last executing test programs: 8.103597228s ago: executing program 1 (id=3912): r0 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='/dev/vhost-vsock\x00', &(0x7f0000000200)='&\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x14) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x5) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="250000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000d0000018001280090001006970697000000000080002800400130008000300", @ANYRES32=r8, @ANYBLOB="f7ed69871fd9c94763adcb84fc0a7651150eb9fb5bfc270a56f7f735283c226c293ac39008a5"], 0x40}, 0x1, 0xd}, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x3, 0x9]) 7.414116734s ago: executing program 1 (id=3915): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x40) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec28", 0x5) (async) r1 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x80000000) (async) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e40000000000000000000000000000ff02000000000001020090780000000060000000000011000000400000000000feffffff0000000000000000000000000000faffe000000117c1ff07000000000000655804e09171"], 0x0) (async) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) (async) close(r5) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) (async) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x191040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 6.474441049s ago: executing program 4 (id=3917): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_create1(0x0) syz_emit_ethernet(0x101f, &(0x7f0000000040)={@remote, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x1, 0x1}}, {@llc={0x4, {@snap={0xa9, 0xaa, "59ca", "fc0787", 0x8808, "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"}}}}}, &(0x7f0000001080)={0x0, 0x4, [0x3d6, 0x8a7, 0xbcd, 0xd6c]}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000010c0), 0x383000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001100)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) pwrite64(r4, &(0x7f0000001140)="b739b5e63f89b62220fe5eb429731411f05e8a9aa728153190b443b4a6fb1c256036f479a1ad8be2", 0x28, 0x3000000000000) socket$inet(0x2, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xb0, 0x1403, 0x400, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x8, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x110, 0x6, 0xff, 0x1, 0x40, 0x2}, 0x111, &(0x7f0000001380)={0x5, 0xf, 0x111, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x5d, 0x2, 0x9, 0xf00, 0x9, [0x2080, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x2, 0x0, 0x0, [0x1f80, 0x0, 0x30, 0xff00ff, 0x7f8030]}, @generic={0xba, 0x10, 0x2, "b8fc16087c3121213a8aa6b86b9331c35049c8a1e6f7c84d1cc7ad28ea2196b243b7cf86e1186488cd3b5db1c3f9120b5a31ddf64e47205441365379611182ac7fdc960376bccd73bc964e61d5effd8173d88bc80a3c8b3124db5eaedff8d72899e08c8f4469a35cf4eb74ce2caf2dc54dda6132528e74ec74559fa4456c21ee8cdd44a62a7df4c0e6d159288fdfda8cd64123b670fabad192197caf4c97e7a13ff41b1a7d626b058c1421dd43dbfcecdf7cc7afc3a311"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x5, 0xf1e, 0x5, [0x3fff, 0x30]}]}, 0x6, [{0xcd, &(0x7f00000014c0)=@string={0xcd, 0x3, "3c32df9f069fbfb26a092a3ad38d7b0a029e80b6e34e581ecf9a513f23c5d82f92aced381b74ab63602af9b901720cffd487c8dcd817637178e7c5110c8313740c12302c746cabd4217fcde69bdc65b178c178df2288e310584449b8e2a2e9f3da463f9811523743304d5b920bce7c75147d302761a68f906b0487a3e817946a9a49017b936ac8d560666b88602cb1399ae0b3214a0ef0a7f2303ce677479573d18319a0ef2b9e50152a41026df5af1982f7eed4cd80fc28b07cbf19055409765f85b4705227701ae82caa"}}, {0xcb, &(0x7f00000015c0)=@string={0xcb, 0x3, "ad6ac289364103ff4dda781be742672f189665ef9d931f1bfc71e6944e05782e319c540edc6fac9fb2555a9dfb62d0dd24b0d59d7239cce3e175197db7e721653e4105050c6f6477d7e4174c42b9e02539a88638192105382ebf3de1445852a2883996a3aa7a4bfc85136d57e27a90a9ffcf4489b236f6a5fd858f16caf86d97d3626d74170398a0717e8af34727790244040882f9a69f059b0c6f4cc5ea03c3247e80feab2c4315878df8ef428ad41b983cc1a61b48f859d3483a8a69bb4c9f62a5f7fbc475a67523"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x412}}, {0xf0, &(0x7f0000001700)=@string={0xf0, 0x3, "32ccba70848833b3a245ba520a1fe4ee8fedac1128a0f24b3ff827d4f5e1a6cecca4a895083d0b0382a8b0fe62d453e12080edbdf54a5ffde29dd53d030a67cea263f28b2b1e1e4664362716e9f08d7e7c6dabf13d959c0449bf49c14b18035b73574ddea670741a5eced66939d1b2e14d35b9c35d3dc8415af9e46887e8fd411bddc14e83c357539c20ec8b50a1f5b19e65098b7212e73d0ae386593bdca749b1609b6d3661a7d6d9853cc6b99c75e2574830f26582dfbdee1cc6d405420c7ab7c24a0a7ba8c4c7d4a38305e284bf6647febed5365eae708ac23356d06cb91a1fd7a676b287b1f0b496d4f02005"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x418}}, {0xc1, &(0x7f0000001840)=@string={0xc1, 0x3, "96eccec1ac74d5246f31207b97a2d324f8963532f9b5e8cd7c9d16dc13b4cd4116558c39959849b8f641c630dc5f8333fd1abc6e3c52260807745c35139a90e0f41b17134a476350e74be9554d2460d2c02a93d6701eb62cb1dd920be4bc6804968df9a9f99a03907daa1abdc01b7e9809faf8d8ccb939ecd1db6f7ffe5a658a7a6e684536efed420508bd50a1ef0890f12a24a64e2a101e3f451a2a9cc69faa99bacb3883f13f3e89d1b9627a710761ecb6381522ae49b916f55112f0c7d3"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000001b00)={0x14, &(0x7f00000019c0)={0x40, 0x2, 0xde, {0xde, 0x20, "22c8ea7ea7fadc2c8b1a9ee06b802c7e1318a306c22d4b6cec741733651c5db9e3096a2c805d96a334a9b8d475d8aaef60d1d9440484a1241ae8ed2708d192f921961b4c719879370137e1741ca3b2e98201922b1918b0b81596f5e439564dbed54ec6bed23655abfdf84151ffcd2f7e4e24fa9c41bb79b8424328c68ec10c5b8b811ba241ab86465e78cb5f7d98038f6df01ca7dc484cb3187ff11f6a562ce6610ecad70222cdceae5f07b9768405873b66690d231f66a70a42cf6285f57b45eb4f05728e0061a95992dfc1a337a656bae5e50fcfe2e222737fbdbb"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "0d0caaacfffa603bb1a52c6d432fb9613ceebbd77d20e3bd4e385ce468fe87e3d42494c0c3bbe2f0d7"}}}, &(0x7f0000001e40)={0x34, &(0x7f0000001b40)={0x20, 0x13, 0xf9, "2ccd81cc3c46750b9f91fb55adea4986864994bdc993008a931b8ae043b2bd244f40a98c101da6ca0f72408fc761ca58a7662763a5e952dc0ea1e65eefeff59e5bbcc09e2972db79e84831711ced4c6f8124cfb114bce0cd0045873f7b55a62676b09c7773fe699fea8c9abbe76a0367ed8d66b259e60958af2fb07ab1d774a43c2e2bf569755aabb75cae06723315dde4fdd17533e69b338c6a950ce493705e1ff4b6677b16ac979f181b5b84243669ae0b5b2a1b4bda43a0a6be0f300665707f608543bc53ae1c63bfbe7c730979db7c2503fc68d6b43ec71da81706a384ccb39a2883809cec418a1febb65d231db30fd10053411a340aee"}, &(0x7f0000001c40)={0x0, 0xa, 0x1}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001cc0)={0x20, 0x0, 0xbf, {0xbd, "3c44bd9c13d652d718766c0c0b9df5a8ef7ca7f2e70ce6006b34d003aab21aa6f15167789487fa5ca9c0a64f583b4b474cd7f3ac076f1bbcd332b2b5a442d48381fed68c6406e9cb222a755aa109a99f598c01ec37344a38b95bf53c0216311999b009afb3c0d8eb495b206870ec4ba85900bb66dfbf6b0c2782d67b8ebb2a79027a464afcec4a50aba673109f110d27442eb8efd91f8ae4cdf37bf2b6af8a345a09da3053de1be81b5c1835086749452ae6c413b89d409deeacf13321"}}, &(0x7f0000001dc0)={0x20, 0x1, 0x1, 0x45}, &(0x7f0000001e00)={0x20, 0x0, 0x1, 0xa}}) r6 = syz_open_dev$vim2m(&(0x7f0000001e80), 0x8, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000001f00)={0x0, 0x0, 0xffffffffffffffff}) splice(r6, &(0x7f0000001ec0)=0x5, r7, &(0x7f0000001f40)=0x4, 0xfffffffffffff801, 0xa) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000001f80)={0xfffffffffffffffe, 0x6}) recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000001fc0)=@caif=@util, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=""/48, 0x30}, 0x7ff}, {{&(0x7f00000020c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002140)=""/242, 0xf2}, {&(0x7f0000002240)=""/154, 0x9a}, {&(0x7f0000002300)=""/240, 0xf0}], 0x3, &(0x7f0000002440)=""/232, 0xe8}, 0x3}, {{&(0x7f0000002540), 0x80, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/239, 0xef}, {&(0x7f00000026c0)=""/149, 0x95}, {&(0x7f0000002780)=""/173, 0xad}], 0x3, &(0x7f0000002880)=""/243, 0xf3}, 0x5}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002980)=""/147, 0x93}, {&(0x7f0000002a40)=""/203, 0xcb}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000002b80)=""/13, 0xd}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/58, 0x3a}, {&(0x7f0000003c00)=""/232, 0xe8}, {&(0x7f0000003d00)=""/103, 0x67}, {&(0x7f0000003d80)=""/18, 0x12}, {&(0x7f0000003dc0)=""/16, 0x10}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x8, &(0x7f0000004e80)=""/250, 0xfa}, 0xff}], 0x5, 0x40000040, 0x0) syz_emit_ethernet(0x85, &(0x7f00000050c0)={@local, @local, @void, {@llc={0x4, {@llc={0xaa, 0x8e, "657f", "38c680c9dafaed965a1c000e9a395a4d9a6e99392bc5724a0a03f38e0535e1cd138a879047317a1df7a59c418d994c0d1d10e637cf1a7dbbaeb37b3520b44dc6edbabf9a71f1bc8e2469e68e9bb5a616b45c93b11f8ff2929db7586866a7a1ba4018d893face6af5cc0538d57f3f44b35789b9"}}}}}, &(0x7f0000005180)={0x0, 0x2, [0x694, 0x2f7, 0xb5b, 0x5b3]}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005200), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000005400)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005240)={0x154, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb30}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe730}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x840}, 0x4081) fdatasync(r2) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000005440)=0x1, 0x4) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000005580)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005540)={&(0x7f00000054c0)={0x48, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x4081) ioctl$TCFLSH(r0, 0x540b, 0x1) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000055c0)='ns/uts\x00') ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000005600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x6, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x5, 0x0, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd, 0x4, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xca, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xa2, 0x3, 0x7f}}}}}]}}]}}, &(0x7f00000058c0)={0xa, &(0x7f0000005680)={0xa, 0x6, 0x250, 0x6, 0x70, 0x27, 0x20, 0x1}, 0x28, &(0x7f00000056c0)={0x5, 0xf, 0x28, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xc4, 0x9, 0x9, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xaa, 0x2, 0x8, 0x0, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x8, 0x9}]}, 0x4, [{0x4, &(0x7f0000005700)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000005740)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000005780)=@lang_id={0x4, 0x3, 0x1004}}, {0xe9, &(0x7f00000057c0)=@string={0xe9, 0x3, "dd9ee3a0cd6377bcf488059f5064db0c79df29139b376d4d90708154b5b978d9907bb4e7956b6906573bc42859d56190f2048e2c87a7f5448c619907cf278d4fe6abe7b90cb1d7d050cf6c0645e89f405f989d6f19d84adbf8b8f38270b9cd1b6fe9232e93602a2257ffb67053611d3b4413885958aa4e0fb1122bd38e24e9dd41bbc67e392a8dc186ac09b5cd2d5c7b359fd355c00aeb1bae4085b6301a78f1aa7961a3ae3b1ebcd5b8c48c213b981a39292d63b2303bae303957113901367bb1bb565776318b048160449131296204164443b0926e0620c4159f90a69c8fe4c7442b82e8ddb2"}}]}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000005940)={0x0, r4}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000005980)={@hyper}) 5.666802821s ago: executing program 2 (id=3923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f207df30bfb77ba68132b4950400af84db44be5900dfffffff00", '\x00', "ffffffffffffffff"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x1, 0x0, 0x0, {0x0, 0x1, 0x3}, {0x0, 0x2, 0x0, 0x7fff}, 0x0, 0x0, 0xa}}]}]}}]}, 0x74}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) madvise(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x19) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r7 = gettid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000003b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b00)={&(0x7f0000000780)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x9, 0x6}, {0x3, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040005}, 0xc000) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x5}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x5}) syz_open_procfs$namespace(r7, 0x0) 5.346816357s ago: executing program 2 (id=3925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x108, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xc8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x26f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x1, 0x400}) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x3}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x1c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r8 = socket$kcm(0x21, 0x0, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xfffffd9d, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000eb8150f103f36ae593000065000000000023a523b42b496cf500"], 0x18}, 0x20000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000340)) 5.12036386s ago: executing program 0 (id=3927): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x2, 0x58) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x8480, 0x0) write$sequencer(r2, &(0x7f00000000c0)=[@echo=0x6, @e={0xff, 0xc, 0xb, 0x2f, @generic=0x40, 0x6, 0x3f, 0x3}, @n={0x0, 0x6, @SEQ_NOTEON=@note=0x22, 0xbf}, @generic={0x88}, @generic={0x92}], 0x12) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_SYNC_REGS(r3, 0x4068aea3, &(0x7f0000000340)) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000003c0), 0x40, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f0000000440)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xae5ae55875b88ad6}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@flushsa={0x120, 0x1c, 0x118, 0x70bd2a, 0x25dfdbfe, {0x2b}, [@mark={0xc, 0x15, {0x35075c, 0x5}}, @replay_thresh={0x8, 0xb, 0x7}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0xa}}, @algo_aead={0xc9, 0x12, {{'aegis256-aesni\x00'}, 0x3e8, 0x80, "5ba7534bd9f575a4336b37bc0580ad94ce307d3adf3024d6720adbe018c309842b8f8fd7066a263569efeee3a8917a56c4a3d0d0e5830100e069dda9e385481b10de2d7d7f624c7d5c37d57afb1ce6a075d3fab46ccb1b4a60dd8d0d48519c695c9bba72d341b1115762898f21e7525ec0ad5c3d057b0c6f71c7a6d994"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x7d65b752986c4cac) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000680)=0x1d, 0x4) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000006c0)={0x90000, 0x0, [0x9, 0x7, 0x2, 0x3, 0xfff, 0x6, 0x4, 0x9]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x24200812}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x840) fsetxattr$security_evm(r2, &(0x7f0000000880), &(0x7f00000008c0)=@sha1={0x1, "a483e92b2184de70bf878e3d8e240716a44de1f1"}, 0x15, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000900)=0x80000) openat$sequencer(0xffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) r7 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x8000, 0x408000) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x3, 0x2, &(0x7f0000000a80)=""/2, 0x40f00, 0x28, '\x00', r6, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x10, 0x2, 0xed7}, 0x10, 0x1f8, r0, 0x8, &(0x7f0000000bc0)=[r4, r4], &(0x7f0000000c00)=[{0x2, 0x1, 0xb, 0x2}, {0x2, 0x2, 0xf, 0x5}, {0x2, 0x3, 0xc, 0x6}, {0x4, 0x5, 0xf, 0x8}, {0x5, 0x3, 0xd, 0x5}, {0x2, 0x5, 0x6, 0x1}, {0x4, 0x1, 0x7}, {0x2, 0x3, 0x10, 0x1}], 0x10, 0x6, @void, @value}, 0x94) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffff9c, &(0x7f0000000d40), 0x0, 0x0) r9 = openat$bsg(0xffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendto$inet(r9, &(0x7f0000000dc0)="6ae31a5ff5168425a2fea3aff5e179f1d7479de3bdd9f21cc534845f86151ba125956fe2872e178b5647de6e25838aa74156c2422fa9189781978d3b04cb785e212046fa64cbca02500f65d22e99824f4ffb385fcb8b923692e3e7d9300d9287fd67faebf28e3ce73cb458733daf06d183a567661009f518e02e87868335d782eba0697f89566e69dae3363d0d9f66882fa198fd791643ba3741ab7dc474f6ebe8093aa118b18087eba9600f765f38578d75bf359388b7abd007c16be4b0587dc67b6c22270d7daf3504808a829010197e90006ac08b195bef", 0xd9, 0x10, &(0x7f0000000ec0)={0x2, 0x4e20, @private=0xa010102}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getown(r8, 0x9) ioctl$KVM_REINJECT_CONTROL(r9, 0xae71, &(0x7f0000000f00)={0xb}) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 4.581881341s ago: executing program 0 (id=3928): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) r1 = socket$inet6(0xa, 0x2, 0x0) add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) r3 = dup(r2) read$watch_queue(r3, &(0x7f00000000c0)=""/103, 0x67) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r4 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000002500)="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", 0xffffffffffffffa8, 0xfffffffffffffff8) keyctl$search(0xa, r4, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, r4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x219) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000024c0)={'ip6tnl0\x00', &(0x7f0000002440)={'ip6_vti0\x00', 0x0, 0x29, 0x26, 0x0, 0x7, 0x44, @private2, @mcast2, 0x80, 0x7800}}) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) (async) socket$inet6(0xa, 0x2, 0x0) (async) add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) dup(r2) (async) read$watch_queue(r3, &(0x7f00000000c0)=""/103, 0x67) (async) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) (async) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000002500)="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", 0xffffffffffffffa8, 0xfffffffffffffff8) (async) keyctl$search(0xa, r4, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, r4) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) write$binfmt_elf64(r5, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x219) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000024c0)={'ip6tnl0\x00', &(0x7f0000002440)={'ip6_vti0\x00', 0x0, 0x29, 0x26, 0x0, 0x7, 0x44, @private2, @mcast2, 0x80, 0x7800}}) (async) 4.214856261s ago: executing program 0 (id=3929): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) accept(r0, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) io_uring_setup(0x6ddd, &(0x7f00000002c0)) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0xe0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 4.190940178s ago: executing program 1 (id=3930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b80)="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", 0x388}, {&(0x7f0000000340)="7f109b0e3b4da8320eaaf15a78b99790176393c89f5ef160ea655d16f92c48aa3ea7b4dc08c3a430d230ff2d4e", 0x2d}], 0x2}}], 0x2, 0x400c010) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000100)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xa4, 0xec, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3}) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8050) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3]}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x8) 4.190595151s ago: executing program 3 (id=3931): syz_emit_ethernet(0x0, 0x0, 0x0) 4.089576446s ago: executing program 3 (id=3932): r0 = epoll_create1(0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000039000900000000000000000001000000040000000c000180060000000547000008000200000000000c0007800500000000000000fd0042800500000000000000b56528bf9d6dba4d8daca84da5fa9988472945f2c5ac2072872b6c8da3a0db47030278a46c8b6dcd5ae2225b0a3001664f1a255b3d7d5e6bb453cab035a60e901564c1802560b6c266fb9a4c9444bbf8b2d00865f343a05107f61a5bb9b0b7dc293bfb3a7df187595a78da15b8e844c73ec3515bf60ec1b438678f17cbcc676a1472539850a7"], 0x138}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080)={0xc0000000}) 4.018803465s ago: executing program 4 (id=3933): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x4) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000018c0)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) set_mempolicy_home_node(&(0x7f0000830000/0x2000)=nil, 0x2000, 0x3, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mmap$xdp(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r2, 0x80000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 4.015447323s ago: executing program 0 (id=3934): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = dup2(r0, r0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x122032, r0, 0xa0d0d000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x120000, 0x4) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) r3 = socket(0x2a, 0x80000, 0xfffffffb) r4 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) recvmsg$can_j1939(r3, &(0x7f00000005c0)={&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/81, 0x51}], 0x4, &(0x7f00000004c0)=""/221, 0xdd}, 0x10021) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$can_raw(r1, &(0x7f0000000780)={&(0x7f00000006c0), 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x1}, 0x1, 0x0, 0x0, 0x0, "a1f4aa2d9b45180d"}, 0x10}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) fremovexattr(r1, &(0x7f00000007c0)=@random={'security.', '/dev/zero\x00'}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000800)={0x7fffffff, 0x9, 0x8, 0x3c, 0x12, "bd1f5b9892f9a59fdbb6b139aeec3793e97476"}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000800)={0x7fffffff, 0x9, 0x8, 0x3c, 0x12, "bd1f5b9892f9a59fdbb6b139aeec3793e97476"}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000840)={0xa3, "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"}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000a80)) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000a80)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000ac0)=0x200000, 0x4) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000ac0)=0x200000, 0x4) ioctl$TIOCNOTTY(r4, 0x5422) (async) ioctl$TIOCNOTTY(r4, 0x5422) r5 = msgget(0x1, 0x500) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000b00)=""/9) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000b40)=0x0) wait4(r6, &(0x7f0000000b80), 0x80000000, &(0x7f0000000bc0)) openat$proc_mixer(0xffffff9c, &(0x7f0000000c80)='/proc/asound/card1/oss_mixer\x00', 0x800, 0x0) (async) openat$proc_mixer(0xffffff9c, &(0x7f0000000c80)='/proc/asound/card1/oss_mixer\x00', 0x800, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x70) ioctl$KDMKTONE(r1, 0x4b30, 0x1f) (async) ioctl$KDMKTONE(r1, 0x4b30, 0x1f) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000001b40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000d40)={0xdb8, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x67}}}}, [@NL80211_ATTR_BEACON_HEAD={0x3d2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf}, @device_a, @device_a, @from_mac=@broadcast, {0x1, 0x8}, @value=@ver_80211n={0x0, 0xd, 0x3, 0x2, 0x0, 0x3, 0x1}}, 0x4, @random=0x9, 0x2010, @void, @void, @val={0x3, 0x1, 0xd}, @val={0x4, 0x6, {0xd5, 0x3, 0xab, 0x5}}, @void, @val={0x5, 0xd8, {0x6, 0xde, 0x7, "863904fe27a33b7e6928c939d1a1bcd4148e69e00d276103396238f9bc5d275543347e8bb04b7fb1ed328a068f5085af7caeb197f81d3650d5670e45a019699bff57a0fc9b81fed83e5a7257c3265a685e27449f8b3a9b7d16b7e2c01567addaac5e1a845e20c2ed6d7fa38b87b648f62a8799c1d8e030c93b5c7bd582d9c83f3eb1f5b1d8e7453e88764ffed279d99c0e5ca64d821bdef605d1a427c46f1175f4bf9aacfd909d6192cbf20b3f0b22e0437f91e7170b24e0da8e4ac6bd075c7311d194040c43d60d77c0e8574489cf40e28b3d6990"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x71, "5fce2e25f26e6a099815aff3c1fe3a33836c6e853e9902752a19b16fea995b8f020ecee16ecee8395b2df88be4ddd6e63dd344cd900bc45c6f14ad0add0ae3b2800ab82ff77c97c69bb9e893da57bc615522366ea0577c7c7836242e0ad511faa8b02d86b2df3cb747755244a06afd2591"}, {0xdd, 0xee, "d767da05265100788f5fdc778d9c49b09ab36856fa3fd5ff7302b0f7f4cfc3e205797d2c1e411a5dd3db1af56d1948eeef28aeabf65971ea23359e26c753fd6dae2b90ed22a153f35337a418fb4e2b8dc2cb99be9821ae66fe07fc524aa08d4609baed26eafc1de74377e3cc6627b56b8855fce49822e585effed2334152f2139a5b3730417d19ad48c6c37a0e64debb0f783f971aebfcb22e421440b3945a784b1ed5749e3080a04c11341f91b2b9b5f7a4f2c7a42d2ccc0f12aae4fc07888c5e7fbed1cce0ef20ad7eecc8663f653986c81d970733bae4d8b88c2623541c61c3d811928d120c95586191c1607d"}, {0xdd, 0x14, "098045b549d8e0021e637adbb5d78e89eb4275b1"}, {0xdd, 0x2a, "9ae39e7bb04246af5fc499650bb6a286280c0d8e0f85ba8001701b779b9a583f9b735a51f39050c1ba43"}, {0xdd, 0x4d, "e16875c631035f95f853e36c05df916c0cc11ec5cf93b9ab2673c05a1bab3479a9579be97dbf3edad32e5c57fd2715941afa77a63db9f1042288d28592313c24bd76f78452d48a19e84293628e"}, {0xdd, 0xc8, "5c92f7fae3bd6ddf3fe38f742c27293c80883c8d8b4554612670039cea068a5dd8f358263f14a944bfd83085c3dfbecbe3b94fe12f9c7188210622b02186f2cfb9e6f16caef18f6305c873609f66e5e9dff33335df25d8e0d6ce48f270f9416bf283bbc20aebebf5517a0ecf2ee1a9a83d06ce939295152dce02040bef7faa5e67b8c37a5eae6688a996465d72259ea2a98fb75770c9db4ff50fd7ba2420097ab9c17f910bbe8e99c7b4b2fd9836b631832e339758d4af732afef11937c04b26a810724ad72bab0f"}]}}, @NL80211_ATTR_PROBE_RESP={0x53b, 0x91, "06be506288c2f425b5dbd54a273520d2867a22e7fac6f44cdb2484c810c0542254691a6e795635aec0c7058d4b02be507e3f1b49d39e4841a361d732bb103a1dfa7d47b52c990a85c0dcad91bb051a49ca8f74dc7332a440a38db333ce35a89eab0c3ff26023925f4ad106e1eb72e9c9bbe9cafdc7c5fb03993d8c8f78ac061f15b53ed5f03fe133e1551963cf97cfa762038c3cfaf95a343cbf91ddc13207142d67a5b1fdd74a9f8050c9c52ca4a280d928dd52dfc8b226c7e783f9a8feb623d88a34c8d62443aa6d1135f5c61b43f17e92ca3d364439301ab52e969fd8bb283c349d9a371d32e1e3b528788a0e2bc4c83d1886952819342c389bebfb997d7695ff891391ad520661e75208f1051e6d2ad939ea46263ea568fb8b350fc09b2c8828004af3085503d195a485382b38efbdada9b5e1d3a7293e1188c0d11ff24232e6b4e17ad6fddd3af74543379ba1a629bc9b0d84c053b6ac339c07ad663a94f2222b5e5932707e14d1e90b31f64b3cb9a583e5301a149682d2a48c741caf0e8631e14e4f9b4f14ecdcd1ee1d9f4d127ba7ac38b9aeadc073c5e58e90f6c10b28eb3f19c73f4dbc5aadc22ec7c7bd65ec21c0ccf112818f5f58814f890c636e639378be817c3a3a47ce0a331a2ef086dcbe7ca176c7b4a6af368496952c012cd071c5001c5c1c1906e8fd2106981a271abfef60a5230928335dc4f7a66cb8d301ce0bac192a3d47022e3ca6db7a44dbdd4dc203713f14dab0f82eaf7b16a3c117ba91915b0f018e9a77d3465930c915e54aa79256b297eecb8648a11e6fe26973ebe0400db5821a533d02a2f7916a19eb4258ffb9a6820da1b9fd08ecf4c2a7657a1e24d079e50892817ec43dcd39c00e150925244e7f4ba29999f9cc8518a0a6d414fd3b65c8d45d8760ef8f336c2d4da27ab4ed97ddf376c30e8dfe57bd4890c35dd9d1c4336d9d2056a093aa3f8c9b9cc8b34b6c80f0490ee09164706668712c1321ef8371cc60663a6cc273d51e572e903f837c80d378d45d83e0214d053b1a946ce057fb96fbc999532e65d364305dadc0f9779059d898c6bf540ead478fc071ed38efc28978fd23f19c48ec92fbdf21eb75cb50052e8627e5a5919d1c6611169927b4e981ebe6eef4cbbe082153e2f8c7d594401c43c90e721e1558064a83e4dfaf88947aa4f4fed2af4934aba78c71766927eaae53ee28fd3c7407ff187455eaad0bade3f4f3c2ef0d0a62ed819e65644b0e1e4d041db68e84d8fac2e80f5ffd2e795251e1461ed2250475d64d4f89f5d0e38f07e6e647320f82759f140283f58aea7517ebbb0746289ffee7042cd0e299257be0a13a270307ce3f32aec6fa22e6bcea95c2331a1188afad200ef512443b0319f39e04f2ae8971815c4f397de0dbd2916cb049c27b222e34c9ade8524d1a8d186e5be0572949f071fb50707775ff4733ea079bc68e8711739a68508c6200b97f22e2f94dacfdffb65025739da367af0698d439ba4214951879dae3b38c61dc5b99b7707c8320cdebd99319e21523f2ae470541eb140b383c72c63ae38902b9b1c7d868eba53f681c357ab3398aa0a76eeddd909504778050e54ddb77c729c1e65ddc23a23d06b1cb7aa7122fc0744c9db9c5d86410be4eede00c90a1b6afc5681dd829e83c42076ee8c12e9097ab53fee244e9883ec37a9b60e16d013d9b0df716d1e9c3f33aea4763622250a15b7f2d0d6120fe64d1408e4d47b8ec1f7066078d2e5b2de696a04f53f422f24eaa04d8777bfff481e1f69fcffecaed6a78b9c60730bed7c0d2e076c48d0bc124124efbb68eb181ebd4887c0c981823c3e280387df9e72c2affed7ae5c67c717be57185df881c660f20d21e0e7eb6b32120e883"}, @NL80211_ATTR_BEACON_TAIL={0x87, 0xf, [@fast_bss_trans={0x37, 0x52, {0xf, 0x0, "6251c3abe9f4311b3641d9dc8cb44c87", "4023b980cb3237281b79c54329c5fb5988ed2bfa18159b9eae56f1ac9c730475", "9cb7f763749f7b1242d244ca186efb0ed31f5c9fda0555b569e182d44a822516"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0x4, @device_b, 0xffff5eed, @value=@device_b, 0xa22, 0x2, @device_a, 0x23}}, @mesh_chsw={0x76, 0x6, {0x40, 0x2, 0x37, 0x3}}]}, @NL80211_ATTR_PROBE_RESP={0x30b, 0x91, "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"}, @NL80211_ATTR_IE={0xf3, 0x2a, [@tim={0x5, 0xe5, {0x2, 0x37, 0x9, "2450abceaf0b43d4567ce85b8cb33a82f1e24c55b29439391929b6cd00daf963552feef0b872bfe3d9abf9f0374a4349bb0751dcf2f4414d677920c5fdf73bb455d1d74583ffdbc7bd06fdba4c4fb784ec1cf68b3f910593d79684a988c10dbdb9a44a5a9fbaf2f5166f51330701bb0603e8378af884b1568e178c33cdf67876932abc0aa7c35227facc812a77c1b5aecca6c45ad70687fe251993ec10f6e0a396e6b85fc4dc864b305b7c1883ccc9084516de32d19fd00a3c1671107c83563a1e6d14a920f9a58a3e3df8459d3eead2fe56ef22cb1f7d8cd4b66d5c92c68eb6c805"}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x2e, 0x9}}]}]}, 0xdb8}}, 0x4000000) 3.956535253s ago: executing program 2 (id=3935): userfaultfd(0x100000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400a80, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000002100)='./file0\x00', 0xa2000c06) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="c7c12bbd7000fddbdf25620000000600b4c9e600681300000600b30002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0xd5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x8800) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0xa5000802) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9264}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r7 = syz_usbip_server_init(0x4) syz_usbip_server_init(0x5) read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x136fce6be7d7e15b, 0x40010, r5, 0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x13}, 0x0) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.868694239s ago: executing program 0 (id=3936): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) getpgrp(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x801, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ustat(0x6d, &(0x7f0000000000)) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@cipso={0x86, 0x1a, 0x0, [{0x0, 0x5, "d8a065"}, {0x0, 0xf, "d90db467f799205193f4d25d65"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2}, {@private}, {@broadcast}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000089d404bce1beb501a15cc14e96b3080045000030000000aa031e907800050a5f45040005000024007f0000057f00"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3800000003080102000000000000000000000000060002400000000005000300840000321400048008000440000000000800034000000000"], 0x38}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="0000c75c6c208d2c179500f79aa67469ef10b1d18e2bceeaecbc0edf75210760efc6ff18d843af71334c7e5f37e4555a6caf994f3b61ec6b0ce0a8598c107cc6023fb79d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.79338222s ago: executing program 4 (id=3937): r0 = getpgrp(0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x8) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)={0x2, 0x2, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00200000000000000000000c002100000000000000000043ca90"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair(0x28, 0x0, 0x28, &(0x7f0000000000)={0xffffffffffffffff}) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00)="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", 0x16f, r6) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0x2, 0x2, 0x0, @loopback}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000600)="580000001400add427323b472545b45602117fffffff81000e220e22040000000000000020007b000904000000000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r10 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r11 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r12 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r10, r12, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x4, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x20000000}) r13 = syz_pidfd_open(r0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e04000620cf"], 0x7) unshare(0x400) pidfd_send_signal(r13, 0x0, &(0x7f0000000140), 0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x111800, 0xa3) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000000000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000ba2d3597d6249740040018800800048004000380"], 0x70}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000001f08a4d46d11e8f52d3f19b5e81d462c21d1fdf3aafdec25c65a8f3ccc71c15fd9f683b3b041000441c53c66ddde649bbae5e340646c3ceae81930e8c6c", @ANYRES64=r2, @ANYRES16=r11, @ANYRES32=r3, @ANYRES64, @ANYRESDEC=r7, @ANYRES16=0x0], 0x44}, 0x1, 0x0, 0x0, 0x400000c1}, 0x4800) 3.090687369s ago: executing program 3 (id=3938): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "00000300"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x535, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x4a, 0x10, 0xc, 0x40, 0xf11, 0x1031, 0x855c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x523, 0x4, 0xf9, 0x1, 0x80, 0xd, [{{0x9, 0x4, 0x75, 0x4, 0x7, 0x51, 0xd3, 0x2d, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x88, 0x1, 0x2006}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xe4, 0x3, 0x9, 0x8, "fcd8cb32"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x20, 0x1, 0x8, 0x6, "", "dd2539"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa1, 0x8, 0xf8}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x0, 0x2, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x7f, 0xb}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x4, 0x90, 0x7, [@generic={0xcc, 0x1, "ef326e7913ed0b5253eeefe7279f867c027d3b3100fdd96cb65f6f263c9a21404ac946b5deff1029ec2b6c9c1838edccc5d95f3a73a0247fc26d497635f5d3a41e383a422b8b63f8ae8baae7b4ee9abf9969d4e89e235c51a5f33f70339017962721cc52d6c26546429800b0ef33a1e968625bbbbc2f33a81e485380121f82873e56cf65d217ff0a6aebeb417da09d82b7a5d871b4e1531ab0c271e9cc11288b266c4df9ce50dbbaf013c12ee7552cee9c2f80c57cfa5cc41088c5f7363d9528aaa1df5aa7e7144e5378"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x41, 0x2, 0x2, [@generic={0x9a, 0xa, "a3ac230821c745a52ff5b822fd1f14c4ba353ea113db298bf78836255a537d69dec8c4d9e60f26c4f146af9f6c437842519130c5618006c0b6a42d383caae4fb288aac8b07332e6dc47d91db83c22e7a43e4d8ba3c0fad57307ed49548916a4114876c0468fbff80d8971a35cec0be1b53140740e3dba85234823088552a9afe941732739efcf36dc5279ec13f70cce22c33c80e0483b6c6"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x15, 0x58, 0x3}}]}}, {{0x9, 0x4, 0x29, 0x7e, 0xe, 0x46, 0x9b, 0x2f, 0x4, [], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0xfb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x80}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xf5, 0x6, 0x10}}, {{0x9, 0x5, 0x2, 0x14, 0x10, 0x8, 0x9, 0x6, [@generic={0x76, 0x5, "2814f5f545c7086b9865075005102995fd64927b5b29bc88779f72e10eec8b2bea0825b6e85ea1d017857b14dba52ca1388ff87b66341fd561fcb953daf37eef13c92ddb8904d0f8f9a26e3ff656eb8b41e241107e830dc3c5290153eaa62bfc4ed008397cff15153cead99328b1c2e792607e95"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x600, 0xb, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x41, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xa}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x2, 0x4, 0x41, [@generic={0x99, 0x30, "1988240218bf72ca5522c1e02a18fe03499e98601acde0f89d4f263309b9fffc470cac4031dcfd985fba57b70fe539f280615dae99a500323bcb574b9df83aefd295780582d4924a59da753adc778fbfcb60692fe7c19e700fca978b5c56cce8a8b236b21b9627d5bf218973ab51930b7ac82d2500d3c33e45321d90c655cf131c551fc681e55c33f270e78a18937a5b29ac6c40a31d81"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x66, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @generic={0x90, 0x1, "cf58f4e3bc55be6905f8946a2a88a3902dc9d4061b0873c5a2836d0ddeba2264cc3bb63a99ee5c5d5633ae306a59aaeeaf86ab6fa9252cae2e1d30aed0c16d96a6dbedf85c3218cbab719262f21f05a4ab6fc12e863828a3b9696d9c8228bfb32582f3308a23eec35d169d73b42db4b3c09f6a1cf6ad20c83909d58927c9dfdbadd0003d95339d2536643591e0ea"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x1, 0x60, 0x9d}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xf1, 0x9, 0x9c}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x84, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x43f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x9, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe0, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe9, 0x8}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x6, 0xd1}}]}}, {{0x9, 0x4, 0x2, 0xa7, 0x7, 0xd2, 0x9e, 0x75, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2f}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x9b9, 0xfff, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x10}, @acm={0x4}]}], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0xf, 0x5, 0xb}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x0, 0x7, 0xa7}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x10, 0xfc, 0xd4}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xfc, 0x5, 0x8}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x0, 0xa, 0x9, [@generic={0x18, 0x11, "33df3f8d12e3929c29173ed104b70228b6a0253394e0"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xd, 0x1, 0x4, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x30, 0x9, 0x2}}]}}, {{0x9, 0x4, 0x40, 0x8, 0x1, 0x55, 0x8d, 0x4a, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0xcb, 0x9, 0x9, [@generic={0x1c, 0x11, "9cbb4d5c4c64ea7ab6798b7bea62066535261c6422d6b21f0bbc"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xc, 0x3, 0x2, 0x2f, 0xc}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0xfa, 0x1ff}]}, 0x5, [{0x23, &(0x7f0000000140)=@string={0x23, 0x3, "a218b3b41101e1d294f2325513ecf60383ec4d03ff7569b79c5ecc9ca57298230c"}}, {0xf7, &(0x7f0000000840)=@string={0xf7, 0x3, "4e96c47dbe8b7e80c773e5a4692a45d4317c5d18d3513803a065c9ee68176fe1b897c9d49922492d839027cd656d5498ec15f443b43e59f0a131e72332c42ebbabb67e651417854c020bf563e4284565c8a9625048d8b559e92f5876748a36ee32b8a1411c10969b4545a7949ccc876e5dd432a089559c6fd4d1d3a0f7d5d41d088de3ca34b99949e714f718cbe25865a7c49eb1cacae7076c9c3c78fe2210fb01d50b900adfd0b8145943a2cc869eba78bd5fc873372259d7f529641e9492df391ed586a6fcc0a6eae089b22196be2d1512d07940cd958999d27114fdcdad8444c1bcd47f1bb9b01df6f69b8e1d662e0e70bf9766"}}, {0x15, &(0x7f0000000180)=@string={0x15, 0x3, "a9b803441e6a15c8df5f64dab2a399f06b6eaf"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xec91}}, {0xbe, &(0x7f0000000980)=@string={0xbe, 0x3, "9c8c78a56fdfd46accb8a7f2a556373c3b8ca39c9043ac8288c7d2f1b2a7f848c327da4bb9061e9e705ae0aea02976b6b50e5fcc0be932dedfb8dc1eb97150a920468e1fe85b856545bc7353adcc4a798c4ca3adbd9ddd476d4465ab0db50232b837203079e4a22f0ab7528ea89763f020c42d37d911d184c3b9f889dde99cc6748c50f6f3114406df31be65797ea6a976f50770d4c40b50cf3446dfda46db2e0f6282aec4e0ce5f1bb1f7506e7723086dad8bab0380e16464d02d5b"}}]}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') close_range(r0, 0xffffffffffffffff, 0x0) 2.883885431s ago: executing program 2 (id=3939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x2000000, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000595000/0x1000)=nil) 2.801347965s ago: executing program 4 (id=3940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x2000000, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 1) mremap(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000595000/0x1000)=nil) 2.694793214s ago: executing program 1 (id=3941): io_uring_setup(0x4979, &(0x7f00000001c0)={0x0, 0x731d, 0x1}) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, r4, r2}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x10003, 0x240, 0x1c0, &(0x7f0000000600)=[0x589, 0x7fffffffffffffff, 0x2, 0x7fffffff, 0x1, 0xffffffffffffffff, 0x6a79, 0x4, 0x100000000, 0x1, 0x0, 0x700000000000, 0x0, 0x401, 0x256f, 0x6, 0xffff, 0xd, 0x0, 0x0, 0x38fd, 0x8, 0x0, 0x6, 0x6, 0x40, 0x5, 0x4, 0x0, 0x80000001, 0x5, 0xd227, 0x3, 0x400000000007, 0xfffffffffffffffd, 0x8, 0x3, 0x5, 0x7, 0xc41f, 0x5, 0x1, 0x5, 0x7, 0x2, 0xe000000000000000, 0x4, 0x9, 0x7f, 0x4, 0x3, 0x7, 0x2, 0x100000002, 0x1, 0x4, 0x8001, 0x8, 0x7, 0x5, 0x6, 0xff, 0x8000000000000000, 0x7fffffffffffffff, 0x9, 0x8000000000000000, 0x9, 0xe8, 0x7, 0x5, 0x4, 0x1, 0x0, 0x3, 0x4, 0x65, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x10000, 0x3, 0x5, 0x7, 0x8, 0x6, 0x4, 0x36, 0x5, 0x777, 0xfd9b, 0xe7, 0x5, 0x8000000000000000, 0x6, 0x2, 0x1, 0xe07, 0x9, 0xaa04, 0x1, 0x100000001, 0x7, 0x5, 0x5de2d8fc, 0x5, 0x800, 0x2, 0x7fffffff, 0x7, 0x80, 0x6, 0x8000, 0x8, 0x4, 0x7, 0xfffffffffffffc01, 0x8d, 0x401, 0xfffffffffffff57f, 0x2, 0x0, 0x5, 0x102, 0x8000000000000000, 0x52409748, 0x9, 0x4]}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) 1.7281031s ago: executing program 4 (id=3942): syz_emit_ethernet(0x0, 0x0, 0x0) 1.668923185s ago: executing program 2 (id=3943): io_uring_setup(0x2c48, &(0x7f0000002240)={0x0, 0x2aa2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021200015f6560700904010800ffa27d092ac4fbaef25cb79dd0910e3bbc5cc06e2dba3422cb8844cbc7a8a746a994e083cc411efc29e6fd7ec48cd5e58b9a902c97d7fce764"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc71f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x97a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x47, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0xa, 0x8b}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3f, 0x2, 0x7, 0x10, 0x20}, 0x164, &(0x7f0000000140)={0x5, 0xf, 0x164, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x4b115ef7f326c597, 0x1, 0x10, 0x3, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x1, 0x6, 0x1}, @generic={0x68, 0x10, 0x1, "4711564c54892833f75193dbae3761df54e7c322fdfed26deddc78572c8e97545522e40d9f6b8618b81dc473a6429c96dd90386c123029111ccc14adb61bd77a6946fbfa1dad1fe076aa708d735cc845cfc560f99a855375e9ba54eff27c107f65309aa669"}, @generic={0xce, 0x10, 0x3, "bbd54cc7b3e16f93f0717799c7397970523508e92c44685fa14eae8c8146110d260483528e9af21ad7d5d52a234fba1c29d8d52c7c619f696ba96865fecc4b8b4293535d4070cde9af01ef8de8875f3b7f38fa097aae70655e0611f471d8d7ea8223fd7eec621acdf5e34f6b7e346284a2a889362bb8113612fa98854fddc6cd8dce095d017078f2e8bf293823f4f041d87a336a37f039c53daa48a6ccd9a816f4c57918eb2c7699db23314120f94b1199b7212b8cc3046b49d3686959e4ff17d33fa7439f1ee346c1892c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0xff, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0xf, 0x2}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="af03c97f917db04ac3db2d61af14fba04df559e1ecc0b91a4d4a59186746cfb9d7d72966c3b006ea29465427493371aedd7fdb66bc3597f00c6d2bb9885d8b1a283810a2effb62faa1d5d8648de0e16dd8c05c86b57c60195f4609fbf086e4c36b0558bf0e1ac86a8e1f51e2da6521b597f4faa4a10e55690c36f1fbfc17d3f2e883424000000089eeadfbf403fdc3ed1c458a26aa622a7b5f76ea8c974eab43359c4a"]}, {0x72, &(0x7f0000000300)=@string={0x72, 0x3, "0f035bc4a660085ba1129a6ed14d118d365f1c01040a89fa1156fb5904e1beaca142d7ebf02d46433c317e89c67e119859bdb3111b55f49178fc431a03d571b2914d828febd0753cdfd84ff95c340a06eb284b859b14ca419f2e2bc69cae34e7440424f3e659b9be991b262bca5f1225"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x42, &(0x7f0000000500)=@string={0x42, 0x3, "512363b36f161a8842cdf601536995bbab2814008bd35c542fc7dee60e9a27d08037ee3a99983ffb97cb0013669429331a452a9995ca0eb141780195b88872cd"}}, {0x39, &(0x7f0000000580)=@string={0x39, 0x3, "129db4bb8466f4270cfeb5dbd2c0ccd0d11d6ff5d378df5960fae41f7d2b1796666805ae739dafeb81eb8422289b7e853024109be0be7d"}}, {0xcf, &(0x7f00000005c0)=@string={0xcf, 0x3, "2db7c02897c44d343924f111d49aed7288fe6c2f973313b348ac696ad3616afc2daad00d688a6a8948e4192d1ae1a09183af6524977e3475f6bc330e25dd7102d3a7d6956edfbdee951f3e351691abdd5f1c460dfb0100e44499cdc49e64ebeb3f1ec442586a608275ed50c82963b24775c60970f7564230756320ef1f204ec1e5fe8171e96390a43d05f839b6c0a72fdb1584088acc6c83cd94142bc53ab4b1afe8892046f4e9af455d5ab08e2ba481cafbc968fa4753f63819f56d4881eaec359275f3ae325581fa50d8be1f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x35}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x52) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1141490, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772c0d148c6d222d8b26eab7d39ea4ee5a61fe492631957dc476e6ffa4883e45ba20cab7fb1", @ANYRESDEC=0x0]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000070900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a300000000030000480100001800c000100636f756e746572001c0001800a00010071756575650000000c00028006000140000000001400000011000100"/223], 0xe0}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0007d1000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0x5, 0xfffffffc, 0x0, 0x0, 0x80000000, 0x0, 0x5c9], [0x0, 0x1, 0x0, 0x0, 0x0, 0x4000], [0x7, 0x4, 0x0, 0x0, 0x0, 0x8]], '\x00', [{}, {}, {}, {0x7}], '\x00', 0x0, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x9a) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRES32=r1, @ANYBLOB="ff5f00000078046b0000000000000c0079000000000000", @ANYRES32=0x0, @ANYRES64=r3], 0x48) getpgid(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.554796511s ago: executing program 4 (id=3944): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5603, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/97, 0x61) write$char_usb(r0, &(0x7f0000000240)="8b", 0x1) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r6 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000002, 0x354, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r11, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r12 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r12) 868.608779ms ago: executing program 2 (id=3945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xffffffffffffffff}}, "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", "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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0xfffffffe}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) 789.608595ms ago: executing program 3 (id=3946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) 558.990183ms ago: executing program 0 (id=3947): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000440)="548190dcdd0d734be324", 0xa}], 0x1}, 0x4004000) 558.323421ms ago: executing program 3 (id=3948): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000020000100000000fb000000000a008000000000071200000014000200fe11afe133194baa34372c5915800000"], 0x30}}, 0x0) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 465.048156ms ago: executing program 3 (id=3949): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 154.046616ms ago: executing program 1 (id=3950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="17000000000000000400357affb3580000ff00008000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@var={0x8, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x833c, [{0x9, 0x4, 0x83}, {0x7, 0x5, 0x4}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}, @var={0x3, 0x0, 0x0, 0xe, 0x4}, @fwd={0x10}]}, {0x0, [0x5f, 0x5f, 0x30, 0x5f]}}, &(0x7f00000005c0)=""/86, 0x9e, 0x56, 0x1, 0x6, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd"], 0x58}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x268c5, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x4000004e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="05003400b100000006006600000000000400670004000801"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r11, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r14, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(r14, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$binfmt_script(r14, &(0x7f0000000300)={'#! ', './file1', [], 0xa, "6eda44e0eb9a8e478b"}, 0x14) r15 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$binfmt_elf32(r15, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) write$cgroup_subtree(r15, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRESHEX=r1, @ANYRES64=r1], 0x6e8a) 0s ago: executing program 1 (id=3951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000020180c20000000800450000340000000000069078000000000000000080104e3a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000190780000080a00000008ffffffff0000"], 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x20000b3e, &(0x7f0000000580)={0x0, 0xa2f, 0x80, 0x0, 0x1ad, 0x0, r1}, &(0x7f0000000140), &(0x7f00000002c0)) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xfbffffff, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/fscreate\x00') fchdir(r2) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000340), 0x7, 0xc000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket(0x25, 0x1, 0xa) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x0, 0x0, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) writev(0xffffffffffffffff, &(0x7f0000000040), 0x55) (async) writev(0xffffffffffffffff, &(0x7f0000000040), 0x55) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)=""/209, 0xfffffffffffffdc0}, {&(0x7f0000000880)=""/206, 0xce}, {&(0x7f0000000980)=""/251, 0xfffffffffffffea9}, {&(0x7f0000000600)=""/154}, {&(0x7f0000000a80)=""/174}], 0x3}}], 0x1, 0x40000163, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x6) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$tun(r7, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x6a) kernel console output (not intermixed with test programs): y recommended to keep mac addresses unique to avoid problems! [ 1173.202221][ T29] audit: type=1326 audit(1728387859.846:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24976 comm="syz.4.3699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80937dff9 code=0x0 [ 1173.203023][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.237303][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.249797][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.262372][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.273088][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.284284][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.300756][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.328871][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.340650][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.351955][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.364045][T24793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.373938][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.391146][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.417099][T24793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.427695][T24793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.437709][T24793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.448154][T24793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.525090][T11815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.576267][T24839] veth0_vlan: entered promiscuous mode [ 1173.599650][T11815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.650297][T24839] veth1_vlan: entered promiscuous mode [ 1173.665321][T24980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.701170][T24980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.741647][T21410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.750284][T24839] veth0_macvtap: entered promiscuous mode [ 1173.754832][T21410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.778335][T24839] veth1_macvtap: entered promiscuous mode [ 1173.806718][T11819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.821629][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.829121][T11819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.833222][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.851497][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.862380][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.876456][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.887701][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.898123][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.910435][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.921168][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.934306][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.945042][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.955775][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.968079][T24839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.989125][T13355] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1173.997862][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.011463][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.022916][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.033675][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.044880][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.055594][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.072265][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.088558][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.101106][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.114896][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.125667][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.139567][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.150184][T24839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.161110][T24839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.171219][T13355] usb 3-1: Using ep0 maxpacket: 32 [ 1174.181156][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1174.190433][T24839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.200539][T13355] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1174.210338][T13355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.218375][T13355] usb 3-1: Product: syz [ 1174.224084][T13355] usb 3-1: Manufacturer: syz [ 1174.228738][T13355] usb 3-1: SerialNumber: syz [ 1174.241738][T13355] usb 3-1: config 0 descriptor?? [ 1174.266475][T24984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1174.282698][T24839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.292293][T24839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.317383][T24839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.339094][T24839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.468005][T13355] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input128 [ 1174.528110][T13355] input: failed to attach handler mousedev to device input128, error: -5 [ 1174.541510][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.552539][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.685520][T21410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.720662][T21410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.764745][ T8] usb 3-1: USB disconnect, device number 84 [ 1174.949117][T13355] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1175.109098][T13356] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1175.119316][T13355] usb 5-1: Using ep0 maxpacket: 32 [ 1175.128998][T25007] netlink: 'syz.0.3705': attribute type 1 has an invalid length. [ 1175.137038][T25007] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1175.149046][T13355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.164880][T13355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.175289][T13355] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 1175.185122][T13355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.195595][T13355] usb 5-1: config 0 descriptor?? [ 1175.270086][T13356] usb 2-1: Using ep0 maxpacket: 32 [ 1175.299389][T13356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.342254][T13356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.377600][T13356] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1175.395139][T13356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.409826][T13356] usb 2-1: config 0 descriptor?? [ 1175.720535][T13355] nzxt-smart2 0003:1E71:200F.0058: unknown main item tag 0xe [ 1175.759769][T25020] veth1_macvtap: left promiscuous mode [ 1175.761595][T13355] nzxt-smart2 0003:1E71:200F.0058: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.4-1/input0 [ 1175.776087][T25020] macsec0: entered promiscuous mode [ 1175.826905][T25020] veth1_macvtap: entered promiscuous mode [ 1175.839300][T25020] macsec0: left promiscuous mode [ 1175.850908][T13356] logitech 0003:046D:C50C.0059: unknown main item tag 0x0 [ 1175.876783][T13356] logitech 0003:046D:C50C.0059: hidraw1: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 1175.907901][T13355] usb 5-1: USB disconnect, device number 121 [ 1176.025438][ T29] audit: type=1326 audit(1728387862.666:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.2.3709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837a57dff9 code=0x0 [ 1176.057968][T24486] usb 2-1: USB disconnect, device number 121 [ 1176.379480][T25031] binder: 25030:25031 ioctl 4018620d 0 returned -22 [ 1176.641523][T25039] netpci0: tun_chr_ioctl cmd 2147767506 [ 1176.642300][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4000 [ 1176.658556][T25039] netpci0: tun_chr_ioctl cmd 1074812117 [ 1176.671918][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x1 [ 1176.703293][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2 [ 1176.712270][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4003 [ 1176.724164][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4000 [ 1176.734976][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 1176.748064][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4000 [ 1176.757079][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x1 [ 1176.766742][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2 [ 1176.785982][T25031] kvm: kvm [25030]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4003 [ 1176.951592][T25049] binder: 25048:25049 ioctl 4018620d 0 returned -22 [ 1177.104594][T25056] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3719'. [ 1177.129036][ T8] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1177.230766][T25056] openvswitch: netlink: Tunnel attr 110 out of range max 16 [ 1177.320143][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1177.341211][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.366191][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.398446][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1177.421245][ T8] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1177.448753][ T8] usb 2-1: Product: syz [ 1177.457684][ T8] usb 2-1: Manufacturer: syz [ 1177.503226][ T8] hub 2-1:4.0: USB hub found [ 1177.561344][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.567870][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.569111][T13345] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1177.707778][ T8] hub 2-1:4.0: 2 ports detected [ 1177.769098][T13345] usb 5-1: Using ep0 maxpacket: 8 [ 1177.780768][T13345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1177.788270][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1177.815504][T25084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.841662][T13345] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1177.863962][T25084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.891458][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1177.909094][T13355] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1177.922230][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1177.950468][T13345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1177.958025][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1177.989218][T13345] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1178.019806][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1178.039507][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1178.059238][T13355] usb 4-1: device descriptor read/64, error -71 [ 1178.070446][T13345] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1178.077930][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1178.099117][T13345] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1178.119274][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1178.149159][T13345] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1178.181758][T13345] usb 5-1: string descriptor 0 read error: -22 [ 1178.202984][T13345] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1178.219063][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.248777][T13345] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1178.299171][T13355] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1178.439593][T13355] usb 4-1: device descriptor read/64, error -71 [ 1178.471992][T13345] usb 5-1: USB disconnect, device number 122 [ 1178.526714][T25094] openvswitch: netlink: Actions may not be safe on all matching packets [ 1178.546453][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1178.569303][T13355] usb usb4-port1: attempt power cycle [ 1178.667921][T25100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.678549][T25100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.889315][T25014] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1178.920852][T13345] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1178.929081][T13355] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1178.952386][ T8] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 1178.953644][T13356] usb 2-1: USB disconnect, device number 122 [ 1178.968381][T13355] usb 4-1: device descriptor read/8, error -71 [ 1179.059056][T25014] usb 3-1: Using ep0 maxpacket: 8 [ 1179.065588][T25014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1179.077951][T25014] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=74.98 [ 1179.084531][T13345] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 1179.089757][T25014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.103671][T13345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.105947][T25014] usb 3-1: Product: syz [ 1179.114276][T13345] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1179.121442][T25014] usb 3-1: Manufacturer: syz [ 1179.127500][T13345] usb 5-1: config 0 has no interface number 0 [ 1179.138155][T13345] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1179.139994][T25014] usb 3-1: SerialNumber: syz [ 1179.150414][T13345] usb 5-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1179.167607][T13345] usb 5-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1179.168482][T25014] usb 3-1: config 0 descriptor?? [ 1179.192282][T25014] pxrc 3-1:0.0: Could not find endpoint [ 1179.197972][T13345] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1179.218361][T13345] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1179.231123][T13345] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.67 [ 1179.254870][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.257516][T13355] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1179.270242][T13345] usb 5-1: Product: syz [ 1179.278978][T13345] usb 5-1: Manufacturer: syz [ 1179.284713][T13345] usb 5-1: SerialNumber: syz [ 1179.300007][T13355] usb 4-1: device descriptor read/8, error -71 [ 1179.308262][T13345] usb 5-1: config 0 descriptor?? [ 1179.314156][T25097] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1179.409979][T13355] usb usb4-port1: unable to enumerate USB device [ 1179.429921][T25106] loop9: detected capacity change from 0 to 7 [ 1179.447651][T25106] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1179.453320][T25106] loop9: partition table partially beyond EOD, truncated [ 1179.462856][T25106] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1179.554630][T13345] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 1179.618251][T13345] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1179.634582][T13345] usb 5-1: USB disconnect, device number 123 [ 1179.654634][ T5232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1179.671012][ T5232] Bluetooth: hci1: Injecting HCI hardware error event [ 1179.681757][ T5232] Bluetooth: hci1: hardware error 0x00 [ 1179.726286][T13345] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1179.736546][T13345] cypress_m8 5-1:0.74: device disconnected [ 1180.108280][T25111] binder: 25110:25111 ioctl 4018620d 0 returned -22 [ 1180.145926][T25113] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1180.145926][T25113] program syz.0.3731 not setting count and/or reply_len properly [ 1180.174933][T25113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.207862][T25113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.531169][T25108] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 1180.619540][T13345] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1180.769081][T13345] usb 5-1: Using ep0 maxpacket: 16 [ 1180.798613][T13345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.831577][T13345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.879033][T13345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1180.911572][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1180.919820][T13345] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1180.939016][T13345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.944054][T13355] usb 3-1: USB disconnect, device number 85 [ 1180.964913][T13345] usb 5-1: config 0 descriptor?? [ 1181.066906][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1181.109101][T13356] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1181.302156][T13356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.329962][T25143] dvmrp0: entered allmulticast mode [ 1181.351665][T25143] dvmrp1: entered allmulticast mode [ 1181.377328][T13356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.381814][T25143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.387244][T13356] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1181.407477][T13356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.430461][T13356] usb 4-1: config 0 descriptor?? [ 1181.431478][T13345] microsoft 0003:045E:07DA.005A: No inputs registered, leaving [ 1181.519559][T25143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.548094][T13345] microsoft 0003:045E:07DA.005A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1181.577907][T25143] dvmrp0: left allmulticast mode [ 1181.583511][T25143] dvmrp1: left allmulticast mode [ 1181.602545][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.624735][T13345] microsoft 0003:045E:07DA.005A: no inputs found [ 1181.637188][T25146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.649074][T13345] microsoft 0003:045E:07DA.005A: could not initialize ff, continuing anyway [ 1181.669480][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.696127][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.743340][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.779120][T25146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.799429][ T5232] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1181.837213][ T4646] usb 5-1: USB disconnect, device number 124 [ 1181.912122][T25145] netlink: 20 bytes leftover after parsing attributes in process `\k[sC֘Y [ 1181.912122][T25145] I}'. [ 1182.069987][T13356] hid-led 0003:1D34:000A.005B: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1182.150074][T13356] hid-led 0003:1D34:000A.005B: Dream Cheeky Webmail Notifier initialized [ 1182.458311][T25158] FAULT_INJECTION: forcing a failure. [ 1182.458311][T25158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1182.504951][T25158] CPU: 0 UID: 0 PID: 25158 Comm: syz.4.3741 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1182.515774][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1182.525864][T25158] Call Trace: [ 1182.529165][T25158] [ 1182.532116][T25158] dump_stack_lvl+0x241/0x360 [ 1182.536829][T25158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.542058][T25158] ? __pfx__printk+0x10/0x10 [ 1182.546693][T25158] should_fail_ex+0x3b0/0x4e0 [ 1182.551410][T25158] prepare_alloc_pages+0x1da/0x5d0 [ 1182.556584][T25158] __alloc_pages_noprof+0x166/0x6c0 [ 1182.561821][T25158] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1182.567586][T25158] ? kmalloc_reserve+0xa8/0x2a0 [ 1182.572498][T25158] ? __build_skb_around+0x245/0x3d0 [ 1182.577781][T25158] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1182.583286][T25158] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1182.589276][T25158] ? alloc_pages_noprof+0xef/0x170 [ 1182.594420][T25158] alloc_skb_with_frags+0x228/0x820 [ 1182.599650][T25158] sock_alloc_send_pskb+0x91a/0xa60 [ 1182.604874][T25158] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1182.610619][T25158] ? dev_get_by_index+0x23/0x2d0 [ 1182.615572][T25158] packet_sendmsg+0x3f33/0x6860 [ 1182.620444][T25158] ? __pfx___might_resched+0x10/0x10 [ 1182.625747][T25158] ? aa_sk_perm+0x96d/0xab0 [ 1182.630267][T25158] ? __pfx_packet_sendmsg+0x10/0x10 [ 1182.635468][T25158] ? aa_sock_msg_perm+0x91/0x160 [ 1182.640420][T25158] ? __pfx_packet_sendmsg+0x10/0x10 [ 1182.645623][T25158] __sock_sendmsg+0x221/0x270 [ 1182.650317][T25158] ____sys_sendmsg+0x52a/0x7e0 [ 1182.655087][T25158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.660375][T25158] __sys_sendmsg+0x292/0x380 [ 1182.665021][T25158] ? __pfx___sys_sendmsg+0x10/0x10 [ 1182.670236][T25158] ? __pfx_vfs_write+0x10/0x10 [ 1182.675048][T25158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1182.681407][T25158] ? do_syscall_64+0x100/0x230 [ 1182.686180][T25158] ? do_syscall_64+0xb6/0x230 [ 1182.690860][T25158] do_syscall_64+0xf3/0x230 [ 1182.695398][T25158] ? clear_bhb_loop+0x35/0x90 [ 1182.700092][T25158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.705987][T25158] RIP: 0033:0x7fb80937dff9 [ 1182.710412][T25158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.730218][T25158] RSP: 002b:00007fb80a0c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.738644][T25158] RAX: ffffffffffffffda RBX: 00007fb809535f80 RCX: 00007fb80937dff9 [ 1182.746629][T25158] RDX: 0000000004004000 RSI: 0000000020000400 RDI: 0000000000000003 [ 1182.754607][T25158] RBP: 00007fb80a0c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.762618][T25158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.770627][T25158] R13: 0000000000000000 R14: 00007fb809535f80 R15: 00007fb80965fa28 [ 1182.778613][T25158] [ 1183.206670][T25167] binder: 25166:25167 ioctl 4018620d 0 returned -22 [ 1183.973427][ T8] usb 4-1: USB disconnect, device number 61 [ 1183.989994][T13356] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1184.187915][T13356] usb 3-1: Using ep0 maxpacket: 8 [ 1184.261843][T13356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.309034][T13356] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1184.313773][ T7377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.328782][T13356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.354120][T13356] usb 3-1: config 0 descriptor?? [ 1184.596976][T13356] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1184.639981][T25191] loop9: detected capacity change from 0 to 7 [ 1184.668677][T25191] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1184.674758][T25191] loop9: partition table partially beyond EOD, truncated [ 1184.700073][T25191] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1184.820964][ T7377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.144484][ T7377] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.176183][T20350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1185.190001][T20350] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1185.214707][T20350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1185.233428][T20350] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1185.254186][T20350] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1185.264813][T20350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.506493][ T7377] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.531112][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1185.593305][T25204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1185.626756][T25204] IPv6: sit1: Disabled Multicast RS [ 1185.665311][T25204] sit1: entered allmulticast mode [ 1186.018322][T25208] openvswitch: netlink: Message has 8 unknown bytes. [ 1186.079692][ T7377] bridge_slave_1: left allmulticast mode [ 1186.107226][ T7377] bridge_slave_1: left promiscuous mode [ 1186.154210][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.276898][ T7377] bridge_slave_0: left allmulticast mode [ 1186.312724][ T7377] bridge_slave_0: left promiscuous mode [ 1186.338522][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.739104][T25014] usb 3-1: USB disconnect, device number 86 [ 1186.748360][T25014] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1186.779203][T13355] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1187.009483][T13355] usb 2-1: Using ep0 maxpacket: 32 [ 1187.019076][T13355] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1187.048469][T13355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.074169][T13355] usb 2-1: Product: syz [ 1187.088846][T13355] usb 2-1: Manufacturer: syz [ 1187.104966][T13355] usb 2-1: SerialNumber: syz [ 1187.110764][ T4646] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1187.137174][T13355] usb 2-1: config 0 descriptor?? [ 1187.291477][ T4646] usb 4-1: Using ep0 maxpacket: 16 [ 1187.320751][ T4646] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1187.335194][ T5232] Bluetooth: hci1: command tx timeout [ 1187.344507][ T4646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.357736][ T4646] usb 4-1: config 0 descriptor?? [ 1187.367031][ T4646] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1187.386690][T25237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.396741][T25237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.414578][T13355] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input130 [ 1187.579279][T25257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.602189][T25257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.654303][ T4646] gspca_sonixj: reg_r err -71 [ 1187.665959][ T4646] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1187.699223][ T4646] usb 4-1: USB disconnect, device number 62 [ 1187.861722][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.875497][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.887369][ T7377] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1187.899059][ T7377] bond0 (unregistering): Released all slaves [ 1187.957836][T25258] netlink: 'syz.2.3762': attribute type 10 has an invalid length. [ 1188.002378][T25258] macvlan0: entered promiscuous mode [ 1188.007749][T25258] macvlan0: entered allmulticast mode [ 1188.042727][T25258] veth1_vlan: entered allmulticast mode [ 1188.073640][T25258] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1188.108492][ T7377] tipc: Left network mode [ 1188.109249][T13345] usb 2-1: USB disconnect, device number 123 [ 1188.153032][T25271] loop9: detected capacity change from 0 to 7 [ 1188.179813][T25271] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1188.186822][T25271] loop9: partition table partially beyond EOD, truncated [ 1188.195452][T25271] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1188.220732][ T4646] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1188.351308][T25202] chnl_net:caif_netlink_parms(): no params data found [ 1188.462535][ T4646] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1188.481315][ T4646] usb 4-1: can't read configurations, error -22 [ 1188.574589][ T7377] hsr_slave_0: left promiscuous mode [ 1188.597243][ T7377] hsr_slave_1: left promiscuous mode [ 1188.663428][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.671098][T25014] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1188.679240][ T4646] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1188.714719][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.855568][ T7377] veth1_macvtap: left promiscuous mode [ 1188.865644][T25014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.884903][ T4646] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1188.929901][ T7377] veth0_macvtap: left promiscuous mode [ 1188.934061][ T4646] usb 4-1: can't read configurations, error -22 [ 1188.945350][ T7377] veth1_vlan: left promiscuous mode [ 1188.949329][T25014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.962868][ T4646] usb usb4-port1: attempt power cycle [ 1188.970838][ T7377] veth0_vlan: left promiscuous mode [ 1188.976251][T25014] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1188.996695][T25014] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1189.017207][T25014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.082280][T25014] usb 3-1: config 0 descriptor?? [ 1189.329395][ T4646] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1189.392696][ T4646] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1189.409093][ T5232] Bluetooth: hci1: command tx timeout [ 1189.414632][ T4646] usb 4-1: can't read configurations, error -22 [ 1189.549141][ T4646] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1189.595802][ T4646] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1189.628389][ T4646] usb 4-1: can't read configurations, error -22 [ 1189.654328][ T4646] usb usb4-port1: unable to enumerate USB device [ 1190.139805][T25301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.177598][T25301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.345576][ T7377] team0 (unregistering): Port device team_slave_1 removed [ 1190.470145][ T7377] team0 (unregistering): Port device team_slave_0 removed [ 1191.086153][ T5232] Bluetooth: Wrong link type (-71) [ 1191.479235][ T5232] Bluetooth: hci1: command tx timeout [ 1191.580392][T25014] usbhid 3-1:0.0: can't add hid device: -71 [ 1191.586839][T25014] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1191.605707][T25014] usb 3-1: USB disconnect, device number 87 [ 1191.673861][T25314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1191.692862][T25333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.713269][T25319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1191.758404][T25333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.844432][T25340] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1191.909028][ T8] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1192.104600][T25202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.121165][T25202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.145664][T25202] bridge_slave_0: entered allmulticast mode [ 1192.156317][T25202] bridge_slave_0: entered promiscuous mode [ 1192.184283][T25202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.193390][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1192.212812][T25202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.254895][T25202] bridge_slave_1: entered allmulticast mode [ 1192.268828][T25202] bridge_slave_1: entered promiscuous mode [ 1192.288218][T25342] veth0_vlan: entered allmulticast mode [ 1192.493983][T25345] veth0_vlan: left promiscuous mode [ 1192.534698][T25345] veth0_vlan: entered promiscuous mode [ 1192.629062][ T8] usb 2-1: device descriptor read/64, error -71 [ 1192.719169][T25014] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1192.798449][T25202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.933073][ T8] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1192.943303][T25202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.964714][T25014] usb 4-1: Using ep0 maxpacket: 8 [ 1193.059751][T25014] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.079258][T25014] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1193.090507][T25014] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1193.099226][T13345] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1193.100480][T25014] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.119066][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1193.126590][T25014] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1193.128758][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1193.146874][T25014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.187075][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1193.200086][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 1193.219027][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 50274, setting to 1024 [ 1193.253705][T25202] team0: Port device team_slave_0 added [ 1193.261669][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1193.295263][T25202] team0: Port device team_slave_1 added [ 1193.312804][ T8] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1193.329968][T13345] usb 3-1: Using ep0 maxpacket: 16 [ 1193.357360][T13345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.377100][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.419687][T25202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.434180][ T8] usb 2-1: config 0 descriptor?? [ 1193.447137][T13345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.463886][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.497231][T25344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1193.519578][T13345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1193.579262][ T5232] Bluetooth: hci1: command tx timeout [ 1193.582581][ T8] metro_usb 2-1:0.0: Metrologic USB to Serial converter detected [ 1193.601980][T25202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.619639][T25202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.626657][T25202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.650231][T13345] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1193.652995][T25202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.737392][T25014] usb 4-1: GET_CAPABILITIES returned 0 [ 1193.743025][T25014] usbtmc 4-1:16.0: can't read capabilities [ 1193.769059][ T8] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1193.801444][T13345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.868718][T25202] hsr_slave_0: entered promiscuous mode [ 1193.882451][ T8] usb 2-1: USB disconnect, device number 125 [ 1193.892147][T13345] usb 3-1: config 0 descriptor?? [ 1193.925115][T25202] hsr_slave_1: entered promiscuous mode [ 1193.947034][ T8] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1193.984195][ T8] metro_usb 2-1:0.0: device disconnected [ 1193.990404][T25202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.032600][T25202] Cannot create hsr debugfs directory [ 1194.093365][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.102518][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.113806][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.122942][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.135450][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.144952][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.154060][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.163113][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.173057][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.182179][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.192925][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.202057][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.211175][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.227614][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.236828][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.245911][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1194.337062][ T29] audit: type=1326 audit(1728387880.976:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25376 comm="syz.0.3781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3df7dff9 code=0x0 [ 1194.381709][T13345] microsoft 0003:045E:07DA.005C: No inputs registered, leaving [ 1194.400600][T25378] FAULT_INJECTION: forcing a failure. [ 1194.400600][T25378] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.417122][T13345] microsoft 0003:045E:07DA.005C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1194.429261][T25378] CPU: 1 UID: 0 PID: 25378 Comm: syz.0.3781 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1194.440075][T25378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1194.450160][T25378] Call Trace: [ 1194.453448][T25378] [ 1194.456391][T25378] dump_stack_lvl+0x241/0x360 [ 1194.461097][T25378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1194.466310][T25378] ? __pfx__printk+0x10/0x10 [ 1194.470899][T25378] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 1194.476816][T25378] ? __pfx___might_resched+0x10/0x10 [ 1194.482134][T25378] should_fail_ex+0x3b0/0x4e0 [ 1194.486832][T25378] ? __d_alloc+0x31/0x700 [ 1194.491180][T25378] should_failslab+0xac/0x100 [ 1194.495855][T25378] ? __d_alloc+0x31/0x700 [ 1194.500187][T25378] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 1194.505924][T25378] __d_alloc+0x31/0x700 [ 1194.510092][T25378] d_alloc_parallel+0xdf/0x1600 [ 1194.514973][T25378] ? __asan_memset+0x23/0x50 [ 1194.519592][T25378] ? __asan_memset+0x23/0x50 [ 1194.524215][T25378] ? lockdep_init_map_type+0xa1/0x910 [ 1194.529621][T25378] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1194.535448][T25378] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1194.540828][T25378] ? __init_waitqueue_head+0xae/0x150 [ 1194.546218][T25378] __lookup_slow+0x117/0x3f0 [ 1194.550815][T25378] ? __pfx___lookup_slow+0x10/0x10 [ 1194.555935][T25378] ? try_to_unlazy+0x35c/0x5b0 [ 1194.560699][T25378] lookup_slow+0x53/0x70 [ 1194.564936][T25378] link_path_walk+0x99b/0xea0 [ 1194.569643][T25378] path_openat+0x266/0x3590 [ 1194.574157][T25378] ? __pfx_stack_trace_save+0x10/0x10 [ 1194.579618][T25378] ? __pfx_path_openat+0x10/0x10 [ 1194.584563][T25378] do_filp_open+0x235/0x490 [ 1194.589064][T25378] ? __pfx_do_filp_open+0x10/0x10 [ 1194.591226][T25355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.594090][T25378] ? __pfx_kfree_link+0x10/0x10 [ 1194.607252][T25378] ? _raw_spin_unlock+0x28/0x50 [ 1194.612101][T25378] ? alloc_fd+0x5a1/0x640 [ 1194.616447][T25378] do_sys_openat2+0x13e/0x1d0 [ 1194.621181][T25378] ? __pfx_do_sys_openat2+0x10/0x10 [ 1194.626391][T25378] __x64_sys_openat+0x247/0x2a0 [ 1194.631238][T25378] ? __pfx___x64_sys_openat+0x10/0x10 [ 1194.636607][T25378] ? do_syscall_64+0x100/0x230 [ 1194.641364][T25378] ? do_syscall_64+0xb6/0x230 [ 1194.646039][T25378] do_syscall_64+0xf3/0x230 [ 1194.650530][T25378] ? clear_bhb_loop+0x35/0x90 [ 1194.655198][T25378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.661087][T25378] RIP: 0033:0x7efc3df7c990 [ 1194.665494][T25378] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1194.685087][T25378] RSP: 002b:00007efc3ed58f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1194.693492][T25378] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efc3df7c990 [ 1194.701451][T25378] RDX: 0000000000000002 RSI: 00007efc3ed58fa0 RDI: 00000000ffffff9c [ 1194.709426][T25378] RBP: 00007efc3ed58fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.717380][T25378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1194.725345][T25378] R13: 0000000000000001 R14: 00007efc3e136058 R15: 00007efc3e25fa28 [ 1194.733315][T25378] [ 1194.748385][T13345] microsoft 0003:045E:07DA.005C: no inputs found [ 1194.755683][T13345] microsoft 0003:045E:07DA.005C: could not initialize ff, continuing anyway [ 1194.755783][T25355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.813437][T25355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.891620][T24486] usb 4-1: USB disconnect, device number 67 [ 1194.935062][T25355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.961111][T13345] usb 3-1: USB disconnect, device number 88 [ 1195.160039][ T5232] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1195.170351][ T5232] Bluetooth: hci3: Injecting HCI hardware error event [ 1195.179676][ T5232] Bluetooth: hci3: hardware error 0x00 [ 1195.210697][T25014] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1195.389158][T25014] usb 2-1: Using ep0 maxpacket: 16 [ 1195.397502][T25014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.419439][T25014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.439640][T25014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1195.462180][T25014] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1195.471840][T25014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.482423][T25014] usb 2-1: config 0 descriptor?? [ 1195.922805][T25419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.942895][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1195.974335][T25419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.153422][T25202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1196.173807][T25202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1196.192285][T25202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1196.219223][T13345] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1196.231287][T25380] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 1196.235482][T25202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1196.259146][T25380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3782'. [ 1196.286139][T25433] loop6: detected capacity change from 0 to 524287999 [ 1196.296722][T25014] usbhid 2-1:0.0: can't add hid device: -71 [ 1196.313953][T25014] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1196.315773][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.331277][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.349839][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.358392][T25014] usb 2-1: USB disconnect, device number 126 [ 1196.359094][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.376185][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.385414][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.395348][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.404555][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.419015][T13345] usb 3-1: Using ep0 maxpacket: 16 [ 1196.422938][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.433355][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.438788][T13345] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1196.458411][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.467640][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.478179][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.479040][T13345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.487378][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.510172][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.519502][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.531333][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.533358][T25202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.540537][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.541053][T25433] ldm_validate_partition_table(): Disk read failed. [ 1196.557142][T13345] usb 3-1: Product: syz [ 1196.567909][T13345] usb 3-1: Manufacturer: syz [ 1196.572891][T13345] usb 3-1: SerialNumber: syz [ 1196.577472][T25202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.581948][T13345] usb 3-1: config 0 descriptor?? [ 1196.590647][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1196.600115][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1196.609918][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.617325][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.631821][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.639109][T11815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.639425][T25433] Dev loop6: unable to read RDB block 0 [ 1196.663054][T13345] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.692837][T13345] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1196.718579][T25202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1196.731934][T25433] loop6: unable to read partition table [ 1196.736161][T21534] udevd[21534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.740087][T25433] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1196.823681][T25202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.929971][T25202] veth0_vlan: entered promiscuous mode [ 1196.955901][T25202] veth1_vlan: entered promiscuous mode [ 1197.041821][T25202] veth0_macvtap: entered promiscuous mode [ 1197.068740][T25202] veth1_macvtap: entered promiscuous mode [ 1197.101991][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.119625][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.139897][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.200745][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.242126][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.256218][ T5232] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1197.267776][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.278155][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.289572][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.299801][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.310388][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.321715][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.332451][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.368999][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.387048][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.413279][T25202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.456802][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.490915][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.517984][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.529135][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.539927][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.550724][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.565254][T25455] loop9: detected capacity change from 0 to 7 [ 1197.571579][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.584736][T25455] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1197.592856][T25455] loop9: partition table partially beyond EOD, truncated [ 1197.600950][T25455] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1197.635299][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.670594][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.681735][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.692757][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.703953][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.714018][T25202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.725965][T25202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.737352][T25202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.751505][T25202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.767340][T25202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.822391][T25202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.851862][T25202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.478785][T21410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.487065][T21410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.559995][T11819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.567870][T11819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.669134][T13344] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1198.831680][T13344] usb 2-1: Using ep0 maxpacket: 16 [ 1198.886723][T13360] usb 3-1: USB disconnect, device number 89 [ 1198.913673][T13344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.926015][T13344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.936879][T13344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1198.950072][T13344] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1198.959613][T13344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.970094][T13345] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1198.984121][T13344] usb 2-1: config 0 descriptor?? [ 1199.049179][T24486] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1199.140482][T13345] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1199.148635][T13345] usb 4-1: config 0 has no interface number 0 [ 1199.158776][T13345] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1199.178046][T13345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.187019][T24486] usb 5-1: device descriptor read/64, error -71 [ 1199.206282][T25496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.214932][T13345] usb 4-1: Product: syz [ 1199.219977][T13345] usb 4-1: Manufacturer: syz [ 1199.225985][T13345] usb 4-1: SerialNumber: syz [ 1199.233803][T13345] usb 4-1: config 0 descriptor?? [ 1199.253529][T25496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.398253][T13344] microsoft 0003:045E:07DA.005D: No inputs registered, leaving [ 1199.411586][T13344] microsoft 0003:045E:07DA.005D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1199.431241][T24486] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1199.474124][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1199.500402][T13344] microsoft 0003:045E:07DA.005D: no inputs found [ 1199.555185][T13344] microsoft 0003:045E:07DA.005D: could not initialize ff, continuing anyway [ 1199.619143][T24486] usb 5-1: device descriptor read/64, error -71 [ 1199.642645][T25465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.694556][T25465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.760781][T24486] usb usb5-port1: attempt power cycle [ 1199.776471][T25465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.818389][T25465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.847745][T25014] usb 2-1: USB disconnect, device number 127 [ 1200.029270][ T4646] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1200.099361][T24486] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1200.120068][T24486] usb 5-1: device descriptor read/8, error -71 [ 1200.232410][ T4646] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1200.251817][ T4646] usb 3-1: config 0 has no interface number 0 [ 1200.274711][ T4646] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1200.286364][ T4646] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1200.310974][T13345] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1200.312674][ T4646] usb 3-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1200.339220][ T4646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.347307][ T4646] usb 3-1: Product: syz [ 1200.358059][ T4646] usb 3-1: Manufacturer: syz [ 1200.369190][ T4646] usb 3-1: SerialNumber: syz [ 1200.378607][ T4646] usb 3-1: config 0 descriptor?? [ 1200.390617][T24486] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1200.399823][T25504] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 1200.420043][T24486] usb 5-1: device descriptor read/8, error -71 [ 1200.529353][T24486] usb usb5-port1: unable to enumerate USB device [ 1200.681189][ T4646] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1200.740941][ T4646] usb 3-1: MIDIStreaming interface descriptor not found [ 1200.844088][ T4646] usb 3-1: USB disconnect, device number 90 [ 1200.897261][ T5279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1200.956423][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.099280][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 1201.107358][ T5279] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 1201.121653][ T5279] usb 2-1: config 0 has no interface number 0 [ 1201.135672][ T5279] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1201.158690][ T5279] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1201.172501][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.188761][ T5279] usb 2-1: Product: syz [ 1201.193355][ T5279] usb 2-1: Manufacturer: syz [ 1201.198073][ T5279] usb 2-1: SerialNumber: syz [ 1201.210216][ T5279] usb 2-1: config 0 descriptor?? [ 1201.247403][ T5279] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1201.553299][T25544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.609923][T25546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.632253][ T5279] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1201.633046][T25544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.686196][T13345] usb 4-1: USB disconnect, device number 68 [ 1201.713941][T25546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.859769][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 1201.874300][ T5279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1201.930454][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.965706][T25544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.977679][ T5279] usb 3-1: Product: syz [ 1201.982161][T25559] binder: 25557:25559 ioctl 4018620d 0 returned -22 [ 1202.008104][ T5279] usb 3-1: Manufacturer: syz [ 1202.009542][T25558] loop9: detected capacity change from 0 to 7 [ 1202.020335][T25558] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1202.025868][T25544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.034043][T25558] loop9: partition table partially beyond EOD, truncated [ 1202.049127][T25558] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1202.068643][ T5279] usb 3-1: SerialNumber: syz [ 1202.083305][ T5279] usb 3-1: config 0 descriptor?? [ 1202.143927][T25544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.176430][T25546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.230138][T25544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.279981][ T7377] usb 2-1: Failed to submit usb control message: -110 [ 1202.293475][ T7377] usb 2-1: unable to send the bmi data to the device: -110 [ 1202.304939][T25546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.319022][ T7377] usb 2-1: unable to get target info from device [ 1202.338320][ T7377] usb 2-1: could not get target info (-110) [ 1202.356384][ T7377] usb 2-1: could not probe fw (-110) [ 1202.370971][ T5279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1202.475667][T25559] kvm: kvm [25557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1202.516189][T25559] kvm: kvm [25557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1202.534889][T25559] kvm: kvm [25557]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1202.622340][T25559] kvm: kvm [25557]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xbe702105 [ 1202.812274][T25569] binder: 25568:25569 ioctl 4018620d 0 returned -22 [ 1202.980727][T25574] netlink: 'syz.0.3807': attribute type 11 has an invalid length. [ 1203.178410][T25569] kvm: kvm [25568]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1203.284974][T25569] kvm: kvm [25568]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1203.294482][T25569] kvm: kvm [25568]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1203.308014][T25569] kvm: kvm [25568]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xbe702105 [ 1203.694438][T25014] usb 2-1: USB disconnect, device number 2 [ 1203.829350][T25539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.861431][T25539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.098219][ T5279] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1204.159498][ T5279] usb 3-1: USB disconnect, device number 91 [ 1204.166025][T25600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.196346][T25600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.276223][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3812'. [ 1204.312913][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3812'. [ 1204.349185][T13345] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1204.567222][T13345] usb 2-1: Using ep0 maxpacket: 16 [ 1204.586738][T13345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.597905][T13345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.608296][T13345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1204.621481][T13345] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1204.630801][T13345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.660021][T13345] usb 2-1: config 0 descriptor?? [ 1204.732187][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1205.090493][T24486] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1205.105982][T13345] microsoft 0003:045E:07DA.005E: No inputs registered, leaving [ 1205.125645][T13345] microsoft 0003:045E:07DA.005E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1205.140725][T13345] microsoft 0003:045E:07DA.005E: no inputs found [ 1205.147232][T13345] microsoft 0003:045E:07DA.005E: could not initialize ff, continuing anyway [ 1205.280519][T24486] usb 3-1: Using ep0 maxpacket: 32 [ 1205.294014][T24486] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.309274][T24486] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.323674][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.335693][T24486] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1205.342921][T24486] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1205.352484][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.360650][T24486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.372631][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.389157][T24486] usb 3-1: config 0 descriptor?? [ 1205.394343][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.443618][ T8] usb 2-1: USB disconnect, device number 3 [ 1205.641448][T25640] fuse: Unknown parameter 'roode' [ 1205.810136][T25626] usb usb8: usbfs: process 25626 (syz.2.3820) did not claim interface 0 before use [ 1205.843177][T24486] kye 0003:0458:5014.005F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1205.858007][T25645] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1205.878314][T24486] kye 0003:0458:5014.005F: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 1205.893840][T25645] team0: entered promiscuous mode [ 1205.899244][T25645] team_slave_0: entered promiscuous mode [ 1205.909527][T24486] kye 0003:0458:5014.005F: tablet-enabling feature report not found [ 1205.918026][T25645] team_slave_1: entered promiscuous mode [ 1205.943858][T24486] kye 0003:0458:5014.005F: tablet enabling failed [ 1205.957200][T25645] team_slave_1: left promiscuous mode [ 1206.045029][T24486] usb 3-1: USB disconnect, device number 92 [ 1206.145244][T25645] team0: Port device team_slave_1 removed [ 1206.320193][T25653] team0: left promiscuous mode [ 1206.325016][T25653] team_slave_0: left promiscuous mode [ 1206.548688][ T29] audit: type=1326 audit(1728387893.186:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.1.3829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae9657dff9 code=0x0 [ 1206.627454][T25647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.643379][T25647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.889298][T13344] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1206.917827][T25683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.950522][T25683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.970134][T25683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.984347][T25683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.001379][T24486] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1207.089129][T13344] usb 5-1: Using ep0 maxpacket: 16 [ 1207.096068][T13344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1207.108454][T13344] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1207.119569][T13344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.127616][T13344] usb 5-1: Product: syz [ 1207.134270][T13344] usb 5-1: Manufacturer: syz [ 1207.139476][T13344] usb 5-1: SerialNumber: syz [ 1207.146314][T13344] usb 5-1: config 0 descriptor?? [ 1207.149174][T13355] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1207.155182][T13344] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1207.170465][T24486] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1207.180111][T24486] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1207.190846][T13344] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1207.197079][T24486] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1207.209934][T24486] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1207.220800][T24486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.229571][T24486] usb 4-1: Product: syz [ 1207.234273][T24486] usb 4-1: Manufacturer: syz [ 1207.241487][T24486] usb 4-1: SerialNumber: syz [ 1207.329981][T13355] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1207.352634][T13355] usb 2-1: not running at top speed; connect to a high speed hub [ 1207.368863][T13355] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1207.395669][T13355] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1207.409149][T13355] usb 2-1: config 1 has no interface number 1 [ 1207.430769][T13355] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1207.450346][T13355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.458398][T13355] usb 2-1: Product: syz [ 1207.466838][T24486] usb 4-1: 0:2 : does not exist [ 1207.470860][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1207.499168][T13355] usb 2-1: Manufacturer: syz [ 1207.503833][T13355] usb 2-1: SerialNumber: syz [ 1207.527460][T24486] usb 4-1: USB disconnect, device number 69 [ 1207.744619][T13355] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1207.756360][T13355] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1207.777405][T13355] usb 2-1: USB disconnect, device number 4 [ 1207.816619][T21533] udevd[21533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.837762][T13344] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1208.297386][T13344] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1208.337749][T13344] em28xx 5-1:0.0: board has no eeprom [ 1208.479031][T13344] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1208.506559][T13344] em28xx 5-1:0.0: dvb set to bulk mode. [ 1208.528179][T13360] em28xx 5-1:0.0: Binding DVB extension [ 1208.546434][T13344] usb 5-1: USB disconnect, device number 3 [ 1208.562203][ T5279] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1208.566128][T13344] em28xx 5-1:0.0: Disconnecting em28xx [ 1208.629270][T13355] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1208.744980][T13360] em28xx 5-1:0.0: Registering input extension [ 1208.785869][T13344] em28xx 5-1:0.0: Closing input extension [ 1208.810271][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 1208.838366][ T5279] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.851805][T13344] em28xx 5-1:0.0: Freeing device [ 1208.858890][T13355] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 1208.893636][T13355] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 1208.963054][ T5279] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.003768][T13355] usb 2-1: config 0 has no interface number 1 [ 1209.010136][ T5279] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.025978][T13355] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1209.040031][ T5279] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1209.070494][T13355] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1209.093971][ T5279] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1209.144389][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.155771][T13355] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1209.169733][T13355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.207849][ T5279] usbtmc 4-1:16.0: bulk endpoints not found [ 1209.214992][T13355] usb 2-1: Product: syz [ 1209.224807][T13355] usb 2-1: Manufacturer: syz [ 1209.249410][T13355] usb 2-1: SerialNumber: syz [ 1209.285343][T13355] usb 2-1: config 0 descriptor?? [ 1209.300292][T13355] usb-storage 2-1:0.127: USB Mass Storage device detected [ 1209.343838][T13355] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1209.376931][T25706] loop9: detected capacity change from 0 to 7 [ 1209.393558][T25706] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1209.400560][T25706] loop9: partition table partially beyond EOD, truncated [ 1209.408031][T25706] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1209.431925][T13355] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1209.526711][T13355] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1209.626864][T25710] sctp: [Deprecated]: syz.0.3840 (pid 25710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1209.626864][T25710] Use struct sctp_sack_info instead [ 1209.696931][T13355] usb 2-1: USB disconnect, device number 5 [ 1210.480758][ T5279] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1210.649240][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 1210.658226][ T5279] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1210.674575][ T5279] usb 3-1: config 179 has no interface number 0 [ 1210.683189][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1210.703796][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1210.718887][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1210.738732][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1210.773039][ T5279] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1210.803834][ T5279] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1210.817470][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.834147][T25715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1210.854375][T24486] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1210.889423][T13355] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1211.049234][T13355] usb 5-1: Using ep0 maxpacket: 8 [ 1211.059166][T24486] usb 2-1: Using ep0 maxpacket: 16 [ 1211.065283][ T5279] usb 3-1: USB disconnect, device number 93 [ 1211.065809][T24486] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.071358][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1211.092860][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1211.101321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.152681][T13355] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1211.161358][T24486] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1211.162295][T13355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.178337][T13355] usb 5-1: Product: syz [ 1211.187674][T13355] usb 5-1: Manufacturer: syz [ 1211.193673][T13355] usb 5-1: SerialNumber: syz [ 1211.208749][T13355] usb 5-1: config 0 descriptor?? [ 1211.220428][T13355] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1211.254225][T24486] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.40 [ 1211.271887][T24486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.294486][T13360] usb 4-1: USB disconnect, device number 70 [ 1211.302790][T24486] usb 2-1: Product: syz [ 1211.307085][T24486] usb 2-1: Manufacturer: 踹쥹ꎴ퓅毖舊䑸㻏䬀㟥蒞豇甧嶂㚥誢 [ 1211.359750][T24486] usb 2-1: SerialNumber: syz [ 1211.509756][ T29] audit: type=1326 audit(1728387898.146:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25745 comm="syz.3.3851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0897dff9 code=0x0 [ 1211.891509][T24486] usbhid 2-1:1.0: can't add hid device: -71 [ 1211.902879][T24486] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1211.928264][T24486] usb 2-1: USB disconnect, device number 6 [ 1212.033309][T13355] gspca_sq930x: ucbus_write failed -71 [ 1212.039218][T13355] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1212.068238][T13355] usb 5-1: USB disconnect, device number 4 [ 1212.219058][T13360] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1212.380378][T13360] usb 3-1: device descriptor read/64, error -71 [ 1212.448319][T25753] loop9: detected capacity change from 0 to 7 [ 1212.505194][T25753] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1212.525625][T25753] loop9: partition table partially beyond EOD, truncated [ 1212.534411][T25753] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1212.631713][T13360] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1212.696170][T25755] erspan0: entered promiscuous mode [ 1212.737649][T25755] vlan2: entered promiscuous mode [ 1212.799782][T13360] usb 3-1: device descriptor read/64, error -71 [ 1212.808897][T25755] erspan0: left promiscuous mode [ 1212.906854][T25761] bridge1: entered allmulticast mode [ 1212.935668][T13360] usb usb3-port1: attempt power cycle [ 1213.087631][T25763] netlink: 'syz.4.3857': attribute type 1 has an invalid length. [ 1213.330634][T13360] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1213.370006][T13360] usb 3-1: device descriptor read/8, error -71 [ 1213.449090][T13344] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1213.549333][T13345] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1213.579330][T13356] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1213.620636][T13344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.630855][T13344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1213.631873][T13344] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1213.631903][T13344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1213.631925][T13344] usb 2-1: SerialNumber: syz [ 1213.640831][T13360] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1213.666030][T13360] usb 3-1: device descriptor read/8, error -71 [ 1213.719145][T13356] usb 5-1: device descriptor read/64, error -71 [ 1213.731039][T13345] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1213.742822][T13345] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1213.753360][T13345] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1213.763165][T13345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.777620][T25769] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1213.789477][T13345] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1213.831835][T13360] usb usb3-port1: unable to enumerate USB device [ 1213.948041][T13344] usb 2-1: 0:2 : does not exist [ 1213.971922][T13344] usb 2-1: USB disconnect, device number 7 [ 1213.979214][T13356] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1214.021371][T21534] udevd[21534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1214.159118][T13356] usb 5-1: device descriptor read/64, error -71 [ 1214.279579][T13356] usb usb5-port1: attempt power cycle [ 1214.285793][T24839] cgroup: fork rejected by pids controller in /syz1 [ 1214.636761][T13356] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1214.657613][T11819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.676401][T13356] usb 5-1: device descriptor read/8, error -71 [ 1214.808747][T11819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.929105][T13356] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1214.987522][T13356] usb 5-1: device descriptor read/8, error -71 [ 1215.141146][T13356] usb usb5-port1: unable to enumerate USB device [ 1215.154363][T25804] loop9: detected capacity change from 0 to 7 [ 1215.164577][T11819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.246084][T25804] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1215.348843][T25804] loop9: partition table partially beyond EOD, truncated [ 1215.449337][T25804] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1215.697458][T11819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.823963][T20350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1215.836592][T20350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1215.852166][T20350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1215.865026][T20350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1215.875356][T20350] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1215.884581][T20350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1215.979079][T13356] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1216.104736][ T29] audit: type=1326 audit(1728387902.746:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.3873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3df7dff9 code=0x0 [ 1216.169257][T13356] usb 3-1: Using ep0 maxpacket: 32 [ 1216.207054][T25817] FAULT_INJECTION: forcing a failure. [ 1216.207054][T25817] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.243445][T13356] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1216.266576][T25817] CPU: 0 UID: 0 PID: 25817 Comm: syz.0.3873 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1216.277389][T25817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1216.287458][T25817] Call Trace: [ 1216.290751][T25817] [ 1216.293701][T25817] dump_stack_lvl+0x241/0x360 [ 1216.298392][T25817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1216.303608][T25817] ? __pfx__printk+0x10/0x10 [ 1216.308211][T25817] ? fs_reclaim_acquire+0x93/0x140 [ 1216.313333][T25817] ? __pfx___might_resched+0x10/0x10 [ 1216.318654][T25817] should_fail_ex+0x3b0/0x4e0 [ 1216.323349][T25817] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1216.329083][T25817] should_failslab+0xac/0x100 [ 1216.333794][T25817] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1216.339538][T25817] __kmalloc_noprof+0xd8/0x400 [ 1216.344335][T25817] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1216.349906][T25817] tomoyo_check_open_permission+0x255/0x500 [ 1216.355848][T25817] ? tomoyo_check_open_permission+0x204/0x500 [ 1216.362148][T25817] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1216.368622][T25817] ? tomoyo_file_open+0x165/0x220 [ 1216.373688][T25817] security_file_open+0x777/0x990 [ 1216.378774][T25817] do_dentry_open+0x369/0x1460 [ 1216.383583][T25817] vfs_open+0x3e/0x330 [ 1216.387704][T25817] path_openat+0x2c84/0x3590 [ 1216.392388][T25817] ? __pfx_path_openat+0x10/0x10 [ 1216.397355][T25817] do_filp_open+0x235/0x490 [ 1216.401879][T25817] ? __pfx_do_filp_open+0x10/0x10 [ 1216.407024][T25817] ? _raw_spin_unlock+0x28/0x50 [ 1216.411889][T25817] ? alloc_fd+0x5a1/0x640 [ 1216.416224][T25817] do_sys_openat2+0x13e/0x1d0 [ 1216.420925][T25817] ? __pfx_do_sys_openat2+0x10/0x10 [ 1216.426141][T25817] __x64_sys_openat+0x247/0x2a0 [ 1216.431001][T25817] ? __pfx___x64_sys_openat+0x10/0x10 [ 1216.436375][T25817] ? do_syscall_64+0x100/0x230 [ 1216.441153][T25817] ? do_syscall_64+0xb6/0x230 [ 1216.445840][T25817] do_syscall_64+0xf3/0x230 [ 1216.450339][T25817] ? clear_bhb_loop+0x35/0x90 [ 1216.455015][T25817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.460936][T25817] RIP: 0033:0x7efc3df7c990 [ 1216.465363][T25817] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1216.485175][T25817] RSP: 002b:00007efc3ed58f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1216.493647][T25817] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efc3df7c990 [ 1216.501728][T25817] RDX: 0000000000000002 RSI: 00007efc3ed58fa0 RDI: 00000000ffffff9c [ 1216.509701][T25817] RBP: 00007efc3ed58fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.517709][T25817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1216.525718][T25817] R13: 0000000000000001 R14: 00007efc3e136058 R15: 00007efc3e25fa28 [ 1216.533786][T25817] [ 1216.541899][T25817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1216.580863][T13356] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1216.635208][T13356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.682603][T13345] usb 4-1: USB disconnect, device number 71 [ 1216.702461][T13356] usb 3-1: Product: syz [ 1216.709228][T11819] bridge_slave_1: left allmulticast mode [ 1216.714901][T11819] bridge_slave_1: left promiscuous mode [ 1216.722284][T13356] usb 3-1: Manufacturer: syz [ 1216.726999][T13356] usb 3-1: SerialNumber: syz [ 1216.733662][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.778622][T11819] bridge_slave_0: left allmulticast mode [ 1216.812582][T11819] bridge_slave_0: left promiscuous mode [ 1216.824608][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.952728][T13356] usb 3-1: USB disconnect, device number 98 [ 1217.058300][T25826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.088871][T25826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.124710][T25826] fuse: Unknown parameter 'droup_id' [ 1217.299936][T13345] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1217.448656][T11819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.461382][T13345] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1217.470816][T13345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.481074][T13345] usb 4-1: config 0 descriptor?? [ 1217.488877][T11819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.492833][T13345] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 1217.513692][T11819] bond0 (unregistering): Released all slaves [ 1217.666209][T11819] IPVS: stopping master sync thread 25340 ... [ 1217.751025][T13345] usb 4-1: USB disconnect, device number 72 [ 1217.802312][T20350] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 1217.850102][T25834] Cannot find map_set index 0 as target [ 1217.865474][T25814] chnl_net:caif_netlink_parms(): no params data found [ 1217.959896][T20350] Bluetooth: hci4: command tx timeout [ 1218.232213][T11819] hsr_slave_0: left promiscuous mode [ 1218.238364][T11819] hsr_slave_1: left promiscuous mode [ 1218.246071][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.255541][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.272273][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.281158][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.345251][T11819] veth1_macvtap: left promiscuous mode [ 1218.359309][T11819] veth0_macvtap: left promiscuous mode [ 1218.365634][T11819] veth1_vlan: left promiscuous mode [ 1218.371038][T13356] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1218.391571][T11819] veth0_vlan: left promiscuous mode [ 1218.403053][T25863] binder: 25862:25863 ioctl 4018620d 0 returned -22 [ 1218.539538][T13356] usb 5-1: Using ep0 maxpacket: 32 [ 1218.580650][T13356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.619948][T13356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.653971][T13356] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1218.710088][T13356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.726392][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x23 [ 1218.731360][T13356] usb 5-1: config 0 descriptor?? [ 1218.751417][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x24 [ 1218.764337][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x24 [ 1218.794260][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x25 [ 1218.827136][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x53 [ 1218.850652][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x54 [ 1218.897064][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x28 [ 1218.916528][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x29 [ 1218.940598][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x23 [ 1218.969829][T25863] kvm: kvm [25862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24 [ 1219.171152][T13356] belkin 0003:050D:3201.0060: item fetching failed at offset 5/7 [ 1219.190563][T13356] belkin 0003:050D:3201.0060: parse failed [ 1219.198336][T13356] belkin 0003:050D:3201.0060: probe with driver belkin failed with error -22 [ 1219.596972][T25880] loop9: detected capacity change from 0 to 7 [ 1219.613867][T25880] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1219.620017][T25880] loop9: partition table partially beyond EOD, truncated [ 1219.627374][T25880] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1219.818141][T11819] team0 (unregistering): Port device team_slave_1 removed [ 1219.880194][T20350] Bluetooth: hci5: command tx timeout [ 1219.928364][T11819] team0 (unregistering): Port device team_slave_0 removed [ 1220.043310][T20350] Bluetooth: hci4: command tx timeout [ 1220.806957][T25865] tipc: Started in network mode [ 1220.813578][T25865] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1220.825311][T25865] tipc: Enabled bearer , priority 0 [ 1220.878295][T13345] usb 5-1: USB disconnect, device number 9 [ 1220.964777][T25814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.980327][T25814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.989738][ T29] audit: type=1326 audit(1728387907.636:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.3.3885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0897dff9 code=0x0 [ 1221.013027][T25814] bridge_slave_0: entered allmulticast mode [ 1221.020764][T25814] bridge_slave_0: entered promiscuous mode [ 1221.040745][T25814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.054360][T25814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.077381][ T29] audit: type=1326 audit(1728387907.696:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837a57dff9 code=0x7ffc0000 [ 1221.103820][T25890] FAULT_INJECTION: forcing a failure. [ 1221.103820][T25890] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.116960][T25814] bridge_slave_1: entered allmulticast mode [ 1221.128667][T25814] bridge_slave_1: entered promiscuous mode [ 1221.140034][T25890] CPU: 0 UID: 0 PID: 25890 Comm: syz.3.3885 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1221.150869][T25890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1221.163302][T25890] Call Trace: [ 1221.163320][T25890] [ 1221.163331][T25890] dump_stack_lvl+0x241/0x360 [ 1221.174272][T25890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.174304][T25890] ? __pfx__printk+0x10/0x10 [ 1221.174330][T25890] ? fs_reclaim_acquire+0x93/0x140 [ 1221.174350][T25890] ? __pfx___might_resched+0x10/0x10 [ 1221.174378][T25890] should_fail_ex+0x3b0/0x4e0 [ 1221.174406][T25890] ? tomoyo_encode+0x26f/0x540 [ 1221.174427][T25890] should_failslab+0xac/0x100 [ 1221.174450][T25890] ? tomoyo_encode+0x26f/0x540 [ 1221.174471][T25890] __kmalloc_noprof+0xd8/0x400 [ 1221.174501][T25890] tomoyo_encode+0x26f/0x540 [ 1221.174529][T25890] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1221.189150][ T29] audit: type=1326 audit(1728387907.696:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f837a57dff9 code=0x7ffc0000 [ 1221.189390][T25890] tomoyo_check_open_permission+0x255/0x500 [ 1221.199513][ T29] audit: type=1326 audit(1728387907.696:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837a57dff9 code=0x7ffc0000 [ 1221.204067][T25890] ? tomoyo_check_open_permission+0x204/0x500 [ 1221.204096][T25890] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1221.208774][ T29] audit: type=1326 audit(1728387907.706:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f837a57dff9 code=0x7ffc0000 [ 1221.213524][T25890] ? tomoyo_file_open+0x165/0x220 [ 1221.213571][T25890] security_file_open+0x777/0x990 [ 1221.213593][T25890] do_dentry_open+0x369/0x1460 [ 1221.213633][T25890] vfs_open+0x3e/0x330 [ 1221.213660][T25890] path_openat+0x2c84/0x3590 [ 1221.213711][T25890] ? __pfx_path_openat+0x10/0x10 [ 1221.344076][T25890] do_filp_open+0x235/0x490 [ 1221.344115][T25890] ? __pfx_do_filp_open+0x10/0x10 [ 1221.344151][T25890] ? _raw_spin_unlock+0x28/0x50 [ 1221.344171][T25890] ? alloc_fd+0x5a1/0x640 [ 1221.344194][T25890] do_sys_openat2+0x13e/0x1d0 [ 1221.344216][T25890] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.344243][T25890] __x64_sys_openat+0x247/0x2a0 [ 1221.344264][T25890] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.344286][T25890] ? do_syscall_64+0x100/0x230 [ 1221.344303][T25890] ? do_syscall_64+0xb6/0x230 [ 1221.344320][T25890] do_syscall_64+0xf3/0x230 [ 1221.344336][T25890] ? clear_bhb_loop+0x35/0x90 [ 1221.344353][T25890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.344375][T25890] RIP: 0033:0x7f6e0897c990 [ 1221.344393][T25890] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1221.344407][T25890] RSP: 002b:00007f6e09693f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1221.344427][T25890] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e0897c990 [ 1221.344439][T25890] RDX: 0000000000000002 RSI: 00007f6e09693fa0 RDI: 00000000ffffff9c [ 1221.344450][T25890] RBP: 00007f6e09693fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.344461][T25890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1221.344472][T25890] R13: 0000000000000001 R14: 00007f6e08b36058 R15: 00007f6e08c5fa28 [ 1221.344493][T25890] [ 1221.348977][ T29] audit: type=1326 audit(1728387907.706:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837a57dff9 code=0x7ffc0000 [ 1221.382811][T20350] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1221.382893][T20350] CPU: 1 UID: 0 PID: 20350 Comm: kworker/u9:2 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1221.382920][T20350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1221.382936][T20350] Workqueue: hci2 hci_rx_work [ 1221.382967][T20350] Call Trace: [ 1221.382976][T20350] [ 1221.382987][T20350] dump_stack_lvl+0x241/0x360 [ 1221.383015][T20350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.383037][T20350] ? __pfx__printk+0x10/0x10 [ 1221.383067][T20350] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1221.383093][T20350] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1221.383124][T20350] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1221.383153][T20350] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1221.383188][T20350] kobject_add_internal+0x435/0x8d0 [ 1221.383223][T20350] kobject_add+0x152/0x220 [ 1221.383244][T20350] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1221.383270][T20350] ? device_add+0x3e7/0xbf0 [ 1221.383299][T20350] ? __pfx_kobject_add+0x10/0x10 [ 1221.383320][T20350] ? _raw_spin_unlock+0x28/0x50 [ 1221.383358][T20350] ? get_device_parent+0x165/0x410 [ 1221.383390][T20350] device_add+0x4e5/0xbf0 [ 1221.383424][T20350] hci_conn_add_sysfs+0xe8/0x200 [ 1221.383449][T20350] le_conn_complete_evt+0xc9f/0x12e0 [ 1221.383483][T20350] ? trace_contention_end+0x3c/0x120 [ 1221.383510][T20350] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1221.383538][T20350] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1221.383561][T20350] ? __copy_skb_header+0x437/0x5b0 [ 1221.383584][T20350] ? skb_pull_data+0x112/0x230 [ 1221.383613][T20350] hci_le_enh_conn_complete_evt+0x185/0x420 [ 1221.383648][T20350] hci_event_packet+0xa55/0x1540 [ 1221.383676][T20350] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1221.383708][T20350] ? __pfx_hci_event_packet+0x10/0x10 [ 1221.383736][T20350] ? unpair_device_complete+0xe0/0x230 [ 1221.383760][T20350] ? kcov_remote_start+0x97/0x7d0 [ 1221.383785][T20350] hci_rx_work+0x3fe/0xd80 [ 1221.383811][T20350] ? process_scheduled_works+0x976/0x1850 [ 1221.383837][T20350] process_scheduled_works+0xa63/0x1850 [ 1221.383889][T20350] ? __pfx_process_scheduled_works+0x10/0x10 [ 1221.383920][T20350] ? assign_work+0x364/0x3d0 [ 1221.383948][T20350] worker_thread+0x870/0xd30 [ 1221.383979][T20350] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1221.384007][T20350] ? __kthread_parkme+0x169/0x1d0 [ 1221.384033][T20350] ? __pfx_worker_thread+0x10/0x10 [ 1221.384059][T20350] kthread+0x2f0/0x390 [ 1221.384077][T20350] ? __pfx_worker_thread+0x10/0x10 [ 1221.384100][T20350] ? __pfx_kthread+0x10/0x10 [ 1221.384121][T20350] ret_from_fork+0x4b/0x80 [ 1221.384145][T20350] ? __pfx_kthread+0x10/0x10 [ 1221.384166][T20350] ret_from_fork_asm+0x1a/0x30 [ 1221.384208][T20350] [ 1221.385941][T20350] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1221.385976][T20350] Bluetooth: hci2: failed to register connection device [ 1221.388834][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1221.429926][T25890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1221.439953][T25893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.553232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.659827][T13344] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1221.660656][T25893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.839168][T13344] usb 3-1: Using ep0 maxpacket: 32 [ 1221.909276][T13345] tipc: Node number set to 10463914 [ 1221.930187][T25814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.932766][T25814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.966036][T13344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.966080][T13344] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1221.966118][T13344] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1221.966143][T13344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.974395][T13344] usb 3-1: config 0 descriptor?? [ 1221.978999][T13344] usb 3-1: bad CDC descriptors [ 1222.119452][ T5232] Bluetooth: hci4: command tx timeout [ 1222.128635][T25814] team0: Port device team_slave_0 added [ 1222.176203][T13356] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1222.201073][T25814] team0: Port device team_slave_1 added [ 1222.207727][T25895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.220863][T25895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.243264][T13355] usb 3-1: USB disconnect, device number 99 [ 1222.306958][T25814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.306981][T25814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.307007][T25814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.308876][T25814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.308892][T25814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.309335][T25814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.329115][T13356] usb 5-1: Using ep0 maxpacket: 8 [ 1222.427824][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 1222.481472][T13356] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1222.481505][T13356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.521787][T13356] usb 5-1: config 0 descriptor?? [ 1222.525224][T13356] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1222.526438][T13356] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input135 [ 1222.534759][T25814] hsr_slave_0: entered promiscuous mode [ 1222.535658][T25814] hsr_slave_1: entered promiscuous mode [ 1222.536705][T25814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1222.536729][T25814] Cannot create hsr debugfs directory [ 1223.089197][T25925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.110985][T25925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.399079][ T5232] Bluetooth: hci2: command tx timeout [ 1224.123003][T25945] loop9: detected capacity change from 0 to 7 [ 1224.131378][T25945] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1224.137561][T25945] loop9: partition table partially beyond EOD, truncated [ 1224.201879][ T5232] Bluetooth: hci4: command tx timeout [ 1224.207669][T25945] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1224.290608][T25814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1224.328106][T25814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1224.353219][T25814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1224.371432][T25814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1224.857285][T25814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.875489][T25814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.890477][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.897610][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.923224][T13360] usb 5-1: USB disconnect, device number 10 [ 1224.996326][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.003536][T11813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.295233][T25814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.357821][T25966] netlink: 'syz.4.3901': attribute type 5 has an invalid length. [ 1225.516023][T25814] veth0_vlan: entered promiscuous mode [ 1225.571330][T25814] veth1_vlan: entered promiscuous mode [ 1225.668304][T25814] veth0_macvtap: entered promiscuous mode [ 1225.702252][T25814] veth1_macvtap: entered promiscuous mode [ 1225.761074][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788067][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788094][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788111][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788128][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788138][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788156][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788167][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788179][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788190][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788208][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788219][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.788236][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.788248][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.791764][T25814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.794414][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794438][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794451][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794465][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794478][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794493][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794505][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794520][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794532][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794545][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794557][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794570][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.794583][T25814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.794596][T25814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.795744][T25814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.845302][T25814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.845341][T25814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.845370][T25814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.845399][T25814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.528703][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.550028][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.584420][ T7377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.627250][ T7377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.679353][ T4646] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1226.850941][ T4646] usb 5-1: Using ep0 maxpacket: 16 [ 1226.893663][T26012] loop9: detected capacity change from 0 to 7 [ 1226.901847][T26012] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1226.907273][T26012] loop9: partition table partially beyond EOD, truncated [ 1226.916422][T26012] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1226.950060][ T4646] usb 5-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 1227.004884][ T4646] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1227.057908][ T4646] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.108004][ T4646] usb 5-1: New USB device found, idVendor=0325, idProduct=0000, bcdDevice= 0.00 [ 1227.119248][ T4646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.469319][T13356] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1227.480999][T26036] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1227.566832][T26039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.700449][T13356] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 1227.769445][T26039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.789688][T13356] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1227.853299][T13356] usb 4-1: New USB device found, idVendor=2040, idProduct=d301, bcdDevice=e4.fb [ 1227.880086][T13356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.920352][T13356] usb 4-1: config 0 descriptor?? [ 1228.121755][ T4646] usb 5-1: string descriptor 0 read error: -71 [ 1228.128635][ T4646] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1228.136204][ T4646] cdc_ncm 5-1:1.0: bind() failure [ 1228.141454][T13355] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1228.161576][T13356] usb 4-1: USB disconnect, device number 73 [ 1228.176565][ T4646] usb 5-1: USB disconnect, device number 11 [ 1228.182765][ T5279] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1228.323097][T13355] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1228.334445][T13355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.344055][T13355] usb 3-1: Product: syz [ 1228.348590][T13355] usb 3-1: Manufacturer: syz [ 1228.355195][T13355] usb 3-1: SerialNumber: syz [ 1228.360680][ T5279] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.374696][T13355] usb 3-1: config 0 descriptor?? [ 1228.380163][ T5279] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1228.392602][T13355] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 100 [ 1228.400777][ T5279] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1228.411028][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.427855][T26049] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 1228.460154][ T5279] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.799584][T13355] (null): failure reading functionality [ 1228.914810][T13355] i2c i2c-1: failure reading functionality [ 1228.928527][T26079] Unknown options in mask 2474 [ 1228.949562][T13355] i2c i2c-1: connected i2c-tiny-usb device [ 1228.986491][T13355] usb 3-1: USB disconnect, device number 100 [ 1229.223895][T26086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.254831][T26086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.410559][T13360] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1229.457206][T26100] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1229.599221][T13360] usb 5-1: Using ep0 maxpacket: 8 [ 1229.615808][T13360] usb 5-1: config 1 interface 0 altsetting 248 bulk endpoint 0x1 has invalid maxpacket 16 [ 1229.629156][T13360] usb 5-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 32 [ 1229.648155][T13360] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1229.668043][T13360] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1229.687781][T13360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.743503][T13360] usb 5-1: Product: В [ 1229.764912][T13360] usb 5-1: Manufacturer: 檭观䄶＃᭸䋧⽧阘鎝ᬟ燼铦Վ⹸鰱๔濜龬喲鵚拻뀤鷕㥲痡紙攡䄾ԅ漌睤䰗륂◠꠹㢆ℙ㠅뼮塄ꉒ㦈ꎖ窪ﱋᎅ坭竢ꦐ쿿襄㚲ꗶ藽ᚏ靭拓瑭̗ꂘ繱❇ɹф興꛹֟ಛ䱯쌃縤ﺀⲫᕃ趇詂ᯔ㲘ꛁ䠛姸䣓診뭩齌ꕢﯷ痄疦 [ 1229.862841][T13360] usb 5-1: SerialNumber: 찲為袄댳䖢劺Ἂᆬꀨ䯲퐧캦꓌閨㴈̋ꢂﺰ푢耠뷭䫵ﵟ鷢㷕ਃ칧探诲ḫ䘞㙤ᘧ纍浼锽Ҝ뽉셉ᡋ嬃坳炦ᩴ칞槖턹㕍쎹㵝䇈讀棤䇽仁쎃南ₜ诬ꅐ뇵斞謉ቲ㷧妆䦧悱涛愶횧藙옼鲹䡗艥뷟ᳮ퓆䈅稌슷੊꡻쟄ꏔփ蓢暿﹇햾帶炮슊嘳泐᪹휟皦螲隴Ԡ [ 1229.952162][T26085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1229.964869][T26085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1230.184739][T26121] loop9: detected capacity change from 0 to 7 [ 1230.241139][T26121] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1230.283300][T26121] loop9: partition table partially beyond EOD, truncated [ 1230.314518][T26121] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 1230.482383][T13360] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 248 proto 3 vid 0x0525 pid 0xA4A8 [ 1230.495301][T13360] usb 5-1: USB disconnect, device number 12 [ 1230.507490][T13360] usblp0: removed [ 1230.716778][T26125] fuse: Unknown parameter 'no' [ 1230.903194][T26126] fuse: Unknown parameter 'no' [ 1230.964461][T13360] usb 2-1: USB disconnect, device number 8 [ 1230.992810][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1231.030775][T26116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1231.082987][T26116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1231.087835][T26140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.324289][T26152] netlink: 'syz.3.3932': attribute type 7 has an invalid length. [ 1231.441363][T26154] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1231.447899][T26154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1231.499157][T26160] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1231.505865][T26160] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1231.513820][T26154] vhci_hcd vhci_hcd.0: Device attached [ 1231.523868][T26162] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1231.565456][T26160] vhci_hcd vhci_hcd.0: Device attached [ 1231.689322][T26163] vhci_hcd: connection closed [ 1231.691537][T26158] vhci_hcd: connection closed [ 1231.696678][ T35] vhci_hcd: stop threads [ 1231.706158][ T35] vhci_hcd: release socket [ 1231.711511][ T35] vhci_hcd: disconnect device [ 1231.729830][T13360] vhci_hcd: vhci_device speed not set [ 1231.756087][ T35] vhci_hcd: stop threads [ 1231.769159][ T35] vhci_hcd: release socket [ 1231.792092][ T35] vhci_hcd: disconnect device [ 1231.831214][T13360] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 1231.853237][T13360] usb 13-1: enqueue for inactive port 0 [ 1231.939089][T13360] vhci_hcd: vhci_device speed not set [ 1232.215138][T26162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3937'. [ 1232.404013][T13344] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1232.435460][T26176] binder: 26175:26176 ioctl 4018620d 0 returned -22 [ 1232.473373][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.511949][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.594651][T13344] usb 4-1: Using ep0 maxpacket: 16 [ 1232.681940][T13344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.711128][T13344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.724590][T13344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1232.729469][T26176] FAULT_INJECTION: forcing a failure. [ 1232.729469][T26176] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.738000][T13344] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1232.774704][T26176] CPU: 1 UID: 0 PID: 26176 Comm: syz.4.3940 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1232.780623][T13344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.785494][T26176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1232.803657][T26176] Call Trace: [ 1232.806958][T26176] [ 1232.809919][T26176] dump_stack_lvl+0x241/0x360 [ 1232.814632][T26176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1232.819857][T26176] ? __pfx__printk+0x10/0x10 [ 1232.824497][T26176] ? fs_reclaim_acquire+0x93/0x140 [ 1232.829635][T26176] ? __pfx___might_resched+0x10/0x10 [ 1232.835056][T26176] should_fail_ex+0x3b0/0x4e0 [ 1232.839780][T26176] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1232.845533][T26176] should_failslab+0xac/0x100 [ 1232.850238][T26176] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1232.856005][T26176] __kmalloc_noprof+0xd8/0x400 [ 1232.860785][T26176] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1232.866380][T26176] tomoyo_path_number_perm+0x23a/0x880 [ 1232.871861][T26176] ? tomoyo_path_number_perm+0x208/0x880 [ 1232.875320][T13344] usb 4-1: config 0 descriptor?? [ 1232.877507][T26176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.877571][T26176] ? __fget_files+0x29/0x470 [ 1232.893039][T26176] ? __fget_files+0x3f3/0x470 [ 1232.897722][T26176] security_file_ioctl+0xc6/0x2a0 [ 1232.902747][T26176] __se_sys_ioctl+0x47/0x170 [ 1232.907365][T26176] do_syscall_64+0xf3/0x230 [ 1232.911876][T26176] ? clear_bhb_loop+0x35/0x90 [ 1232.916560][T26176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.919185][T13345] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1232.922453][T26176] RIP: 0033:0x7fbedb97dff9 [ 1232.922480][T26176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.922497][T26176] RSP: 002b:00007fbedc784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.962452][T26176] RAX: ffffffffffffffda RBX: 00007fbedbb35f80 RCX: 00007fbedb97dff9 [ 1232.970528][T26176] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1232.978604][T26176] RBP: 00007fbedc784090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.986588][T26176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.994566][T26176] R13: 0000000000000000 R14: 00007fbedbb35f80 R15: 00007fbedbc5fa28 [ 1233.002567][T26176] [ 1233.007404][T26176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1233.070151][T26166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1233.180740][T13345] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.241100][T13345] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1233.280698][ T8] usb usb14-port1: attempt power cycle [ 1233.298132][T13345] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.342805][T13345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.360397][T26181] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1233.374572][T13345] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1233.457164][T13344] microsoft 0003:045E:07DA.0061: No inputs registered, leaving [ 1233.560237][T13344] microsoft 0003:045E:07DA.0061: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1233.638117][T26170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.651804][T13344] microsoft 0003:045E:07DA.0061: no inputs found [ 1233.658555][T13344] microsoft 0003:045E:07DA.0061: could not initialize ff, continuing anyway [ 1233.672824][T26170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.692229][T26170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.719880][T26170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.804699][T13344] usb 4-1: USB disconnect, device number 74 [ 1233.882797][ T8] usb usb14-port1: unable to enumerate USB device [ 1233.999002][ T5279] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1234.169063][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 1234.182578][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1234.192563][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1234.212979][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1234.234531][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1234.249997][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1234.263222][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1234.271172][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1234.284387][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1234.306515][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1234.342614][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1234.396032][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1234.433063][T13344] usb 2-1: USB disconnect, device number 9 [ 1234.434357][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1234.466174][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1234.491318][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1234.553607][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1234.581581][ T5279] usb 5-1: string descriptor 0 read error: -22 [ 1234.587856][ T5279] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1234.601053][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.638389][ T5279] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1234.694336][T26200] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1234.770300][ T29] audit: type=1326 audit(1728387921.416:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26203 comm="syz.3.3949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0897dff9 code=0x0 [ 1234.982011][T13344] usb 5-1: USB disconnect, device number 13 [ 1234.987138][T26206] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 1235.083413][T26209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1235.095639][T26209] IPv6: sit1: Disabled Multicast RS [ 1235.102249][T26209] sit1: entered allmulticast mode [ 1235.116025][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1236.290158][ T5232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1236.300300][ T5232] Bluetooth: hci1: Injecting HCI hardware error event [ 1236.311582][ T5232] Bluetooth: hci1: hardware error 0x00 [ 1239.089512][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.096173][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.318952][ C1] sched: DL replenish lagged too much [ 1358.258936][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1358.265955][ C1] rcu: (detected by 1, t=10502 jiffies, g=238885, q=1805548 ncpus=2) [ 1358.274148][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10399 (4295072919-4295062520), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1358.287564][ C1] rcu: rcu_preempt kthread starved for 10400 jiffies! g238885 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1358.298881][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1358.308883][ C1] rcu: RCU grace-period kthread stack dump: [ 1358.314887][ C1] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1358.326680][ C1] Call Trace: [ 1358.330076][ C1] [ 1358.333037][ C1] __schedule+0x1895/0x4b30 [ 1358.337604][ C1] ? __pfx___schedule+0x10/0x10 [ 1358.342494][ C1] ? __pfx_lock_release+0x10/0x10 [ 1358.347561][ C1] ? __asan_memset+0x23/0x50 [ 1358.352191][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1358.358034][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1358.364410][ C1] ? schedule+0x90/0x320 [ 1358.368696][ C1] schedule+0x14b/0x320 [ 1358.372890][ C1] schedule_timeout+0x1be/0x310 [ 1358.377775][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1358.383180][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1358.388528][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1358.394117][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1358.398994][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1358.404232][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1358.410418][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1358.415734][ C1] ? finish_swait+0xd4/0x1e0 [ 1358.420362][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1358.424983][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.430206][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1358.436218][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1358.441284][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.446511][ C1] kthread+0x2f0/0x390 [ 1358.450616][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.455839][ C1] ? __pfx_kthread+0x10/0x10 [ 1358.460457][ C1] ret_from_fork+0x4b/0x80 [ 1358.464905][ C1] ? __pfx_kthread+0x10/0x10 [ 1358.469522][ C1] ret_from_fork_asm+0x1a/0x30 [ 1358.474339][ C1] [ 1358.477379][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1358.483720][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1358.488957][ C0] NMI backtrace for cpu 0 [ 1358.488974][ C0] CPU: 0 UID: 0 PID: 13345 Comm: kworker/0:11 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1358.488994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1358.489006][ C0] Workqueue: events nsim_dev_trap_report_work [ 1358.489030][ C0] RIP: 0010:task_tick_fair+0xe6/0x7c0 [ 1358.489050][ C0] Code: 24 28 49 8b 9c 24 a0 00 00 00 48 89 df e8 42 6d 00 00 48 89 df 4c 89 e6 ba 01 00 00 00 e8 32 ad fe ff 49 8d ac 24 a8 00 00 00 <48> 89 e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 34 d6 96 00 [ 1358.489065][ C0] RSP: 0018:ffffc900000069a8 EFLAGS: 00000082 [ 1358.489079][ C0] RAX: 0000000000000000 RBX: ffff8880b863eb40 RCX: 000000000001e95a [ 1358.489092][ C0] RDX: 000000000001e95a RSI: dffffc0000000000 RDI: ffff8880b863eb54 [ 1358.489104][ C0] RBP: ffff88802e8fdb28 R08: ffffffff901ced2f R09: 1ffffffff2039da5 [ 1358.489118][ C0] R10: dffffc0000000000 R11: ffffffff8167c0f0 R12: ffff88802e8fda80 [ 1358.489131][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1358.489143][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1358.489158][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.489171][ C0] CR2: 000055555803d5c8 CR3: 000000007ae4a000 CR4: 00000000003526f0 [ 1358.489186][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1358.489197][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1358.489208][ C0] Call Trace: [ 1358.489215][ C0] [ 1358.489222][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1358.489242][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1358.489265][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1358.489283][ C0] ? nmi_handle+0x2a/0x5a0 [ 1358.489306][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1358.489326][ C0] ? nmi_handle+0x14f/0x5a0 [ 1358.489342][ C0] ? nmi_handle+0x2a/0x5a0 [ 1358.489360][ C0] ? task_tick_fair+0xe6/0x7c0 [ 1358.489374][ C0] ? default_do_nmi+0x63/0x160 [ 1358.489393][ C0] ? exc_nmi+0x123/0x1f0 [ 1358.489411][ C0] ? end_repeat_nmi+0xf/0x53 [ 1358.489428][ C0] ? __pfx_task_tick_fair+0x10/0x10 [ 1358.489446][ C0] ? task_tick_fair+0xe6/0x7c0 [ 1358.489462][ C0] ? task_tick_fair+0xe6/0x7c0 [ 1358.489478][ C0] ? task_tick_fair+0xe6/0x7c0 [ 1358.489494][ C0] [ 1358.489499][ C0] [ 1358.489510][ C0] sched_tick+0x219/0x610 [ 1358.489528][ C0] ? acct_account_cputime+0x207/0x210 [ 1358.489550][ C0] update_process_times+0x202/0x230 [ 1358.489571][ C0] tick_nohz_handler+0x37c/0x500 [ 1358.489592][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1358.489610][ C0] __hrtimer_run_queues+0x551/0xd50 [ 1358.489626][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1358.489654][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1358.489675][ C0] hrtimer_interrupt+0x396/0x990 [ 1358.489701][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1358.489720][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1358.489741][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1358.489763][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1358.489785][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 be 63 2f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 08 94 f5 65 8b 05 44 a3 34 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1358.489805][ C0] RSP: 0018:ffffc90000006e60 EFLAGS: 00000206 [ 1358.489819][ C0] RAX: 577dab1dd94f7f00 RBX: 1ffff92000000dd0 RCX: ffffffff8170cd8a [ 1358.489832][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 1358.489844][ C0] RBP: ffffc90000006ef0 R08: ffffffff942c58ef R09: 1ffffffff2858b1d [ 1358.489857][ C0] R10: dffffc0000000000 R11: fffffbfff2858b1e R12: dffffc0000000000 [ 1358.489870][ C0] R13: 1ffff92000000dcc R14: ffffc90000006e80 R15: 0000000000000246 [ 1358.489886][ C0] ? mark_lock+0x9a/0x360 [ 1358.489905][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1358.489931][ C0] debug_check_no_obj_freed+0x561/0x580 [ 1358.489958][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1358.489980][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1358.490003][ C0] ? skb_release_data+0x6a0/0x8a0 [ 1358.490021][ C0] ? skb_release_data+0x6a0/0x8a0 [ 1358.490038][ C0] kfree+0x11f/0x440 [ 1358.490056][ C0] ? rcuref_put+0x1e3/0x240 [ 1358.490074][ C0] skb_release_data+0x6a0/0x8a0 [ 1358.490096][ C0] consume_skb+0x9f/0xf0 [ 1358.490111][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 1358.490136][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1358.490158][ C0] ? nf_ip_checksum+0x13a/0x500 [ 1358.490181][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 1358.490204][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1358.490224][ C0] ? validate_chain+0x11e/0x5920 [ 1358.490244][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1358.490265][ C0] nft_do_chain+0x4ad/0x1da0 [ 1358.490294][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1358.490314][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1358.490345][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1358.490364][ C0] nft_do_chain_inet+0x418/0x6b0 [ 1358.490386][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1358.490406][ C0] ? ipt_do_table+0x312/0x1860 [ 1358.490433][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1358.490453][ C0] nf_hook_slow+0xc3/0x220 [ 1358.490472][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1358.490490][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1358.490507][ C0] NF_HOOK+0x29e/0x450 [ 1358.490526][ C0] ? NF_HOOK+0x9a/0x450 [ 1358.490541][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1358.490559][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1358.490579][ C0] ? ip_rcv_finish+0x406/0x560 [ 1358.490597][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1358.490614][ C0] NF_HOOK+0x3a4/0x450 [ 1358.490630][ C0] ? __lock_acquire+0x1384/0x2050 [ 1358.490651][ C0] ? NF_HOOK+0x9a/0x450 [ 1358.490668][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1358.490683][ C0] ? ip_rcv_core+0x801/0xd10 [ 1358.490701][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1358.490721][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1358.490738][ C0] __netif_receive_skb+0x2bf/0x650 [ 1358.490758][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1358.490779][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1358.490801][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1358.490823][ C0] ? __pfx_lock_release+0x10/0x10 [ 1358.490843][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1358.490869][ C0] process_backlog+0x662/0x15b0 [ 1358.490890][ C0] ? process_backlog+0x33b/0x15b0 [ 1358.490912][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1358.490931][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1358.490953][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1358.490976][ C0] __napi_poll+0xcb/0x490 [ 1358.490996][ C0] net_rx_action+0x89b/0x1240 [ 1358.491024][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1358.491045][ C0] ? sched_clock+0x4a/0x70 [ 1358.491070][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1358.491096][ C0] handle_softirqs+0x2c5/0x980 [ 1358.491117][ C0] ? do_softirq+0x11b/0x1e0 [ 1358.491137][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1358.491161][ C0] do_softirq+0x11b/0x1e0 [ 1358.491179][ C0] [ 1358.491185][ C0] [ 1358.491191][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1358.491211][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1358.491233][ C0] ? rcu_is_watching+0x15/0xb0 [ 1358.491251][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1358.491271][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1358.491289][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1358.491308][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1358.491328][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1358.491347][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1358.491372][ C0] ? process_scheduled_works+0x976/0x1850 [ 1358.491392][ C0] process_scheduled_works+0xa63/0x1850 [ 1358.491424][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1358.491447][ C0] ? assign_work+0x364/0x3d0 [ 1358.491469][ C0] worker_thread+0x870/0xd30 [ 1358.491495][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1358.491517][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1358.491536][ C0] kthread+0x2f0/0x390 [ 1358.491552][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1358.491571][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.491587][ C0] ret_from_fork+0x4b/0x80 [ 1358.491607][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.491622][ C0] ret_from_fork_asm+0x1a/0x30 [ 1358.491649][ C0]