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1281.540733][T17865] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1281.774598][T17865] usb 4-1: Using ep0 maxpacket: 8 [ 1281.933603][T17865] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1281.960421][T17865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.025996][T17865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.072722][T17865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1282.139499][T17865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1282.192844][T17865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.238868][T17865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1282.264803][T17865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.514352][ T25] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1282.517367][T17865] usb 4-1: usb_control_msg returned -32 [ 1282.530322][T20375] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 1282.550240][T17865] usbtmc 4-1:16.0: can't read capabilities [ 1282.708223][T20375] bond14: entered promiscuous mode [ 1282.731098][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1282.762894][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1282.772189][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1282.781855][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.784945][T20372] lo: entered promiscuous mode [ 1282.822876][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.834271][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1282.861541][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1282.884786][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.918265][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1282.946498][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.065716][T20383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1283.209297][T20383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.248307][ T25] usb 3-1: usb_control_msg returned -32 [ 1283.281009][ T25] usbtmc 3-1:16.0: can't read capabilities [ 1285.016829][T17865] usb 4-1: USB disconnect, device number 59 [ 1286.204772][ T8] usb 3-1: USB disconnect, device number 71 [ 1286.689857][T20427] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 1286.726853][T19799] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1286.821191][T20427] bond2: entered promiscuous mode [ 1286.857752][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1286.977919][T19799] usb 1-1: Using ep0 maxpacket: 8 [ 1286.989323][T19799] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1287.009781][T19799] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.040015][T19799] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1287.062556][T19799] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1287.085807][T19799] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.111170][T20439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1287.127729][T19799] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1287.160378][T19799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.180616][T20439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.232666][T20439] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1287.416860][T19799] usb 1-1: GET_CAPABILITIES returned 0 [ 1287.435339][T19799] usbtmc 1-1:16.0: can't read capabilities [ 1288.582876][T20456] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1288.716831][T20473] syz.1.3550 (20473): attempted to duplicate a private mapping with mremap. This is not supported. [ 1288.822407][T19799] usb 1-1: USB disconnect, device number 68 [ 1289.163020][T20486] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 1289.237756][T20486] bond2: entered promiscuous mode [ 1289.255976][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1289.340437][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1292.969110][ T5258] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1293.955451][ T5258] usb 4-1: Using ep0 maxpacket: 8 [ 1293.980684][ T5258] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1294.012956][ T5258] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1294.064471][ T5258] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1294.101832][ T5258] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1294.126915][ T5258] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1294.138961][ T5258] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.366993][ T5258] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1294.376079][ T5258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.883670][ T5258] usb 4-1: can't set config #16, error -71 [ 1295.899060][ T5258] usb 4-1: USB disconnect, device number 60 [ 1300.171555][T20610] tmpfs: Unknown parameter '' [ 1300.424926][T20617] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 1300.662857][ T25] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1300.796117][T20625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3592'. [ 1300.920347][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.950481][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.994937][ T25] usb 3-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1301.058095][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.088703][ T25] usb 3-1: config 0 descriptor?? [ 1301.735390][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1301.741432][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1302.208725][ T25] usb 3-1: USB disconnect, device number 72 [ 1302.380567][ C0] eth0: bad gso: type: 1, size: 1408 [ 1305.034305][T20686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3606'. [ 1305.122910][T20686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1305.283802][ T25] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1305.721973][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1305.768328][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1305.792864][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.842062][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.975504][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 1305.987772][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1305.998359][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.019361][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1306.316799][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.862035][ T25] usb 5-1: usb_control_msg returned -32 [ 1306.868101][ T25] usbtmc 5-1:16.0: can't read capabilities [ 1308.108116][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.114450][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.181513][T17865] usb 5-1: USB disconnect, device number 63 [ 1309.351824][T20752] cgroup: Need name or subsystem set [ 1309.592977][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1309.751575][ T5269] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1309.991675][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.018944][ T5269] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1310.062278][ T5269] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1310.078836][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1310.104388][ T5269] usb 3-1: SerialNumber: syz [ 1310.123806][ T5269] usb 3-1: bad CDC descriptors [ 1310.434415][T20748] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1310.881474][ T25] usb 3-1: USB disconnect, device number 73 [ 1310.984387][T20781] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1312.557937][T17865] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1312.837248][T17865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.966405][T17865] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1313.120066][T17865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1313.130518][T17865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.184154][T17865] usb 3-1: config 0 descriptor?? [ 1313.465495][T17865] usb 3-1: string descriptor 0 read error: -71 [ 1313.593868][T17865] usb 3-1: USB disconnect, device number 74 [ 1314.153236][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1314.193412][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1315.272162][T20850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1315.350635][T20850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.502367][T20850] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1316.182044][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.182044][T20864] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1316.197251][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.197251][T20864] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1316.210660][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1316.220588][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.220588][T20864] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1316.233663][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1316.245297][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.245297][T20864] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1316.258779][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.258779][T20864] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1316.271822][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1316.281824][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.281824][T20864] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1316.294983][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1316.305264][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.305264][T20864] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1316.318409][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.318409][T20864] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1316.333397][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1316.343200][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.343200][T20864] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1316.356617][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1316.366670][T20864] syz.3.3651: attempt to access beyond end of device [ 1316.366670][T20864] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1316.380995][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1316.390760][T20864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1316.400427][T20864] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1317.127468][ T5263] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1317.347662][ T5263] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1317.378929][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1317.403354][ T5263] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1317.418356][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.444896][ T5263] usb 2-1: config 0 descriptor?? [ 1317.461188][ T5263] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1319.621473][ T29] audit: type=1326 audit(1722321609.933:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20929 comm="syz.0.3670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x0 [ 1320.432328][ T5258] usb 2-1: USB disconnect, device number 47 [ 1320.465621][ T29] audit: type=1326 audit(1722321610.717:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20939 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1320.496137][T20942] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1320.506926][T20942] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1320.516396][ T29] audit: type=1326 audit(1722321610.745:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20939 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1320.550753][ T29] audit: type=1326 audit(1722321610.745:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20939 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1320.639039][ T29] audit: type=1326 audit(1722321610.828:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20939 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1320.728998][ T29] audit: type=1326 audit(1722321610.828:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20939 comm="syz.2.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1320.825082][T20955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1323.376272][T15435] Bluetooth: hci5: sending frame failed (-49) [ 1323.385500][ T5228] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 1323.399567][T20982] Bluetooth: hci5: Frame reassembly failed (-84) [ 1323.575956][T17865] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1323.626457][ T29] audit: type=1326 audit(1722321613.615:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20985 comm="syz.2.3685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x0 [ 1323.845657][ T29] audit: type=1326 audit(1722321613.837:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20990 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1323.869307][T20991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1323.878355][ T29] audit: type=1326 audit(1722321613.837:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20990 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1323.889034][T17865] usb 2-1: Using ep0 maxpacket: 16 [ 1323.919475][T20991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1323.924731][ T29] audit: type=1326 audit(1722321613.864:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20990 comm="syz.4.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1323.928043][T20992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1323.984360][T20993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.997970][T17865] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1324.015495][T17865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.015953][T20993] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1324.034865][T17865] usb 2-1: Product: syz [ 1324.039080][T17865] usb 2-1: Manufacturer: syz [ 1324.056600][T17865] usb 2-1: SerialNumber: syz [ 1324.069369][T17865] usb 2-1: config 0 descriptor?? [ 1324.088139][T17865] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1324.740768][T20981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.776999][T20981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.025172][T17865] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1325.117032][T17865] usb 2-1: USB disconnect, device number 48 [ 1325.130528][T21006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1326.706341][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1326.706360][ T29] audit: type=1326 audit(1722321616.477:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x7ffc0000 [ 1326.708279][T21028] overlayfs: missing 'lowerdir' [ 1326.747826][ T29] audit: type=1326 audit(1722321616.477:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x7ffc0000 [ 1326.810819][ T29] audit: type=1326 audit(1722321616.477:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6043377299 code=0x7ffc0000 [ 1327.062194][ T29] audit: type=1326 audit(1722321616.578:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x7ffc0000 [ 1327.308385][ T29] audit: type=1326 audit(1722321616.578:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x7ffc0000 [ 1327.822017][T21050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3704'. [ 1328.472898][ T5269] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1328.689557][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 1328.711621][ T5269] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1328.754755][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.778639][ T5269] usb 3-1: Product: syz [ 1328.790755][ T29] audit: type=1326 audit(1722321618.406:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21067 comm="syz.0.3710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x0 [ 1328.790816][ T5269] usb 3-1: Manufacturer: syz [ 1328.850649][T21070] overlayfs: missing 'lowerdir' [ 1328.857359][ T5269] usb 3-1: SerialNumber: syz [ 1328.877920][ T29] audit: type=1326 audit(1722321618.452:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21069 comm="syz.4.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1328.905615][ T5269] usb 3-1: config 0 descriptor?? [ 1328.918833][ T5269] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1328.969057][ T29] audit: type=1326 audit(1722321618.452:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21069 comm="syz.4.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1329.047562][ T29] audit: type=1326 audit(1722321618.507:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21069 comm="syz.4.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1329.077175][ T29] audit: type=1326 audit(1722321618.507:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21069 comm="syz.4.3711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x7ffc0000 [ 1329.572961][T21059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.589252][T21059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.599068][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3715'. [ 1329.736807][ T5269] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1329.813592][ T5269] usb 3-1: USB disconnect, device number 75 [ 1330.453224][T21094] netlink: 'syz.1.3718': attribute type 27 has an invalid length. [ 1331.530753][T19799] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1331.757559][T19799] usb 1-1: Using ep0 maxpacket: 16 [ 1331.807769][T19799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.866358][T19799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.056376][T19799] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1332.076836][T19799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.092445][T19799] usb 1-1: config 0 descriptor?? [ 1332.280941][T21110] overlayfs: missing 'lowerdir' [ 1332.315194][ T29] audit: type=1326 audit(1722321621.627:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1332.378897][ T29] audit: type=1326 audit(1722321621.627:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1332.412633][ T29] audit: type=1326 audit(1722321621.627:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1332.445662][T21118] FAULT_INJECTION: forcing a failure. [ 1332.445662][T21118] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.459368][ T29] audit: type=1326 audit(1722321621.655:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x7ffc0000 [ 1332.469227][T21118] CPU: 1 UID: 0 PID: 21118 Comm: syz.2.3727 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1332.491674][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1332.501819][T21118] Call Trace: [ 1332.505095][T21118] [ 1332.508023][T21118] dump_stack_lvl+0x241/0x360 [ 1332.512702][T21118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1332.517900][T21118] ? __pfx__printk+0x10/0x10 [ 1332.522483][T21118] ? __kmalloc_noprof+0xb0/0x400 [ 1332.527417][T21118] ? __pfx___might_resched+0x10/0x10 [ 1332.532693][T21118] ? __mutex_lock+0x2ef/0xd70 [ 1332.537372][T21118] should_fail_ex+0x3b0/0x4e0 [ 1332.542043][T21118] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1332.548276][T21118] should_failslab+0xac/0x100 [ 1332.552945][T21118] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1332.559174][T21118] __kmalloc_noprof+0xd8/0x400 [ 1332.563932][T21118] ? safesetid_security_capable+0xb2/0x1d0 [ 1332.569735][T21118] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1332.575799][T21118] genl_rcv_msg+0x802/0xec0 [ 1332.580293][T21118] ? mark_lock+0x9a/0x350 [ 1332.584633][T21118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.589668][T21118] ? __pfx_lock_acquire+0x10/0x10 [ 1332.594779][T21118] ? __pfx_l2tp_nl_cmd_session_get+0x10/0x10 [ 1332.600841][T21118] ? __pfx___might_resched+0x10/0x10 [ 1332.606908][T21118] netlink_rcv_skb+0x1e3/0x430 [ 1332.611691][T21118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.616726][T21118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1332.622038][T21118] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1332.627524][T21118] genl_rcv+0x28/0x40 [ 1332.631509][T21118] netlink_unicast+0x7f0/0x990 [ 1332.636283][T21118] ? __pfx_netlink_unicast+0x10/0x10 [ 1332.641590][T21118] ? __virt_addr_valid+0x183/0x530 [ 1332.646719][T21118] ? __check_object_size+0x49c/0x900 [ 1332.652027][T21118] ? bpf_lsm_netlink_send+0x9/0x10 [ 1332.657151][T21118] netlink_sendmsg+0x8e4/0xcb0 [ 1332.661931][T21118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.667222][T21118] ? __import_iovec+0x536/0x820 [ 1332.672083][T21118] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1332.677370][T21118] ? security_socket_sendmsg+0x87/0xb0 [ 1332.682833][T21118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.688114][T21118] __sock_sendmsg+0x221/0x270 [ 1332.692792][T21118] ____sys_sendmsg+0x525/0x7d0 [ 1332.697561][T21118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1332.702854][T21118] __sys_sendmsg+0x2b0/0x3a0 [ 1332.707440][T21118] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.712543][T21118] ? vfs_write+0x7c4/0xc90 [ 1332.716986][T21118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1332.723317][T21118] ? do_syscall_64+0x100/0x230 [ 1332.728091][T21118] ? do_syscall_64+0xb6/0x230 [ 1332.732762][T21118] do_syscall_64+0xf3/0x230 [ 1332.737264][T21118] ? clear_bhb_loop+0x35/0x90 [ 1332.741942][T21118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.747832][T21118] RIP: 0033:0x7f06b5d77299 [ 1332.752249][T21118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.771857][T21118] RSP: 002b:00007f06b6af8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.780270][T21118] RAX: ffffffffffffffda RBX: 00007f06b5f05f80 RCX: 00007f06b5d77299 [ 1332.788238][T21118] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 1332.796289][T21118] RBP: 00007f06b6af80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.804254][T21118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.812223][T21118] R13: 000000000000000b R14: 00007f06b5f05f80 R15: 00007ffc3a78b228 [ 1332.820202][T21118] [ 1332.929629][T19799] lenovo 0003:17EF:6009.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 1333.250962][ T5269] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1333.276834][T21129] netlink: 'syz.3.3730': attribute type 12 has an invalid length. [ 1333.287628][ T5296] usb 1-1: USB disconnect, device number 69 [ 1333.434961][T17865] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1333.448706][ T5269] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1333.457945][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.468112][ T5269] usb 5-1: config 0 descriptor?? [ 1333.629978][T17865] usb 3-1: Using ep0 maxpacket: 16 [ 1333.647116][T17865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.671004][T17865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.695421][ T8] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1333.718344][T17865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.733330][T17865] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1333.742996][T17865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.755480][T17865] usb 3-1: config 0 descriptor?? [ 1333.800033][ T5269] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1333.808190][ T5269] hackrf 5-1:0.0: Could not detect board [ 1333.817994][ T5269] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 1333.832087][ T5269] usb 5-1: USB disconnect, device number 64 [ 1333.923114][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1333.933449][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1333.949217][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.171529][ T8] usb 4-1: Product: syz [ 1334.175894][ T8] usb 4-1: Manufacturer: syz [ 1334.181439][ T8] usb 4-1: SerialNumber: syz [ 1334.201866][ T8] usb 4-1: config 0 descriptor?? [ 1334.211524][T17865] koneplus 0003:1E7D:2E22.001E: unknown main item tag 0x0 [ 1334.222184][ T8] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1334.994387][T17865] koneplus 0003:1E7D:2E22.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1335.106112][T17865] koneplus 0003:1E7D:2E22.001E: couldn't init struct koneplus_device [ 1335.157847][T17865] koneplus 0003:1E7D:2E22.001E: couldn't install mouse [ 1335.206450][T17865] koneplus 0003:1E7D:2E22.001E: probe with driver koneplus failed with error -5 [ 1335.369215][ T5258] usb 3-1: USB disconnect, device number 76 [ 1335.429470][T21158] FAULT_INJECTION: forcing a failure. [ 1335.429470][T21158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.468537][T21158] CPU: 1 UID: 0 PID: 21158 Comm: syz.1.3738 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1335.479348][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1335.489412][T21158] Call Trace: [ 1335.492711][T21158] [ 1335.495659][T21158] dump_stack_lvl+0x241/0x360 [ 1335.499821][T21131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.500346][T21158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1335.513890][T21158] ? __pfx__printk+0x10/0x10 [ 1335.514132][T21131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.518497][T21158] ? snprintf+0xda/0x120 [ 1335.530441][T21158] should_fail_ex+0x3b0/0x4e0 [ 1335.535120][T21158] _copy_to_user+0x2f/0xb0 [ 1335.539538][T21158] simple_read_from_buffer+0xca/0x150 [ 1335.544917][T21158] proc_fail_nth_read+0x1e9/0x250 [ 1335.549947][T21158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.555495][T21158] ? rw_verify_area+0x520/0x6b0 [ 1335.560342][T21158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.565891][T21158] vfs_read+0x204/0xbc0 [ 1335.570041][T21158] ? __pfx_lock_release+0x10/0x10 [ 1335.575065][T21158] ? __pfx_vfs_read+0x10/0x10 [ 1335.579734][T21158] ? __fget_files+0x29/0x470 [ 1335.584332][T21158] ? __fget_files+0x3f6/0x470 [ 1335.589023][T21158] ksys_read+0x1a0/0x2c0 [ 1335.593265][T21158] ? __pfx_ksys_read+0x10/0x10 [ 1335.598024][T21158] ? do_syscall_64+0x100/0x230 [ 1335.602801][T21158] ? do_syscall_64+0xb6/0x230 [ 1335.607479][T21158] do_syscall_64+0xf3/0x230 [ 1335.611991][T21158] ? clear_bhb_loop+0x35/0x90 [ 1335.616672][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.622571][T21158] RIP: 0033:0x7fdb07d75d7c [ 1335.626982][T21158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1335.646585][T21158] RSP: 002b:00007fdb08b9a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1335.654994][T21158] RAX: ffffffffffffffda RBX: 00007fdb07f05f80 RCX: 00007fdb07d75d7c [ 1335.662964][T21158] RDX: 000000000000000f RSI: 00007fdb08b9a0b0 RDI: 0000000000000004 [ 1335.670928][T21158] RBP: 00007fdb08b9a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.678894][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.686860][T21158] R13: 000000000000000b R14: 00007fdb07f05f80 R15: 00007ffd4c5a06e8 [ 1335.694845][T21158] [ 1335.867965][ T8] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1335.893234][ T8] usb 4-1: USB disconnect, device number 61 [ 1336.162562][T21166] 9pnet_fd: Insufficient options for proto=fd [ 1336.310646][T21172] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1336.344326][T21172] netlink: zone id is out of range [ 1336.359763][T21172] netlink: del zone limit has 8 unknown bytes [ 1342.109768][T21220] bio_check_eod: 2 callbacks suppressed [ 1342.109781][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.109781][T21220] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1342.128477][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.128477][T21220] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1342.141494][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1342.151435][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.151435][T21220] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1342.164553][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1342.174970][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.174970][T21220] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1342.188057][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.188057][T21220] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1342.201119][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1342.210932][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.210932][T21220] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1342.224067][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1342.234253][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.234253][T21220] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1342.247335][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.247335][T21220] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1342.260436][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1342.270132][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.270132][T21220] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1342.283191][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1342.293084][T21220] syz.2.3755: attempt to access beyond end of device [ 1342.293084][T21220] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1342.306083][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1342.315758][T21220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1342.325333][T21220] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1342.405884][T19799] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1342.635314][T19799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.647174][T19799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.657176][T19799] usb 2-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1342.667493][T19799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.829429][T19799] usb 2-1: config 0 descriptor?? [ 1342.898879][ T5269] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1343.109984][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 1343.141226][ T5269] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1343.187344][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.222810][ T5269] usb 1-1: Product: syz [ 1343.233979][ T5269] usb 1-1: Manufacturer: syz [ 1343.250110][ T5269] usb 1-1: SerialNumber: syz [ 1343.300128][T19799] usbhid 2-1:0.0: can't add hid device: -71 [ 1343.301357][ T5269] usb 1-1: config 0 descriptor?? [ 1343.323598][T19799] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1343.333568][ T5269] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1343.392212][T19799] usb 2-1: USB disconnect, device number 49 [ 1343.985896][T21222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.001174][T21222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.098073][ T5269] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1344.225063][T21244] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 1344.260082][T17865] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1344.272303][T19799] usb 1-1: USB disconnect, device number 70 [ 1344.348869][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1344.458829][T21244] bond3: entered promiscuous mode [ 1344.518425][T17865] usb 5-1: Using ep0 maxpacket: 16 [ 1344.586147][T17865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.605574][T17865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.626884][T17865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1344.649422][T17865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1344.679786][T17865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.721321][T17865] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1344.734999][T17865] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1344.761490][T17865] usb 5-1: Manufacturer: syz [ 1344.795400][T17865] usb 5-1: config 0 descriptor?? [ 1351.453524][T17865] rc_core: IR keymap rc-hauppauge not found [ 1351.459484][T17865] Registered IR keymap rc-empty [ 1351.540074][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1351.599978][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1351.670293][T17865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1351.721282][T17865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 1351.794032][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1351.875000][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1351.926208][T21266] 9pnet_virtio: no channels available for device syz [ 1351.941657][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1351.995305][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.050774][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.102466][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.156518][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.212708][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.286583][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.324914][T21281] FAULT_INJECTION: forcing a failure. [ 1352.324914][T21281] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.376744][T21281] CPU: 1 UID: 0 PID: 21281 Comm: syz.4.3770 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1352.384218][T17865] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1352.387536][T21281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1352.404795][T21281] Call Trace: [ 1352.408093][T21281] [ 1352.411033][T21281] dump_stack_lvl+0x241/0x360 [ 1352.415731][T21281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1352.420945][T21281] ? __pfx__printk+0x10/0x10 [ 1352.425553][T21281] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1352.431118][T21281] ? __pfx___might_resched+0x10/0x10 [ 1352.436422][T21281] should_fail_ex+0x3b0/0x4e0 [ 1352.441123][T21281] ? ep_insert+0x273/0x1ac0 [ 1352.441536][T17865] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1352.445630][T21281] should_failslab+0xac/0x100 [ 1352.458284][T21281] ? ep_insert+0x273/0x1ac0 [ 1352.459844][T17865] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1352.462787][T21281] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1352.476487][T21281] ep_insert+0x273/0x1ac0 [ 1352.480848][T21281] ? __pfx_ep_insert+0x10/0x10 [ 1352.485636][T21281] ? __pfx___mutex_lock+0x10/0x10 [ 1352.490704][T21281] do_epoll_ctl+0x8d2/0xf70 [ 1352.492653][T17865] usb 5-1: USB disconnect, device number 65 [ 1352.495224][T21281] __x64_sys_epoll_ctl+0x161/0x1a0 [ 1352.506248][T21281] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1352.511898][T21281] ? do_syscall_64+0x100/0x230 [ 1352.516683][T21281] ? do_syscall_64+0xb6/0x230 [ 1352.521382][T21281] do_syscall_64+0xf3/0x230 [ 1352.525903][T21281] ? clear_bhb_loop+0x35/0x90 [ 1352.530606][T21281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.536517][T21281] RIP: 0033:0x7f8e78177299 [ 1352.540946][T21281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.560563][T21281] RSP: 002b:00007f8e78fc8048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1352.568998][T21281] RAX: ffffffffffffffda RBX: 00007f8e78305f80 RCX: 00007f8e78177299 [ 1352.577074][T21281] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 1352.585066][T21281] RBP: 00007f8e78fc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.593060][T21281] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 1352.601055][T21281] R13: 000000000000000b R14: 00007f8e78305f80 R15: 00007ffde1dcebe8 [ 1352.609150][T21281] [ 1352.922568][T21289] netlink: 'syz.2.3773': attribute type 1 has an invalid length. [ 1353.011386][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 1353.065016][T21289] bond3: entered promiscuous mode [ 1354.280349][ T5269] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1354.540219][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 1354.568321][ T5269] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1354.588460][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.604397][ T5269] usb 4-1: Product: syz [ 1354.615468][ T5269] usb 4-1: Manufacturer: syz [ 1354.635477][ T5269] usb 4-1: SerialNumber: syz [ 1354.649803][ T5269] usb 4-1: config 0 descriptor?? [ 1354.665493][ T5269] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1354.837994][T21324] FAULT_INJECTION: forcing a failure. [ 1354.837994][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.869327][T21324] CPU: 1 UID: 0 PID: 21324 Comm: syz.1.3781 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1354.880133][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1354.890214][T21324] Call Trace: [ 1354.893515][T21324] [ 1354.896466][T21324] dump_stack_lvl+0x241/0x360 [ 1354.901173][T21324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.906381][T21324] ? __pfx__printk+0x10/0x10 [ 1354.910978][T21324] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1354.916975][T21324] ? __pfx___might_resched+0x10/0x10 [ 1354.922276][T21324] should_fail_ex+0x3b0/0x4e0 [ 1354.926974][T21324] should_failslab+0xac/0x100 [ 1354.931658][T21324] ? __alloc_skb+0x1c3/0x440 [ 1354.936251][T21324] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1354.942060][T21324] __alloc_skb+0x1c3/0x440 [ 1354.946503][T21324] ? __pfx___alloc_skb+0x10/0x10 [ 1354.951454][T21324] ? netlink_ack_tlv_len+0x6e/0x200 [ 1354.956666][T21324] netlink_ack+0x13f/0xa30 [ 1354.961095][T21324] ? __pfx_lock_acquire+0x10/0x10 [ 1354.966120][T21324] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 1354.971944][T21324] netlink_rcv_skb+0x262/0x430 [ 1354.976711][T21324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1354.981748][T21324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1354.987245][T21324] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1354.992746][T21324] genl_rcv+0x28/0x40 [ 1354.996744][T21324] netlink_unicast+0x7f0/0x990 [ 1355.001533][T21324] ? __pfx_netlink_unicast+0x10/0x10 [ 1355.006828][T21324] ? __virt_addr_valid+0x183/0x530 [ 1355.011958][T21324] ? __check_object_size+0x49c/0x900 [ 1355.017253][T21324] ? bpf_lsm_netlink_send+0x9/0x10 [ 1355.022368][T21324] netlink_sendmsg+0x8e4/0xcb0 [ 1355.027143][T21324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.032431][T21324] ? __import_iovec+0x536/0x820 [ 1355.037289][T21324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1355.042574][T21324] ? security_socket_sendmsg+0x87/0xb0 [ 1355.048030][T21324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.053317][T21324] __sock_sendmsg+0x221/0x270 [ 1355.057998][T21324] ____sys_sendmsg+0x525/0x7d0 [ 1355.062770][T21324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1355.068068][T21324] __sys_sendmsg+0x2b0/0x3a0 [ 1355.072657][T21324] ? __pfx___sys_sendmsg+0x10/0x10 [ 1355.077760][T21324] ? vfs_write+0x7c4/0xc90 [ 1355.082204][T21324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1355.088537][T21324] ? do_syscall_64+0x100/0x230 [ 1355.093302][T21324] ? do_syscall_64+0xb6/0x230 [ 1355.097976][T21324] do_syscall_64+0xf3/0x230 [ 1355.102480][T21324] ? clear_bhb_loop+0x35/0x90 [ 1355.107195][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.113111][T21324] RIP: 0033:0x7fdb07d77299 [ 1355.117534][T21324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.137142][T21324] RSP: 002b:00007fdb08b9a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.145556][T21324] RAX: ffffffffffffffda RBX: 00007fdb07f05f80 RCX: 00007fdb07d77299 [ 1355.153524][T21324] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 1355.161496][T21324] RBP: 00007fdb08b9a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.169461][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.177422][T21324] R13: 000000000000000b R14: 00007fdb07f05f80 R15: 00007ffd4c5a06e8 [ 1355.185404][T21324] [ 1355.212348][ T5269] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1355.603768][T21344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.622285][T21344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.647932][T21347] netlink: 'syz.4.3786': attribute type 1 has an invalid length. [ 1357.711574][T21347] bond1: entered promiscuous mode [ 1357.722666][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1358.915261][ T25] usb 4-1: USB disconnect, device number 62 [ 1360.420988][T21372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.439582][T21372] batadv_slave_0: entered allmulticast mode [ 1360.689026][T21392] FAULT_INJECTION: forcing a failure. [ 1360.689026][T21392] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.769875][T21392] CPU: 1 UID: 0 PID: 21392 Comm: syz.0.3797 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1360.780939][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1360.790985][T21392] Call Trace: [ 1360.794254][T21392] [ 1360.797176][T21392] dump_stack_lvl+0x241/0x360 [ 1360.801867][T21392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1360.807060][T21392] ? __pfx__printk+0x10/0x10 [ 1360.811643][T21392] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 1360.818138][T21392] ? __pfx___might_resched+0x10/0x10 [ 1360.823414][T21392] should_fail_ex+0x3b0/0x4e0 [ 1360.828082][T21392] should_failslab+0xac/0x100 [ 1360.832751][T21392] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 1360.839078][T21392] ? __request_module+0x2d5/0x650 [ 1360.844112][T21392] ? __request_module+0x2b9/0x650 [ 1360.849128][T21392] kstrdup+0x3a/0x80 [ 1360.853012][T21392] __request_module+0x2d5/0x650 [ 1360.857862][T21392] ? __pfx___nla_validate_parse+0x10/0x10 [ 1360.863588][T21392] ? crypto_alg_mod_lookup+0x7c/0x720 [ 1360.868950][T21392] ? __pfx___request_module+0x10/0x10 [ 1360.874310][T21392] ? __up_read+0x2c2/0x6b0 [ 1360.878717][T21392] ? __pfx___up_read+0x10/0x10 [ 1360.883469][T21392] ? crypto_alg_lookup+0x2d6/0x360 [ 1360.888569][T21392] crypto_alg_mod_lookup+0x99/0x720 [ 1360.893758][T21392] crypto_add_alg+0x1c0/0x310 [ 1360.898420][T21392] ? __pfx_crypto_add_alg+0x10/0x10 [ 1360.903609][T21392] crypto_user_rcv_msg+0x4f5/0x670 [ 1360.908709][T21392] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 1360.914344][T21392] ? __mutex_trylock_common+0x183/0x2e0 [ 1360.919875][T21392] ? __pfx___might_resched+0x10/0x10 [ 1360.925158][T21392] netlink_rcv_skb+0x1e3/0x430 [ 1360.929918][T21392] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 1360.935544][T21392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1360.940838][T21392] crypto_netlink_rcv+0x2a/0x40 [ 1360.945677][T21392] netlink_unicast+0x7f0/0x990 [ 1360.950434][T21392] ? __pfx_netlink_unicast+0x10/0x10 [ 1360.955732][T21392] ? __virt_addr_valid+0x183/0x530 [ 1360.960847][T21392] ? __check_object_size+0x49c/0x900 [ 1360.966213][T21392] ? bpf_lsm_netlink_send+0x9/0x10 [ 1360.971313][T21392] netlink_sendmsg+0x8e4/0xcb0 [ 1360.976079][T21392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.981352][T21392] ? __import_iovec+0x536/0x820 [ 1360.986215][T21392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1360.991488][T21392] ? security_socket_sendmsg+0x87/0xb0 [ 1360.996943][T21392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.002227][T21392] __sock_sendmsg+0x221/0x270 [ 1361.006901][T21392] ____sys_sendmsg+0x525/0x7d0 [ 1361.011660][T21392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1361.016938][T21392] __sys_sendmsg+0x2b0/0x3a0 [ 1361.021522][T21392] ? __pfx___sys_sendmsg+0x10/0x10 [ 1361.026619][T21392] ? vfs_write+0x7c4/0xc90 [ 1361.031042][T21392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1361.037361][T21392] ? do_syscall_64+0x100/0x230 [ 1361.042114][T21392] ? do_syscall_64+0xb6/0x230 [ 1361.046774][T21392] do_syscall_64+0xf3/0x230 [ 1361.051265][T21392] ? clear_bhb_loop+0x35/0x90 [ 1361.055948][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.061857][T21392] RIP: 0033:0x7f6043377299 [ 1361.066260][T21392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.085868][T21392] RSP: 002b:00007f60441d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.094280][T21392] RAX: ffffffffffffffda RBX: 00007f6043505f80 RCX: 00007f6043377299 [ 1361.102244][T21392] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1361.110301][T21392] RBP: 00007f60441d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.118263][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.126241][T21392] R13: 000000000000000b R14: 00007f6043505f80 R15: 00007ffdfac01cc8 [ 1361.134221][T21392] [ 1362.048250][T19799] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1362.416714][T19799] usb 5-1: Using ep0 maxpacket: 16 [ 1362.446818][T19799] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1362.474018][T19799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.498656][T19799] usb 5-1: Product: syz [ 1362.518354][T19799] usb 5-1: Manufacturer: syz [ 1362.532262][T19799] usb 5-1: SerialNumber: syz [ 1362.583327][T19799] usb 5-1: config 0 descriptor?? [ 1362.645608][T19799] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1363.529631][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1363.539654][T21413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.549269][T19799] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1363.568418][T21440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1363.569944][T21413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.723810][ T5296] usb 5-1: USB disconnect, device number 66 [ 1364.736630][T21438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1365.180636][T21456] FAULT_INJECTION: forcing a failure. [ 1365.180636][T21456] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.195841][T21452] bio_check_eod: 2 callbacks suppressed [ 1365.195866][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.195866][T21452] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1365.214563][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.214563][T21452] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1365.227546][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1365.237298][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.237298][T21452] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1365.250315][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1365.260414][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.260414][T21452] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1365.273510][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.273510][T21452] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1365.286488][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1365.296225][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.296225][T21452] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1365.309307][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1365.319245][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.319245][T21452] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1365.332261][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.332261][T21452] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1365.345324][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1365.355028][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.355028][T21452] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1365.368082][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1365.377966][T21452] syz.1.3811: attempt to access beyond end of device [ 1365.377966][T21452] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1365.390975][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1365.400739][T21452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1365.410332][T21452] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1365.429034][T21456] CPU: 0 UID: 0 PID: 21456 Comm: syz.0.3813 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1365.439853][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1365.449899][T21456] Call Trace: [ 1365.453169][T21456] [ 1365.456091][T21456] dump_stack_lvl+0x241/0x360 [ 1365.460767][T21456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.465957][T21456] ? __pfx__printk+0x10/0x10 [ 1365.470537][T21456] ? __kmalloc_noprof+0xb0/0x400 [ 1365.475466][T21456] ? __pfx___might_resched+0x10/0x10 [ 1365.480743][T21456] should_fail_ex+0x3b0/0x4e0 [ 1365.485419][T21456] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1365.491652][T21456] should_failslab+0xac/0x100 [ 1365.496331][T21456] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1365.502564][T21456] __kmalloc_noprof+0xd8/0x400 [ 1365.507318][T21456] ? safesetid_security_capable+0xb2/0x1d0 [ 1365.513116][T21456] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1365.519182][T21456] genl_rcv_msg+0x802/0xec0 [ 1365.523682][T21456] ? mark_lock+0x9a/0x350 [ 1365.528024][T21456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1365.533068][T21456] ? __pfx_lock_acquire+0x10/0x10 [ 1365.538084][T21456] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1365.543460][T21456] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1365.549251][T21456] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1365.554700][T21456] ? __pfx___might_resched+0x10/0x10 [ 1365.559980][T21456] netlink_rcv_skb+0x1e3/0x430 [ 1365.564736][T21456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1365.569748][T21456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1365.575029][T21456] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1365.580570][T21456] genl_rcv+0x28/0x40 [ 1365.584548][T21456] netlink_unicast+0x7f0/0x990 [ 1365.589324][T21456] ? __pfx_netlink_unicast+0x10/0x10 [ 1365.594600][T21456] ? __virt_addr_valid+0x183/0x530 [ 1365.599708][T21456] ? __check_object_size+0x49c/0x900 [ 1365.604989][T21456] ? bpf_lsm_netlink_send+0x9/0x10 [ 1365.610096][T21456] netlink_sendmsg+0x8e4/0xcb0 [ 1365.614859][T21456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.620134][T21456] ? __import_iovec+0x536/0x820 [ 1365.624976][T21456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1365.630247][T21456] ? security_socket_sendmsg+0x87/0xb0 [ 1365.635697][T21456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.640979][T21456] __sock_sendmsg+0x221/0x270 [ 1365.645669][T21456] ____sys_sendmsg+0x525/0x7d0 [ 1365.650426][T21456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1365.655706][T21456] __sys_sendmsg+0x2b0/0x3a0 [ 1365.660286][T21456] ? __pfx___sys_sendmsg+0x10/0x10 [ 1365.665379][T21456] ? vfs_write+0x7c4/0xc90 [ 1365.669811][T21456] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1365.676128][T21456] ? do_syscall_64+0x100/0x230 [ 1365.680896][T21456] ? do_syscall_64+0xb6/0x230 [ 1365.685577][T21456] do_syscall_64+0xf3/0x230 [ 1365.690070][T21456] ? clear_bhb_loop+0x35/0x90 [ 1365.694747][T21456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.700640][T21456] RIP: 0033:0x7f6043377299 [ 1365.705056][T21456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.724651][T21456] RSP: 002b:00007f60441d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1365.733054][T21456] RAX: ffffffffffffffda RBX: 00007f6043505f80 RCX: 00007f6043377299 [ 1365.741012][T21456] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1365.748970][T21456] RBP: 00007f60441d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.756944][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.764927][T21456] R13: 000000000000000b R14: 00007f6043505f80 R15: 00007ffdfac01cc8 [ 1365.772921][T21456] [ 1366.417266][T21479] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1367.509292][T21493] FAULT_INJECTION: forcing a failure. [ 1367.509292][T21493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.544872][T21493] CPU: 1 UID: 0 PID: 21493 Comm: syz.0.3821 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1367.555692][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1367.565780][T21493] Call Trace: [ 1367.569071][T21493] [ 1367.572014][T21493] dump_stack_lvl+0x241/0x360 [ 1367.576722][T21493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.581944][T21493] ? __pfx__printk+0x10/0x10 [ 1367.586565][T21493] ? __pfx_lock_release+0x10/0x10 [ 1367.591628][T21493] ? __lock_acquire+0x137a/0x2040 [ 1367.596681][T21493] should_fail_ex+0x3b0/0x4e0 [ 1367.601361][T21493] _copy_from_user+0x2f/0xe0 [ 1367.605946][T21493] kstrtouint_from_user+0xc6/0x190 [ 1367.611054][T21493] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1367.616861][T21493] ? __pfx_lock_acquire+0x10/0x10 [ 1367.621897][T21493] proc_fail_nth_write+0xaa/0x2d0 [ 1367.626924][T21493] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1367.632824][T21493] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1367.638462][T21493] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1367.644094][T21493] vfs_write+0x2a2/0xc90 [ 1367.648336][T21493] ? __pfx_vfs_write+0x10/0x10 [ 1367.653092][T21493] ? __fget_files+0x29/0x470 [ 1367.657674][T21493] ? __fget_files+0x3f6/0x470 [ 1367.662352][T21493] ksys_write+0x1a0/0x2c0 [ 1367.666674][T21493] ? __pfx_ksys_write+0x10/0x10 [ 1367.671520][T21493] ? do_syscall_64+0x100/0x230 [ 1367.676280][T21493] ? do_syscall_64+0xb6/0x230 [ 1367.680954][T21493] do_syscall_64+0xf3/0x230 [ 1367.685452][T21493] ? clear_bhb_loop+0x35/0x90 [ 1367.690128][T21493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.696015][T21493] RIP: 0033:0x7f6043375e1f [ 1367.700422][T21493] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1367.720019][T21493] RSP: 002b:00007f60441b7040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1367.728425][T21493] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6043375e1f [ 1367.736390][T21493] RDX: 0000000000000001 RSI: 00007f60441b70b0 RDI: 0000000000000004 [ 1367.744350][T21493] RBP: 00007f60441b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1367.752396][T21493] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1367.760357][T21493] R13: 000000000000006e R14: 00007f6043506058 R15: 00007ffdfac01cc8 [ 1367.768334][T21493] [ 1367.813956][T21500] FAULT_INJECTION: forcing a failure. [ 1367.813956][T21500] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.826745][T21500] CPU: 0 UID: 0 PID: 21500 Comm: syz.2.3825 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1367.837532][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1367.847612][T21500] Call Trace: [ 1367.850915][T21500] [ 1367.853863][T21500] dump_stack_lvl+0x241/0x360 [ 1367.858577][T21500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.863814][T21500] ? __pfx__printk+0x10/0x10 [ 1367.868442][T21500] should_fail_ex+0x3b0/0x4e0 [ 1367.873140][T21500] ? skb_clone+0x20c/0x390 [ 1367.877573][T21500] should_failslab+0xac/0x100 [ 1367.882278][T21500] ? skb_clone+0x20c/0x390 [ 1367.886722][T21500] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1367.892130][T21500] skb_clone+0x20c/0x390 [ 1367.896391][T21500] ? dev_queue_xmit_nit+0x220/0xc10 [ 1367.901624][T21500] dev_queue_xmit_nit+0x419/0xc10 [ 1367.906696][T21500] ? dev_queue_xmit_nit+0x2b/0xc10 [ 1367.911854][T21500] ? validate_xmit_skb+0x9f9/0x1120 [ 1367.917084][T21500] dev_hard_start_xmit+0x15f/0x7e0 [ 1367.922221][T21500] ? __pfx_validate_xmit_skb+0x10/0x10 [ 1367.927713][T21500] __dev_queue_xmit+0x1b63/0x3e90 [ 1367.932772][T21500] ? kasan_save_track+0x51/0x80 [ 1367.937649][T21500] ? do_syscall_64+0xf3/0x230 [ 1367.942450][T21500] ? __dev_queue_xmit+0x2da/0x3e90 [ 1367.947585][T21500] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1367.952977][T21500] ? __copy_skb_header+0x437/0x5b0 [ 1367.958085][T21500] ? __asan_memcpy+0x40/0x70 [ 1367.962674][T21500] ? __copy_skb_header+0x437/0x5b0 [ 1367.967782][T21500] ? __skb_clone+0x454/0x6c0 [ 1367.972389][T21500] ? skb_clone+0x240/0x390 [ 1367.976804][T21500] __netlink_deliver_tap+0x54d/0x7c0 [ 1367.982097][T21500] ? netlink_deliver_tap+0x2e/0x1b0 [ 1367.987290][T21500] netlink_deliver_tap+0x19d/0x1b0 [ 1367.992397][T21500] netlink_unicast+0x7be/0x990 [ 1367.997165][T21500] ? __pfx_netlink_unicast+0x10/0x10 [ 1368.002477][T21500] ? __virt_addr_valid+0x183/0x530 [ 1368.007614][T21500] ? __check_object_size+0x49c/0x900 [ 1368.012918][T21500] ? bpf_lsm_netlink_send+0x9/0x10 [ 1368.018034][T21500] netlink_sendmsg+0x8e4/0xcb0 [ 1368.022823][T21500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.028104][T21500] ? __import_iovec+0x536/0x820 [ 1368.032952][T21500] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1368.038229][T21500] ? security_socket_sendmsg+0x87/0xb0 [ 1368.043682][T21500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.048958][T21500] __sock_sendmsg+0x221/0x270 [ 1368.053636][T21500] ____sys_sendmsg+0x525/0x7d0 [ 1368.058398][T21500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.063687][T21500] __sys_sendmsg+0x2b0/0x3a0 [ 1368.068302][T21500] ? __pfx___sys_sendmsg+0x10/0x10 [ 1368.073430][T21500] ? vfs_write+0x7c4/0xc90 [ 1368.077883][T21500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1368.084214][T21500] ? do_syscall_64+0x100/0x230 [ 1368.088977][T21500] ? do_syscall_64+0xb6/0x230 [ 1368.093652][T21500] do_syscall_64+0xf3/0x230 [ 1368.098169][T21500] ? clear_bhb_loop+0x35/0x90 [ 1368.102878][T21500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.108779][T21500] RIP: 0033:0x7f06b5d77299 [ 1368.113200][T21500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.132804][T21500] RSP: 002b:00007f06b6af8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.141213][T21500] RAX: ffffffffffffffda RBX: 00007f06b5f05f80 RCX: 00007f06b5d77299 [ 1368.149175][T21500] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1368.157143][T21500] RBP: 00007f06b6af80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.165102][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.173061][T21500] R13: 000000000000000b R14: 00007f06b5f05f80 R15: 00007ffc3a78b228 [ 1368.181038][T21500] [ 1368.230249][T21502] FAULT_INJECTION: forcing a failure. [ 1368.230249][T21502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.249373][T21502] CPU: 1 UID: 0 PID: 21502 Comm: syz.0.3826 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1368.260150][T21502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1368.270202][T21502] Call Trace: [ 1368.273478][T21502] [ 1368.276413][T21502] dump_stack_lvl+0x241/0x360 [ 1368.281094][T21502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1368.286285][T21502] ? __pfx__printk+0x10/0x10 [ 1368.290872][T21502] ? snprintf+0xda/0x120 [ 1368.295114][T21502] should_fail_ex+0x3b0/0x4e0 [ 1368.299788][T21502] _copy_to_user+0x2f/0xb0 [ 1368.304462][T21502] simple_read_from_buffer+0xca/0x150 [ 1368.309830][T21502] proc_fail_nth_read+0x1e9/0x250 [ 1368.314876][T21502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1368.320422][T21502] ? rw_verify_area+0x520/0x6b0 [ 1368.325269][T21502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1368.330811][T21502] vfs_read+0x204/0xbc0 [ 1368.334957][T21502] ? __pfx_lock_release+0x10/0x10 [ 1368.339977][T21502] ? __pfx_vfs_read+0x10/0x10 [ 1368.344645][T21502] ? __fget_files+0x29/0x470 [ 1368.349228][T21502] ? __fget_files+0x3f6/0x470 [ 1368.353905][T21502] ksys_read+0x1a0/0x2c0 [ 1368.358142][T21502] ? __pfx_ksys_read+0x10/0x10 [ 1368.362892][T21502] ? do_syscall_64+0x100/0x230 [ 1368.367652][T21502] ? do_syscall_64+0xb6/0x230 [ 1368.372322][T21502] do_syscall_64+0xf3/0x230 [ 1368.376817][T21502] ? clear_bhb_loop+0x35/0x90 [ 1368.381489][T21502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.387379][T21502] RIP: 0033:0x7f6043375d7c [ 1368.391785][T21502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1368.411379][T21502] RSP: 002b:00007f60441d8040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1368.419785][T21502] RAX: ffffffffffffffda RBX: 00007f6043505f80 RCX: 00007f6043375d7c [ 1368.427742][T21502] RDX: 000000000000000f RSI: 00007f60441d80b0 RDI: 0000000000000005 [ 1368.435702][T21502] RBP: 00007f60441d80a0 R08: 0000000000000000 R09: 0000000000000014 [ 1368.443662][T21502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.451620][T21502] R13: 000000000000000b R14: 00007f6043505f80 R15: 00007ffdfac01cc8 [ 1368.459592][T21502] [ 1368.496134][T21506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1368.573633][T21506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.581503][T21495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1368.729017][T21506] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1369.037081][ T5258] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1369.256329][ T5258] usb 1-1: Using ep0 maxpacket: 16 [ 1369.272196][ T5258] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1369.296549][ T5258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.312128][ T5258] usb 1-1: Product: syz [ 1369.316590][ T5258] usb 1-1: Manufacturer: syz [ 1369.322163][ T5258] usb 1-1: SerialNumber: syz [ 1369.334475][ T5258] usb 1-1: config 0 descriptor?? [ 1369.347367][ T5258] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1370.440027][T21510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.473507][T21510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.488880][ T5258] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1370.726195][ T5258] usb 1-1: USB disconnect, device number 71 [ 1370.766949][ T29] audit: type=1326 audit(1722321657.144:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21548 comm="syz.3.3841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f64777299 code=0x0 [ 1371.181546][ T5263] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1372.131598][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.221883][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.231685][ T5263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.265122][ T5263] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1372.283642][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.320056][ T5263] usb 2-1: config 0 descriptor?? [ 1372.874532][ T5263] acrux 0003:1A34:0802.001F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 1372.902372][T21570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1372.939024][ T5263] acrux 0003:1A34:0802.001F: no inputs found [ 1372.967115][ T5263] acrux 0003:1A34:0802.001F: Failed to enable force feedback support, error: -19 [ 1374.392780][ T5263] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 1374.707442][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.713861][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1375.480180][ T29] audit: type=1326 audit(1722321661.491:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21601 comm="syz.2.3855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06b5d77299 code=0x0 [ 1375.604348][T19799] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1375.707879][ T5258] usb 2-1: USB disconnect, device number 50 [ 1375.872736][T19799] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1375.918483][ T5258] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1376.211835][T19799] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.252077][T19799] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1376.301634][T19799] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1376.326971][T19799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.353332][T21596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1376.403699][ T5258] usb 2-1: device descriptor read/64, error -71 [ 1376.956381][ T5258] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1377.360936][ T5258] usb 2-1: device descriptor read/64, error -71 [ 1377.530701][ T5258] usb usb2-port1: attempt power cycle [ 1377.844484][ T25] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1377.896315][T21627] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1378.860201][T19799] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1378.875531][T19799] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input69 [ 1378.949660][ T5258] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1379.242328][ T5258] usb 2-1: device not accepting address 53, error -71 [ 1379.705280][ T29] audit: type=1326 audit(1722321665.386:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21656 comm="syz.0.3869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x0 [ 1380.115122][T21645] netlink: 980 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1380.773737][ T5296] usb 4-1: USB disconnect, device number 63 [ 1380.773836][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1381.008214][ T5258] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1382.092774][ T5258] usb 2-1: Using ep0 maxpacket: 32 [ 1382.156555][ T5258] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.186579][ T5258] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1382.255739][ T5258] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1382.290801][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1382.321249][ T5258] usb 2-1: SerialNumber: syz [ 1382.347038][ T5258] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1382.406365][ T5258] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1382.418300][ T5258] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1382.659025][T21695] bio_check_eod: 2 callbacks suppressed [ 1382.659045][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.659045][T21695] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1382.677951][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.677951][T21695] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1382.690948][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1382.700907][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.700907][T21695] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1382.713980][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1382.725193][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.725193][T21695] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1382.738732][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.738732][T21695] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1382.752107][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1382.762152][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.762152][T21695] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1382.775709][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1382.786306][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.786306][T21695] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1382.799760][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.799760][T21695] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1382.813023][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1382.823061][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.823061][T21695] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1382.836442][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1382.847067][T21695] syz.3.3877: attempt to access beyond end of device [ 1382.847067][T21695] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1382.860292][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1382.870251][T21695] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1382.879997][T21695] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1383.495139][ T5258] usb 2-1: USB disconnect, device number 55 [ 1383.941200][ T29] audit: type=1326 audit(1722321669.291:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21714 comm="syz.0.3884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x0 [ 1384.247210][T21721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1384.368573][T21721] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1387.936043][T21743] netlink: 980 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1387.962077][T21764] 9pnet_fd: Insufficient options for proto=fd [ 1388.062161][T21767] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1388.106096][T21767] netlink: del zone limit has 8 unknown bytes [ 1388.321263][T19799] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1388.548796][T19799] usb 3-1: Using ep0 maxpacket: 32 [ 1388.778110][T19799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.800945][T19799] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1389.634453][T19799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1389.653830][T19799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1389.691902][T19799] usb 3-1: SerialNumber: syz [ 1389.720504][T19799] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1389.743924][T19799] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1389.793020][T19799] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1390.112858][ T29] audit: type=1326 audit(1722321675.004:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21785 comm="syz.4.3901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e78177299 code=0x0 [ 1390.378378][T21790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1391.225613][ T5296] usb 3-1: USB disconnect, device number 78 [ 1391.780290][T21811] netlink: 'syz.2.3909': attribute type 5 has an invalid length. [ 1391.998284][ T5269] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1392.036871][T21813] netlink: 364 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1392.146442][ T5296] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1392.211449][ T5269] usb 2-1: Using ep0 maxpacket: 32 [ 1392.235688][ T5269] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1392.254814][ T5269] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1392.263453][ T5269] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.301012][ T5269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1392.332630][ T5269] usb 2-1: config 1 has no interface number 0 [ 1392.362398][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 1392.372425][ T5269] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1392.397244][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.405785][ T5296] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1392.414853][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.428370][ T5296] usb 3-1: Product: syz [ 1392.434498][ T5296] usb 3-1: Manufacturer: syz [ 1392.441921][ T5269] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1392.449842][ T5296] usb 3-1: SerialNumber: syz [ 1392.637084][ T5296] usb 3-1: config 0 descriptor?? [ 1392.665324][ T5269] snd_usb_pod 2-1:1.1: set_interface failed [ 1392.954641][ T5269] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1392.992241][ T5269] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1393.004687][ T5269] usb 2-1: USB disconnect, device number 56 [ 1393.499215][ T29] audit: type=1326 audit(1722321678.124:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.0.3914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043377299 code=0x0 [ 1393.901039][ T5296] rtl8150 3-1:0.0: couldn't reset the device [ 1394.015766][T21846] bio_check_eod: 2 callbacks suppressed [ 1394.015811][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.015811][T21846] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1394.035540][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.035540][T21846] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1394.048660][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1394.060962][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.060962][T21846] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1394.074434][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1394.088681][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.088681][T21846] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1394.102750][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.102750][T21846] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1394.115884][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1394.126766][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.126766][T21846] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1394.140034][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1394.153444][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.153444][T21846] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1394.167259][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.167259][T21846] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1394.180948][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1394.191307][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.191307][T21846] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1394.204605][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1394.216328][T21846] syz.3.3915: attempt to access beyond end of device [ 1394.216328][T21846] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1394.229993][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1394.240506][T21846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1394.250231][T21846] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1394.309979][ T5296] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5 [ 1394.323920][ T5296] usb 3-1: USB disconnect, device number 79 [ 1396.111101][T19799] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1396.341274][T19799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.391380][T19799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.428362][T19799] usb 3-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 1396.443908][T19799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.500744][T19799] usb 3-1: config 0 descriptor?? [ 1396.979260][T19799] usbhid 3-1:0.0: can't add hid device: -71 [ 1396.985322][T19799] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1397.052062][T19799] usb 3-1: USB disconnect, device number 80 [ 1397.084948][T21887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1397.168939][T21887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.203084][T21887] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1398.334869][T21917] input: syz0 as /devices/virtual/input/input71 [ 1398.365200][T21919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1398.374209][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1398.451221][ T5296] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1398.648391][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.702030][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.721985][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1398.745762][ T5296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1399.156375][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.196853][ T5296] usb 5-1: config 0 descriptor?? [ 1400.478007][T21942] hfs: unable to parse mount options [ 1401.043163][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3945'. [ 1401.232702][T21959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1401.302270][T21947] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1401.689845][ T5296] usbhid 5-1:0.0: can't add hid device: -71 [ 1401.701697][ T5296] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1401.735440][ T5296] usb 5-1: USB disconnect, device number 67 [ 1401.798711][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1401.841862][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1403.561647][T21990] FAULT_INJECTION: forcing a failure. [ 1403.561647][T21990] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.593537][T21990] CPU: 0 UID: 0 PID: 21990 Comm: syz.2.3956 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1403.604360][T21990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1403.614445][T21990] Call Trace: [ 1403.617739][T21990] [ 1403.620684][T21990] dump_stack_lvl+0x241/0x360 [ 1403.625394][T21990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1403.630619][T21990] ? __pfx__printk+0x10/0x10 [ 1403.635236][T21990] ? __kmalloc_noprof+0xb0/0x400 [ 1403.640200][T21990] ? __pfx___might_resched+0x10/0x10 [ 1403.645506][T21990] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1403.651516][T21990] should_fail_ex+0x3b0/0x4e0 [ 1403.656221][T21990] ? sock_kmalloc+0xd7/0x160 [ 1403.660832][T21990] should_failslab+0xac/0x100 [ 1403.665536][T21990] ? sock_kmalloc+0xd7/0x160 [ 1403.670149][T21990] __kmalloc_noprof+0xd8/0x400 [ 1403.674941][T21990] ? __lock_acquire+0x137a/0x2040 [ 1403.679976][T21990] sock_kmalloc+0xd7/0x160 [ 1403.684395][T21990] af_alg_alloc_areq+0x90/0x260 [ 1403.689246][T21990] skcipher_recvmsg+0x382/0x1230 [ 1403.694200][T21990] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1403.699566][T21990] ? __might_fault+0xaa/0x120 [ 1403.704238][T21990] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1403.709524][T21990] ? security_socket_recvmsg+0x90/0xb0 [ 1403.714984][T21990] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1403.720358][T21990] sock_recvmsg+0x22f/0x280 [ 1403.724864][T21990] ____sys_recvmsg+0x1db/0x470 [ 1403.729629][T21990] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1403.735100][T21990] __sys_recvmsg+0x2f0/0x3e0 [ 1403.739688][T21990] ? __pfx___sys_recvmsg+0x10/0x10 [ 1403.744815][T21990] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1403.751148][T21990] ? do_syscall_64+0x100/0x230 [ 1403.755909][T21990] ? do_syscall_64+0xb6/0x230 [ 1403.760594][T21990] do_syscall_64+0xf3/0x230 [ 1403.765095][T21990] ? clear_bhb_loop+0x35/0x90 [ 1403.769772][T21990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.775666][T21990] RIP: 0033:0x7f06b5d77299 [ 1403.780076][T21990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.799677][T21990] RSP: 002b:00007f06b6af8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1403.808090][T21990] RAX: ffffffffffffffda RBX: 00007f06b5f05f80 RCX: 00007f06b5d77299 [ 1403.816054][T21990] RDX: 0000000000000000 RSI: 000000002000a8c0 RDI: 0000000000000004 [ 1403.824019][T21990] RBP: 00007f06b6af80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.832015][T21990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.839983][T21990] R13: 000000000000000b R14: 00007f06b5f05f80 R15: 00007ffc3a78b228 [ 1403.847960][T21990] [ 1404.391067][T22015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1404.429795][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1404.943509][T22025] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3966'. [ 1405.634660][ C0] ================================================================== [ 1405.642773][ C0] BUG: KASAN: slab-out-of-bounds in bq_xmit_all+0x134/0x11d0 [ 1405.650165][ C0] Read of size 8 at addr ffff88802a71b780 by task syz.3.3969/22032 [ 1405.658050][ C0] [ 1405.660365][ C0] CPU: 0 UID: 0 PID: 22032 Comm: syz.3.3969 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1405.671108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1405.681147][ C0] Call Trace: [ 1405.684416][ C0] [ 1405.687246][ C0] dump_stack_lvl+0x241/0x360 [ 1405.691922][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1405.697112][ C0] ? __pfx__printk+0x10/0x10 [ 1405.701698][ C0] ? _printk+0xd5/0x120 [ 1405.705846][ C0] ? __virt_addr_valid+0x183/0x530 [ 1405.710946][ C0] ? __virt_addr_valid+0x183/0x530 [ 1405.716043][ C0] print_report+0x169/0x550 [ 1405.720540][ C0] ? __virt_addr_valid+0x183/0x530 [ 1405.725637][ C0] ? __virt_addr_valid+0x183/0x530 [ 1405.730732][ C0] ? __virt_addr_valid+0x45f/0x530 [ 1405.735830][ C0] ? __phys_addr+0xba/0x170 [ 1405.740319][ C0] ? bq_xmit_all+0x134/0x11d0 [ 1405.744983][ C0] kasan_report+0x143/0x180 [ 1405.749475][ C0] ? bq_xmit_all+0x134/0x11d0 [ 1405.754144][ C0] bq_xmit_all+0x134/0x11d0 [ 1405.758632][ C0] ? dql_completed+0x79c/0xcf0 [ 1405.763401][ C0] ? __pfx_lock_release+0x10/0x10 [ 1405.768421][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 1405.773345][ C0] ? virtqueue_poll+0x186/0x230 [ 1405.778359][ C0] ? virtnet_poll_tx+0x510/0x7d0 [ 1405.783296][ C0] __dev_flush+0x81/0x160 [ 1405.787615][ C0] xdp_do_check_flushed+0x129/0x240 [ 1405.792806][ C0] __napi_poll+0xe4/0x490 [ 1405.797129][ C0] net_rx_action+0x89b/0x1240 [ 1405.801808][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1405.806912][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1405.812641][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1405.818968][ C0] handle_softirqs+0x2c4/0x970 [ 1405.823724][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1405.828478][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1405.833756][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1405.838947][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1405.843527][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1405.848717][ C0] irq_exit_rcu+0x9/0x30 [ 1405.852950][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1405.858573][ C0] [ 1405.861489][ C0] [ 1405.864408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1405.870382][ C0] RIP: 0010:free_pages_and_swap_cache+0x193/0x690 [ 1405.876786][ C0] Code: 49 83 e7 fc 49 8d 5f 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 70 79 09 00 48 8b 1b <48> 89 de 48 83 e6 01 31 ff e8 0f 6b a5 ff 48 89 d8 48 83 e0 01 0f [ 1405.896383][ C0] RSP: 0018:ffffc9000a5774c0 EFLAGS: 00000246 [ 1405.902438][ C0] RAX: 1ffffd40003cf9e9 RBX: ffffea0001e7cf88 RCX: dffffc0000000000 [ 1405.910397][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000001f [ 1405.918354][ C0] RBP: ffffc9000a577748 R08: ffffffff81ee0120 R09: 1ffffd40003cf9f0 [ 1405.926338][ C0] R10: dffffc0000000000 R11: fffff940003cf9f1 R12: ffffea0001e7cf40 [ 1405.934312][ C0] R13: 1ffff1100e49aa81 R14: ffff8880724d5408 R15: ffffea0001e7cf40 [ 1405.942381][ C0] ? free_pages_and_swap_cache+0x2d0/0x690 [ 1405.948207][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1405.954370][ C0] ? tlb_table_flush+0x143/0x410 [ 1405.959305][ C0] tlb_flush_mmu+0x3a3/0x680 [ 1405.963892][ C0] ? __pfx_down_write+0x10/0x10 [ 1405.968741][ C0] tlb_finish_mmu+0xd4/0x200 [ 1405.973333][ C0] exit_mmap+0x44f/0xc80 [ 1405.977573][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1405.982328][ C0] ? __asan_memset+0x23/0x50 [ 1405.986934][ C0] ? uprobe_clear_state+0x277/0x290 [ 1405.992381][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 1405.997653][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1406.002844][ C0] __mmput+0x115/0x380 [ 1406.007085][ C0] exit_mm+0x220/0x310 [ 1406.011150][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1406.015731][ C0] ? taskstats_exit+0x326/0xa60 [ 1406.020575][ C0] do_exit+0x9b2/0x27f0 [ 1406.024723][ C0] ? __pfx_do_exit+0x10/0x10 [ 1406.029301][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1406.034663][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1406.040635][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1406.046974][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1406.052100][ C0] do_group_exit+0x207/0x2c0 [ 1406.056694][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.061903][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1406.067096][ C0] get_signal+0x1695/0x1730 [ 1406.071600][ C0] ? __pfx_get_signal+0x10/0x10 [ 1406.076445][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1406.081990][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1406.088134][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1406.094135][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1406.099871][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 1406.105428][ C0] do_syscall_64+0x100/0x230 [ 1406.110019][ C0] ? clear_bhb_loop+0x35/0x90 [ 1406.114713][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.120619][ C0] RIP: 0033:0x7f8f64777299 [ 1406.125026][ C0] Code: Unable to access opcode bytes at 0x7f8f6477726f. [ 1406.132033][ C0] RSP: 002b:00007f8f655030f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1406.140450][ C0] RAX: fffffffffffffe00 RBX: 00007f8f64905f88 RCX: 00007f8f64777299 [ 1406.148418][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f64905f88 [ 1406.156380][ C0] RBP: 00007f8f64905f80 R08: 00007f8f655036c0 R09: 00007f8f655036c0 [ 1406.164342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f64905f8c [ 1406.172303][ C0] R13: 000000000000000b R14: 00007ffe3bb5a890 R15: 00007ffe3bb5a978 [ 1406.180272][ C0] [ 1406.183278][ C0] [ 1406.185584][ C0] Allocated by task 15903: [ 1406.189980][ C0] kasan_save_track+0x3f/0x80 [ 1406.194650][ C0] __kasan_slab_alloc+0x66/0x80 [ 1406.199491][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1406.204940][ C0] vm_area_dup+0x27/0x290 [ 1406.209257][ C0] copy_mm+0xc7b/0x1f30 [ 1406.213400][ C0] copy_process+0x187a/0x3dc0 [ 1406.218069][ C0] kernel_clone+0x223/0x870 [ 1406.222562][ C0] __x64_sys_clone+0x258/0x2a0 [ 1406.227316][ C0] do_syscall_64+0xf3/0x230 [ 1406.231807][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.237690][ C0] [ 1406.239998][ C0] The buggy address belongs to the object at ffff88802a71b6c8 [ 1406.239998][ C0] which belongs to the cache vm_area_struct of size 184 [ 1406.254296][ C0] The buggy address is located 0 bytes to the right of [ 1406.254296][ C0] allocated 184-byte region [ffff88802a71b6c8, ffff88802a71b780) [ 1406.268771][ C0] [ 1406.271081][ C0] The buggy address belongs to the physical page: [ 1406.277493][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a71b [ 1406.286238][ C0] memcg:ffff888029ef6301 [ 1406.290460][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1406.297555][ C0] page_type: 0xfdffffff(slab) [ 1406.302219][ C0] raw: 00fff00000000000 ffff8880162fdb40 ffffea0000b21140 dead000000000006 [ 1406.310789][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff888029ef6301 [ 1406.319357][ C0] page dumped because: kasan: bad access detected [ 1406.325749][ C0] page_owner tracks the page as allocated [ 1406.331454][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17646, tgid 17646 (syz.1.2843), ts 1068423524840, free_ts 1068345747678 [ 1406.350977][ C0] post_alloc_hook+0x1f3/0x230 [ 1406.355733][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 1406.361266][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 1406.366453][ C0] alloc_slab_page+0x5f/0x120 [ 1406.371115][ C0] allocate_slab+0x5a/0x2f0 [ 1406.375604][ C0] ___slab_alloc+0xcd1/0x14b0 [ 1406.380273][ C0] __slab_alloc+0x58/0xa0 [ 1406.384595][ C0] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 1406.390046][ C0] vm_area_alloc+0x24/0x1d0 [ 1406.394889][ C0] mmap_region+0xc3d/0x2090 [ 1406.399379][ C0] do_mmap+0x8f9/0x1010 [ 1406.403524][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 1406.408116][ C0] do_syscall_64+0xf3/0x230 [ 1406.412616][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.418501][ C0] page last free pid 17632 tgid 17632 stack trace: [ 1406.424983][ C0] free_unref_folios+0x100f/0x1ac0 [ 1406.430083][ C0] folios_put_refs+0x76e/0x860 [ 1406.434836][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 1406.440453][ C0] tlb_flush_mmu+0x3a3/0x680 [ 1406.445047][ C0] tlb_finish_mmu+0xd4/0x200 [ 1406.449628][ C0] exit_mmap+0x44f/0xc80 [ 1406.453862][ C0] __mmput+0x115/0x380 [ 1406.457921][ C0] exit_mm+0x220/0x310 [ 1406.461974][ C0] do_exit+0x9b2/0x27f0 [ 1406.466113][ C0] do_group_exit+0x207/0x2c0 [ 1406.470693][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1406.475708][ C0] x64_sys_call+0x26c3/0x26d0 [ 1406.480380][ C0] do_syscall_64+0xf3/0x230 [ 1406.484875][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.490764][ C0] [ 1406.493075][ C0] Memory state around the buggy address: [ 1406.498685][ C0] ffff88802a71b680: 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 1406.506733][ C0] ffff88802a71b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1406.514782][ C0] >ffff88802a71b780: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1406.522827][ C0] ^ [ 1406.526878][ C0] ffff88802a71b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1406.534924][ C0] ffff88802a71b880: fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 [ 1406.542966][ C0] ================================================================== [ 1406.551206][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1406.558411][ C0] CPU: 0 UID: 0 PID: 22032 Comm: syz.3.3969 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1406.569188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1406.579230][ C0] Call Trace: [ 1406.582490][ C0] [ 1406.585314][ C0] dump_stack_lvl+0x241/0x360 [ 1406.589976][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.595154][ C0] ? __pfx__printk+0x10/0x10 [ 1406.599732][ C0] ? vscnprintf+0x5d/0x90 [ 1406.604059][ C0] panic+0x349/0x860 [ 1406.607934][ C0] ? check_panic_on_warn+0x21/0xb0 [ 1406.613033][ C0] ? __pfx_panic+0x10/0x10 [ 1406.617438][ C0] ? mark_lock+0x9a/0x350 [ 1406.621752][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1406.627622][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1406.633496][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1406.639799][ C0] ? print_report+0x502/0x550 [ 1406.644458][ C0] check_panic_on_warn+0x86/0xb0 [ 1406.649376][ C0] ? bq_xmit_all+0x134/0x11d0 [ 1406.654033][ C0] end_report+0x77/0x160 [ 1406.658253][ C0] kasan_report+0x154/0x180 [ 1406.662738][ C0] ? bq_xmit_all+0x134/0x11d0 [ 1406.667399][ C0] bq_xmit_all+0x134/0x11d0 [ 1406.671882][ C0] ? dql_completed+0x79c/0xcf0 [ 1406.676639][ C0] ? __pfx_lock_release+0x10/0x10 [ 1406.681647][ C0] ? __pfx_bq_xmit_all+0x10/0x10 [ 1406.686563][ C0] ? virtqueue_poll+0x186/0x230 [ 1406.691396][ C0] ? virtnet_poll_tx+0x510/0x7d0 [ 1406.696318][ C0] __dev_flush+0x81/0x160 [ 1406.700628][ C0] xdp_do_check_flushed+0x129/0x240 [ 1406.705805][ C0] __napi_poll+0xe4/0x490 [ 1406.710115][ C0] net_rx_action+0x89b/0x1240 [ 1406.714778][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1406.719870][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1406.725493][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1406.731814][ C0] handle_softirqs+0x2c4/0x970 [ 1406.736560][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1406.741309][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1406.746573][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1406.751753][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1406.756325][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1406.761506][ C0] irq_exit_rcu+0x9/0x30 [ 1406.765728][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1406.771356][ C0] [ 1406.774269][ C0] [ 1406.777185][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1406.783152][ C0] RIP: 0010:free_pages_and_swap_cache+0x193/0x690 [ 1406.789547][ C0] Code: 49 83 e7 fc 49 8d 5f 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 70 79 09 00 48 8b 1b <48> 89 de 48 83 e6 01 31 ff e8 0f 6b a5 ff 48 89 d8 48 83 e0 01 0f [ 1406.809136][ C0] RSP: 0018:ffffc9000a5774c0 EFLAGS: 00000246 [ 1406.815188][ C0] RAX: 1ffffd40003cf9e9 RBX: ffffea0001e7cf88 RCX: dffffc0000000000 [ 1406.823140][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000001f [ 1406.831180][ C0] RBP: ffffc9000a577748 R08: ffffffff81ee0120 R09: 1ffffd40003cf9f0 [ 1406.839133][ C0] R10: dffffc0000000000 R11: fffff940003cf9f1 R12: ffffea0001e7cf40 [ 1406.849640][ C0] R13: 1ffff1100e49aa81 R14: ffff8880724d5408 R15: ffffea0001e7cf40 [ 1406.857617][ C0] ? free_pages_and_swap_cache+0x2d0/0x690 [ 1406.863435][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1406.869583][ C0] ? tlb_table_flush+0x143/0x410 [ 1406.874507][ C0] tlb_flush_mmu+0x3a3/0x680 [ 1406.879079][ C0] ? __pfx_down_write+0x10/0x10 [ 1406.883930][ C0] tlb_finish_mmu+0xd4/0x200 [ 1406.888556][ C0] exit_mmap+0x44f/0xc80 [ 1406.892796][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1406.897543][ C0] ? __asan_memset+0x23/0x50 [ 1406.902118][ C0] ? uprobe_clear_state+0x277/0x290 [ 1406.907292][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 1406.912563][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1406.917751][ C0] __mmput+0x115/0x380 [ 1406.921803][ C0] exit_mm+0x220/0x310 [ 1406.925850][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1406.930414][ C0] ? taskstats_exit+0x326/0xa60 [ 1406.935251][ C0] do_exit+0x9b2/0x27f0 [ 1406.939386][ C0] ? __pfx_do_exit+0x10/0x10 [ 1406.943952][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1406.949306][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1406.955269][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1406.961576][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1406.966669][ C0] do_group_exit+0x207/0x2c0 [ 1406.971243][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.976421][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1406.981602][ C0] get_signal+0x1695/0x1730 [ 1406.986091][ C0] ? __pfx_get_signal+0x10/0x10 [ 1406.990924][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1406.996454][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1407.002589][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1407.008556][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1407.014255][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 1407.019782][ C0] do_syscall_64+0x100/0x230 [ 1407.024352][ C0] ? clear_bhb_loop+0x35/0x90 [ 1407.029015][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.034892][ C0] RIP: 0033:0x7f8f64777299 [ 1407.039284][ C0] Code: Unable to access opcode bytes at 0x7f8f6477726f. [ 1407.046279][ C0] RSP: 002b:00007f8f655030f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1407.054679][ C0] RAX: fffffffffffffe00 RBX: 00007f8f64905f88 RCX: 00007f8f64777299 [ 1407.062630][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f64905f88 [ 1407.070581][ C0] RBP: 00007f8f64905f80 R08: 00007f8f655036c0 R09: 00007f8f655036c0 [ 1407.078550][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f64905f8c [ 1407.086512][ C0] R13: 000000000000000b R14: 00007ffe3bb5a890 R15: 00007ffe3bb5a978 [ 1407.094473][ C0] [ 1407.097601][ C0] Kernel Offset: disabled [ 1407.101910][ C0] Rebooting in 86400 seconds..