last executing test programs: 24.058368755s ago: executing program 0 (id=1957): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x2, 0xffffffff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000540)={0x20000004}) flock(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x10}, [@IFLA_MTU={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000100020000000900020073797a32000000000900010073797a300000000028000480240001800a00010072656469720000001400028008000240000000040800014000000001"], 0x7c}}, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) 18.841532935s ago: executing program 2 (id=1961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x2000, 0x0) r4 = eventfd(0x0) r5 = dup(r4) io_setup(0x200, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8, r5, 0x0}]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_getevents(r6, 0x0, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xfd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa100, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x214) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) 18.442427304s ago: executing program 1 (id=1964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=@delchain={0x54, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8}]}}]}, 0x54}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x900}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.357165875s ago: executing program 2 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfff1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 18.271722305s ago: executing program 1 (id=1967): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c009000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x40, 0x31, 0x73, {0x73, 0x2, "927179c845969401b2222e15e4812b67a2e0a4462472b3d12605ee4d8bb6802b7a72ba2ba485c809fdd238b4515e6fac7ebaf6e5ddbadf3820b8e0c40e5de063a523db7307cdb459028009e5fa98e5854488d42c5502782e98af1905c803b46c753dcda590b2ad6d48c76404e4d58444cb"}}, &(0x7f0000000340)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "fd675ebe6634c655fabc3e6ddf44c597f972ef8143153560ce6d219e83cb43154ee25ebf5396dd482470e426eccaa6280953cff9f274e99062b281a89bd3aa68943b178024a54d0c5ace12174000676225040089794a6539ba99680da2ee0938802164301b776df499f3bea17cc67913eb69f8445e8098a4eccd9e1788b3fe375861a4ee2114694368885c7c940ad74d1b47ba03d498bcae86ac2392ccd4b1a8cf2054e3f7bb0bcaf5520efc2011a3b5c6c8915927096f983a3728f5581c01abebc56daee24917"}}, &(0x7f0000000440)={0x0, 0x22, 0x1f, {[@global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x8, "eb178c28"}, @local=@item_4={0x3, 0x2, 0x2, "c7b2f5f7"}, @global=@item_4={0x3, 0x1, 0x3, "d9a421b4"}, @main=@item_4={0x3, 0x0, 0x9, "b5b9698a"}, @local=@item_4={0x3, 0x2, 0x0, "6b383512"}, @global=@item_4={0x3, 0x1, 0xb, "22685eb7"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xed2}}}}, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000680)={0x20, 0x1, 0x5c, "4119c17e18da68fc13ee9d2af8f213d692a9af1ddbc4ae4aaffdacd6a654b35c22bd9b9b9482c9f1c0bf146a93993d4a32ac1c1e119ad6908f254c2ebb70fee9f69ba10bc5ee6dbae9544204f43d30db2d0fa358eef37b300bab3be1"}, &(0x7f0000000700)={0x20, 0x3, 0x1}}) r3 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 18.185391438s ago: executing program 2 (id=1968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x405c0a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a40)=""/102368, 0x18fe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) sendfile(r0, r2, &(0x7f0000000280), 0x3) timerfd_settime(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000680)={r4, 0x20}, 0x14) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{}, {}, 0x10fe8, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fef725253be9e8480cb4f3524932f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336fcfe86c481c8935a48e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba8cd86587ad33743b1c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed08174bb5ea722a98b34d38ac6de995de4ee263c81b2567b3f87e2bcaab9d3c530897857edd5d7f97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a7232dbb0d6de9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2245f46c953048c43f961d7fbd734c60a9695f567aa710ce9d3327568895d99dde0266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc22efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b02374372"}, 0x418}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local, 0x100}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x6, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 17.221029684s ago: executing program 0 (id=1970): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) open(&(0x7f0000000100)='./file0\x00', 0x840, 0x100) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x84, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x3}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.762188529s ago: executing program 4 (id=1974): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) close(r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x0, &(0x7f00000002c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000002400)='setgroups\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000805, 0x0) 14.81776354s ago: executing program 4 (id=1975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000300)=ANY=[], 0x6) 10.207047586s ago: executing program 4 (id=1976): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000090505020000000010"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv4_getrule={0x0, 0x22, 0x2, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x20, 0x1, 0xf8, 0x0, 0x0, 0x5, 0x10018}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) fchmodat(r4, &(0x7f0000000480)='./control\x00', 0x0) creat(&(0x7f0000000180)='./control\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000002040)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300c87e99880aa82d058da746202983809e122c1af7fb385c668c6958b1a975bd4d4e2f94b0456c586e4d400b9190c18190550ea4fb70538f538e7924a92db3cfd47c5a462a4bac8818c3f1151960f6fa7e8b989755b9f53b6af0671871cbcb0110a36b92e32c0e0b1b2daf4a2521169f8a788b2a5d554e097fdf4ca8a0e96c58f5b6cfdb8cd0515884f1fe0312c695011c8cd1ebf9651e28556d693b1ef9870b33b02a6c8c0f7185b738647ccb74ef", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.118495912s ago: executing program 3 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x527}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x24001014) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000001c0)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000380)=""/206, &(0x7f0000000500)=""/64, &(0x7f00000002c0)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000080)={0x7}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980)={0x2, 0x0, [{0xebb01adb12ddb7f2, 0x34, &(0x7f0000000180)=""/52}, {0x0, 0xd2, &(0x7f00000007c0)=""/210}]}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x3) 10.10376396s ago: executing program 1 (id=1978): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x7fffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$KVM_NMI(r1, 0xae9a) 9.976579767s ago: executing program 0 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc240, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x979e) finit_module(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8f8, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x9}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="14ca9ba3", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2504070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) 9.822155433s ago: executing program 1 (id=1980): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x2, 0xffffffff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000540)={0x20000004}) flock(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x10}, [@IFLA_MTU={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000100020000000900020073797a32000000000900010073797a300000000028000480240001800a00010072656469720000001400028008000240000000040800014000000001"], 0x7c}}, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) 9.797482815s ago: executing program 3 (id=1981): socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x23) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40850) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="cd1bdb36fb92c816f5cb045a4ae0c70781d642f283d2bf7c5e0db082906b9d90be7605244423736135281d60584416c5c3fa2f9454e5f625bc5386bedc5103c2b1c6a9093face212c90548e2cf20d3e1b71acdd90c5e205699271f80b5de18ee551685ce3303b7a3dc1fc0b97f5e4939a0b46c11306a486debce76f17032e5ca95a9b63fb8a0b1eefda839d6b7b8ea08cbea4779a9e7e2113905e4279abefc21a4b63e7aa250ed67082a81174a49fb55378f8eabb8d5f4b8a774eba989b5f39e2fc5265458b4", 0xc6}, {&(0x7f0000000600)="b45cc201beeb4202b59c10f1f0231076ea8fec3e6a682013060b6b8fc9d399ea7c3450d6c082a8f4073b022d13413da9973635a02cea552e99493b31241e9e1dd33a9541da9079d319e994e93a2d75d8a96abfc7936e6193caa26511fe2e0469e89e45746f7271e0ed75df745e3da4bb5eba2caf88931ec92e163776d06e20253c6878b081e790ff2fcd21a5f143dbaadd9ffc32a3b37fb1ff62e55498cc1a1e3831857066891e9c0bd64264c953cf70a631a24d6bebb82c50349b46ef36fdda095144ec3d83d45bea7097cca756cf1f527cfef9824cbc030c83873e6fa9a38a8974a18558424493d49bb3b748169de1ef24b51de58edd0592182f7ab460152d2d58f491af0da62c5fac45be7aa36722e73c3203439df2b09bb0b939e8d9f2b527a998ff60cda526d2c6ab3ae0488c5daab7a761c834e01919f164187ff7ce22c9e423f111345c4a927ea843c305a90a54e8317afde83c81593641239ca2c3a3fdada1a2de00b5f7245c83379cf4ea1a1a098389a5387ef692d004240fbad3ed0dfbe4a75527ea399241b9695d5c2215e6e8f82cea48b5acda66c8b36e0838a6af38e9ddf9ab3555f4f2e6b713142b27cebbc1f10ef74794a22f1a65d72b89f88d0789e66331afb35be488813d14f35160c72d95ef00349a05f3b044afb920d568354c1ecd6303d7d0e590e65fc543cbaa0a2a809e47975b19a2cfb76eecf3bda2a8a313671f2e9272a4499ac2214be4a31fc9277779a24fe29e64e57068a00f5cbdf3eaee4b68dcf7155aa01bfa13f89a4e4456fb82715c654c68fc284750b7dec201f15c1e6c6fa7c4a9390d379e430d726dd9e5b0642170e7d75c4a40d15e6616e9ef6640eaf21d69283247ac19ae32eaec0b0aff14bb028feb4c0b36df674e6adf430b4e2d863295fd17664d646b23429b1191aa568382cd73dd88fb7af54f7c29d3bc631bcf956f5002e1e3e0e2116f007d4c5b3e00f85903e5e5177e13c6133030637fd7350981a479a27ce7e7b2bab7127981fbddc9935a58f05d3a2fb9d878af7d80ff64672699a1888a64fe746567efd24c150339b63a28b279e37cfd307b900abce3a3315b06990a3e5c99ee44f60fff204b7ec70eeb39d1c0fb5435e80b06ab4bd48cbf7a6b0c3c3f88f38c5ab77636aa4e745f7e54ca4abf849d6c3cd49c983f1545f71903b113c62940db93dfe77f3a23fe88d63e5e992365cc9b02041ce68cdcc4ceb6a651ffb262b89a981a2d8d59f086a3d6a2100c39624057cbe94dd8b026e682aecacb959893891ff6cba778ec67467796ad7d0f356f2d4f4734ad45eef5e9022a1136e23105cfdd80f727bcf9e47405d792eca4a487de8fb212de7e0152625c7b91a0d9d032981c499cd669e27669050ea5b434766af4e397620c3964bb8d1f82fcb8b512732018b20562f7322ddaca2fda07aac13114375e43619b07a20af5206e4d3cdea0b237be218987515186d34bc0dec49336eaa1772a5940aed3a663508f284dc4125c1c627dfb06dfe5da7f70be1ac65d14f128d87984d93a811f5af065b3908d8a2ea796bc72e3309a2ee8c6d0729d0683cbe97fa74706aecd95a3d171017fe50708eb652a7c9688dbbf63329b16baa0c1bf768e820878f535e89cfe77be0b1f32fc8e9b21e4cf4a0c8c32eaabf313e64f724b20e728c5e45b0f0b21cfbbb4ad787ca0bd201a5daa0f65d1d9875c77b4906ce5c7705d68a6ec01de2d09da98bd52b9c87bbe1dde92bd55f248c89dd7b8378103fc8da8249768a8fe02250b0198e18d377fa8f4b790e73d5b926084b32f08c29c4285c2c51202c3491a32bbeb8aa3428437dc8fbcd9089a63f9055465bbf167c668ef85095f875b0777c5635aab7be8a45889a4da3b8b9c39bea8808688f4cb359411fb7c06434c00181147a52a5c895690c84bd1ef3dbbd59418182c7409875e2227c62fc7d3cb8aef5fdbb0f9a0710fdf8ea667512d94a48e0a42c27b3a3cf1f76bd5c76b149b39ce3fd85642934e192d04b9b3c76a9566f0c8c17d8fbc9e386238ba24e59003a5359bbeb93c262b062b086763e9e2e4e54a8069de197a147fa5da07a63a6edd1c772a870eda6c2a0500f4fdb7582d90d8813e1513fafeaa84b2c897cd04793f04bd135d356b415677cfa405948cdee03fac80354070c631d56b2deee2ac79e9686dc943b6b9ffe543936941bcaa87089adc06d760726833f596165a910f3c6416f59adf2497530eb0633e59677fc88c69ad2bf9dac4a05f800665c30896c9ab1f36765e92f9a90c7e3bf7092ea9e00e7cdb20bc08d63f93e79af1635373f933db43e255f6cd26414680acaf18814da6174bcd246fe6e341e83a38cf553bf890e433b65807d4d7579f6ef272b5ad45940bf8e905356b33bb2693b2def334e6c586cca3584e08be6435f4d51bebbf1478ca76a839c43c0710aaad720e16307f86b6574cff4ee5226679aa21708f81f9d110b78ee427d099e3b888086cf3ed40c98e50404a3546f68c46a69798e2d991ab2aafb0264485de8d775ff76ae9f09be9020e6734e3b9ed66eef6858a98f2124bc3efc940f74625e4adb4f1d2e8a8ac6636a4b69f94b32b31aeb3b3f4ed4f652facde9371985b18570a3e0c63f1cf28c78f8fb92d91bc52d7de28fa1d53f0d3243d7fba2a8e9abc454e03fdbc1b306c2929af960b46ac18c3cac32aae3d5b0e5d2ce1974710e734eda93605b50e9fdc551edcaf28d0ebcf889a72df130ae0d7314e8db33ce1fba00debb16a6e78f9fa45ad1d408e3092f48a4cefde84cd31efbb5a9ee4cfcd57901d875cbb04e2be8a9e672a51583264ad17ef3954da6043c52314c0990e7a8922135de580e9dba41c339f4f90e427bb1fb211bc41bb335d82a7b95611bdd9f1e42eef7e61bb7d72dd36e1c66d69626bb0e4b87fc65a53ccd481338278464e5dcd6d0cc8fd2cc506cf2ec3ed77d81a64712be5a1b1a82b163885e875b9ca9a935db0e3774b81f9668f69ecc03cc9dddab28f26af44a1f0cfaf67730fc4fa9d57ed28420b17ddc9cdda3c9106c371e38d80ffd9b845ba67a23806062f86f67dafdf0d5ae01ebbbd79c02553c6c1bcde64f5e450e8906d34d72c46024ad589ed704a4f8eff36e7a9d38cf767c5ec46358a081e48e3ba981758077620cdd948646f25db253d5232f8c764cbff3cf4da9cf399d69e330cd4863065a2e9354ec13f15a596512809a91558d4a957cb19a0e352e0c182505735962039282c8954c64f5b764645c49b35f01a2308745daf60c598561a23c49a4c7a92eba8ac89ff32a66a7b5b922a8edc8bd2538ad87f81c72c71c347172d398daebed7e0e651d29ea9b3482ab3ed0ea4956ce0c7d528bfee10901fa4577a102d5a8a12b9189de6814ebb6729ee1d192d928bb9b276db44a7b38abedc1fc896afcfdc199d2c5b47bab809722db4cb8b2e6213096eabbdcf1baaa9e18ec10dd50b0b22a86d04e6385918f7bb00235d4c813d5d9ebbd6bb77674540472978891c89d87df8c97722ef7ae1f1cf572246a0d5c884823126b7d820f47d33f09f4fec908d072490ad978305c2d0e0420da4e91b746385847f985e1eac0e9d4009313b148aed8923370a07fa9c8460cc72edbed02e9066e6456c17845843e5c23524486866e0d67da7582c7cb855b6de77dfc97d0b053053d2fee2329654816a95e705ee2050f6674b718efc504e85202c97161432caf277307636fa59c86659e7f4a9410218139a1ee6e598e0f5bf0f23b8368ea038c1f380860749ecfea01fa9b5786cfa670dec34ef22920581f7caa51df55cb69f0adc8aa334611f293457cf6574b6459b98f1e3648769ae0759c4060c8fcf729a8c952d40af1633ca87e1af67fe3c50edc512cb9bb614bf32688a349066e657b2b98ad03a94d20762f1a90f68000778008b8961acae56cfd48b8dd1bd0baa094e2c78576f546269b7b5312b9d111ef2a0a988ce55224b8ff65e2c3f3f18e5e816e4f1e823513d84a4a2a8af2c85d629360786b41eb47cf47e1f0a0088574030cbacd5b99c32c870512c541183b44fad71a71a8921c021483cead3929e901a46f5fa4d336512724f3010077084ccac346bf21e01853c8555d00eac1d8229995b262187f7cd47ab31370fe3d3bd04b0208be16e7d80b8adb3675a324a3792033f4df2e56cb5b64e04c8c80ef7deaaa31b8e7ff12d5d42dd156753e745dd0a0a2225626d19a25398faceacb13f163aea5a8454a43214c2fed19af475ffc89590c80a9f3cee0f43699f7d0f8753cb3f35c2704fe6e517f54cdb7990a6749a96631a816e364630c858ffb0624c9ba7c916cdb2bb305f90c86c5a25b8d88e771e4e7b915b804446bc678bd620d7b65cc9f163e0e05b14d79d332f54fbc5ef4f024d5bab682d3d8d3ea9f9276ebf5aec18e547555c596d3da1f499519439f8fa9e28b233f527b3e73f6c30e67cf404ceb21b08d01931583b5faef6affd82f42f54fb3d9b52388a180995c93a9343d166ea907932a3c9e0244aff00e71586c39d3b10b651dfb46d60b24e0135d1ef194f25b35335b53d57fbb2069d89e9f5a60ef3dd6d0d06af6763579ba57bc13adcee1f0d2236c08054fe3b338ebaddcf6975a4da221b78d42b395daefc71ba9e2b773590f7d5f7d32b11a248eb9647b4a44827f6d4cd4cda891979157510d15f0ce851dcffb372529bce997660597568592a763cb05947e8710fa6fc37e10768408db36f3c40a4271bfa5b7b9af46154671d4220a31d6ab096a8aaa59521fd0b2df0567b4ee635c9daebe40e7d84b53f7c6596213374cdb3c8c1a00bac4f83bfd70a1990c85cbbc47cd532ce638f12bc331db49a31ecc10155a978e4529858acaf7a067d32442107563f95fe13e94594cb28a61a5b25075d6513edbb502d3b260a77ece8815d6b68d52d81fa8bec08648daa6a6ca84d82e8a36a6d0137ad905a7973bb2849602b0734a4e9ad6cb327debc05887b3344beb74e9ba96c6a9d9eb18d6e26c565048af655e3e6111557a404d6bd7b75deeabb6389e15fa611b4a53f934feb428454be7a38cbf68e7cc9f7163d17f2730161218cf4ee6694450c0bb57f9314d1c104fe79fc330d77972c560630d61e7c7adb7c93365e64faf9a97bb420a7530591f20350c88bf4861f25c772a6c45471fcbd1d7bf9a244e3bfe0d050e6467b63d3eea42c44912efa3065271236f659942224dcff0b383dbea58366c918fd0e177a1248d5d9f3dca8384e5e47fcb2c761299a715f9595e98e2581a89f80e40dee70b77f759b0708860de4673421a89f9f1c77841f4f159ab2e107e00d333fc5723cc27fda23021863b03430858acd6ff8c39c98b6203e3ab2e800f7f844a79601add70e9edc999baa538024614ec87fdc1645b8f7560732e846e746bd53fc70ceaa9328135f3be8fc2ffba94c4e862d59508b0426dd90679c093e04d3045c2415a9c1e2758a2f22f44e22dc742a246d37ed39d929b25ae10ae951ca827e6666165271aea8a4d8a74f91415e20fd489d28d2ddcd8d6941a16a96f085d35bf7a053256f0fb8499319a43d34482a7b5d822cbd1bd7153bea8d65dc38cd689fea6695d5c64bf8f966b4d7b206d8cee65b1db234e5c2df7d839872ca36598b38532d16485e644c4b79a36712dbc12405170640623d6b48373c12b4d590a43e3e3a3968fcd73b01f582e4fd41f3c3142ae7daf75ffdc3d4849ce66bfc08e1e000914ba13ce4a3eff5b53c4d9b2d94c321ebc2f227b53473b1c955ecd78fa62ed93bb1003a82ad8d24d802bdd44e4cd3", 0x1000}], 0x2, &(0x7f0000001840)=ANY=[@ANYBLOB="1400000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="6401010064010102000000001c0000000000000000000000a7bd0123", @ANYRES32=0x0, @ANYBLOB="ac141432ac141414000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a010100ac14141600000000140000000000000000000000010000000700000000000000b00000000000000000000000070000004444b1c3ac1414bbfffffffd0a01010200000db1ac1e010100000009ffffffff000000d90a01010210000000ac14142318bb555effffffff00000009ac1e000100000002940401000183139eac1414bbffffffffac14142cffffffff89020707c1e0000001830f69ac14143c7f000001ac14141c442c11c1ac1414bb00000c6effffffff000000010000ab7d00000007ac1414aa00000003e000000100000002"], 0x140}}, {{&(0x7f00000019c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001a00)="6af6437cbea138b2db2724c42451e81dc10b5caa8ee199a9a580bdf5c134309ee685b4eac071d997284f89f4328776f86a9536da60ac277c97278033927b9ac063efb2772a0394d617f70233702f624c005b257599a581c7c2fce75acbf503876c5ead3e475ee3a9e35f791a0ce0fc77864790bbfe60b874f72bed1d1b8c798ee971", 0x82}, {&(0x7f0000001ac0)="f6ff4fafebd7d00990424803b8fb794a49d3e5cdbcf27bb528dc018b69720596fe3fca6b02310e24ff9fcbc08706030827f4df8594bdcfeff354a9241d48113ec203e17ca4", 0x45}, {&(0x7f0000001b40)="3292564c6f88d7154ec6788f47824da7e8d2b6a198eb389d0aac9b7cfac2c65d97c09129cd6dcf440dec9f82ade72ba2f14c0455b3c1f4aa61e965cd224dc740e4de9475df734580cf830f588ee7bb44ab0eb5f54ad5e3127c062a4b44f04a31", 0x60}, {&(0x7f0000001bc0)="941c3ffa5cfc4117eedf93b15de7da8b4bd2a182288b0eddb7fc033753b214514017d6dad50f67fc58dd799591aa2bb84c2bd6d8dd9e6e667c17f0865a7c87aef5762ef0166d73e0012419fb17df754a83ff3fcd53f5c877efd5f3bb", 0x5c}, {&(0x7f0000001c40)="b1f23f6940fc1bf402e25c25c8b1a3b2f621cfb5f0318b33a7acf314767d8ee08d2bfb3933a663341d8d4f79500ec12aaefa6f66575769ba88101c7b81a3075b388ca576144972f4e3d4067ec6705cbfee9c07552dd742c963700ca2ab7cb6855dd9eeecd71634e93c07ec51b58988af2b3228dfa4e339f89d3f2eacd14bb17dd93fbfec954953e987a9a8e7178e83b467b60b2f26df533cf2bfd588e18406bc4c2a8ab0b0a379be3464c0812837b44af0e3db308b08c0ac4e0489cf5bb70afffce46c5054fc50e91a3b1d305aa8c1357e478494947c0dc242237ca19de779c7edc4", 0xe2}], 0x5, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5c}}, @ip_retopts={{0x108, 0x0, 0x7, {[@rr={0x7, 0x13, 0x17, [@private=0xa010100, @broadcast, @remote, @empty]}, @timestamp_addr={0x44, 0x1c, 0xcd, 0x1, 0x5, [{@loopback, 0x1ff}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010101, 0xffff}]}, @timestamp_prespec={0x44, 0x54, 0x3e, 0x3, 0xe, [{@empty, 0x4}, {@multicast1}, {@remote, 0x9d47}, {@multicast2, 0x4}, {@broadcast, 0xffffff18}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010102}, {@multicast2, 0x7fca}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@empty, 0x3}]}, @noop, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x9, [{@multicast2, 0x2}]}, @generic={0x82, 0x11, "b63c89e5703e8756aa5ebbca1463ff"}, @timestamp_addr={0x44, 0x54, 0x58, 0x1, 0xc, [{@local, 0x81}, {@private=0xa010102}, {@loopback, 0x2}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1}, {@local, 0x3ff}, {@remote, 0x5}, {@local, 0x4}, {@remote, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x1d8}}], 0x2, 0x400c040) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000000000000001000000080001000300000014000480050003000100000005000300800000000800020003000000", @ANYBLOB='8\x00\x007', @ANYRES16=r8, @ANYRESHEX=r8, @ANYBLOB, @ANYRES64=r1], 0x38}}, 0x0) truncate(0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_dccp_int(r6, 0x21, 0x6, &(0x7f0000000180)=0x7, 0x4) (async) connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x2, 0x1, 0x3}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r10, 0x111, 0x4, 0x20000000, 0x4) socket$inet(0x2, 0xa, 0xfffffffd) 9.18691114s ago: executing program 2 (id=1982): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, 0x0, 0x9d, &(0x7f0000000740)="a677286d8a3e12a097eda93f118fa690c1e98a8f3586fbb529b72560702e70ab8063cc62c17930b7e7c3c11cc0a0bd123ed926eec6d3b079ded55ed8639c95813a4ead69e00d036e5440eaa88361f96719b89fd3555783b16851cffbf587dcc2fbe42618b471665eb41a7da4bad446679249ff3376e273") getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/103, &(0x7f0000000300)=0x67) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x1dc82e11}, {&(0x7f0000000580)=""/156}, {&(0x7f00000000c0)=""/11}, {&(0x7f0000000640)=""/247}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c85000/0x3000)=nil, 0x3000, 0xf) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x900, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x9, 0xa, 0x2008, 0x1, 0xc08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b18000440c0511e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 8.70805746s ago: executing program 0 (id=1983): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='task\x00') fchdir(r0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x140d, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004840}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) mq_getsetattr(r2, &(0x7f0000000200)={0x8001, 0x200, 0x0, 0x80000000}, &(0x7f0000000240)) socket$kcm(0x21, 0x2, 0xa) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x0, @win={{0x31df, 0x570a, 0xffffffff, 0xfffffffe}, 0x9, 0xfff, &(0x7f0000000340)={{0x1, 0x8, 0x6, 0x7ff}, &(0x7f0000000300)={{0x5, 0x3, 0x3, 0x14000}, &(0x7f00000002c0)={{0x92, 0x0, 0xf, 0x8a3}}}}, 0x5cc8, &(0x7f00000003c0)="1a589c0cfd0da3fdb173047597f5901b2144239f67e0b3597e99e256", 0x5}}) r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x160, 0x0, 0x0, "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"}, {0x80, 0x110, 0x1, "af9cfac513219fd29d0f8c60db45db6623213f08ec41adc39a2bbfba964d4a54d4ff4a0cf33081df9f0850763d63390b1f2f9702737a06ab1e3ce26edaf606522bb4045f46ae141e76de5a8e51d9532dfd3351b08c7a6d09d38c0cf752a4720ae742cd8d1ea52a5afdbf7c281261"}, {0xd8, 0x118, 0x7fff, "69e53e915c4d8cfbbd8ef1f2a2668c036d38e0359a5d8f963343617a561811a917664763dd289a0074746c7521c2f05ea9eec33b57f3aaacc5f85d9ac192522ae61f952ff68d2e1cbf2cda78ed8830d9e8fe640f6fe67aa652e76b383c947b8b664945355b6f9e3f00296e6834b0b7a42fc080e6a3c72ddc41c7b73f1c61c15d8948e55bf28fa9a4b13b159b5ca372af3508776988459f012ca85460e269afac7d80a5a5044b678e7cedc5f1d2a9623a04a022c23ec9fb521686f768b8128d56d512277f"}, {0x70, 0x1, 0x0, "bd9b0c84a8e9d947571ee93381be78d9a9b79d14946c502f38454fdfd24ca037398670a1732ec3f4cdf61df53c18310c63bfe0a57e9b8f724dc6e670b600ad09009e50295666fde2cf75b544411ce9c063670562be2193303e52ac66"}, {0xc8, 0x1, 0x2, "1c4dc42e9f26ae12b35f232f74d06123a3fbe28e708e3c2a45e1e2e826d4497bb5e8ec2dee292fa8e81d90b02032b3553d42a3594cefd41d435036f007c50c4c3a778fc0b9123dd77a61d136f7aea28c271dc1d60b3007063aba3579f58300ebee78279e49a5c69f650e1f1e397f70a3b44e72e46823919a2ca6dfb87cd9c9eed194329a49a6def77fa57ab5f534453454eb8edaf0780e96045969fb3af1ba34bd82eab9965d0814d77122d1bdac5746f965a73263c4"}, {0x98, 0x119, 0x9, "1336136a0b5a57005c0000000000003500d871e127bdecc3e1b5b169464d6548cd445870204f087291ada02790f71e7172d999a4679ba5ef68759976d68fa7ed5ea74d289ef4fca154b67ad3a2cc3aee27357d120f09abf4a54ccd6465a5c842e38171f908d10f7420fde800674eb3ccd9d79cae692b3554fa4d574f29e90000000000000000"}], 0x488}, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x9) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000380)=0xc) setuid(r5) write(r3, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 8.418300084s ago: executing program 3 (id=1984): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x200000, 0x0, 0x8004, 0x0, 0xffffffffffffffff, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = socket(0xc3fcb09363277377, 0x3, 0x0) io_uring_setup(0x177f, &(0x7f0000000180)={0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x8000001) fallocate(r5, 0x39, 0x2000, 0x9) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) 8.41753743s ago: executing program 4 (id=1985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x800}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vivid(&(0x7f0000000480), 0x1, 0x2) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000004c0)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80800) accept4$tipc(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000bfa20000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 8.112073563s ago: executing program 4 (id=1986): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x3, 0x0, 0x0, 0x7ffc0000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000000d00000000000000000000000a030000000000df005f00ec21cf267d6aac2eefce8942a533038867479ee13b0a21eb97a758f78ea126841626021a4e29ce80f7f80e2aa691f4612e626e42d7d9604ce6637dbc5536b00bf4ce81980a7e5a405b213defb876da5d115fd88c6ed318dd47f4f0842d80b4ccadda4d2b4f33d55181b97ae3085252b5a0c97f586c6a646b96a6ca67acc59b7724dcf6344a981efe"], 0x0, 0x52, 0x0, 0x0, 0x200000}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = getpgrp(0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000680)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="010c040000"], 0xa) execveat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000840)='\xbd/\xdc,+\x00', &(0x7f0000000300)='\x00', &(0x7f00000003c0)='.-#\x00', 0xffffffffffffffff, &(0x7f0000000400)='/dev/hwrng\x00', &(0x7f0000000440)='netdevsim0\x00'], &(0x7f00000005c0)=[&(0x7f0000000880)='/dev/\x00\xbf\xa82A\x8f+X\xf7\xdf\x95\xfac\xd9\x81\xc6\xd6\x98i)\xd0J\x88\xd8u?\xe3\xea&j\xe9\xd8\xa8^\x91\xab\xbboX\xe9;1A\xc1\x1e\xb9\x88\x7fGnn\x96\xbd9\xe9\xc9\xd2\x8b\x9e\xa2\x03\x81\xceK\xf4V\x1f}M\x95\xebwKa\x8f \x98\xe5Q\x8ea\xaf\xbc\xd0\x1b2\x9f`n\x00\xdf\xc6,\xba\xf4\x86\xa7\x1f\x80K\v|M\x1a\xf5\xfd\x18\xe2\x84\xd0\xbbX1z\xc5+\r/LB\xdb\x1d8\x14h\xe7g\a\xb8^o\\.\xbd\x8f\v\x9e[8\xfdk\xe6\x9a\xed\xb4\xbd\xef\x8f\xa6k\xde\xc1\x7f` @\xe12\xc6w\x93\xa6\xd9\x1ay\x1c\xb7\x835\xc0;\x83\xac\xa8\xdbm`\xd2\xd7\xaf\x04', &(0x7f0000000500)='^/-/Y\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/ptp0\x00'], 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="281dcdb0bbba9c29331e1e06df85beca24f8bd", @ANYRES8=r3, @ANYBLOB="000000000000000000000aa63d9ae50003800800010000000008080003"], 0x28}}, 0x4000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) getsockopt$inet_int(r5, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000100)=0x4) r7 = socket(0x1, 0x2, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) socket$alg(0x26, 0x5, 0x0) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000640)={'bond_slave_1\x00', &(0x7f00000007c0)=@ethtool_ts_info}) 3.295025019s ago: executing program 4 (id=1987): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fefcb7907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) 3.259820829s ago: executing program 1 (id=1988): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0486c009000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x40, 0x31, 0x73, {0x73, 0x2, "927179c845969401b2222e15e4812b67a2e0a4462472b3d12605ee4d8bb6802b7a72ba2ba485c809fdd238b4515e6fac7ebaf6e5ddbadf3820b8e0c40e5de063a523db7307cdb459028009e5fa98e5854488d42c5502782e98af1905c803b46c753dcda590b2ad6d48c76404e4d58444cb"}}, &(0x7f0000000340)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "fd675ebe6634c655fabc3e6ddf44c597f972ef8143153560ce6d219e83cb43154ee25ebf5396dd482470e426eccaa6280953cff9f274e99062b281a89bd3aa68943b178024a54d0c5ace12174000676225040089794a6539ba99680da2ee0938802164301b776df499f3bea17cc67913eb69f8445e8098a4eccd9e1788b3fe375861a4ee2114694368885c7c940ad74d1b47ba03d498bcae86ac2392ccd4b1a8cf2054e3f7bb0bcaf5520efc2011a3b5c6c8915927096f983a3728f5581c01abebc56daee24917"}}, &(0x7f0000000440)={0x0, 0x22, 0x1f, {[@global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x8, "eb178c28"}, @local=@item_4={0x3, 0x2, 0x2, "c7b2f5f7"}, @global=@item_4={0x3, 0x1, 0x3, "d9a421b4"}, @main=@item_4={0x3, 0x0, 0x9, "b5b9698a"}, @local=@item_4={0x3, 0x2, 0x0, "6b383512"}, @global=@item_4={0x3, 0x1, 0xb, "22685eb7"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xed2}}}}, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000680)={0x20, 0x1, 0x5c, "4119c17e18da68fc13ee9d2af8f213d692a9af1ddbc4ae4aaffdacd6a654b35c22bd9b9b9482c9f1c0bf146a93993d4a32ac1c1e119ad6908f254c2ebb70fee9f69ba10bc5ee6dbae9544204f43d30db2d0fa358eef37b300bab3be1"}, &(0x7f0000000700)={0x20, 0x3, 0x1}}) r3 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 3.080799591s ago: executing program 2 (id=1989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c00000001000000090000000000000b0200000000000000000000e700000000000000000000000aa03f0000000000000000000e0000000000000000000000000000000e000000000000000000000005000084050000000b00000005000000ffffffff0a00000000000000ffffff7f0000000000000000090000000000000000000000000000000000007806f87892c1462d000030005f0000616100"], &(0x7f0000000000)=""/30, 0xad, 0x1e, 0x1, 0xf5a3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000340)="5a005dd268108f96fa93473ab0556c789e3ec1c7d887a5f3085575e33394738062abf27377", &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000500000000000000fdffffff8510000002000000852000000200000085", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000d1000000186400000d000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) 3.035015032s ago: executing program 3 (id=1990): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.998329214s ago: executing program 0 (id=1991): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x4}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x3, [@private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', '', [{0x20, 'hugetlb.2MB.usage_in_bytes\x00'}, {0x20, 'syztnl1\x00'}]}, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf004000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r3 = epoll_create1(0x0) epoll_create1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xfff03f92ea63583}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'ip6erspan0\x00', {0x2, 0x4e20, @private=0xa010101}}) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}]}) socket$key(0xf, 0x3, 0x2) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/178, 0xb2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f00000003c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x81) 2.701892342s ago: executing program 0 (id=1992): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)=0x0) ptrace$setregs(0xf, r1, 0x9d, &(0x7f0000000740)="a677286d8a3e12a097eda93f118fa690c1e98a8f3586fbb529b72560702e70ab8063cc62c17930b7e7c3c11cc0a0bd123ed926eec6d3b079ded55ed8639c95813a4ead69e00d036e5440eaa88361f96719b89fd3555783b16851cffbf587dcc2fbe42618b471665eb41a7da4bad446679249ff3376e273") getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/103, &(0x7f0000000300)=0x67) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x1dc82e11}, {&(0x7f0000000580)=""/156}, {&(0x7f00000000c0)=""/11}, {&(0x7f0000000640)=""/247}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c85000/0x3000)=nil, 0x3000, 0xf) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x900, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x9, 0xa, 0x2008, 0x1, 0xc08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b18000440c0511e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 562.52544ms ago: executing program 2 (id=1993): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004100)={{0x12, 0x1, 0x0, 0x58, 0xfc, 0x14, 0x8, 0x17ef, 0x721e, 0x7360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x4, "20b70974"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000080), &(0x7f0000000040), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000240)={0x25, 0x5, 0x0, {0x0, 0xfffffffffffffffe}}, 0x7e) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f00000007c0)='G', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000007000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) 521.666793ms ago: executing program 1 (id=1994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/ptype\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='cmdline\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = dup2(r5, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) r9 = socket(0x10, 0x803, 0x0) recvmmsg(r9, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 230.396782ms ago: executing program 3 (id=1995): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002800010000000000000000000a"], 0x114}], 0x1}, 0x0) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = open$dir(0x0, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x5) sendfile(r7, r8, 0x0, 0x7ffff000) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x1) 0s ago: executing program 3 (id=1996): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0xccb4, 0x9585, 0x122, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_usb_ep_write(r0, 0xfc, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x600001, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) kernel console output (not intermixed with test programs): oint 0x81 has invalid maxpacket 24624, setting to 1024 [ 737.077481][ T5263] usb 1-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.105575][ T5263] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 737.125359][ T5315] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 737.145872][ T5263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.164131][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 737.183350][ T5263] usb 1-1: config 0 descriptor?? [ 737.198934][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 737.214309][ T5263] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.7/input/input35 [ 737.235848][ T5315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 737.285707][ T5315] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 737.298691][ T5315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.331561][ T5315] usb 2-1: config 0 descriptor?? [ 737.411762][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.448260][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.483280][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.515080][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.576552][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.612048][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.636084][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.648866][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.701505][ T5314] usb 1-1: USB disconnect, device number 40 [ 737.792763][ T5315] usbhid 2-1:0.0: can't add hid device: -71 [ 737.817526][ T5315] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 737.850397][ T5315] usb 2-1: USB disconnect, device number 55 [ 737.875817][T11167] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 738.075560][T11167] usb 5-1: Using ep0 maxpacket: 16 [ 738.091089][T11167] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.111625][T11167] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 738.173096][T11167] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.187070][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 738.196216][T11167] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.204288][T11167] usb 5-1: Manufacturer: syz [ 738.216664][T11167] usb 5-1: config 0 descriptor?? [ 738.244480][T11853] netlink: 'syz.2.1707': attribute type 153 has an invalid length. [ 738.252551][T11851] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1715'. [ 738.316605][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 738.465737][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 738.513182][T11848] fuse: Bad value for 'fd' [ 738.573884][ T5273] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 738.594147][ T5273] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 739.013407][ T5273] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 739.554606][ T5273] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 740.152673][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 740.185659][ T5273] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 740.684212][ T5315] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 741.557087][ T5315] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 742.014050][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.541658][ T5315] usb 4-1: Product: syz [ 745.574011][T11870] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1718'. [ 745.575513][ T5315] usb 4-1: Manufacturer: syz [ 745.589579][ T5315] usb 4-1: SerialNumber: syz [ 745.611554][T11167] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 745.643295][T11167] usb 5-1: USB disconnect, device number 29 [ 745.664233][ T5315] usb 4-1: can't set config #1, error -71 [ 745.673035][ T5315] usb 4-1: USB disconnect, device number 50 [ 745.785706][T11378] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 745.991446][T11883] 9pnet_fd: Insufficient options for proto=fd [ 746.010499][T11890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.025520][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 746.025574][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 746.212710][T11890] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1726'. [ 746.243725][T11890] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 746.245996][T11895] netlink: 'syz.4.1728': attribute type 153 has an invalid length. [ 746.325285][T11896] virtio-fs: tag not found [ 746.627972][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 747.230327][T11903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 747.271087][T11907] mkiss: ax0: crc mode is auto. [ 747.345584][T11167] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 747.468597][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.474914][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.516498][ T5263] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 747.547453][T11167] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.571187][T11167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 747.595677][ T5315] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 747.603406][T11167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 747.630888][T11167] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.655812][T11167] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.664959][T11167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.698252][T11167] usb 1-1: config 0 descriptor?? [ 747.726168][ T5263] usb 5-1: Using ep0 maxpacket: 32 [ 747.733948][ T5263] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 747.755843][ T5263] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 747.771531][ T5263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 747.793305][ T5263] usb 5-1: config 1 has no interface number 0 [ 747.806226][ T5315] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 747.814872][ T5315] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 747.836128][ T5263] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.870409][ T5263] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 747.885203][ T5315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 747.895850][ T5315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 747.907202][ T5263] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 747.925241][ T5315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 747.939089][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.958536][ T5315] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 747.970439][ T5263] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 747.985053][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 747.993298][ T5315] usb 4-1: Product: syz [ 747.997995][ T5315] usb 4-1: Manufacturer: syz [ 748.008572][ T5315] cdc_wdm 4-1:1.0: skipping garbage [ 748.013867][ T5315] cdc_wdm 4-1:1.0: skipping garbage [ 748.022825][ T5315] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 748.030068][ T5315] cdc_wdm 4-1:1.0: Unknown control protocol [ 748.172331][T11167] usbhid 1-1:0.0: can't add hid device: -71 [ 748.185785][T11167] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 748.187755][T11915] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1734'. [ 748.203643][T11167] usb 1-1: USB disconnect, device number 41 [ 748.206192][T11915] 9pnet_fd: Insufficient options for proto=fd [ 748.215966][ T5314] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 748.236354][ T5273] usb 4-1: USB disconnect, device number 51 [ 748.406048][ T5314] usb 2-1: Using ep0 maxpacket: 16 [ 748.432061][ T5314] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 748.460845][ T5314] usb 2-1: config 0 has no interface number 0 [ 748.501635][ T5314] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 748.523336][ T5314] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 748.527026][ T5263] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 748.543337][ T5314] usb 2-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.569195][ T5314] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 748.581427][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.649574][ T5314] usb 2-1: config 0 descriptor?? [ 748.702431][ T5314] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.7/input/input37 [ 748.923250][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.034511][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.099439][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.136105][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.159480][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.173309][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.186909][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.319821][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.335258][T11927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 749.526215][ T5266] usb 2-1: USB disconnect, device number 56 [ 749.573386][ T5263] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 749.947349][T11929] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 750.236612][T11553] usb 5-1: USB disconnect, device number 30 [ 750.244045][T11553] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 750.725986][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 751.147075][T11943] jfs: Unrecognized mount option " " or missing value [ 751.689836][ T29] audit: type=1326 audit(1723138105.564:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 751.747678][ T29] audit: type=1326 audit(1723138105.594:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 751.825292][ T29] audit: type=1326 audit(1723138105.594:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.002878][ T29] audit: type=1326 audit(1723138105.604:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.024413][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.086186][ T29] audit: type=1326 audit(1723138105.604:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.107735][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.124625][ T29] audit: type=1326 audit(1723138105.604:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.450776][ T29] audit: type=1326 audit(1723138105.604:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.497609][ T29] audit: type=1326 audit(1723138105.604:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.519711][ T29] audit: type=1326 audit(1723138105.604:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.541253][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.575770][ T29] audit: type=1326 audit(1723138105.654:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11931 comm="syz.2.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbf49779f9 code=0x7ffc0000 [ 752.635612][ T5263] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 752.698319][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 752.726422][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 752.828050][ T5263] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.853117][ T5263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.888511][ T5263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 752.932603][ T5263] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.958898][ T5263] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.975684][ T5263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.015609][ T5263] usb 1-1: config 0 descriptor?? [ 753.535615][ T5266] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 753.676160][ T5263] usbhid 1-1:0.0: can't add hid device: -71 [ 753.682136][ T5263] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 754.434059][ T5263] usb 1-1: USB disconnect, device number 42 [ 754.453712][T11977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 754.461007][T11977] IPv6: NLM_F_CREATE should be set when creating new route [ 754.468288][T11977] IPv6: NLM_F_CREATE should be set when creating new route [ 754.483551][T11977] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1753'. [ 754.493859][T11977] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 754.506620][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 754.513448][ T5266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 755.466762][ T5266] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 755.487758][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.539555][ T5266] usb 2-1: Product: syz [ 755.547636][ T5266] usb 2-1: Manufacturer: syz [ 755.562747][ T5266] usb 2-1: SerialNumber: syz [ 755.673751][ T5266] usb 2-1: config 0 descriptor?? [ 755.680766][T11970] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 755.945116][ T5266] hub 2-1:0.0: bad descriptor, ignoring hub [ 755.957006][ T5266] hub 2-1:0.0: probe with driver hub failed with error -5 [ 756.052303][ T5266] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 759.635289][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 759.644435][ T5266] usb 2-1: USB disconnect, device number 57 [ 759.644612][T11991] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 760.566207][T11986] vxfs: WRONG superblock magic 00000000 at 1 [ 760.573795][T11986] vxfs: WRONG superblock magic 00000000 at 8 [ 760.579861][T11986] vxfs: can't find superblock. [ 760.618390][T11993] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1758'. [ 761.015735][ T1170] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 761.214298][ T1170] usb 1-1: device descriptor read/64, error -71 [ 761.505873][ T1170] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 761.776191][ T1170] usb 1-1: device descriptor read/64, error -71 [ 761.968020][ T1170] usb usb1-port1: attempt power cycle [ 762.182472][T12018] ufs: You didn't specify the type of your ufs filesystem [ 762.182472][T12018] [ 762.182472][T12018] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 762.182472][T12018] [ 762.182472][T12018] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 762.233425][T12017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.253282][T12018] ufs: ufstype=old is supported read-only [ 762.286006][T12018] ufs: ufs_fill_super(): bad magic number [ 762.328716][T12017] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1765'. [ 762.409204][T12017] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 762.418404][ T1170] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 762.487321][ T1170] usb 1-1: device descriptor read/8, error -71 [ 762.755970][ T1170] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 762.831760][ T1170] usb 1-1: device descriptor read/8, error -71 [ 762.965878][ T1170] usb usb1-port1: unable to enumerate USB device [ 764.445964][ T1170] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 765.277243][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 765.390862][ T1170] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.415657][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 765.435539][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 765.445313][ T1170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.480905][ T1170] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.500362][ T1170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.519539][ T1170] usb 1-1: config 0 descriptor?? [ 765.877811][T11553] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 766.095267][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 766.095289][ T29] audit: type=1326 audit(1723138119.754:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12042 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f779f9 code=0x7fc00000 [ 766.491750][T11553] usb 3-1: Using ep0 maxpacket: 32 [ 771.255316][ T1170] usbhid 1-1:0.0: can't add hid device: -32 [ 771.929034][T11553] usb 3-1: device descriptor read/all, error -110 [ 771.945856][ T1170] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 771.966004][ T1170] usb 1-1: USB disconnect, device number 47 [ 771.974925][ T29] audit: type=1326 audit(1723138125.844:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12042 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb954f779f9 code=0x7fc00000 [ 772.135610][T11553] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 773.266095][T12068] netlink: 'syz.3.1781': attribute type 153 has an invalid length. [ 773.295213][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 773.470319][ T5263] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 773.523177][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.541934][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 773.556541][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.635728][ T5263] usb 1-1: device descriptor read/64, error -71 [ 773.635743][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.669758][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.680342][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 773.688146][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 773.697977][ T29] audit: type=1326 audit(1723138127.574:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12071 comm="syz.3.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb954f779f9 code=0x0 [ 773.915802][ T5263] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 773.999724][ T8468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.075769][ T5263] usb 1-1: device descriptor read/64, error -71 [ 774.152242][ T8468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.197918][ T5263] usb usb1-port1: attempt power cycle [ 774.240145][ T8468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.342196][T12082] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 774.376354][ T29] audit: type=1800 audit(1723138128.234:240): pid=12082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1778" name="bus" dev="overlay" ino=421 res=0 errno=0 [ 774.419771][ T8468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.556401][ T29] audit: type=1800 audit(1723138128.424:241): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1784" name="bus" dev="overlay" ino=2302 res=0 errno=0 [ 774.608976][T12070] chnl_net:caif_netlink_parms(): no params data found [ 774.626820][ T5263] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 774.642775][T12084] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1784'. [ 774.672342][ T8468] team0: left allmulticast mode [ 774.677378][ T8468] team_slave_0: left allmulticast mode [ 774.685649][ T8468] team_slave_1: left allmulticast mode [ 774.686198][ T5263] usb 1-1: device descriptor read/8, error -71 [ 774.691351][ T8468] bridge0: port 3(team0) entered disabled state [ 774.710469][ T8468] bridge_slave_1: left allmulticast mode [ 774.723019][ T8468] bridge_slave_1: left promiscuous mode [ 774.733992][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.753927][ T8468] bridge_slave_0: left allmulticast mode [ 774.762021][ T8468] bridge_slave_0: left promiscuous mode [ 774.882366][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.787916][ T5263] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 775.788551][ T54] Bluetooth: hci5: command tx timeout [ 777.530076][ T5263] usb 1-1: device descriptor read/8, error -71 [ 777.655996][ T5263] usb usb1-port1: unable to enumerate USB device [ 777.891818][ T54] Bluetooth: hci5: command tx timeout [ 778.627166][T12111] ufs: You didn't specify the type of your ufs filesystem [ 778.627166][T12111] [ 778.627166][T12111] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 778.627166][T12111] [ 778.627166][T12111] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 778.766583][T12111] ufs: ufstype=old is supported read-only [ 778.773195][T12111] ufs: ufs_fill_super(): bad magic number [ 779.597609][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.659456][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.680526][ T8468] bond0 (unregistering): Released all slaves [ 779.953391][ T54] Bluetooth: hci5: command tx timeout [ 779.963310][T12070] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.975960][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.986003][T12070] bridge_slave_0: entered allmulticast mode [ 779.993498][T12070] bridge_slave_0: entered promiscuous mode [ 780.004211][T12070] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.011564][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.019276][T12070] bridge_slave_1: entered allmulticast mode [ 780.030032][T12070] bridge_slave_1: entered promiscuous mode [ 780.045734][T11553] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 780.155703][ T51] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 780.186353][T12126] futex_wake_op: syz.0.1795 tries to shift op by 35; fix this program [ 780.233448][T12070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.260309][T11553] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.283900][T12070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.295812][T11553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.326192][T11553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 780.339060][T11553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.353412][T11553] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.356924][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 780.365285][T11553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.387582][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 780.391474][T11553] usb 4-1: config 0 descriptor?? [ 780.418630][ T51] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 780.437521][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.454110][ T51] usb 5-1: Product: syz [ 780.458783][ T51] usb 5-1: Manufacturer: syz [ 780.463713][ T51] usb 5-1: SerialNumber: syz [ 780.480209][ T51] usb 5-1: config 0 descriptor?? [ 780.493079][ T51] ati_remote2 5-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 780.562571][ T8468] hsr_slave_0: left promiscuous mode [ 780.584861][ T8468] hsr_slave_1: left promiscuous mode [ 780.609390][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.625338][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.641690][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.653082][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.705006][ T8468] veth1_macvtap: left promiscuous mode [ 780.721197][ T8468] veth0_macvtap: left promiscuous mode [ 780.729686][ T8468] veth1_vlan: left promiscuous mode [ 780.739264][ T8468] veth0_vlan: left promiscuous mode [ 780.850814][T11553] usbhid 4-1:0.0: can't add hid device: -71 [ 780.879652][T11553] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.933648][T11553] usb 4-1: USB disconnect, device number 52 [ 782.036371][T11378] Bluetooth: hci5: command tx timeout [ 785.140679][ T5263] usb 5-1: USB disconnect, device number 31 [ 786.025905][T11167] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 786.277764][T12152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.287425][T11167] usb 4-1: Using ep0 maxpacket: 16 [ 786.311668][T11167] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 786.334782][T11167] usb 4-1: config 0 has no interface number 0 [ 786.352185][T11167] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 786.387831][T11167] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 786.415815][T11167] usb 4-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.455907][T11167] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 786.485745][T11167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.516732][T11167] usb 4-1: config 0 descriptor?? [ 786.528889][T11167] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.7/input/input39 [ 786.733312][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.744457][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.779174][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.804906][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.818290][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.841508][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.867685][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.888742][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.929159][ T8] usb 4-1: USB disconnect, device number 53 [ 787.454983][ T8468] team_slave_1 (unregistering): left promiscuous mode [ 787.499895][ T8468] team0 (unregistering): Port device team_slave_1 removed [ 787.617816][ T8468] team_slave_0 (unregistering): left promiscuous mode [ 787.638554][ T8468] team0 (unregistering): Port device team_slave_0 removed [ 787.896006][T12167] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1807'. [ 787.915535][T12167] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 788.043791][T12172] jfs: Unrecognized mount option " " or missing value [ 788.076888][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 788.899601][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 789.148468][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 789.184667][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 107 [ 789.274563][ T8] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 789.306296][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.314319][ T8] usb 5-1: Product: syz [ 789.340721][T12176] gfs2: path_lookup on c::: returned error -2 [ 789.374257][ T8] usb 5-1: Manufacturer: syz [ 789.380195][ T8] usb 5-1: SerialNumber: syz [ 789.403526][T11167] hid-generic 0000:0000:FFFFFFF7.002C: unknown main item tag 0x0 [ 789.412879][T11167] hid-generic 0000:0000:FFFFFFF7.002C: unknown main item tag 0x0 [ 789.413051][ T8] usb 5-1: config 0 descriptor?? [ 789.437615][T11167] hid-generic 0000:0000:FFFFFFF7.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 789.450286][T12174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 789.491776][ T8] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 789.995770][ T51] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 790.185803][ T51] usb 4-1: device descriptor read/64, error -71 [ 790.346741][T12070] team0: Port device team_slave_0 added [ 790.361779][T12070] team0: Port device team_slave_1 added [ 790.398297][ T12] usb 5-1: Failed to submit usb control message: -71 [ 790.398727][ T5273] usb 5-1: USB disconnect, device number 32 [ 790.405360][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 790.455757][ T12] usb 5-1: unable to get target info from device [ 790.462318][ T12] usb 5-1: could not get target info (-71) [ 790.486621][ T51] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 790.500401][ T12] usb 5-1: could not probe fw (-71) [ 790.512635][T12070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.521903][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.582580][T12070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.631383][T12070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.652731][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.689996][ T51] usb 4-1: device descriptor read/64, error -71 [ 790.696642][T12070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.824076][ T51] usb usb4-port1: attempt power cycle [ 790.884132][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 790.886293][T12070] hsr_slave_0: entered promiscuous mode [ 790.928281][T12070] hsr_slave_1: entered promiscuous mode [ 790.953178][T12070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.969630][T12070] Cannot create hsr debugfs directory [ 791.266765][T12204] ufs: You didn't specify the type of your ufs filesystem [ 791.266765][T12204] [ 791.266765][T12204] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 791.266765][T12204] [ 791.266765][T12204] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 791.298224][T12204] ufs: ufstype=old is supported read-only [ 791.304347][T12204] ufs: ufs_fill_super(): bad magic number [ 791.457274][ T1170] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 791.678482][ T1170] usb 5-1: Using ep0 maxpacket: 32 [ 791.711145][ T1170] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 791.725681][ T51] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 791.732340][ T1170] usb 5-1: config 1 has no interface number 1 [ 791.745567][ T1170] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 791.768717][ T1170] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 239, changing to 7 [ 791.784381][ T51] usb 4-1: device descriptor read/8, error -71 [ 791.801094][ T1170] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 791.853809][ T1170] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.867694][ T1170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.893121][ T1170] usb 5-1: Product: 蔮伺㼭⥏돡᧬輏쟈팯ꩯ뭟鷈轿ॡ젫๣樶魰䗠༦ᦖ귓졵蟵௛৶헏蚜띛통ꉭ란꽢蔪ᛂ㄁泅뿛ኪ牭曣鳱䆈칍뮋虾ꮢ [ 791.929735][ T1170] usb 5-1: Manufacturer: ࠌ [ 791.934364][ T1170] usb 5-1: SerialNumber: 倊 [ 792.085825][ T51] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 792.135770][ T5314] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 792.146768][ T51] usb 4-1: device descriptor read/8, error -71 [ 792.225140][T12070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.242118][ T1170] usb 5-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 792.256818][ T1170] usb 5-1: found format II with max.bitrate = 712, frame size=13 [ 792.273140][T12070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 792.293837][ T1170] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 792.296242][ T51] usb usb4-port1: unable to enumerate USB device [ 792.315026][T12070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.338365][T12070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.357463][ T5314] usb 1-1: Using ep0 maxpacket: 32 [ 792.389904][ T5314] usb 1-1: config index 0 descriptor too short (expected 168, got 27) [ 792.420379][ T1170] usb 5-1: USB disconnect, device number 33 [ 792.427756][ T5314] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 250, using maximum allowed: 30 [ 792.471780][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 792.502881][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 792.529246][ T5314] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=db.ca [ 792.583795][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.645258][ T5314] usb 1-1: config 0 descriptor?? [ 792.722786][T12070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.765230][T12070] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.827813][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.834929][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.883043][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.890192][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.315337][T12216] jfs: Unrecognized mount option " " or missing value [ 793.549850][T11167] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 793.977857][T11167] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.988929][T11167] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 794.005060][T11167] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.016358][T11167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.025736][T11167] usb 2-1: Product: syz [ 794.030261][T11167] usb 2-1: Manufacturer: syz [ 794.035606][T11167] usb 2-1: SerialNumber: syz [ 794.216577][ T5315] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 794.270641][T12070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.418439][T12070] veth0_vlan: entered promiscuous mode [ 794.425753][ T5315] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 794.434648][ T5315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.448024][ T5315] usb 4-1: config 0 has no interface number 0 [ 794.454315][ T5315] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 794.471022][ T5315] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 794.480679][ T5315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.487819][T12070] veth1_vlan: entered promiscuous mode [ 794.500435][ T5315] usb 4-1: config 0 descriptor?? [ 794.518873][ T5315] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 794.774111][T12070] veth0_macvtap: entered promiscuous mode [ 794.837549][T12070] veth1_macvtap: entered promiscuous mode [ 794.973496][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.991252][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.007155][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.019091][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.030441][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.041602][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.053903][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.074830][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.093699][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.105298][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.119483][T12070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.137066][T12245] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1817'. [ 795.167457][T12243] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1817'. [ 795.205087][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.234830][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.246708][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.257558][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.267753][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.289927][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.308145][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.334301][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.352910][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.366016][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.377486][T12070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.391105][T12070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.408658][ T1170] usb 1-1: USB disconnect, device number 52 [ 795.415094][T12070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.451825][T12070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.470146][T12070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.493543][T12070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.515343][T12070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.560418][ T8468] usb 4-1: Failed to submit usb control message: -110 [ 795.624299][ T8468] usb 4-1: unable to send the bmi data to the device: -110 [ 795.670732][ T8468] usb 4-1: unable to get target info from device [ 795.690868][ T8468] usb 4-1: could not get target info (-110) [ 795.712988][ T8468] usb 4-1: could not probe fw (-110) [ 795.878324][ T2521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.944529][ T2521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.017883][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.074439][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.341167][T12255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.348457][T12255] IPv6: NLM_F_CREATE should be set when creating new route [ 796.355805][T12255] IPv6: NLM_F_CREATE should be set when creating new route [ 796.413754][T11167] cdc_ncm 2-1:1.0: bind() failure [ 796.437034][T11167] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 796.438928][T12256] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1776'. [ 796.460082][T11167] usb 2-1: USB disconnect, device number 58 [ 796.508229][T12255] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 796.835664][T11167] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 796.994322][T12267] ufs: You didn't specify the type of your ufs filesystem [ 796.994322][T12267] [ 796.994322][T12267] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 796.994322][T12267] [ 796.994322][T12267] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 797.025849][T12267] ufs: ufstype=old is supported read-only [ 797.031890][T12267] ufs: ufs_fill_super(): bad magic number [ 797.135154][ T5263] usb 4-1: USB disconnect, device number 58 [ 797.246808][T11167] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 797.267626][T11167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.302179][T11167] usb 2-1: config 0 descriptor?? [ 797.323165][T11167] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 797.542795][ T1170] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 797.718987][T12275] jfs: Unrecognized mount option " " or missing value [ 798.346307][ T1170] usb 5-1: device descriptor read/64, error -71 [ 798.615540][ T1170] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 798.615609][ T5273] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 798.708823][T11167] usb 2-1: USB disconnect, device number 59 [ 798.723611][ T5263] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 798.785627][ T1170] usb 5-1: device descriptor read/64, error -71 [ 798.826162][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 798.834641][ T5273] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 798.847134][ T5273] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 798.856418][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.864461][ T5273] usb 1-1: Product: syz [ 798.869878][ T5273] usb 1-1: Manufacturer: syz [ 798.874540][ T5273] usb 1-1: SerialNumber: syz [ 798.882114][ T5273] usb 1-1: config 0 descriptor?? [ 798.888297][T12280] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 798.902526][ T5273] hub 1-1:0.0: bad descriptor, ignoring hub [ 798.908981][ T5273] hub 1-1:0.0: probe with driver hub failed with error -5 [ 798.916652][ T1170] usb usb5-port1: attempt power cycle [ 798.921677][ T5273] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input40 [ 798.932888][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.944664][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.956076][ T5263] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 798.973725][ T5263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.985262][ T5263] usb 3-1: config 0 descriptor?? [ 799.225214][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.236786][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.326070][ T1170] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 799.328788][T12292] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 799.400153][T12292] batman_adv: batadv0: Adding interface: team0 [ 799.407169][T12292] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.433578][T12292] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 799.434128][ T1170] usb 5-1: device descriptor read/8, error -71 [ 799.526390][ T29] audit: type=1800 audit(1723138153.404:242): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1834" name="/" dev="fuse" ino=1 res=0 errno=0 [ 799.567498][T12292] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 799.575781][T12292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1830'. [ 799.589553][T12292] team0: entered promiscuous mode [ 799.594971][T12292] team_slave_0: entered promiscuous mode [ 799.601478][T12292] team_slave_1: entered promiscuous mode [ 799.613373][T12292] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.630496][T12292] batman_adv: batadv0: Interface activated: team0 [ 799.637795][T12292] batman_adv: batadv0: Interface deactivated: team0 [ 799.644847][T12292] batman_adv: batadv0: Removing interface: team0 [ 799.714473][T12292] bridge0: port 3(team0) entered blocking state [ 799.722417][T12292] bridge0: port 3(team0) entered disabled state [ 799.729673][T12292] team0: entered allmulticast mode [ 799.735036][T12292] team_slave_0: entered allmulticast mode [ 799.741073][T12292] team_slave_1: entered allmulticast mode [ 799.745513][ T1170] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 799.763852][T12292] bridge0: port 3(team0) entered blocking state [ 799.770474][T12292] bridge0: port 3(team0) entered forwarding state [ 799.963955][ T5263] logitech-hidpp-device 0003:046D:C086.002D: item fetching failed at offset 1/5 [ 800.649074][ T5263] logitech-hidpp-device 0003:046D:C086.002D: hidpp_probe:parse failed [ 801.815983][ T5263] logitech-hidpp-device 0003:046D:C086.002D: probe with driver logitech-hidpp-device failed with error -22 [ 801.832396][ T1170] usb 5-1: device descriptor read/8, error -71 [ 801.904802][ T5263] usb 3-1: USB disconnect, device number 31 [ 801.968974][ T1170] usb usb5-port1: unable to enumerate USB device [ 801.971407][T12303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.996552][T12303] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1836'. [ 802.009429][T12303] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 802.105812][T11553] usb 1-1: USB disconnect, device number 53 [ 802.105961][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 802.177109][ T5314] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 802.205109][T12310] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 802.212531][T11378] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 802.309909][T11378] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 802.316656][T11378] Bluetooth: Wrong link type (-22) [ 802.322451][T11378] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 802.329032][T11378] Bluetooth: Wrong link type (-22) [ 802.334155][T11378] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 802.340695][T11378] Bluetooth: Wrong link type (-22) [ 802.385605][ T5314] usb 4-1: Using ep0 maxpacket: 16 [ 802.400217][ T5314] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 802.409980][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.418209][ T5314] usb 4-1: Product: syz [ 802.422482][ T5314] usb 4-1: Manufacturer: syz [ 802.427198][ T5314] usb 4-1: SerialNumber: syz [ 802.434975][ T5314] usb 4-1: config 0 descriptor?? [ 802.446406][ T5314] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 802.458817][T12311] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 802.477621][T12311] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 802.661972][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.671037][ T29] audit: type=1326 audit(1723138156.504:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde59779f9 code=0x7fc00000 [ 802.694133][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.797203][T12320] jfs: Unrecognized mount option " " or missing value [ 803.686314][ T29] audit: type=1326 audit(1723138157.564:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcde59779f9 code=0x7fc00000 [ 803.726831][ T5314] pwc: Failed to set LED on/off time (-71) [ 803.753042][ T5314] pwc: send_video_command error -71 [ 803.766819][ T5314] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 803.803420][ T5314] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 803.815109][ T5314] usb 4-1: USB disconnect, device number 59 [ 803.903648][T12328] netlink: 'syz.2.1844': attribute type 10 has an invalid length. [ 803.925835][T12328] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1844'. [ 804.035974][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 804.062846][T12332] FAULT_INJECTION: forcing a failure. [ 804.062846][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 804.103602][T12335] ufs: You didn't specify the type of your ufs filesystem [ 804.103602][T12335] [ 804.103602][T12335] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 804.103602][T12335] [ 804.103602][T12335] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 804.134681][T12335] ufs: ufstype=old is supported read-only [ 804.140775][T12335] ufs: ufs_fill_super(): bad magic number [ 804.178084][T12332] CPU: 1 UID: 0 PID: 12332 Comm: syz.1.1845 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 804.188883][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 804.198951][T12332] Call Trace: [ 804.202239][T12332] [ 804.205175][T12332] dump_stack_lvl+0x241/0x360 [ 804.209873][T12332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.215086][T12332] ? __pfx__printk+0x10/0x10 [ 804.219704][T12332] should_fail_ex+0x3b0/0x4e0 [ 804.224402][T12332] should_failslab+0xac/0x100 [ 804.229092][T12332] ? inet_rtm_newaddr+0x495/0x1af0 [ 804.234214][T12332] __kmalloc_cache_noprof+0x6c/0x2c0 [ 804.239528][T12332] inet_rtm_newaddr+0x495/0x1af0 [ 804.244487][T12332] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 804.249885][T12332] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 804.255267][T12332] rtnetlink_rcv_msg+0x73f/0xcf0 [ 804.260213][T12332] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 804.265339][T12332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.270820][T12332] ? ref_tracker_free+0x643/0x7e0 [ 804.275867][T12332] netlink_rcv_skb+0x1e3/0x430 [ 804.280648][T12332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.286122][T12332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.291445][T12332] ? netlink_deliver_tap+0x2e/0x1b0 [ 804.296663][T12332] netlink_unicast+0x7f0/0x990 [ 804.301451][T12332] ? __pfx_netlink_unicast+0x10/0x10 [ 804.306743][T12332] ? __virt_addr_valid+0x183/0x530 [ 804.311867][T12332] ? __check_object_size+0x49c/0x900 [ 804.317161][T12332] ? bpf_lsm_netlink_send+0x9/0x10 [ 804.322281][T12332] netlink_sendmsg+0x8e4/0xcb0 [ 804.327066][T12332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.332358][T12332] ? __import_iovec+0x536/0x820 [ 804.337226][T12332] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 804.342522][T12332] ? security_socket_sendmsg+0x87/0xb0 [ 804.347990][T12332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.353282][T12332] __sock_sendmsg+0x221/0x270 [ 804.357974][T12332] ____sys_sendmsg+0x525/0x7d0 [ 804.362755][T12332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.368067][T12332] __sys_sendmsg+0x2b0/0x3a0 [ 804.372668][T12332] ? __pfx___sys_sendmsg+0x10/0x10 [ 804.377783][T12332] ? vfs_write+0x7c4/0xc90 [ 804.382251][T12332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 804.388682][T12332] ? do_syscall_64+0x100/0x230 [ 804.393464][T12332] ? do_syscall_64+0xb6/0x230 [ 804.398164][T12332] do_syscall_64+0xf3/0x230 [ 804.402685][T12332] ? clear_bhb_loop+0x35/0x90 [ 804.407380][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.413304][T12332] RIP: 0033:0x7f8df31779f9 [ 804.417729][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.437352][T12332] RSP: 002b:00007f8df3e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.445793][T12332] RAX: ffffffffffffffda RBX: 00007f8df3305f80 RCX: 00007f8df31779f9 [ 804.453777][T12332] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 804.461744][T12332] RBP: 00007f8df3e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 804.469703][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.477662][T12332] R13: 0000000000000000 R14: 00007f8df3305f80 R15: 00007ffd1ebc6fa8 [ 804.485642][T12332] [ 804.724571][T12342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.753567][T12342] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1848'. [ 804.770737][ T29] audit: type=1326 audit(1723138158.644:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde59779f9 code=0x7fc00000 [ 804.773415][T12342] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 804.995801][T11553] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 805.025688][ T1852] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 805.527233][ T1852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.566494][ T1852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.575736][T11553] usb 3-1: Using ep0 maxpacket: 16 [ 805.578730][ T1852] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 805.592255][ T1852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.603616][T11553] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 805.620559][ T1852] usb 2-1: config 0 descriptor?? [ 805.645953][T11553] usb 3-1: config 0 has no interface number 0 [ 805.683984][T11553] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 805.725795][T11553] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 805.821176][T11553] usb 3-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.939532][T11553] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 805.980031][T11553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.020876][T11553] usb 3-1: config 0 descriptor?? [ 806.032370][T12356] sctp: [Deprecated]: syz.0.1853 (pid 12356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.032370][T12356] Use struct sctp_sack_info instead [ 806.039944][T11553] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.7/input/input41 [ 806.350365][ T1852] logitech-hidpp-device 0003:046D:C086.002E: item fetching failed at offset 1/5 [ 806.366627][ T1852] logitech-hidpp-device 0003:046D:C086.002E: hidpp_probe:parse failed [ 806.374894][ T1852] logitech-hidpp-device 0003:046D:C086.002E: probe with driver logitech-hidpp-device failed with error -22 [ 806.912265][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.960352][ T8] usb 2-1: USB disconnect, device number 60 [ 806.967417][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.024066][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.074945][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.122245][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.143131][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.175578][ T5263] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 807.190300][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.211956][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.254388][ T8] usb 3-1: USB disconnect, device number 32 [ 807.377334][ T5263] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.395664][ T5263] usb 4-1: config 0 has no interfaces? [ 807.401197][ T5263] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 807.410520][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.424180][ T5263] usb 4-1: config 0 descriptor?? [ 807.640004][ T1852] usb 4-1: USB disconnect, device number 60 [ 807.656254][T12381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.683379][T12381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1860'. [ 807.716530][T12381] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 809.472048][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.516327][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.781240][ T1852] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 811.237147][T12395] netlink: 'syz.2.1865': attribute type 3 has an invalid length. [ 811.266977][T12395] netlink: 'syz.2.1865': attribute type 4 has an invalid length. [ 811.306737][T12395] netlink: 'syz.2.1865': attribute type 7 has an invalid length. [ 811.314511][T12395] netlink: 'syz.2.1865': attribute type 8 has an invalid length. [ 811.328994][T12395] netlink: 'syz.2.1865': attribute type 7 has an invalid length. [ 811.339236][T12395] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.1865'. [ 812.928601][ T5273] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 813.475713][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 813.560649][ T5273] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 813.595861][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.603886][ T5273] usb 5-1: Product: syz [ 813.659595][ T5273] usb 5-1: Manufacturer: syz [ 813.664221][ T5273] usb 5-1: SerialNumber: syz [ 813.730824][ T5273] usb 5-1: config 0 descriptor?? [ 813.821289][ T5273] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 813.848847][ T1852] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 813.918771][T12422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.949169][T12422] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1872'. [ 813.972270][T12422] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 814.070610][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.074210][ T1852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.089926][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.115617][ T1852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.154585][ T1852] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 814.182936][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.203552][ T1852] usb 1-1: config 0 descriptor?? [ 814.313498][ T5273] pwc: Failed to set LED on/off time (-71) [ 814.325998][ T5273] pwc: send_video_command error -71 [ 814.331575][T11553] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 814.351419][ T5273] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 814.363631][ T5273] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 814.388410][ T5273] usb 5-1: USB disconnect, device number 38 [ 814.455776][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 814.505851][T11553] usb 4-1: Using ep0 maxpacket: 16 [ 814.515870][T11553] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 814.545642][T11553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.553673][T11553] usb 4-1: Product: syz [ 814.571675][T11553] usb 4-1: Manufacturer: syz [ 814.576524][T11553] usb 4-1: SerialNumber: syz [ 814.592415][T11553] usb 4-1: config 0 descriptor?? [ 814.605217][T11553] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 814.623006][ T1852] logitech-hidpp-device 0003:046D:C086.002F: item fetching failed at offset 1/5 [ 814.648177][ T1852] logitech-hidpp-device 0003:046D:C086.002F: hidpp_probe:parse failed [ 814.661560][ T1852] logitech-hidpp-device 0003:046D:C086.002F: probe with driver logitech-hidpp-device failed with error -22 [ 814.675975][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 814.690535][ T8] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 814.699403][ T8] usb 3-1: config 0 has no interface number 0 [ 814.705811][ T8] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 814.717081][ T8] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 814.728452][ T8] usb 3-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.752162][ T8] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 814.763002][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.783570][ T8] usb 3-1: config 0 descriptor?? [ 814.795558][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.7/input/input42 [ 814.821640][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.837796][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.858495][ T8] usb 1-1: USB disconnect, device number 54 [ 814.977163][T11553] pwc: Failed to set LED on/off time (-71) [ 815.007453][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.019615][T11553] pwc: send_video_command error -71 [ 815.025004][T11553] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 815.045792][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.054629][T11553] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 815.068135][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.092019][T11553] usb 4-1: USB disconnect, device number 62 [ 815.105767][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.109414][T12436] input: syz0 as /devices/virtual/input/input43 [ 815.118675][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.139348][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.157981][T12436] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 815.162157][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.176674][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.191824][ T8] usb 3-1: USB disconnect, device number 33 [ 815.334630][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 815.572201][T12445] ufs: You didn't specify the type of your ufs filesystem [ 815.572201][T12445] [ 815.572201][T12445] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 815.572201][T12445] [ 815.572201][T12445] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 815.653885][T12445] ufs: ufstype=old is supported read-only [ 815.679355][T12445] ufs: ufs_fill_super(): bad magic number [ 815.862161][T12451] syzkaller0: entered promiscuous mode [ 815.882852][T12451] syzkaller0: entered allmulticast mode [ 817.075656][ T1852] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 817.270519][ T1852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.300460][ T1852] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 817.368419][ T1852] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 817.386249][ T1852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.415587][ T1852] usb 5-1: Product: syz [ 817.425586][ T1852] usb 5-1: Manufacturer: syz [ 817.430221][ T1852] usb 5-1: SerialNumber: syz [ 817.452457][ T1852] usb 5-1: config 0 descriptor?? [ 817.460786][ T1852] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 817.583605][T12470] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1884'. [ 817.619269][T12470] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 819.452945][T12460] pim6reg: entered allmulticast mode [ 819.471371][T12460] pim6reg: left allmulticast mode [ 819.473210][T11553] usb 5-1: USB disconnect, device number 39 [ 819.680605][T12469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.486050][T11553] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 820.521018][T12484] FAULT_INJECTION: forcing a failure. [ 820.521018][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 820.534858][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.3.1887 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 820.545652][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 820.555720][T12484] Call Trace: [ 820.559012][T12484] [ 820.561952][T12484] dump_stack_lvl+0x241/0x360 [ 820.566656][T12484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.571870][T12484] ? __pfx__printk+0x10/0x10 [ 820.576575][T12484] ? __kmalloc_node_noprof+0xb7/0x440 [ 820.581972][T12484] ? __pfx___might_resched+0x10/0x10 [ 820.587281][T12484] should_fail_ex+0x3b0/0x4e0 [ 820.591983][T12484] should_failslab+0xac/0x100 [ 820.596688][T12484] __kmalloc_node_noprof+0xdf/0x440 [ 820.601912][T12484] ? __kvmalloc_node_noprof+0x72/0x190 [ 820.607393][T12484] __kvmalloc_node_noprof+0x72/0x190 [ 820.612695][T12484] xt_alloc_table_info+0x3d/0xa0 [ 820.617654][T12484] do_ip6t_set_ctl+0xba0/0x1270 [ 820.622536][T12484] ? __pfx___might_resched+0x10/0x10 [ 820.627848][T12484] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 820.633153][T12484] ? __pfx_lock_release+0x10/0x10 [ 820.638211][T12484] ? __mutex_unlock_slowpath+0x21d/0x750 [ 820.643867][T12484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 820.650318][T12484] nf_setsockopt+0x295/0x2c0 [ 820.654936][T12484] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 820.660854][T12484] do_sock_setsockopt+0x3af/0x720 [ 820.665901][T12484] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 820.671461][T12484] ? __fget_files+0x29/0x470 [ 820.676071][T12484] ? __fget_files+0x3f6/0x470 [ 820.680779][T12484] __sys_setsockopt+0x1ae/0x250 [ 820.685657][T12484] __x64_sys_setsockopt+0xb5/0xd0 [ 820.690703][T12484] do_syscall_64+0xf3/0x230 [ 820.695230][T12484] ? clear_bhb_loop+0x35/0x90 [ 820.699927][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.705837][T12484] RIP: 0033:0x7fb954f779f9 [ 820.710269][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.729885][T12484] RSP: 002b:00007fb955c75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 820.738308][T12484] RAX: ffffffffffffffda RBX: 00007fb955105f80 RCX: 00007fb954f779f9 [ 820.746295][T12484] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 820.754272][T12484] RBP: 00007fb955c75090 R08: 0000000000000630 R09: 0000000000000000 [ 820.762235][T12484] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 820.770288][T12484] R13: 0000000000000000 R14: 00007fb955105f80 R15: 00007ffcca6d9ce8 [ 820.778282][T12484] [ 820.838920][ T51] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 820.895635][ T29] audit: type=1400 audit(1723138174.754:246): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=12485 comm="syz.4.1890" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 [ 821.027352][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.063464][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.076418][T11553] usb 2-1: Using ep0 maxpacket: 32 [ 821.089944][T11553] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 821.104794][ T51] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 821.124135][T11553] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 821.135648][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.155317][T11553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.156854][ T51] usb 1-1: config 0 descriptor?? [ 821.170276][T11553] usb 2-1: Product: syz [ 821.174496][T11553] usb 2-1: Manufacturer: syz [ 821.183316][T11553] usb 2-1: SerialNumber: syz [ 821.239467][T11378] Bluetooth: hci7: command 0x0406 tx timeout [ 821.246914][T11553] usb 2-1: config 0 descriptor?? [ 821.252711][T12480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 821.289457][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 821.294590][T11553] hub 2-1:0.0: bad descriptor, ignoring hub [ 821.307845][T11553] hub 2-1:0.0: probe with driver hub failed with error -5 [ 821.324382][T11553] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 821.593651][T12501] syzkaller0: entered promiscuous mode [ 821.606394][T12501] syzkaller0: entered allmulticast mode [ 821.628750][ T51] logitech-hidpp-device 0003:046D:C086.0030: item fetching failed at offset 1/5 [ 821.667547][ T51] logitech-hidpp-device 0003:046D:C086.0030: hidpp_probe:parse failed [ 821.726024][ T51] logitech-hidpp-device 0003:046D:C086.0030: probe with driver logitech-hidpp-device failed with error -22 [ 821.752796][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.781691][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.044877][ T5263] usb 1-1: USB disconnect, device number 55 [ 825.742724][ T5273] usb 2-1: USB disconnect, device number 61 [ 825.742740][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 826.078238][ T51] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 826.268266][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 826.290389][ T51] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 826.303423][ T51] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 826.313807][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.321943][ T51] usb 1-1: Product: syz [ 826.326211][ T51] usb 1-1: Manufacturer: syz [ 826.335235][ T51] usb 1-1: SerialNumber: syz [ 826.342459][ T51] usb 1-1: config 0 descriptor?? [ 826.348680][T12511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.357373][ T51] hub 1-1:0.0: bad descriptor, ignoring hub [ 826.363956][ T51] hub 1-1:0.0: probe with driver hub failed with error -5 [ 826.376291][ T51] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 826.671307][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.688392][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.078134][T12507] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 829.115882][T12507] batman_adv: batadv0: Adding interface: team0 [ 829.135903][T12507] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.183102][T12507] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 829.222557][T12508] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 829.232049][T12508] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1888'. [ 829.241555][T12508] team0: entered promiscuous mode [ 829.247094][T12508] team_slave_0: entered promiscuous mode [ 829.252937][T12508] team_slave_1: entered promiscuous mode [ 829.275175][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.283150][T12508] batman_adv: batadv0: Interface activated: team0 [ 829.289903][T12508] batman_adv: batadv0: Interface deactivated: team0 [ 829.298434][T12508] batman_adv: batadv0: Removing interface: team0 [ 829.308817][T12508] bridge0: port 3(team0) entered blocking state [ 829.315274][T12508] bridge0: port 3(team0) entered disabled state [ 829.335974][T12508] team0: entered allmulticast mode [ 829.341118][T12508] team_slave_0: entered allmulticast mode [ 829.360897][T12508] team_slave_1: entered allmulticast mode [ 829.377608][T12508] bridge0: port 3(team0) entered blocking state [ 829.384015][T12508] bridge0: port 3(team0) entered forwarding state [ 829.431741][T12515] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 829.471932][T12515] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1898'. [ 829.687345][T12518] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 829.753801][T12518] bridge0: port 3(team0) entered disabled state [ 829.783309][T12518] team0: left allmulticast mode [ 829.798096][T12518] team_slave_0: left allmulticast mode [ 829.809323][T12518] team_slave_1: left allmulticast mode [ 829.821079][T12518] team0: left promiscuous mode [ 829.833630][T12518] team_slave_0: left promiscuous mode [ 829.847060][T12518] team_slave_1: left promiscuous mode [ 829.858156][T12539] UBIFS error (pid: 12539): cannot open "/dev/iommu", error -22 [ 829.862135][T12518] bridge0: port 3(team0) entered disabled state [ 829.925211][T12518] batman_adv: batadv0: Adding interface: team0 [ 829.940404][T12518] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.976194][T12518] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 830.021143][T12519] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 830.071102][T12519] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1896'. [ 830.110469][T12519] team0: entered promiscuous mode [ 830.131233][T12519] team_slave_0: entered promiscuous mode [ 830.149807][T12519] team_slave_1: entered promiscuous mode [ 830.204472][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.267051][T12519] batman_adv: batadv0: Interface activated: team0 [ 830.291309][T11553] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 830.300508][T12519] batman_adv: batadv0: Interface deactivated: team0 [ 830.340704][T12519] batman_adv: batadv0: Removing interface: team0 [ 830.359362][T12519] bridge0: port 3(team0) entered blocking state [ 830.366931][T12519] bridge0: port 3(team0) entered disabled state [ 830.528350][T11553] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 830.560686][T12519] team0: entered allmulticast mode [ 830.578225][T12519] team_slave_0: entered allmulticast mode [ 830.584435][T11553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.605577][T12519] team_slave_1: entered allmulticast mode [ 830.687303][T11553] usb 2-1: config 0 descriptor?? [ 831.204736][T12519] bridge0: port 3(team0) entered blocking state [ 831.211160][T12519] bridge0: port 3(team0) entered forwarding state [ 831.229039][T11553] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 831.331211][ T5263] usb 1-1: USB disconnect, device number 56 [ 831.337165][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 831.377647][T12548] netlink: 'syz.4.1904': attribute type 6 has an invalid length. [ 831.508204][T12552] FAULT_INJECTION: forcing a failure. [ 831.508204][T12552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.555683][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.4.1907 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 831.566486][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 831.576563][T12552] Call Trace: [ 831.579855][T12552] [ 831.582802][T12552] dump_stack_lvl+0x241/0x360 [ 831.587514][T12552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.592745][T12552] ? __pfx__printk+0x10/0x10 [ 831.597368][T12552] ? __pfx_lock_release+0x10/0x10 [ 831.602608][T12552] should_fail_ex+0x3b0/0x4e0 [ 831.607344][T12552] _copy_from_user+0x2f/0xe0 [ 831.611957][T12552] ____sys_sendmsg+0x2e4/0x7d0 [ 831.616749][T12552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.622075][T12552] ? __might_fault+0xaa/0x120 [ 831.626790][T12552] __sys_sendmmsg+0x3b2/0x740 [ 831.631488][T12552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 831.636756][T12552] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 831.642672][T12552] ? ksys_write+0x23e/0x2c0 [ 831.647199][T12552] ? __pfx_lock_release+0x10/0x10 [ 831.652250][T12552] ? vfs_write+0x7c4/0xc90 [ 831.656684][T12552] ? __mutex_unlock_slowpath+0x21d/0x750 [ 831.662338][T12552] ? __pfx_vfs_write+0x10/0x10 [ 831.667137][T12552] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 831.673134][T12552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 831.679480][T12552] ? do_syscall_64+0x100/0x230 [ 831.684261][T12552] __x64_sys_sendmmsg+0xa0/0xb0 [ 831.689133][T12552] do_syscall_64+0xf3/0x230 [ 831.693652][T12552] ? clear_bhb_loop+0x35/0x90 [ 831.698352][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.704263][T12552] RIP: 0033:0x7fcde59779f9 [ 831.708697][T12552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.728314][T12552] RSP: 002b:00007fcde6669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 831.736743][T12552] RAX: ffffffffffffffda RBX: 00007fcde5b05f80 RCX: 00007fcde59779f9 [ 831.744726][T12552] RDX: 0000000000000002 RSI: 0000000020000d40 RDI: 0000000000000004 [ 831.752718][T12552] RBP: 00007fcde6669090 R08: 0000000000000000 R09: 0000000000000000 [ 831.760703][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.768691][T12552] R13: 0000000000000000 R14: 00007fcde5b05f80 R15: 00007ffda9768468 [ 831.776697][T12552] [ 831.965588][ T5314] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 832.175573][ T5263] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 832.503970][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.065962][ T5263] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 833.069994][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.115636][ T5263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.132429][ T5314] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 833.145886][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.146954][ T5263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.183589][ T5314] usb 4-1: config 0 descriptor?? [ 833.198169][ T5263] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 833.223252][ T5263] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 833.232955][ T5263] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 833.240168][T11553] usb 2-1: USB disconnect, device number 62 [ 833.254237][ T5263] usb 1-1: Manufacturer: syz [ 833.261392][ T5263] usb 1-1: config 0 descriptor?? [ 833.297898][T12563] syzkaller0: entered promiscuous mode [ 833.303578][T12563] syzkaller0: entered allmulticast mode [ 833.540210][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'. [ 833.606460][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.615081][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.623860][ T5314] logitech-hidpp-device 0003:046D:C086.0031: item fetching failed at offset 1/5 [ 833.654083][ T5314] logitech-hidpp-device 0003:046D:C086.0031: hidpp_probe:parse failed [ 833.670360][ T5314] logitech-hidpp-device 0003:046D:C086.0031: probe with driver logitech-hidpp-device failed with error -22 [ 833.725976][T12566] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 833.827019][T11553] usb 4-1: USB disconnect, device number 63 [ 834.147245][ T5314] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 834.337294][ T5314] usb 2-1: Using ep0 maxpacket: 8 [ 834.349059][ T5314] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 834.358421][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.392633][ T5314] usb 2-1: config 0 descriptor?? [ 834.528327][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 836.043836][T12574] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 836.065641][ T5263] usbhid 1-1:0.0: can't add hid device: -71 [ 836.066390][T12574] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1912'. [ 836.075681][ T5263] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 836.088491][T12577] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1913'. [ 836.115535][T12571] netlink: 'syz.1.1911': attribute type 10 has an invalid length. [ 836.127215][ T5263] usb 1-1: USB disconnect, device number 57 [ 836.205057][T12571] team0: Device veth1_macvtap failed to register rx_handler [ 836.234350][T12583] sock: sock_timestamping_bind_phc: sock not bind to device [ 837.131973][T12591] delete_channel: no stack [ 837.205900][T12593] ipt_REJECT: TCP_RESET invalid for non-tcp [ 837.230297][T12593] syz.2.1917 (12593): attempted to duplicate a private mapping with mremap. This is not supported. [ 837.274347][T12597] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 837.297318][T12597] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1918'. [ 837.750456][ T5314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 837.775361][ T5314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 837.820400][ T5314] asix 2-1:0.0: probe with driver asix failed with error -71 [ 837.832032][ T5314] usb 2-1: USB disconnect, device number 63 [ 837.859076][T12615] FAULT_INJECTION: forcing a failure. [ 837.859076][T12615] name failslab, interval 1, probability 0, space 0, times 0 [ 837.879933][T12615] CPU: 0 UID: 0 PID: 12615 Comm: syz.4.1921 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 837.890713][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 837.900754][T12615] Call Trace: [ 837.904020][T12615] [ 837.905566][ T1852] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 837.906933][T12615] dump_stack_lvl+0x241/0x360 [ 837.919121][T12615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.924303][T12615] ? __pfx__printk+0x10/0x10 [ 837.929010][T12615] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 837.934561][T12615] ? __pfx___might_resched+0x10/0x10 [ 837.939841][T12615] should_fail_ex+0x3b0/0x4e0 [ 837.944501][T12615] ? skb_clone+0x20c/0x390 [ 837.948902][T12615] should_failslab+0xac/0x100 [ 837.953565][T12615] ? skb_clone+0x20c/0x390 [ 837.957967][T12615] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 837.963330][T12615] skb_clone+0x20c/0x390 [ 837.967567][T12615] nfnetlink_rcv+0x575/0x2a90 [ 837.972241][T12615] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 837.977953][T12615] ? __dev_queue_xmit+0x1763/0x3e90 [ 837.983132][T12615] ? kasan_save_track+0x51/0x80 [ 837.987972][T12615] ? do_syscall_64+0xf3/0x230 [ 837.992638][T12615] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 837.997744][T12615] ? ref_tracker_free+0x643/0x7e0 [ 838.002754][T12615] ? __asan_memcpy+0x40/0x70 [ 838.007332][T12615] ? __pfx_ref_tracker_free+0x10/0x10 [ 838.012693][T12615] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.017876][T12615] ? skb_clone+0x240/0x390 [ 838.022273][T12615] ? __pfx_lock_release+0x10/0x10 [ 838.027283][T12615] ? __netlink_deliver_tap+0x77e/0x7c0 [ 838.032734][T12615] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.037935][T12615] netlink_unicast+0x7f0/0x990 [ 838.042703][T12615] ? __pfx_netlink_unicast+0x10/0x10 [ 838.047984][T12615] ? __virt_addr_valid+0x183/0x530 [ 838.053089][T12615] ? __check_object_size+0x49c/0x900 [ 838.058358][T12615] ? bpf_lsm_netlink_send+0x9/0x10 [ 838.063454][T12615] netlink_sendmsg+0x8e4/0xcb0 [ 838.068224][T12615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.073503][T12615] ? __import_iovec+0x536/0x820 [ 838.078343][T12615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 838.083614][T12615] ? security_socket_sendmsg+0x87/0xb0 [ 838.089066][T12615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.094333][T12615] __sock_sendmsg+0x221/0x270 [ 838.099000][T12615] ____sys_sendmsg+0x525/0x7d0 [ 838.103752][T12615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.109030][T12615] __sys_sendmsg+0x2b0/0x3a0 [ 838.113609][T12615] ? __pfx___sys_sendmsg+0x10/0x10 [ 838.118703][T12615] ? vfs_write+0x7c4/0xc90 [ 838.123120][T12615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 838.129434][T12615] ? do_syscall_64+0x100/0x230 [ 838.134185][T12615] ? do_syscall_64+0xb6/0x230 [ 838.138849][T12615] do_syscall_64+0xf3/0x230 [ 838.143341][T12615] ? clear_bhb_loop+0x35/0x90 [ 838.147999][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.153873][T12615] RIP: 0033:0x7fcde59779f9 [ 838.158269][T12615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.177853][T12615] RSP: 002b:00007fcde6669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.186244][T12615] RAX: ffffffffffffffda RBX: 00007fcde5b05f80 RCX: 00007fcde59779f9 [ 838.194201][T12615] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 838.202153][T12615] RBP: 00007fcde6669090 R08: 0000000000000000 R09: 0000000000000000 [ 838.210112][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.218066][T12615] R13: 0000000000000000 R14: 00007fcde5b05f80 R15: 00007ffda9768468 [ 838.226033][T12615] [ 838.418399][ T1852] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.433121][ T1852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.444095][ T1852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 838.456964][ T1852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.470238][ T1852] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.480889][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.491642][ T1852] usb 1-1: config 0 descriptor?? [ 838.534135][T12624] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 838.542759][T12624] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1925'. [ 838.607125][ T51] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 838.621248][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'. [ 838.625610][ T5315] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 838.639177][T12626] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1926'. [ 838.795324][T12628] syzkaller0: entered promiscuous mode [ 838.795773][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 838.806749][T12628] syzkaller0: entered allmulticast mode [ 838.823956][ T5315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.835324][ T5315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.846940][ T5315] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 838.856223][ T51] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 838.864347][ T51] usb 4-1: config 0 has no interface number 0 [ 838.871381][ T51] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.882555][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.892113][ T51] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.908632][ T5315] usb 5-1: config 0 descriptor?? [ 838.915727][ T51] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.937562][ T51] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 838.947349][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.956677][ T1852] usbhid 1-1:0.0: can't add hid device: -71 [ 838.962749][ T1852] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 838.973549][ T51] usb 4-1: config 0 descriptor?? [ 838.986713][ T1852] usb 1-1: USB disconnect, device number 58 [ 839.327870][ T5315] logitech-hidpp-device 0003:046D:C086.0032: item fetching failed at offset 1/5 [ 839.340135][ T5315] logitech-hidpp-device 0003:046D:C086.0032: hidpp_probe:parse failed [ 839.348795][ T5315] logitech-hidpp-device 0003:046D:C086.0032: probe with driver logitech-hidpp-device failed with error -22 [ 839.416648][ T51] hid-picolcd 0003:04D8:C002.0033: unknown main item tag 0x0 [ 839.426332][ T51] hid-picolcd 0003:04D8:C002.0033: unknown main item tag 0x0 [ 839.507933][ T51] hid-picolcd 0003:04D8:C002.0033: No report with id 0x11 found [ 839.534580][T12635] FAULT_INJECTION: forcing a failure. [ 839.534580][T12635] name failslab, interval 1, probability 0, space 0, times 0 [ 839.547307][T12635] CPU: 1 UID: 0 PID: 12635 Comm: syz.0.1929 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 839.558131][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 839.568205][T12635] Call Trace: [ 839.571480][T12635] [ 839.574398][T12635] dump_stack_lvl+0x241/0x360 [ 839.579072][T12635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.584261][T12635] ? __pfx__printk+0x10/0x10 [ 839.588859][T12635] should_fail_ex+0x3b0/0x4e0 [ 839.593541][T12635] ? skb_clone+0x20c/0x390 [ 839.597976][T12635] should_failslab+0xac/0x100 [ 839.602658][T12635] ? skb_clone+0x20c/0x390 [ 839.607081][T12635] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 839.612482][T12635] skb_clone+0x20c/0x390 [ 839.616729][T12635] ? dev_queue_xmit_nit+0x220/0xc10 [ 839.621912][T12635] dev_queue_xmit_nit+0x419/0xc10 [ 839.626938][T12635] ? dev_queue_xmit_nit+0x2b/0xc10 [ 839.632068][T12635] ? validate_xmit_skb+0x9f9/0x1120 [ 839.637278][T12635] dev_hard_start_xmit+0x15f/0x7e0 [ 839.642388][T12635] ? __pfx_validate_xmit_skb+0x10/0x10 [ 839.647938][T12635] __dev_queue_xmit+0x1b63/0x3e90 [ 839.652957][T12635] ? kasan_save_track+0x51/0x80 [ 839.657819][T12635] ? do_syscall_64+0xf3/0x230 [ 839.662506][T12635] ? __dev_queue_xmit+0x2da/0x3e90 [ 839.667619][T12635] ? __pfx___dev_queue_xmit+0x10/0x10 [ 839.672996][T12635] ? __copy_skb_header+0x437/0x5b0 [ 839.678098][T12635] ? __asan_memcpy+0x40/0x70 [ 839.682675][T12635] ? __copy_skb_header+0x437/0x5b0 [ 839.687780][T12635] ? __skb_clone+0x454/0x6c0 [ 839.692366][T12635] ? skb_clone+0x240/0x390 [ 839.696776][T12635] __netlink_deliver_tap+0x54d/0x7c0 [ 839.702065][T12635] ? netlink_deliver_tap+0x2e/0x1b0 [ 839.707257][T12635] netlink_deliver_tap+0x19d/0x1b0 [ 839.712364][T12635] netlink_unicast+0x7be/0x990 [ 839.717128][T12635] ? __pfx_netlink_unicast+0x10/0x10 [ 839.722402][T12635] ? __virt_addr_valid+0x183/0x530 [ 839.727507][T12635] ? __check_object_size+0x49c/0x900 [ 839.732782][T12635] ? bpf_lsm_netlink_send+0x9/0x10 [ 839.737890][T12635] netlink_sendmsg+0x8e4/0xcb0 [ 839.742653][T12635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.747929][T12635] ? __import_iovec+0x536/0x820 [ 839.752775][T12635] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 839.758052][T12635] ? security_socket_sendmsg+0x87/0xb0 [ 839.763502][T12635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.768770][T12635] __sock_sendmsg+0x221/0x270 [ 839.773444][T12635] ____sys_sendmsg+0x525/0x7d0 [ 839.778205][T12635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.783490][T12635] __sys_sendmsg+0x2b0/0x3a0 [ 839.788073][T12635] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.793356][T12635] ? vfs_write+0x7c4/0xc90 [ 839.797790][T12635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 839.804110][T12635] ? do_syscall_64+0x100/0x230 [ 839.808875][T12635] ? do_syscall_64+0xb6/0x230 [ 839.813545][T12635] do_syscall_64+0xf3/0x230 [ 839.818041][T12635] ? clear_bhb_loop+0x35/0x90 [ 839.822706][T12635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.828597][T12635] RIP: 0033:0x7f6e37d779f9 [ 839.833001][T12635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.852601][T12635] RSP: 002b:00007f6e38af2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.861007][T12635] RAX: ffffffffffffffda RBX: 00007f6e37f05f80 RCX: 00007f6e37d779f9 [ 839.868967][T12635] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 839.876925][T12635] RBP: 00007f6e38af2090 R08: 0000000000000000 R09: 0000000000000000 [ 839.884881][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.892844][T12635] R13: 0000000000000000 R14: 00007f6e37f05f80 R15: 00007ffc2f9b02f8 [ 839.900815][T12635] [ 839.903900][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.925339][ T5314] usb 5-1: USB disconnect, device number 40 [ 839.936722][T11553] usb 4-1: USB disconnect, device number 64 [ 840.599262][T12648] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1933'. [ 840.609973][T12648] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 841.425773][T12642] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 841.433629][T12642] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1931'. [ 841.444815][T12647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.640397][T12659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.657800][T12654] netlink: 'syz.4.1936': attribute type 10 has an invalid length. [ 841.668493][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 841.690260][T12654] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1936'. [ 841.723244][T12658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1937'. [ 841.932454][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.942955][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.951725][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.964429][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.974277][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.989099][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 841.999020][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.008825][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.019999][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.029780][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.038321][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.051203][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.063865][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.072633][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.083454][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.091780][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.099400][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.107364][ T5315] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 842.115841][T11553] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 842.116156][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.134382][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.142068][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.162969][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.178189][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.188614][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.196767][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.204395][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.216938][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.224617][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.232281][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.241167][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.248896][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.256599][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.264122][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.272345][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.281189][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.290293][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.298988][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.308392][ T5315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.320887][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.329755][ T5315] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 842.343018][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.345663][T11553] usb 2-1: Using ep0 maxpacket: 16 [ 842.352632][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.367275][ T5315] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 842.376713][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.396591][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.399913][T11553] usb 2-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 842.404267][ T5315] usb 5-1: Product: syz [ 842.420113][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.430298][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.437957][ T5315] usb 5-1: Manufacturer: syz [ 842.451814][ T5263] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 842.463561][ T5315] usb 5-1: SerialNumber: syz [ 842.484285][ T5315] usb 5-1: config 0 descriptor?? [ 842.491415][T11553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.496836][ T5263] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 842.527169][T11553] usb 2-1: Product: syz [ 842.538100][ T5315] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 842.541558][T11553] usb 2-1: Manufacturer: syz [ 842.569829][T11553] usb 2-1: SerialNumber: syz [ 842.590427][T11553] usb 2-1: config 0 descriptor?? [ 842.609100][T11553] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 843.426472][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.466173][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.540338][T11553] pwc: Failed to set LED on/off time (-71) [ 843.567923][T11553] pwc: send_video_command error -71 [ 843.578011][T11553] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 843.589975][T11553] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 843.607849][T11553] usb 2-1: USB disconnect, device number 64 [ 843.653744][ T1170] usb 5-1: USB disconnect, device number 41 [ 843.915594][ T5315] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 844.698098][ T5315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.982764][ T5315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.018469][ T5315] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 845.032378][T12686] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 845.037999][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.083110][ T5315] usb 1-1: config 0 descriptor?? [ 845.085532][T12686] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1945'. [ 845.184094][T12696] netlink: 'syz.2.1947': attribute type 12 has an invalid length. [ 845.199816][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 845.286958][T12699] FAULT_INJECTION: forcing a failure. [ 845.286958][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 845.304575][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.1.1949 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 845.315376][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 845.325445][T12699] Call Trace: [ 845.328734][T12699] [ 845.331664][T12699] dump_stack_lvl+0x241/0x360 [ 845.336365][T12699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.341586][T12699] ? __pfx__printk+0x10/0x10 [ 845.346182][T12699] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 845.351726][T12699] ? __pfx___might_resched+0x10/0x10 [ 845.357018][T12699] should_fail_ex+0x3b0/0x4e0 [ 845.361704][T12699] ? skb_clone+0x20c/0x390 [ 845.366207][T12699] should_failslab+0xac/0x100 [ 845.370884][T12699] ? skb_clone+0x20c/0x390 [ 845.375292][T12699] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 845.380658][T12699] skb_clone+0x20c/0x390 [ 845.384898][T12699] nfnetlink_rcv+0x575/0x2a90 [ 845.389570][T12699] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 845.395289][T12699] ? __dev_queue_xmit+0x1763/0x3e90 [ 845.400482][T12699] ? kasan_save_track+0x51/0x80 [ 845.405324][T12699] ? do_syscall_64+0xf3/0x230 [ 845.410001][T12699] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 845.415137][T12699] ? ref_tracker_free+0x643/0x7e0 [ 845.420173][T12699] ? __asan_memcpy+0x40/0x70 [ 845.424760][T12699] ? __pfx_ref_tracker_free+0x10/0x10 [ 845.430149][T12699] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.435347][T12699] ? skb_clone+0x240/0x390 [ 845.439848][T12699] ? __pfx_lock_release+0x10/0x10 [ 845.444873][T12699] ? __netlink_deliver_tap+0x77e/0x7c0 [ 845.450337][T12699] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.455532][T12699] netlink_unicast+0x7f0/0x990 [ 845.460304][T12699] ? __pfx_netlink_unicast+0x10/0x10 [ 845.465602][T12699] ? __virt_addr_valid+0x183/0x530 [ 845.470717][T12699] ? __check_object_size+0x49c/0x900 [ 845.475999][T12699] ? bpf_lsm_netlink_send+0x9/0x10 [ 845.481107][T12699] netlink_sendmsg+0x8e4/0xcb0 [ 845.485880][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.491169][T12699] ? __import_iovec+0x536/0x820 [ 845.496023][T12699] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 845.501317][T12699] ? security_socket_sendmsg+0x87/0xb0 [ 845.506786][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.512068][T12699] __sock_sendmsg+0x221/0x270 [ 845.516749][T12699] ____sys_sendmsg+0x525/0x7d0 [ 845.521514][T12699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.526804][T12699] __sys_sendmsg+0x2b0/0x3a0 [ 845.531392][T12699] ? __pfx___sys_sendmsg+0x10/0x10 [ 845.536492][T12699] ? vfs_write+0x7c4/0xc90 [ 845.541021][T12699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 845.547354][T12699] ? do_syscall_64+0x100/0x230 [ 845.552122][T12699] ? do_syscall_64+0xb6/0x230 [ 845.556791][T12699] do_syscall_64+0xf3/0x230 [ 845.561291][T12699] ? clear_bhb_loop+0x35/0x90 [ 845.565973][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.571867][T12699] RIP: 0033:0x7f8df31779f9 [ 845.576289][T12699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.595896][T12699] RSP: 002b:00007f8df3e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.604322][T12699] RAX: ffffffffffffffda RBX: 00007f8df3305f80 RCX: 00007f8df31779f9 [ 845.612299][T12699] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 845.620353][T12699] RBP: 00007f8df3e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 845.628318][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.636282][T12699] R13: 0000000000000000 R14: 00007f8df3305f80 R15: 00007ffd1ebc6fa8 [ 845.644259][T12699] [ 845.663500][ T5315] logitech-hidpp-device 0003:046D:C086.0035: item fetching failed at offset 1/5 [ 845.695793][T12702] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 845.702415][ T5315] logitech-hidpp-device 0003:046D:C086.0035: hidpp_probe:parse failed [ 845.713516][T12702] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1950'. [ 845.720985][ T5315] logitech-hidpp-device 0003:046D:C086.0035: probe with driver logitech-hidpp-device failed with error -22 [ 845.734241][ T5263] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 845.852670][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 845.902406][T12710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1954'. [ 845.918247][ T1170] usb 1-1: USB disconnect, device number 59 [ 845.925915][ T5263] usb 5-1: Using ep0 maxpacket: 32 [ 845.938306][ T5263] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 846.398002][ T5263] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 846.526060][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.564620][ T5263] usb 5-1: Product: syz [ 846.577814][ T5263] usb 5-1: Manufacturer: syz [ 846.583906][ T5263] usb 5-1: SerialNumber: syz [ 846.593117][ T5263] usb 5-1: config 0 descriptor?? [ 846.600193][T12695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.608882][ T5263] hub 5-1:0.0: bad descriptor, ignoring hub [ 846.614925][ T5263] hub 5-1:0.0: probe with driver hub failed with error -5 [ 846.624219][ T5263] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 847.004049][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.013758][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.032631][T12726] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 848.125122][T12726] batman_adv: batadv0: Adding interface: team0 [ 848.131904][T12726] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.157349][T12726] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 848.278092][T12726] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 848.305687][T12726] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1948'. [ 848.315548][T12726] team0: entered promiscuous mode [ 848.320745][T12726] team_slave_0: entered promiscuous mode [ 848.335763][T12726] team_slave_1: entered promiscuous mode [ 848.347140][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.354537][T12726] batman_adv: batadv0: Interface activated: team0 [ 848.361572][T12726] batman_adv: batadv0: Interface deactivated: team0 [ 848.368456][T12726] batman_adv: batadv0: Removing interface: team0 [ 848.400229][ T54] Bluetooth: Unexpected start frame (len 18) [ 848.404202][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 848.414862][T12726] bridge0: port 3(team0) entered blocking state [ 848.421569][T12726] bridge0: port 3(team0) entered disabled state [ 848.428659][T12726] team0: entered allmulticast mode [ 848.437761][T12726] team_slave_0: entered allmulticast mode [ 848.443590][T12726] team_slave_1: entered allmulticast mode [ 851.990888][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.054989][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.067804][ T1852] usb 5-1: USB disconnect, device number 42 [ 852.073725][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 852.106598][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.134940][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.150084][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.159784][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.173586][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.184479][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.225788][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.248335][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.273450][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.285596][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.294906][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 852.300435][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.314038][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.332756][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.344558][T12739] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1962'. [ 852.347154][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.369201][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.380421][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.395285][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.409892][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.418165][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.438897][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.447184][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.462323][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.471594][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.526788][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.534230][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.541867][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.553847][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.561694][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.581893][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.615952][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.623386][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.646825][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.654259][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.671334][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.679653][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.700984][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.885248][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.892794][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.900720][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.908710][ T5263] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 852.933720][ T5263] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 853.035585][ T5266] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 854.000599][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.909594][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.927370][ T5266] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 854.936530][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.961803][ T5266] usb 2-1: config 0 descriptor?? [ 855.408127][ T5266] logitech-hidpp-device 0003:046D:C086.0037: item fetching failed at offset 1/5 [ 856.178596][ T5266] logitech-hidpp-device 0003:046D:C086.0037: hidpp_probe:parse failed [ 856.224744][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 856.242282][ T5266] logitech-hidpp-device 0003:046D:C086.0037: probe with driver logitech-hidpp-device failed with error -22 [ 856.281369][ T5266] usb 2-1: USB disconnect, device number 65 [ 856.287693][T12781] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1973'. [ 861.135651][ T1852] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 861.213031][T12802] overlay: Bad value for 'redirect_dir' [ 861.231557][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.244941][T12802] Invalid ELF header magic: != ELF [ 861.279558][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.291748][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.333433][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.342497][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.350157][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.362638][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.370622][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.375756][ T1852] usb 5-1: Using ep0 maxpacket: 8 [ 861.378944][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.393462][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.406857][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.418360][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.428454][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.462294][ T1852] usb 5-1: config 16 has an invalid descriptor of length 236, skipping remainder of the config [ 861.487157][ T1852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.499863][ T1852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 861.510375][ T1852] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 861.511890][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.523937][ T1852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 861.552008][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.622752][ T1852] usbtmc 5-1:16.0: bulk endpoints not found [ 861.642604][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.653102][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.661401][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.669609][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.714678][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.739781][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.767705][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.792581][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.816710][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.839046][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.865512][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.892116][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.901573][ T1852] usb 5-1: USB disconnect, device number 43 [ 861.929185][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.960565][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 861.982196][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.009913][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.022530][ T29] audit: type=1400 audit(1723138215.904:247): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=12809 comm="syz.2.1982" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 [ 862.051723][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.088128][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.110008][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.125516][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.134083][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.166019][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.204116][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.262786][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.283878][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.319628][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.350834][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.399038][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.431267][ T1170] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 862.468394][ T1170] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 862.582986][T12818] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 862.599778][T12818] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1985'. [ 867.830137][T12830] syzkaller0: entered promiscuous mode [ 867.837307][T12830] syzkaller0: entered allmulticast mode [ 868.045879][ T51] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 868.216694][ T5266] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 868.247798][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.265568][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.295755][ T51] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 868.330525][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.349565][ T51] usb 2-1: config 0 descriptor?? [ 868.430486][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.475578][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 868.495491][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 868.532413][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.547302][ T5266] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.565545][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.606369][ T5266] usb 3-1: config 0 descriptor?? [ 868.790996][ T51] logitech-hidpp-device 0003:046D:C086.0039: item fetching failed at offset 1/5 [ 868.844235][ T51] logitech-hidpp-device 0003:046D:C086.0039: hidpp_probe:parse failed [ 868.879097][ T51] logitech-hidpp-device 0003:046D:C086.0039: probe with driver logitech-hidpp-device failed with error -22 [ 869.016872][ T5263] usb 2-1: USB disconnect, device number 66 [ 869.081899][ T5266] usbhid 3-1:0.0: can't add hid device: -71 [ 869.100025][ T5266] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 869.123182][ T5266] usb 3-1: USB disconnect, device number 34 [ 870.390810][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.397379][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.837703][T12862] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1995'. [ 870.859087][ T29] audit: type=1800 audit(1723138224.734:248): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1995" name="/" dev="9p" ino=2 res=0 errno=0 [ 870.975937][ T51] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 871.771107][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 871.782689][ T51] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 871.791905][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.800056][ T51] usb 3-1: Product: syz [ 871.804272][ T51] usb 3-1: Manufacturer: syz [ 871.810869][ T51] usb 3-1: SerialNumber: syz [ 871.821119][ T51] r8152-cfgselector 3-1: Unknown version 0x0000 [ 871.827517][ T51] r8152-cfgselector 3-1: config 0 descriptor?? [ 871.885721][ T5314] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 872.067897][ T5314] usb 4-1: Using ep0 maxpacket: 32 [ 872.075291][ T5314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 872.088708][ T5314] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 872.097947][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.114149][ T5314] usb 4-1: Product: syz [ 872.118471][ T5314] usb 4-1: Manufacturer: syz [ 872.123086][ T5314] usb 4-1: SerialNumber: syz [ 872.131320][ T5314] usb 4-1: config 0 descriptor?? [ 872.141409][T12868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 872.149818][ T5314] hub 4-1:0.0: bad descriptor, ignoring hub [ 872.155940][ T5314] hub 4-1:0.0: probe with driver hub failed with error -5 [ 872.166090][ T5314] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 872.369461][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.380399][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.801943][ C0] ------------[ cut here ]------------ [ 872.808162][ C0] WARNING: CPU: 0 PID: 5314 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 872.817164][ C0] Modules linked in: [ 872.821093][ C0] CPU: 0 UID: 0 PID: 5314 Comm: kworker/0:7 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 872.831893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 872.841966][ C0] Workqueue: events nsim_dev_trap_report_work [ 872.848040][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 872.853760][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 96 d2 19 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 872.873377][ C0] RSP: 0018:ffffc90000007090 EFLAGS: 00010002 [ 872.879442][ C0] RAX: 0000000000010104 RBX: ffff888023f81e00 RCX: 0000000000000002 [ 872.887410][ C0] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f8b40 [ 872.895389][ C0] RBP: 0100000000000004 R08: ffffffff934ee877 R09: 1ffffffff269dd0e [ 872.903387][ C0] R10: dffffc0000000000 R11: fffffbfff269dd0f R12: ffffffff81937ffe [ 872.911383][ C0] R13: ffff88802d50b500 R14: 0000000000000006 R15: ffff8880b922d4c8 [ 872.919358][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 872.928291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.934867][ C0] CR2: 000000002009c000 CR3: 0000000067b7e000 CR4: 00000000003506f0 [ 872.942839][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 872.950807][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 872.958769][ C0] Call Trace: [ 872.962037][ C0] [ 872.964868][ C0] ? __warn+0x163/0x4e0 [ 872.969018][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 872.974124][ C0] ? report_bug+0x2b3/0x500 [ 872.978620][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 872.983726][ C0] ? handle_bug+0x3e/0x70 [ 872.988040][ C0] ? exc_invalid_op+0x1a/0x50 [ 872.992702][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 872.997720][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 873.002744][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 873.007852][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 873.012695][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 873.018404][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 873.023771][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 873.029655][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 873.034848][ C0] dummy_timer+0x830/0x45a0 [ 873.039345][ C0] ? __pfx_lock_release+0x10/0x10 [ 873.044367][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.050685][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 873.056044][ C0] ? __pfx_lock_release+0x10/0x10 [ 873.061077][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 873.066297][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 873.071228][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 873.076153][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 873.081352][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 873.087095][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 873.093180][ C0] hrtimer_interrupt+0x396/0x990 [ 873.098140][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 873.104134][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 873.109771][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.115742][ C0] RIP: 0010:native_apic_msr_write+0x18/0x50 [ 873.121623][ C0] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 25 eb 10 <81> ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 [ 873.141247][ C0] RSP: 0018:ffffc90000007838 EFLAGS: 00000216 [ 873.147307][ C0] RAX: ffffffff8133fe25 RBX: 0000000000000200 RCX: 0000000000040000 [ 873.155355][ C0] RDX: ffffc900020f1000 RSI: 00000000000000f6 RDI: 00000000000003f0 [ 873.163321][ C0] RBP: 0000000000000000 R08: ffffffff8133fe0e R09: 1ffff92000000ef4 [ 873.171379][ C0] R10: dffffc0000000000 R11: fffff52000000ef5 R12: ffffc90009f8d058 [ 873.179339][ C0] R13: ffffc90009f8d000 R14: 2c1008001f8bfbff R15: 0000000000000020 [ 873.187305][ C0] ? arch_irq_work_raise+0x4e/0x80 [ 873.192412][ C0] ? arch_irq_work_raise+0x65/0x80 [ 873.197525][ C0] arch_irq_work_raise+0x6f/0x80 [ 873.202457][ C0] irq_work_queue+0xa7/0x150 [ 873.207040][ C0] bpf_ringbuf_submit+0x111/0x170 [ 873.212059][ C0] ? bpf_trace_run3+0x24c/0x5a0 [ 873.216902][ C0] bpf_prog_bdf419da41ba2d36+0x4e/0x52 [ 873.222354][ C0] bpf_trace_run3+0x33a/0x5a0 [ 873.227024][ C0] ? __pfx_bpf_trace_run3+0x10/0x10 [ 873.232210][ C0] ? kmem_cache_free+0x145/0x350 [ 873.237153][ C0] ? ieee80211_rx_list+0x2d1a/0x3780 [ 873.242452][ C0] ? skb_release_data+0x64d/0x880 [ 873.247468][ C0] ? ieee80211_rx_list+0x2d1a/0x3780 [ 873.252744][ C0] kmem_cache_free+0x2a9/0x350 [ 873.257504][ C0] ieee80211_rx_list+0x2d1a/0x3780 [ 873.262607][ C0] ? __lock_acquire+0x137a/0x2040 [ 873.267641][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 873.273098][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 873.278117][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 873.284101][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 873.290425][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 873.295446][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 873.300395][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.306727][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 873.312204][ C0] ? skb_dequeue+0x113/0x150 [ 873.316814][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 873.322876][ C0] tasklet_action_common+0x321/0x4d0 [ 873.328161][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 873.333961][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 873.340289][ C0] ? workqueue_softirq_action+0xce/0x140 [ 873.345921][ C0] handle_softirqs+0x2c4/0x970 [ 873.350683][ C0] ? do_softirq+0x11b/0x1e0 [ 873.355178][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 873.360456][ C0] do_softirq+0x11b/0x1e0 [ 873.364778][ C0] [ 873.367697][ C0] [ 873.370617][ C0] ? __pfx_do_softirq+0x10/0x10 [ 873.375459][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 873.381102][ C0] ? rcu_is_watching+0x15/0xb0 [ 873.385866][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 873.391061][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 873.396868][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 873.402587][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 873.407786][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 873.413587][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 873.419240][ C0] ? process_scheduled_works+0x945/0x1830 [ 873.424961][ C0] process_scheduled_works+0xa2c/0x1830 [ 873.430523][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 873.436510][ C0] ? assign_work+0x364/0x3d0 [ 873.441118][ C0] worker_thread+0x86d/0xd40 [ 873.445710][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 873.451610][ C0] ? __kthread_parkme+0x169/0x1d0 [ 873.456648][ C0] ? __pfx_worker_thread+0x10/0x10 [ 873.461758][ C0] kthread+0x2f0/0x390 [ 873.465827][ C0] ? __pfx_worker_thread+0x10/0x10 [ 873.470938][ C0] ? __pfx_kthread+0x10/0x10 [ 873.475531][ C0] ret_from_fork+0x4b/0x80 [ 873.479944][ C0] ? __pfx_kthread+0x10/0x10 [ 873.484529][ C0] ret_from_fork_asm+0x1a/0x30 [ 873.489313][ C0] [ 873.492342][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 873.499611][ C0] CPU: 0 UID: 0 PID: 5314 Comm: kworker/0:7 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 873.510364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 873.520418][ C0] Workqueue: events nsim_dev_trap_report_work [ 873.526489][ C0] Call Trace: [ 873.529756][ C0] [ 873.532587][ C0] dump_stack_lvl+0x241/0x360 [ 873.537264][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.542454][ C0] ? __pfx__printk+0x10/0x10 [ 873.547037][ C0] ? _printk+0xd5/0x120 [ 873.551192][ C0] ? vscnprintf+0x5d/0x90 [ 873.555514][ C0] panic+0x349/0x860 [ 873.559405][ C0] ? __warn+0x172/0x4e0 [ 873.563547][ C0] ? __pfx_panic+0x10/0x10 [ 873.567952][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 873.573339][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 873.578312][ C0] __warn+0x346/0x4e0 [ 873.582305][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 873.587421][ C0] report_bug+0x2b3/0x500 [ 873.591767][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 873.596882][ C0] handle_bug+0x3e/0x70 [ 873.601031][ C0] exc_invalid_op+0x1a/0x50 [ 873.605527][ C0] asm_exc_invalid_op+0x1a/0x20 [ 873.610368][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 873.616084][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 96 d2 19 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 873.635779][ C0] RSP: 0018:ffffc90000007090 EFLAGS: 00010002 [ 873.642101][ C0] RAX: 0000000000010104 RBX: ffff888023f81e00 RCX: 0000000000000002 [ 873.650095][ C0] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f8b40 [ 873.658060][ C0] RBP: 0100000000000004 R08: ffffffff934ee877 R09: 1ffffffff269dd0e [ 873.666024][ C0] R10: dffffc0000000000 R11: fffffbfff269dd0f R12: ffffffff81937ffe [ 873.673986][ C0] R13: ffff88802d50b500 R14: 0000000000000006 R15: ffff8880b922d4c8 [ 873.681973][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 873.687011][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 873.691852][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 873.697563][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 873.702930][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 873.708819][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 873.714011][ C0] dummy_timer+0x830/0x45a0 [ 873.718512][ C0] ? __pfx_lock_release+0x10/0x10 [ 873.723561][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.729918][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 873.735281][ C0] ? __pfx_lock_release+0x10/0x10 [ 873.740313][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 873.745546][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 873.750505][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 873.755453][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 873.760657][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 873.766368][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 873.772440][ C0] hrtimer_interrupt+0x396/0x990 [ 873.777388][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 873.783370][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 873.789013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.794987][ C0] RIP: 0010:native_apic_msr_write+0x18/0x50 [ 873.800894][ C0] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 25 eb 10 <81> ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 [ 873.820491][ C0] RSP: 0018:ffffc90000007838 EFLAGS: 00000216 [ 873.826554][ C0] RAX: ffffffff8133fe25 RBX: 0000000000000200 RCX: 0000000000040000 [ 873.834517][ C0] RDX: ffffc900020f1000 RSI: 00000000000000f6 RDI: 00000000000003f0 [ 873.842478][ C0] RBP: 0000000000000000 R08: ffffffff8133fe0e R09: 1ffff92000000ef4 [ 873.850441][ C0] R10: dffffc0000000000 R11: fffff52000000ef5 R12: ffffc90009f8d058 [ 873.858400][ C0] R13: ffffc90009f8d000 R14: 2c1008001f8bfbff R15: 0000000000000020 [ 873.866369][ C0] ? arch_irq_work_raise+0x4e/0x80 [ 873.871475][ C0] ? arch_irq_work_raise+0x65/0x80 [ 873.876600][ C0] arch_irq_work_raise+0x6f/0x80 [ 873.881636][ C0] irq_work_queue+0xa7/0x150 [ 873.886219][ C0] bpf_ringbuf_submit+0x111/0x170 [ 873.891235][ C0] ? bpf_trace_run3+0x24c/0x5a0 [ 873.896080][ C0] bpf_prog_bdf419da41ba2d36+0x4e/0x52 [ 873.901530][ C0] bpf_trace_run3+0x33a/0x5a0 [ 873.906204][ C0] ? __pfx_bpf_trace_run3+0x10/0x10 [ 873.911387][ C0] ? kmem_cache_free+0x145/0x350 [ 873.916406][ C0] ? ieee80211_rx_list+0x2d1a/0x3780 [ 873.921691][ C0] ? skb_release_data+0x64d/0x880 [ 873.926728][ C0] ? ieee80211_rx_list+0x2d1a/0x3780 [ 873.932032][ C0] kmem_cache_free+0x2a9/0x350 [ 873.936794][ C0] ieee80211_rx_list+0x2d1a/0x3780 [ 873.941893][ C0] ? __lock_acquire+0x137a/0x2040 [ 873.946918][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 873.952379][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 873.957399][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 873.963382][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 873.969713][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 873.974820][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 873.979751][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 873.986072][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 873.991550][ C0] ? skb_dequeue+0x113/0x150 [ 873.996228][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 874.002209][ C0] tasklet_action_common+0x321/0x4d0 [ 874.007494][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 874.013300][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 874.019624][ C0] ? workqueue_softirq_action+0xce/0x140 [ 874.025256][ C0] handle_softirqs+0x2c4/0x970 [ 874.030013][ C0] ? do_softirq+0x11b/0x1e0 [ 874.034517][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 874.039803][ C0] do_softirq+0x11b/0x1e0 [ 874.044132][ C0] [ 874.047068][ C0] [ 874.049991][ C0] ? __pfx_do_softirq+0x10/0x10 [ 874.054839][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 874.060467][ C0] ? rcu_is_watching+0x15/0xb0 [ 874.065240][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 874.070438][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 874.076241][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 874.081977][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 874.087173][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 874.092978][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 874.098612][ C0] ? process_scheduled_works+0x945/0x1830 [ 874.104323][ C0] process_scheduled_works+0xa2c/0x1830 [ 874.109877][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 874.115854][ C0] ? assign_work+0x364/0x3d0 [ 874.120454][ C0] worker_thread+0x86d/0xd40 [ 874.125065][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 874.130954][ C0] ? __kthread_parkme+0x169/0x1d0 [ 874.135981][ C0] ? __pfx_worker_thread+0x10/0x10 [ 874.141095][ C0] kthread+0x2f0/0x390 [ 874.145197][ C0] ? __pfx_worker_thread+0x10/0x10 [ 874.150306][ C0] ? __pfx_kthread+0x10/0x10 [ 874.154889][ C0] ret_from_fork+0x4b/0x80 [ 874.159297][ C0] ? __pfx_kthread+0x10/0x10 [ 874.163880][ C0] ret_from_fork_asm+0x1a/0x30 [ 874.168655][ C0] [ 874.171786][ C0] Kernel Offset: disabled [ 874.176195][ C0] Rebooting in 86400 seconds..