last executing test programs: 12m9.53761503s ago: executing program 32 (id=713): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='#'], &(0x7f0000001a00)='.\x00', &(0x7f0000001a40), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa80)=""/102384, 0x18ff0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') r3 = fanotify_init(0x20, 0x80000) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r3, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000005c0)=""/83, 0x53) fsopen(&(0x7f0000000280)='9p\x00', 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff, 0x3}, {&(0x7f0000000140)=""/88, 0xbc}], 0x2, 0x0) 10m59.51605085s ago: executing program 2 (id=1051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x8000000, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x33}, @in=@local, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x401}, {0x10, 0x9}, 0x70bd26, 0x0, 0x2, 0x1, 0x0, 0x67}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) 10m59.505715009s ago: executing program 2 (id=1052): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x2000}, 0x48) 10m58.500243553s ago: executing program 2 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000300000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 10m58.451467573s ago: executing program 2 (id=1057): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0xfe, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xeb9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 10m55.006154319s ago: executing program 2 (id=1067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000000000000000}, {0xa6d}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x1a0}}, 0x0) 10m54.519876669s ago: executing program 2 (id=1071): r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xa00000, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x2002cd5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000680)=@ethtool_ringparam={0x11, 0x7ff, 0xb02f, 0x6, 0x3, 0x5, 0xffffffc0, 0xd441, 0x68f6}}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000001400000000000000000000000000003f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 10m40.071055464s ago: executing program 33 (id=1065): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000a40)=0x1, 0x4) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="9a4b24d359d93821ee1c5d5d2f89291c87f861e24a18062ffc66bb465449f0e7587727c4959ad9377170cc013e65a542fcbd8a51ff30f7c57e5ddb1c71c4bdca0a61a19dd18373f46386c62400cfa4b1f613fc3e175994f5eeb701359c6493760b0b7ec5525c695bbcf99386b65bc8b930800f24e938b3cf5c9dcb041406542499d30d729e34d8380675251de599b84dc2a10a9ad4e01548839000929dd8dfb7a1879bea3220e7c238920500d246b2eb0bc5e7d2ff3f8769915701df264cfc242aa200009040fb22ff58a0f6c3f98f8b3e2166e48b"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000004c0)="eb69cbfcecafd81ea529218e5c6f3774441b71c9891179903bd3a70b94417d8a8cec44bcff4f65ec98b8c7fab45c906af3c967311e0aeea36acd13c60d77e9c31ce87bd2ae84c1466c1d9f5961223835b89b45b7a6e2003e6e8d01b57586ad5fa2cf53217a746f025f76bbdb6e1c612661539ecc5722406bf446b491534ab0b2557f5b47c70e423fe0c7a4be8f", 0x8d}, {&(0x7f0000000580)="c78fcee530eed7d58f656c70180d06ec8bd05da04b5ab325cf271823b56c2aaabc3a4c3cbcac094425736385ea5584808a40ec7247912528547776b0078681de8e666e37828050ee8b226d221f9a17e4a5f45ec607fdd30f8ce314702d4823bc3c13a64185fa9ffedbbca1e0421cab2674cfd233563c877c33705d73deadf5856fc7c6fcd02d61ea0b737ac8385b072028cfd8d56474dfe2da6cff6cff1322ee27a44427b97b498417d31a2e3497b3d25c00fbf318bab0d7b1", 0xb9}, {&(0x7f00000028c0)="731f6c1a5c7cf62c926da68c80760ca9dd1a98de1b0607bf2b91da03cfda6ed4ad4eb8f4af7cdf19edef4a4909d6bd9ff5a25f538183d6f79fed32e2fe807f74e4d69008cf95198088851d7c7fa52ef66ade3d5428372362ae36bcfc79220fb7928a6b032c11", 0x66}, {&(0x7f0000000700)="acbf6fd240668b305bceb9a044bca4c759f087dae2574d3b841bf3364b750d770d483584293e1d0a1c620ae7de676b5a5fa0c6e70e7898be9b398a978207d7e89773187ea61cf2f701664ca9222b3365124bab0fb531df0a2ada4cfc19000c5b57cd89628b1afe3ddf5b026820fdb699de999072867beaaa", 0x78}, {&(0x7f0000000940)="24413f43f2e955961532f4c5f9ae5ab1b44b9e0c150a8ee8017dc98ad9094620947e727c97a184dcc22eeab4d62aad57842879e2dc6b8b4cb6a1046818148fdcf98dd091d1a52115d777e502152ad945e0f339df6853dce202d0d171fc850c521de8b5f4018d919db011478debce9aacf14a68c8054acb89991ffe9018a313f5ef6eeeca44af752b897ad7843e40e90dd37f337105e7ae1ee68e1cd4a792822f0d3e1013c607c4e4cd8f74ab98ec36717391933c1bba4c28fd29e7cef09ed6299ab6c4975931352f2c547f90a6c587c45bf52253329cbd424097c9d25f21ac2287f55fe8df6f57711f723a1c358fab658de98b489d81", 0xf6}, {&(0x7f0000000840)}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000a40)}], 0x8}}, {{&(0x7f0000001b40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001b80)="c68d85caf79c15fc35eff713e1bbee9b278c6ed295e36350af9d3fe1b4520390fe8f7a91b94993b053c1705e128b11d33943f74a41631602ec31932c547d99753c76ce5a5f29b407dced599f5967ba0c170e1797dc67329994e63796904aab4649773c35340ce1d2b0aa1cf71cead778cf958f165a041050c407dd73dba0b0a90612eeb2495c21333af0fbc30acb5ba663a11c28fee0dd312c2140462fe8e300d1527ddb764341f7d9763d32b69c668dd1254f7cdcaadd660474ef901a2fe63cfc479f741b387223441103874fb11c1b041332e9f3f4357955c9f1007272a610b005bc99018a416fe59fbb3c45dd8f78fa5af669", 0xf4}, {&(0x7f0000001c80)="6801db45b9e50910ae0ca28a6d6f40ef667cf96d5e05a41c9b030b90358efabbac904596535be9478db0fa348c8849b12d4b46fe849a9c19c5578945132d2a523b69b40831188d03eb5b9d9688e5c1bbd1d852b70260e2df9e6fa82c0556714248a35edabe36bb6da313ccc1a8d5f4f5b4fe60458a5bd646b38e96fae76d3587cffecd809c3977473897c239db5679dfd5d2168e62ea197e41857dcec59377a477e8e4dd18af8f52102c8eb6296cb8cdf720cc5cee2ab71bd5690e8284c8b5d2dc6728d7cdfccd09fb76c9fa10d1254aa6b32b02186531245278", 0xda}, {&(0x7f0000001d80)="d46452c160625c300e0410281c307992350ede2cffbac276d7400935c6628b746445ad0bc02ec07a60d6792c7e93aff9935f4e134c8cc27e91ab66f0eb9733d2ca154fda4f8c6be4b184cd77f4b49da49b3b8ff723be2f6e88fcbc1d8f38212ea602085ac48e9f76ade6fc12325d0a561102ebe7fd90d38ddd4ea488e6d8fcaabb73d96753d897eb56743074cf175bc418e4f44e03d7a62cf57224a26c6d77389b71bb7925569530819e568b3844a4513e41fadc5f6745420827b33101e5db916e2c93284a4a807c8f0c7b3e6d7ccb066143e2df848fbbb854d72eef477e816441833680699c691f43269391", 0xec}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @cipso={0x86, 0x32, 0x2, [{0x6, 0x5, "f23080"}, {0x2, 0x9, "f00605f367091b"}, {0x1, 0xb, "fc522b71e1eb42b76a"}, {0x5, 0xc, "9851d0b5a4cb9fb73295"}, {0x5, 0x7, "18f2016aa8"}]}, @ra={0x94, 0x4}, @end]}}}], 0x68}}, {{&(0x7f0000001f40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001f80)="c2d8f1ae92c6a8c6f4851bd9660249e7f6026165d4de8fbf310ee11c10cff86d79ff638eec73296a1a1b0680029a42353411d6a4a6adce4008866aa8a5599ac510dcb2cd25143e1ca93ab17020b840ec83", 0x51}, {&(0x7f0000002000)="ae881578522024fdedfcc8acbcdedfc576367cbc8114eea8f8c6d65b7efbe7e6", 0x20}, {&(0x7f0000002040)="9e5d195817ce6c4422fb1de455cede2061fd304386c0005612eafd00d487c3d049448402127efc0c1587d9c57e84ace93ac8a59b3487b4ca7868a40a82c8ea3e1422131eb9e333b7601c0bb624a1ad49cca93fda84ed09b07313bb1711a97acfaa920cb9000a598ab29894173ff7104f65e4b6d5cc97472eec6072cb5ae0a1396009944af9c14084c236d6f0655331d81a48342f84e61050d52a82e2736c1cd8439b445487f8581635e90a8b2bb00b01b66c23ead10d8654133724cc96e6ad0c08949cd7634da497cb795082dc1bf4a9e5233d61f303a8b6b8aedebc70187f48be21eca98460b8e2663037a5a4", 0xed}], 0x3, &(0x7f0000002180)=ANY=[@ANYBLOB="44000000000000000000000007000000014418de00000000010000000a00000009000000027fffffff94040100440ca381ac1414aa00000004890bb3e00000026401010100000000110000000000000000000000010000000000000000000000140000000000000000000000020000000100010000001700140000000000000000000000010000000200000000000000140000000000000000000000020000000900000000000000140000000000000000000000020000000500000000000000140000000000000000000000020000000300000000000000"], 0xd8}}, {{&(0x7f0000002280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002480)=[{&(0x7f00000022c0)="cf435f9aac46ebcc919315c320e04c80279743206dc4dec210b121e21ad71f3ca523c14384759d0522a638accb96e3794198c6dbea3f3f9e6a83a513b2f444210d7e4ea5e5cd1a3a0968f978909f8c4e37c0463d443cc51087a99fd968929c7a82ac95cc458e03077d3ce1a7f985a2b66c4f48cc0571a58facf7156f0d0d106c631c55f710cefc10c7c0c277b36a1ce869992fb8f14976c5ef8ab774", 0x9c}, {&(0x7f0000002380)="743142d69f3a83f9e411914dd1d4253c8efda7635a34d109979cf5516303a85ae6706ae3ac66cbdf4cbb7ee1f10aa2db30bf04a7af3c645defbf98f09ecd52d7ed8ec009da7760907dac5f2e0ccc129a11841baf7ad51f50780f1e9a6e0d8b807bc2c31b1954e7d076d6b4748def5e51824a181008d987cad9d64107297e37f2f6fbf641d62d27c4e91c9a63ba763117164cf589a6f95942354c5193981f97f0c41a7af9d06f353900deee46dbeaa3599753e69897d91551004b593d24", 0xbd}, {&(0x7f0000002440)="f86b0f03e18298c4bd68b4555978f4be4c8583", 0x13}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000000000000070000001100000000000400000000000000ae852ac2841b914fe936b6972408fe8086924c9122bb98"], 0x28}}, {{&(0x7f0000002540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002740)=[{&(0x7f0000002580)="cfc95ea7fc5ff44700d13905483b56983fccf73642cebb3fb6e19aa7bbb1fc9b3b93fb044bdbda67d66e755a1ec1557483e4dac4b85e3c92db74f56f6ef5255be168b3fdc011108ee1d2360934cca13313513f36c8fc2431df09470db68a10592ce502e1b591e99f552bd71702a28db1d60309498cfe240dc2e9b4965852b91497d26f75cb11bbc2", 0x88}, {&(0x7f0000002640)="36144fd3ee09cb3f29dbb28145dec5e2e293611c5e0547f33a8faf3071a5605bd46e8a80f9600330637047c6e6778e3582b7c67e1bafaf3f5c202954421ca77b3f76da58748304b1f6aab0b1e8464eadca68b3f50910e1bd12f5adee9c8d6aab55801caa597a49f81786e099bf128939ae7b39e685f4875379b1b57c973f25528eb58c46fe95e036c2c352570516fce200c60ab209025cb460cf7286ad882ca68a317226d48bf9072c46217a15ead05386ec6c932999c073d86b1cb87163e40c9165bf5929043c4e2468a3be7659c11ef18816beabd5ee81", 0xd8}], 0x2}}], 0x5, 0x80) openat$random(0xffffffffffffff9c, 0x0, 0x80140, 0x0) timer_create(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, @thr={&(0x7f0000000880)="9a092bd84744d2bb99fa4dae5e5dd471f20dae8cf461ab64f4209b7f25497ebde9101ae5e3e6ec4a5a4a3efc9143e629c2fb82fab804e4231ab3f58e3c4ced569b215de28c9e51c16c87c09d4fc1c036c5ec205fb29ca5a8275b8a76b01f90a90a7cc147ef94c5731fa4a1eba98f1022e4da2723248024d2f74f7e2aec54bcbe7ba63a4c97f0f411fc65d91eb7825f1320097756ff5a1b6df71f7ed532f588d67f88342a9411f4bf10c830a3f51392b1fca686871f8c78d8b0a5", &(0x7f0000000780)="d5a09402f1617498650091a06a6be06708e0731621236289858efc8da67db139ea51a82dfb99bae65a130752966738cee5975ce4412fe106cd48a357ed2f52d4f710a0188c6787b7991de5aef77b98f2f92e45ffff97aa1e785006899ee0170b96579e4102e015ee7c4ba372d83c4c71847d224da54961d4c8a65c19009b92bde9fdc5e16e81cf44047dbf010c489e12fed4cbc5d9720ed02a0f9e0ffcb66d40dd7aa6bbaf00eebd5cef62"}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r2, 0x0, 0x80}, 0x18) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000003c0)=""/142, &(0x7f0000000180)=0x8e) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f0000d63000/0x1000)=nil, 0x1000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 10m37.690328705s ago: executing program 34 (id=1070): getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x67ee, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x6, 0x8, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x66, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x28, 0xfb, 0x0, 0xd, [0x6, 0x10000, 0x9, 0x8, 0x91, 0x1, 0x1, 0xd, 0x8]}, @rr={0x7, 0x7, 0x5, [@private=0xa010101]}, @noop, @end, @ssrr={0x89, 0x17, 0x1b, [@dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x32}]}, @end, @lsrr={0x83, 0x17, 0xf3, [@loopback, @multicast2, @broadcast, @private=0xa010100, @local]}]}}}}}) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x6, 0xf0c1, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000ac0)=[{0x0, 0xffffff93, 0x1, 0x9}, {0x5, 0x3, 0xa, 0xb}, {0x2, 0x4, 0xd}, {0x2, 0x4, 0xf, 0x7}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x15, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xbb, &(0x7f0000000840)=""/187, 0x41000, 0x8, '\x00', r0, @fallback=0x16, r1, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0xf9, 0x2}, 0x10, 0x0, r2, 0x0, &(0x7f0000000d00), 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f00000007c0)}, 0x20) write$cgroup_pid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m36.52907886s ago: executing program 35 (id=1071): r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0xa00000, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x2002cd5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000680)=@ethtool_ringparam={0x11, 0x7ff, 0xb02f, 0x6, 0x3, 0x5, 0xffffffc0, 0xd441, 0x68f6}}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000001400000000000000000000000000003f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 9m11.072008857s ago: executing program 6 (id=1248): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)="a3de9979e9aa9ef8d1ceb1ee79c30721a0eea5b347982c0fe649f944311efb3b3ea8b23faf3564795cee573be3d5cde47c26ae1c8610e5469dce8c97b062439b61b9219c4cb3e228fc5354fce3d078ae5cf3f8e021799af0", 0x58}], 0x1}}], 0x1, 0x24008c84) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6000000, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9m10.870556445s ago: executing program 6 (id=1250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x5}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0xff80, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x12001, 0x2000, &(0x7f0000000000/0x2000)=nil}) 9m8.403635691s ago: executing program 6 (id=1257): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000004", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) syz_io_uring_setup(0x2b5, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000}, &(0x7f0000000180), &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 9m8.080930048s ago: executing program 6 (id=1260): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r4 = open(0x0, 0xe8142, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) (async, rerun: 32) listen(r6, 0x80) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x14, 0x24, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0xc, 0xe, 0x6, 0x5, 0xffff}, @map_fd={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x1, 0x0, 0x90, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0xa, &(0x7f0000000740)=""/10, 0x40f00, 0x47, '\x00', 0x0, @fallback=0x37, r4, 0x8, &(0x7f0000001000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0xa, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[r3, r3], 0x0, 0x10, 0xc25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000000000000000000905820000000000000905030200020000004e46deda89786f876ce865a4da594e2bbe1b32f527362d5e4aafd20e969b872bf27cda33abacdefe9b"], 0x0) 9m2.027502339s ago: executing program 6 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000970000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000066c000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x3662, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r7 = socket(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x7fffffff}, 0x1c) sendmmsg$inet(r7, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e00", @ANYRES32=r6], 0x3c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 9m0.590133615s ago: executing program 6 (id=1273): socket$packet(0x11, 0x3, 0x300) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109062, 0x155) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x7fffffffffffffff, 0x4) 8m55.925224761s ago: executing program 3 (id=1277): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000100000000000000"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8m45.471049234s ago: executing program 36 (id=1273): socket$packet(0x11, 0x3, 0x300) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109062, 0x155) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x7fffffffffffffff, 0x4) 8m44.158446139s ago: executing program 3 (id=1288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000400000000000f0000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8m41.272621081s ago: executing program 3 (id=1291): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020afff000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8m38.12600555s ago: executing program 3 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40294}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000000308010800000000000000000a0000080900010073797a30000000003c00048008000340000000090800084000000002080005400000ffff080002400000000308000940000000060800034000000000080008400000000714000480080001400000000808000140000000032400049d08000440000000400800084000000004080008400000000108000b400000f15f0600024089da00000500030001000000050003"], 0xb4}}, 0x0) 8m35.462237432s ago: executing program 3 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$evdev(0x0, 0x5, 0xc6000) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000200)=""/85) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000819a00"/28], 0x50) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1}, 0x40}], 0x1, 0xcb, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r2}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) 8m33.127148899s ago: executing program 7 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000500090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x48000) 8m31.963288222s ago: executing program 7 (id=1303): syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800452600280067000002016a46128114bbac1e00010e00907800810008000009090001000000000002c2e219b47d4ead63caaf8701b2a92ee2b88652a18b3ec9cdc99e3370643c3a70fb509dc23403ddd0d65b180e7fb033b923d9e3280809a7a10ca732b6abc4135d9ebd999fba804e222f1d395a55696bdba55754fa4fc6ddbaace25ce8e892d62312b1d03f07d6db8b5e97b43979b870b08367d27739a31947b76d91132471b4755196faad37d1a02de919bad0a2d3166d09c743b162442a4c700e1660f47a84ac9049dc7a1883bd7ad3b4311b5093c5635ed95931027ebd9cec"], 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x100, @multicast2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0xf6030000, 0x24000841}, 0x4008840) mkdir(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff7e) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="e3c542a4a68a86b3f4da66e7333f249e16f1c2b114dbac2aeda10dd56e8292cf5b40cfac", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRES32=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8m30.028558306s ago: executing program 7 (id=1304): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) syz_io_uring_setup(0x2b5, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000}, &(0x7f0000000180), &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 8m29.656012844s ago: executing program 7 (id=1306): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x6a, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = dup3(r6, r1, 0x80000) write$tun(r7, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x200040) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000100)=""/63) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00050000008784a9d7d400"], 0x0}, 0x0) 8m27.225719702s ago: executing program 7 (id=1311): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000f6100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 8m27.22351919s ago: executing program 3 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf256300000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_SET_EXPRESSIONS={0xe0, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2f}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x81}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) 8m11.124519038s ago: executing program 37 (id=1311): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000f6100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 8m10.832283455s ago: executing program 38 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf256300000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_SET_EXPRESSIONS={0xe0, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2f}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x81}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) 6m24.928840618s ago: executing program 0 (id=1575): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 6m24.526121218s ago: executing program 0 (id=1576): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x10eaff, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xac, 0x2000) mknodat$null(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x103) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 6m23.68414654s ago: executing program 0 (id=1579): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000be640)={0x829, &(0x7f00000be500)=[{0xa000006, 0x0, 0x0, 0x1, 0xfffffff8}]}) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000100)={0x8, 0x8, 0x100, 0x6, 0x4, 0x5, 0x10, 0x8df, 0x1, 0xd9, 0x1, 0x5, &(0x7f0000000040)=[0xc, 0x5, 0xfff, 0x8], 0x4, &(0x7f0000000080)="33936985b2249436f4ae47314817329fa36601cad1e9c22914bc03d500011450707d75f641430b1e5f33d0f10bc033526c7c519f11e26fa896036a5ee977a6524709", 0x42}) 6m22.592154878s ago: executing program 0 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000008b04"]) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r4 = open_tree(r3, &(0x7f0000000300)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m22.057584835s ago: executing program 0 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) r1 = syz_usb_connect(0x2, 0xbe, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0x10, 0x69, 0x34, 0x8, 0x582, 0x14, 0xe921, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x80, 0x0, 0xb0, 0x5b, [{{0x9, 0x4, 0x48, 0x2, 0x3, 0x74, 0x9c, 0xd5, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "38da"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x6, 0x91}, {0x6, 0x24, 0x1a, 0xffff, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x401, 0xd4, 0x5}, @dmm={0x7, 0x24, 0x14, 0x41, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x1, 0xfff}, @acm={0x4}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "d720cfb998"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x193, 0x9}, {0x6, 0x24, 0x1a, 0x47}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0xd, 0x10, 0x3, 0x8000, 0x2}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x2, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xf7, 0x6, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x7b62}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x8, 0x8, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000080)={[{0xa4, 0x4e00, "32915efbe19b69cf38a6d14a04a8673128639373270da5e17ecc92a7cb99cdf9e883907fe7ca2b0b13d35b808f28c5af5f87bda58e8e30b0e862aedfe08cead9a748761642c073c2cb29185b3e051a20e0f627e54b7400bdea1e053122d79935e67af7e95aafbc1410c6b31a071d8a32042e46ffec9c61b5c5621b80aac1ece66d257ed1916a5aa45c805273d6c92a487efcfc0a5058388683488fec19efa98795fdd402"}]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 6m20.904123926s ago: executing program 0 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100f4f665c8812a977114000000180007800c000300ba000000000000e9070002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x434001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x10000000) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) 6m20.557017945s ago: executing program 39 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100f4f665c8812a977114000000180007800c000300ba000000000000e9070002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x434001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x10000000) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) 1m20.540324519s ago: executing program 5 (id=2647): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x81fb, 0x100c38}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/131, 0x83, 0x10002, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) sigaltstack(0x0, 0x0) 1m20.321853639s ago: executing program 5 (id=2649): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) 1m16.798433133s ago: executing program 8 (id=2652): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x1) r1 = dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0xcd, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x501}, [{0x3, 0x81, 0xff, 0xff5, 0x100000000, 0x1b8, 0x7}], "", ['\x00']}, 0x6b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffd}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000001280)=@ethtool_drvinfo={0x3, "f6cc49532dce291a08b111500f2ba47b16e01648921465ade660df328bd44305", "64becc012402000e05b7be53a3e0022b823c53fa8b0552730f598abecfa68c19", "e2e92757bbb233cf2acaa7740a8ffb0581ef8d3b508c602389b578f85f5c0ae9", "c000f73e847eed1a03968d17fb7346c8f93bc353e2cff92a497d41173b506bbf", "858d03c319010000005f6f10e27186dad7d6d6770bff88d34fff6740b100", "1f49d6f3cda22adaec994b12", 0x20000002, 0x80, 0x7ff, 0xa, 0x2}}) 1m15.292060964s ago: executing program 5 (id=2655): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xffffffea, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000000000000000000905820000000000000905030200020000004e46deda89786f876ce865a4da594e2bbe1b32f527362d5e4aafd20e969b872bf27cda33abacdefe9b"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) 1m14.613388913s ago: executing program 8 (id=2658): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) (async, rerun: 32) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x2f, 0x0, 0x7fffffff, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250a0000000400067c040001"], 0x1c}}, 0xc0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0xa0, r7, 0xd54ee67e28aa2a83, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0xaf0fd67c520f0b2d) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff}) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r9, 0x0, 0x46) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x18, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x1, 0x6, 0x9, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe904}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000480)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x50) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r1, r4, 0x2c, 0x200c, 0x0, @value=r8, @void, @void, @void, r5}, 0x20) (rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000004}, 0x4004054) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmmsg(r12, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)="cf", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4009811) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x18d1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='Q') 1m13.142969817s ago: executing program 1 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1m12.405458037s ago: executing program 9 (id=2661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b80080003"], 0x34}], 0x1}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250f0000002c000780"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000002700)=[{0x0, 0x0, 0x0, @broadcast}]}) 1m10.713362731s ago: executing program 8 (id=2663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 1m10.683721909s ago: executing program 9 (id=2664): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{0x1, 0x0, 0xa1ff}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xac, 0x2000) mknodat$null(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x103) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 1m8.537257789s ago: executing program 8 (id=2666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50) 1m8.35207179s ago: executing program 9 (id=2667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ack_update_msk\x00', r3, 0x0, 0x2}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1m8.328176119s ago: executing program 1 (id=2668): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendto(r1, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m7.597111852s ago: executing program 8 (id=2669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000819a00"/28], 0x50) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1}, 0x40}], 0x1, 0xcb, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r2}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) 1m7.015982015s ago: executing program 9 (id=2671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) (rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x40000}, 0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) syz_io_uring_setup(0x3df8, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) (rerun: 32) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000000000200000028000480240001800a000140fff500000600014003ff04000000000000007a30000000000900020073797a3200000000f3ff000011000100000000000000"], 0x7c}}, 0x0) (async) ftruncate(r1, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m6.298716038s ago: executing program 1 (id=2672): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000002200)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000030000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) 1m6.028024031s ago: executing program 9 (id=2674): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff57, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 1m5.237337306s ago: executing program 5 (id=2675): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) (async) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x106, &(0x7f00000000c0)={0x0, 0x8d2dd, 0x2, 0x1, 0x0, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x1, 0x0, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x10, 0x40, 0x0, 0x0, 0x4, 0xff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x10, 0x40, 0x0, 0x0, 0x4, 0xff}) close(r8) (async) close(r8) mount$binderfs(0x0, &(0x7f0000000340)='./binderfs\x00', &(0x7f0000000380), 0x480, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=gloval,\x00']) 1m4.785674265s ago: executing program 1 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000970000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000066c000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x3662, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r7 = socket(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x7fffffff}, 0x1c) sendmmsg$inet(r7, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b150000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e00", @ANYRES32=r6], 0x3c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1m4.463978686s ago: executing program 5 (id=2677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000819a00"/28], 0x50) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1}, 0x40}], 0x1, 0xcb, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r2}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) 1m3.672671397s ago: executing program 1 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060012000c0007800800064000000000050005000a00000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) 1m2.195167505s ago: executing program 9 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m2.183475021s ago: executing program 8 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002d00010400001ff50000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0x4}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000540)={0x1f, 0x9, @none, 0x6, 0x2}, 0xe) 1m2.088090677s ago: executing program 1 (id=2681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ack_update_msk\x00', r3, 0x0, 0x2}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1m1.98556459s ago: executing program 5 (id=2682): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 37.911570552s ago: executing program 40 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 36.906514491s ago: executing program 41 (id=2681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='ack_update_msk\x00', r3, 0x0, 0x2}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 36.753756562s ago: executing program 42 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002d00010400001ff50000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0x4}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000540)={0x1f, 0x9, @none, 0x6, 0x2}, 0xe) 36.611852317s ago: executing program 43 (id=2682): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 17.633832942s ago: executing program 4 (id=2695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x4c, r1, 0x400, 0x70bd2d, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0xe}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xfb3, 0x1, 0x3, 0x5, 0x800, 0x6]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES16=r5, @ANYRESHEX, @ANYRESHEX=r0]) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40080) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5c7e4ee53869e847}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000001", @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf25200000000c000600000000000000000008000300", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 11.143003354s ago: executing program 4 (id=2696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 10.870618997s ago: executing program 4 (id=2697): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440), 0x18}], 0x2}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="80220200000071a4"], 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0xb6, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') setrlimit(0x3, &(0x7f0000000000)) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f0000000700)=[{0x6, 0x1, 0xe1, &(0x7f0000000500)="ba9d0daa31652b062b459fba49996e906bd93e5fdc7ff215973f990f093927cb4e80803d049efcc2bf6c02ea17d041186bbc44b2479728e84a75a71b7cea5601ef73371936e0103a7dbf20aad89e24874c546ce187862739cb003b0a62e644c9941690b0c323290c07f68b2992ee2e074639190eef5138f961650e5e20cce31d595d95708d3c99df743567fd99fec4b449edd95be7ad04e2d3b0c9b3bc691e8ab1dc50cb6294e44955b6115dcb83bd6e2892b8485556ff5d46480676f01da46e11d2a4c8724aff7634c25374534d94e92bde573d1e93c627afed2c12858bc56db3"}, {0x5ab0, 0x8000, 0x50, &(0x7f0000000080)="24124930ca50a66b8cfb021f1bd114b16951cb246c2ba111946001ebd210d01afbf1fe9afffb85e5749b898fc97c78d95ce5dcbd6cca29efdefc8b29fdb17f8e774b4c0e797c9cf7a158bf5b7a778fb4"}, {0x5, 0x401, 0xcc, &(0x7f0000000600)="d2d0ed5c0e4fda76b37533923398d1c26dadd17a55d8d68f1c29e99b79f70cfc81839e0dcd55117641f731c972f1dfe4bd5a33460df13df039be5ce80957809c9b0d6eee4e52e41b634f66f0f055240e2b87af1a6b3e876eac1fa13d1d0df02b16c97534f25e2ddff6af253d4521afb361efffa66117fc061764f04e00ff87435e191e3cb86c2d3f47751867573fddd468e310c581941f9954a131c69491b246e5e2d776b25186d2b4bdcb3281ab9620312889f58a258e096b772e531f0c28abaafb62183971c0acc1e81c2a"}, {0x0, 0x1, 0x47, &(0x7f0000000280)="5737b1b837362b61e0784d5701ed36a78c9b17928b58275349776a1dc540e5f529bb1d7cba71b9eb2964dd628ec2daf2c9deab8f86538d12728b36f57cdf4550f2d40f1226ae68"}, {0x0, 0x8000, 0x3a, &(0x7f0000000200)="76bacc68846db5dd0f6d7c3386a978609bd929596576b03064f32d6470d892c91a91fe5bbbb7468c72da3170cf31ee77178eef0f66921201b007"}, {0x9, 0x400, 0x7, &(0x7f0000000380)="232165731810be"}, {0x6, 0x1a10, 0x21, &(0x7f00000003c0)="772d21d100145b22b1853297cc2ea01fd075a46c935b78da08fcf640a3f96fc0ae"}, {0x1, 0x10, 0x12, &(0x7f0000000400)="2f93a0dc103fa19e1f835d6dfd70b566ce5b"}], 0x8}) 7.583821721s ago: executing program 4 (id=2698): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a0af8ff7525347cbfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000072000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6993bad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785b1292fcb9c1d3079a00db453620ce72d75946c2b638f91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33321d1ec72ed311740d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d07815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc3c9731c9a7bb3a4e67056433edf43fba5566a3e02200bae941d34ac81fd48f9b73126992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000480000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089ba9b19dbe6431c7bf773634f4aac8c91aef83eaa0951d137f8f91a0a9d54f4347431fa96c0b54a503c39d4da796a0dc4a54cb6d9952feb6d282aa2557037b890dc0cf2ed230571ffafccdef2c2c32d3edbcb5ec2cb723149cbed2fbd5fe7452486401e65abb2966c85ec1fdb74b8a492f83e6dd9f2e2f4f75a18a2117b96217adc5dd29bf9192e4419594d1369c1f25e5965f9c601e47f70b0b35c4367102087b9f00c2651c1b5e3134d45a8c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x48) 6.216543979s ago: executing program 4 (id=2699): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0xc4}}, 0x4c050) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) fchdir(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {0x7ff9, 0x6}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x40020) 6.101017361s ago: executing program 7 (id=2686): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000300)) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = dup2(r2, r2) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000200)="c4e27d0ef964360f535f61360f01cf0fc75f000f21820fc75dbf8fb801008ed05e2d01d1d105000000b98b0000000f01d9f30f09", 0x34}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1001d, 0xfa11, 0xffffffff}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1c) 0s ago: executing program 4 (id=2700): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0xc4}}, 0x4c050) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) fchdir(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {0x7ff9, 0x6}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x40020) kernel console output (not intermixed with test programs): register_driver returned -16 [ 737.729780][ T7198] usb 2-1: selecting invalid altsetting 6 [ 737.740687][ T7198] usb 2-1: digital interface selection failed (-22) [ 737.774674][ T7198] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 737.938896][ T7198] usb 2-1: setting power OFF [ 737.952434][ T7198] dvb-usb: bulk message failed: -22 (2/0) [ 737.972732][ T7198] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 737.988254][T13660] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 738.014737][ T7198] (NULL device *): no alternate interface [ 738.085524][ T7198] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 738.110737][ T7198] usb 2-1: USB disconnect, device number 43 [ 738.175317][T13660] usb 5-1: Using ep0 maxpacket: 8 [ 738.185071][T13660] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 738.236326][T13660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 738.257469][T13660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 738.274633][T13660] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.292525][T13660] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 738.301998][T13660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.548886][T13660] usb 5-1: GET_CAPABILITIES returned 0 [ 738.566193][T14646] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 738.574296][T13660] usbtmc 5-1:16.0: can't read capabilities [ 738.581972][T14646] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1954'. [ 739.267177][T13660] IPVS: starting estimator thread 0... [ 739.332775][T14651] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 739.382481][T14652] IPVS: using max 40 ests per chain, 96000 per kthread [ 739.522598][ T7185] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 739.559022][ T7185] usb 6-1: USB disconnect, device number 20 [ 739.563347][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 739.563362][ T30] audit: type=1400 audit(739.106:1115): avc: denied { write } for pid=14632 comm="syz.4.1952" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 739.597269][ T7198] usb 5-1: USB disconnect, device number 49 [ 739.621898][ T979] usb 10-1: USB disconnect, device number 14 [ 742.023764][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1958'. [ 742.667960][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021baf000: rx timeout, send abort [ 742.676288][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021bad400: rx timeout, send abort [ 742.685288][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021baf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 742.699677][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021bad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 743.917007][ T979] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 744.336826][ T979] usb 9-1: unable to get BOS descriptor or descriptor too short [ 744.364452][ T979] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 744.391781][ T979] usb 9-1: config 6 has no interface number 0 [ 744.784437][ T979] usb 9-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 744.807434][ T979] usb 9-1: config 6 interface 200 has no altsetting 0 [ 744.842162][ T979] usb 9-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 744.944145][ T979] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 745.045632][ T1650] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 745.060051][ T979] usb 9-1: Product: syz [ 745.064277][ T979] usb 9-1: Manufacturer: syz [ 745.069096][ T979] usb 9-1: SerialNumber: syz [ 745.283148][T14714] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 745.295266][ T1650] usb 2-1: Using ep0 maxpacket: 8 [ 745.324602][ T1650] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 745.337339][ T1650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.347965][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.355242][ T1650] usb 2-1: Product: syz [ 745.381499][ T1650] usb 2-1: Manufacturer: syz [ 745.386919][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.415245][ T7200] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 745.424270][ T1650] usb 2-1: SerialNumber: syz [ 745.461696][ T1650] usb 2-1: config 0 descriptor?? [ 745.492878][ T1650] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 745.502708][ T1650] usb 2-1: setting power ON [ 745.514570][ T1650] dvb-usb: bulk message failed: -22 (2/0) [ 745.541128][ T1650] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 745.544718][ T979] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 745.559086][ T1650] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 745.584251][ T1650] usb 2-1: media controller created [ 745.588498][ T7200] usb 10-1: config 128 has an invalid interface number: 72 but max is 0 [ 745.602054][ T7200] usb 10-1: config 128 has no interface number 0 [ 745.693489][T14703] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1964'. [ 745.704158][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.721099][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.721206][ T979] dvb-usb: bulk message failed: -8 (3/0) [ 745.747599][ T7200] usb 10-1: config 128 interface 72 has no altsetting 0 [ 746.240270][ T7200] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 746.247321][ T1650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.257038][ T7200] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.286385][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 746.321709][ T7200] usb 10-1: Product: syz [ 746.323118][ T1650] usb 2-1: selecting invalid altsetting 6 [ 746.332958][ T7200] usb 10-1: Manufacturer: syz [ 746.339189][ T979] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 746.340153][ T1650] usb 2-1: digital interface selection failed (-22) [ 746.348556][ T7200] usb 10-1: SerialNumber: syz [ 746.361102][ T979] usb 9-1: media controller created [ 746.374678][ T1650] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 746.386231][ T1650] usb 2-1: setting power OFF [ 746.391434][ T1650] dvb-usb: bulk message failed: -22 (2/0) [ 746.405548][ T1650] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 746.416786][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.498930][ T979] dvb-usb: bulk message failed: -8 (6/0) [ 746.516077][ T1650] (NULL device *): no alternate interface [ 746.560655][ T979] dvb-usb: bulk message failed: -8 (6/0) [ 746.590446][ T979] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 746.719155][ T979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 746.738066][ T1650] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 746.743665][ T979] dvb-usb: schedule remote query interval to 150 msecs. [ 746.756417][ T979] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 746.935654][ T7198] dvb-usb: bulk message failed: -8 (1/0) [ 746.945089][ T7198] dvb-usb: error while querying for an remote control event. [ 746.963372][ T979] usb 9-1: USB disconnect, device number 23 [ 747.051752][ T1650] usb 2-1: USB disconnect, device number 44 [ 747.121489][ T979] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 747.413879][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.936529][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.359961][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880550e1000: rx timeout, send abort [ 749.368318][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880550e3000: rx timeout, send abort [ 749.376969][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880550e1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 749.391371][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880550e3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 749.469793][ T7200] usb 10-1: USB disconnect, device number 15 [ 751.741699][ T30] audit: type=1326 audit(751.286:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 751.814122][ T30] audit: type=1326 audit(751.286:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 751.885461][ T5889] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 751.896909][ T30] audit: type=1326 audit(751.286:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 751.919845][ T30] audit: type=1326 audit(751.286:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 751.942829][ T30] audit: type=1326 audit(751.286:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 751.977622][ T30] audit: type=1326 audit(751.286:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 752.073276][ T30] audit: type=1326 audit(751.286:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 752.107175][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 752.134665][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.158340][ T5889] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 752.173249][ T30] audit: type=1326 audit(751.286:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 752.218534][ T30] audit: type=1326 audit(751.286:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 752.258233][ T5889] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 752.267508][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.307411][ T5889] usb 9-1: Product: syz [ 752.319499][ T5889] usb 9-1: Manufacturer: syz [ 752.333753][ T5889] usb 9-1: SerialNumber: syz [ 752.352433][ T5889] usb 9-1: config 0 descriptor?? [ 752.396033][ T30] audit: type=1326 audit(751.286:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14782 comm="syz.4.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9858efc9 code=0x7ffc0000 [ 753.366756][ T5926] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 753.555297][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 753.614630][T14808] batman_adv: batadv0: Adding interface: gretap1 [ 753.621891][T14808] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.647895][T14808] batman_adv: batadv0: Interface activated: gretap1 [ 753.835852][ T5926] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 753.858999][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.875323][ T5926] usb 2-1: Product: syz [ 753.917766][ T5926] usb 2-1: Manufacturer: syz [ 753.948909][ T5926] usb 2-1: SerialNumber: syz [ 754.789999][ T5926] usb 2-1: config 0 descriptor?? [ 754.833156][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 754.881329][T14779] delete_channel: no stack [ 754.995396][ T5926] usb 2-1: setting power ON [ 755.007936][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 755.010765][ T7198] usb 9-1: USB disconnect, device number 24 [ 755.040836][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.489264][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 755.499128][ T5926] usb 2-1: media controller created [ 755.508859][T14801] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1982'. [ 755.534021][T14801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.577076][T14801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.592983][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.705831][T14832] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 755.712664][ T5926] usb 2-1: selecting invalid altsetting 6 [ 755.855662][ T5926] usb 2-1: digital interface selection failed (-22) [ 755.859177][ T7198] IPVS: starting estimator thread 0... [ 755.892914][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 755.917900][T14832] netlink: 'syz.9.1988': attribute type 2 has an invalid length. [ 755.964120][ T5926] usb 2-1: setting power OFF [ 756.227068][T14840] IPVS: using max 73 ests per chain, 175200 per kthread [ 756.356574][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 756.515155][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 756.595497][ T5926] (NULL device *): no alternate interface [ 756.817761][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 756.932765][ T5926] usb 2-1: USB disconnect, device number 45 [ 757.464886][T14873] binder: BINDER_SET_CONTEXT_MGR already set [ 757.473136][T14873] binder: 14870:14873 ioctl 4018620d 200000000040 returned -16 [ 757.978967][T14866] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 757.985516][T14866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.996375][T14866] vhci_hcd vhci_hcd.0: Device attached [ 758.202148][T14875] vhci_hcd: connection closed [ 758.209308][ T3451] vhci_hcd: stop threads [ 758.245179][ T3451] vhci_hcd: release socket [ 758.262810][ T3451] vhci_hcd: disconnect device [ 760.725422][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 760.725446][ T30] audit: type=1400 audit(760.256:1142): avc: denied { watch watch_reads } for pid=14898 comm="syz.8.2001" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 763.550238][ T30] audit: type=1326 audit(763.096:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.575989][ T30] audit: type=1326 audit(763.116:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.614987][ T30] audit: type=1326 audit(763.156:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.721339][ T30] audit: type=1326 audit(763.186:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.744710][ T7207] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 763.752795][ T7198] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 763.755288][ T30] audit: type=1326 audit(763.186:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.915204][ T30] audit: type=1326 audit(763.186:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 763.917600][ T7198] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.949196][ T7207] usb 10-1: Using ep0 maxpacket: 8 [ 764.027512][ T30] audit: type=1326 audit(763.186:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 764.027808][ T7207] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 764.050420][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.079219][ T7198] usb 6-1: config 0 has no interface number 0 [ 764.103319][ T7207] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.113171][ T7198] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 764.122577][ T7198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.134938][ T7198] usb 6-1: Product: syz [ 764.139763][ T7207] usb 10-1: Product: syz [ 764.144287][ T7198] usb 6-1: Manufacturer: syz [ 764.193362][ T30] audit: type=1326 audit(763.186:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 764.216684][ T30] audit: type=1326 audit(763.186:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f806a18efc9 code=0x7ffc0000 [ 764.267979][ T7207] usb 10-1: Manufacturer: syz [ 764.274837][ T7198] usb 6-1: SerialNumber: syz [ 764.296985][ T7207] usb 10-1: SerialNumber: syz [ 764.348272][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 764.386205][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2019'. [ 764.438744][ T7198] usb 6-1: config 0 descriptor?? [ 764.449657][ T7207] usb 10-1: config 0 descriptor?? [ 764.718706][ T7207] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 764.734260][ T7207] usb 10-1: setting power ON [ 764.743206][ T7207] dvb-usb: bulk message failed: -22 (2/0) [ 764.752863][ T7207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.765921][ T7207] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 764.800905][ T7207] usb 10-1: media controller created [ 764.832421][ T7207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.853176][ T7207] usb 10-1: selecting invalid altsetting 6 [ 764.859146][ T7207] usb 10-1: digital interface selection failed (-22) [ 764.867966][ T7207] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 764.877697][ T7207] usb 10-1: setting power OFF [ 764.889452][ T7207] dvb-usb: bulk message failed: -22 (2/0) [ 764.896987][ T7207] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 764.910420][ T7198] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 764.994455][ T7207] (NULL device *): no alternate interface [ 765.550796][T14960] netlink: 192 bytes leftover after parsing attributes in process `syz.9.2017'. [ 765.554571][ T7198] usb 6-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 765.592006][ T7207] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 765.604151][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2021'. [ 765.606634][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.624002][ T7198] usb 6-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 765.638427][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2021'. [ 765.725587][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.729358][T14981] overlay: Unknown parameter 'fsuuid' [ 765.782291][ T7207] usb 10-1: USB disconnect, device number 16 [ 765.940904][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 765.940919][ T30] audit: type=1326 audit(765.486:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14983 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806a18efc9 code=0x7fc00000 [ 766.494526][ T30] audit: type=1400 audit(765.736:1162): avc: denied { getopt } for pid=14985 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 766.562386][T14998] loop2: detected capacity change from 0 to 7 [ 766.574458][T14998] loop2: [ 766.578559][T14998] loop2: partition table partially beyond EOD, truncated [ 767.153061][ T5889] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 767.745798][ T5889] usb 9-1: device descriptor read/64, error -71 [ 767.876688][T15024] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2036'. [ 768.085411][ T5889] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 768.117751][T15032] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 768.374681][ T5889] usb 9-1: device descriptor read/64, error -71 [ 768.453286][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2040'. [ 768.495682][ T5889] usb usb9-port1: attempt power cycle [ 768.967221][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2044'. [ 769.020328][T15049] macvlan3: entered allmulticast mode [ 769.379533][ T5889] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 769.444361][ T5926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 769.761964][ T5889] usb 9-1: device descriptor read/8, error -71 [ 769.942039][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 769.951442][ T5926] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 769.970993][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.980346][ T5926] usb 5-1: Product: syz [ 770.081020][ T5926] usb 5-1: Manufacturer: syz [ 770.110156][ T5926] usb 5-1: SerialNumber: syz [ 770.167710][ T5926] usb 5-1: config 0 descriptor?? [ 770.244653][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 770.272630][ T5926] usb 5-1: setting power ON [ 770.364657][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 770.377784][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.536140][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 770.994982][ T5926] usb 5-1: media controller created [ 771.017724][T15041] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2043'. [ 771.023069][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.045226][ T5889] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 771.088257][ T5889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.101828][T15041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.118140][ T5926] usb 5-1: selecting invalid altsetting 6 [ 771.140652][ T5889] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.154302][T15041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.165209][ T5926] usb 5-1: digital interface selection failed (-22) [ 771.177206][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 771.214388][ T5926] usb 5-1: setting power OFF [ 771.501834][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 771.564059][ T5889] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.756894][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 771.770049][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 771.780513][ T5926] (NULL device *): no alternate interface [ 771.967712][ T30] audit: type=1400 audit(771.506:1163): avc: denied { name_bind } for pid=15072 comm="syz.9.2053" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 772.027498][ T5889] usb 9-1: SerialNumber: syz [ 773.996907][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 774.056085][ T5926] usb 5-1: USB disconnect, device number 50 [ 774.710442][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054103c00: rx timeout, send abort [ 774.718768][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054102000: rx timeout, send abort [ 774.735228][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054103c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 774.749603][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054102000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 775.669423][ T5889] usb 9-1: can't set config #1, error -71 [ 775.684717][ T5889] usb 9-1: USB disconnect, device number 28 [ 777.073349][ T30] audit: type=1400 audit(776.586:1164): avc: denied { connect } for pid=15114 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 778.958777][T15137] overlay: Bad value for 'metacopy' [ 779.214056][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2066'. [ 779.223002][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2066'. [ 780.640244][T15137] fuse: Bad value for 'fd' [ 782.618544][ T5926] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 783.007223][T15160] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2078'. [ 783.016880][ T5926] usb 2-1: config 128 has an invalid interface number: 72 but max is 0 [ 783.026791][ T5926] usb 2-1: config 128 has no interface number 0 [ 783.055055][ T5926] usb 2-1: config 128 interface 72 has no altsetting 0 [ 783.064283][ T5926] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 783.073782][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.082093][ T5926] usb 2-1: Product: syz [ 783.086792][ T5926] usb 2-1: Manufacturer: syz [ 783.092177][ T5926] usb 2-1: SerialNumber: syz [ 783.178625][ T30] audit: type=1400 audit(782.696:1165): avc: denied { listen } for pid=15153 comm="syz.4.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 783.424475][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c06bc00: rx timeout, send abort [ 783.433038][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c06b800: rx timeout, send abort [ 783.441582][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c06bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 783.455905][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c06b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 784.488665][ T7218] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 784.604086][ T5926] usb 2-1: USB disconnect, device number 46 [ 784.766752][ T7218] usb 9-1: Using ep0 maxpacket: 8 [ 784.791426][ T7218] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 784.817677][ T7218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.846118][ T7218] usb 9-1: Product: syz [ 784.850324][ T7218] usb 9-1: Manufacturer: syz [ 784.854923][ T7218] usb 9-1: SerialNumber: syz [ 785.126089][ T7218] usb 9-1: config 0 descriptor?? [ 785.221601][ T7218] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 785.240907][ T7218] usb 9-1: setting power ON [ 785.278293][ T7218] dvb-usb: bulk message failed: -22 (2/0) [ 785.321632][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 785.343366][ T7218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.355865][ T7218] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 785.376963][ T7218] usb 9-1: media controller created [ 785.419690][ T7218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.476749][ T7218] usb 9-1: selecting invalid altsetting 6 [ 785.482967][ T7218] usb 9-1: digital interface selection failed (-22) [ 785.482991][T15193] netlink: 'syz.9.2086': attribute type 10 has an invalid length. [ 785.490743][ T7218] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 785.525259][T15177] netlink: 'syz.8.2081': attribute type 10 has an invalid length. [ 785.540382][ T7218] usb 9-1: setting power OFF [ 785.557974][ T7218] dvb-usb: bulk message failed: -22 (2/0) [ 785.581602][T15206] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2081'. [ 785.591618][T15204] binder: 15200:15204 ioctl 0 200000000040 returned -22 [ 785.655871][ T7218] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 785.766302][ T7218] (NULL device *): no alternate interface [ 785.780225][T15205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.984450][T15177] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2081'. [ 786.157945][T15205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.487720][ T7218] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 786.517862][T15193] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 786.660724][ T7218] usb 9-1: USB disconnect, device number 29 [ 786.741284][T15217] fuse: Unknown parameter 'ro' [ 786.753564][T15217] Cannot find add_set index 0 as target [ 788.259570][T15240] dns_resolver: Unsupported server list version (0) [ 788.264470][T15241] dns_resolver: Unsupported server list version (0) [ 788.293807][T15233] syzkaller0: entered promiscuous mode [ 788.312424][T15233] syzkaller0: entered allmulticast mode [ 788.335857][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2097'. [ 788.592052][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 788.625137][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'. [ 788.639550][ T7185] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 788.861707][ T7185] usb 10-1: config 0 has an invalid interface number: 215 but max is 0 [ 788.873818][ T7185] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.958673][ T7185] usb 10-1: config 0 has no interface number 0 [ 788.973852][ T7185] usb 10-1: config 0 interface 215 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 788.987466][ T7185] usb 10-1: config 0 interface 215 has no altsetting 0 [ 788.996831][ T7185] usb 10-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice= c.c1 [ 789.011256][ T7185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.024334][ T7185] usb 10-1: Product: syz [ 789.035226][ T7185] usb 10-1: Manufacturer: syz [ 789.039960][ T7185] usb 10-1: SerialNumber: syz [ 789.055869][ T7185] usb 10-1: config 0 descriptor?? [ 789.064326][ T7185] ax88179_178a 10-1:0.215: probe with driver ax88179_178a failed with error -22 [ 789.569686][T15241] xt_cgroup: invalid path, errno=-2 [ 789.840493][ T7185] usb 10-1: USB disconnect, device number 17 [ 790.185418][ T7207] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 790.601657][ T7207] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 790.612014][ T7207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.672338][ T7207] usb 5-1: config 0 descriptor?? [ 791.473280][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'. [ 791.526005][ T7207] ath6kl: Unsupported hardware version: 0x0 [ 791.585985][ T7207] ath6kl: Failed to init ath6kl core: -22 [ 793.079473][ T7207] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 793.201197][ T5926] usb 5-1: USB disconnect, device number 51 [ 793.306879][T15294] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2111'. [ 793.375695][ T7207] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 793.697147][ T7207] usb 2-1: Using ep0 maxpacket: 8 [ 793.720682][ T7207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 793.735144][ T7207] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 793.768981][ T7207] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 793.778543][ T7207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.787147][ T7207] usb 2-1: Product: syz [ 793.791517][ T7207] usb 2-1: Manufacturer: syz [ 793.796572][ T7207] usb 2-1: SerialNumber: syz [ 793.804299][ T7207] usb 2-1: config 0 descriptor?? [ 796.566134][T15313] delete_channel: no stack [ 796.601929][ T979] usb 2-1: USB disconnect, device number 47 [ 796.711606][T15334] netlink: 'syz.9.2123': attribute type 1 has an invalid length. [ 797.074087][ T979] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 797.685204][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 797.718000][ T979] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 797.790304][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.799865][ T979] usb 2-1: Product: syz [ 797.804560][ T979] usb 2-1: Manufacturer: syz [ 797.809719][ T979] usb 2-1: SerialNumber: syz [ 798.047566][ T979] usb 2-1: config 0 descriptor?? [ 798.061799][T15354] Cannot find add_set index 65532 as target [ 799.037175][ T979] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 799.045229][ T979] usb 2-1: setting power ON [ 799.049725][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 799.059097][T15330] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 799.059757][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.067800][T15330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 799.747337][T15360] fuse: Unknown parameter 'ãÅB¤¦Š†³ôÚfç3?$žñ±Û¬*í¡Õn‚’Ï[@Ϭ0xffffffffffffffff' [ 799.824227][T15330] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2122'. [ 800.125344][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.137926][ T979] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 800.154166][ T979] usb 2-1: media controller created [ 800.412662][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.425600][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.472887][ T979] usb 2-1: selecting invalid altsetting 6 [ 800.489873][ T979] usb 2-1: digital interface selection failed (-22) [ 800.503147][ T979] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 800.522730][ T979] usb 2-1: setting power OFF [ 800.527723][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 800.559801][ T979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 800.601757][ T979] (NULL device *): no alternate interface [ 800.650771][ T979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 800.815607][ T979] usb 2-1: USB disconnect, device number 48 [ 801.502741][T15384] bridge_slave_0: left allmulticast mode [ 801.510098][T15384] bridge_slave_0: left promiscuous mode [ 801.516757][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.569994][T15387] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 801.620087][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2135'. [ 801.682386][T15384] bridge_slave_1: left allmulticast mode [ 801.696101][T15384] bridge_slave_1: left promiscuous mode [ 801.702010][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.766397][T15384] bond0: (slave bond_slave_0): Releasing backup interface [ 802.479673][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2138'. [ 802.510296][T15384] bond0: (slave bond_slave_1): Releasing backup interface [ 802.531315][T15384] team0: Port device team_slave_0 removed [ 802.543376][T15384] team0: Port device team_slave_1 removed [ 802.551050][T15384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.558890][T15384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.570671][T15384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 802.591001][T15387] batman_adv: batadv0: Adding interface: virt_wifi0 [ 802.597833][T15387] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.690400][T15387] batman_adv: batadv0: Interface activated: virt_wifi0 [ 803.627760][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2163'. [ 803.636878][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2163'. [ 803.673143][T15461] ip6gretap0: entered promiscuous mode [ 803.692990][T15461] syz_tun: entered promiscuous mode [ 803.700680][T15461] debugfs: 'hsr1' already exists in 'hsr' [ 803.706923][T15461] Cannot create hsr debugfs directory [ 803.736524][T15465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.765037][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 803.790228][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2166'. [ 803.802039][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2166'. [ 803.839902][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.856500][T15471] ip6gretap0: entered promiscuous mode [ 803.867770][T11270] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 803.879674][T15471] syz_tun: entered promiscuous mode [ 803.887957][T11270] Bluetooth: hci4: connection err: -111 [ 803.895224][ T30] audit: type=1400 audit(803.436:1166): avc: denied { listen } for pid=15473 comm="syz.8.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 803.916127][T15471] debugfs: 'hsr1' already exists in 'hsr' [ 803.935060][T15479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.945697][T15471] Cannot create hsr debugfs directory [ 803.946086][T11270] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 803.952437][T15469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.064523][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 804.144611][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2173'. [ 804.275196][ T5875] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 804.426470][ T5875] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 804.438576][ T5875] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 804.455204][ T5875] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 804.464566][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.486921][T15481] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 804.494297][T15481] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 804.519143][ T5875] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.532554][ T30] audit: type=1400 audit(804.076:1167): avc: denied { write } for pid=15494 comm="syz.8.2177" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 804.568669][T11270] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 804.627551][ T30] audit: type=1400 audit(804.076:1168): avc: denied { open } for pid=15494 comm="syz.8.2177" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 804.712295][T15499] raw_sendmsg: syz.5.2178 forgot to set AF_INET. Fix it! [ 804.730933][ T5875] usb 10-1: USB disconnect, device number 18 [ 804.794373][T15501] syzkaller0: entered promiscuous mode [ 804.802736][T15501] syzkaller0: entered allmulticast mode [ 804.999577][ T30] audit: type=1400 audit(804.536:1169): avc: denied { connect } for pid=15508 comm="syz.8.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 805.024684][T15507] syz_tun (unregistering): left promiscuous mode [ 805.180719][T15518] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 805.915526][ T5875] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 806.356265][T13660] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 806.365296][ T5875] usb 9-1: Using ep0 maxpacket: 8 [ 806.376595][ T5875] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 806.387129][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.397752][ T5875] usb 9-1: Product: syz [ 806.402645][ T5875] usb 9-1: Manufacturer: syz [ 806.408193][ T5875] usb 9-1: SerialNumber: syz [ 806.420322][ T5875] usb 9-1: config 0 descriptor?? [ 806.595166][T13660] usb 10-1: Using ep0 maxpacket: 8 [ 806.660160][ T5875] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 806.669740][ T5875] usb 9-1: setting power ON [ 806.674363][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 806.674800][T13660] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 806.683689][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 806.700565][T13660] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 806.780611][ T5875] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 806.923941][T13660] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 806.924973][ T5875] usb 9-1: media controller created [ 806.933387][T13660] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.956243][T15531] netlink: 'syz.8.2189': attribute type 10 has an invalid length. [ 806.964156][T15531] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2189'. [ 806.982834][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.985012][T15531] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2189'. [ 807.013570][ T5875] usb 9-1: selecting invalid altsetting 6 [ 807.019355][T13660] usb 10-1: Product: syz [ 807.019374][T13660] usb 10-1: Manufacturer: syz [ 807.019387][T13660] usb 10-1: SerialNumber: syz [ 807.035648][T13660] usb 10-1: config 0 descriptor?? [ 807.057868][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.084256][ T5875] usb 9-1: digital interface selection failed (-22) [ 807.089230][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.111670][ T5875] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 807.153309][ T5875] usb 9-1: setting power OFF [ 807.159241][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 807.205002][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 807.526611][ T5875] (NULL device *): no alternate interface [ 807.571800][ T5875] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 807.618514][ T5875] usb 9-1: USB disconnect, device number 30 [ 808.852141][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.858757][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.959948][T15555] delete_channel: no stack [ 808.997688][ T7185] usb 10-1: USB disconnect, device number 19 [ 809.082899][ T5875] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 809.531047][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2204'. [ 809.746182][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.777623][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 809.805978][ T7218] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 809.828637][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.856115][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 809.864354][ T5875] usb 5-1: SerialNumber: syz [ 809.886366][ T5875] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 809.966724][ T7218] usb 9-1: Using ep0 maxpacket: 8 [ 809.989222][ T7218] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 810.006520][ T7218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.033035][ T7218] usb 9-1: Product: syz [ 810.043392][ T7218] usb 9-1: Manufacturer: syz [ 810.052248][ T7218] usb 9-1: SerialNumber: syz [ 810.160772][ T7218] usb 9-1: config 0 descriptor?? [ 810.229798][ T7218] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 810.247612][ T7218] usb 9-1: setting power ON [ 810.264937][ T7218] dvb-usb: bulk message failed: -22 (2/0) [ 810.276612][T15597] netlink: 'syz.9.2211': attribute type 1 has an invalid length. [ 810.284663][T15597] netlink: 'syz.9.2211': attribute type 4 has an invalid length. [ 810.285557][ T7218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 810.292837][T15597] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.2211'. [ 810.387601][ T7218] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 810.401271][ T7218] usb 9-1: media controller created [ 810.413512][T15597] batadv_slave_0: entered promiscuous mode [ 810.472968][T15583] netlink: 'syz.8.2205': attribute type 10 has an invalid length. [ 810.481581][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2205'. [ 810.502790][T15583] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2205'. [ 810.515789][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.524643][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.553608][ T7218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.771482][ T7218] usb 9-1: selecting invalid altsetting 6 [ 810.815233][ T7218] usb 9-1: digital interface selection failed (-22) [ 810.880010][ T7218] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 810.894060][ T7218] usb 9-1: setting power OFF [ 810.900135][ T7218] dvb-usb: bulk message failed: -22 (2/0) [ 810.910059][ T7218] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 810.926889][ T7218] (NULL device *): no alternate interface [ 810.978133][ T7218] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 811.075520][T13660] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 811.083608][ T7218] usb 9-1: USB disconnect, device number 31 [ 811.236497][T13660] usb 2-1: config 128 has an invalid interface number: 72 but max is 0 [ 811.251115][T13660] usb 2-1: config 128 has no interface number 0 [ 811.260670][T13660] usb 2-1: config 128 interface 72 has no altsetting 0 [ 811.333154][T13660] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 811.389107][T15610] geneve1: entered allmulticast mode [ 811.400938][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2215'. [ 811.465178][T13660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.510167][T13660] usb 2-1: Product: syz [ 811.538166][T13660] usb 2-1: Manufacturer: syz [ 811.543691][T13660] usb 2-1: SerialNumber: syz [ 811.553154][ T7185] usb 5-1: USB disconnect, device number 52 [ 811.619462][ T30] audit: type=1400 audit(811.156:1170): avc: denied { ioctl } for pid=15613 comm="syz.8.2217" path="socket:[53304]" dev="sockfs" ino=53304 ioctlcmd=0x5200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 813.002775][T15633] netlink: 'syz.8.2221': attribute type 1 has an invalid length. [ 813.045367][ T5875] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 813.152380][T15640] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 813.170552][T15640] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 813.183984][T15640] bond2: (slave vcan1): making interface the new active one [ 813.213660][T15640] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 813.248212][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.258145][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 813.331931][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.351716][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 813.374717][ T5875] usb 5-1: SerialNumber: syz [ 813.382219][T15633] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 813.392126][ T5875] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 813.423003][T15645] xt_CT: No such helper "pptp" [ 813.451530][T15633] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 813.667053][T15651] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 813.726002][ T30] audit: type=1400 audit(813.276:1171): avc: denied { relabelto } for pid=15649 comm="syz.8.2228" name=E91F7189591E9233614B dev="tmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 813.759590][T15651] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 813.817359][ T30] audit: type=1400 audit(813.276:1172): avc: denied { associate } for pid=15649 comm="syz.8.2228" name=E91F7189591E9233614B dev="tmpfs" ino=1290 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 813.890273][T13660] usb 2-1: USB disconnect, device number 49 [ 813.922786][ T30] audit: type=1400 audit(813.306:1173): avc: denied { mounton } for pid=15649 comm="syz.8.2228" path=2F3233302FE91F7189591E9233614B dev="tmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 813.959918][ T30] audit: type=1400 audit(813.506:1174): avc: denied { unlink } for pid=9933 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 814.612823][T15670] bridge0: port 1(syz_tun) entered blocking state [ 814.638367][T15670] bridge0: port 1(syz_tun) entered disabled state [ 814.676811][T15670] syz_tun: entered allmulticast mode [ 814.739580][T15670] syz_tun: entered promiscuous mode [ 814.763361][T15670] bridge0: port 1(syz_tun) entered blocking state [ 814.770240][T15670] bridge0: port 1(syz_tun) entered forwarding state [ 814.824195][ T7218] usb 5-1: USB disconnect, device number 53 [ 814.885793][ T5889] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 815.055951][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 815.067382][ T5889] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 815.085290][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.117748][ T5889] usb 9-1: Product: syz [ 815.125368][ T5889] usb 9-1: Manufacturer: syz [ 815.130002][ T5889] usb 9-1: SerialNumber: syz [ 815.196622][ T5889] usb 9-1: config 0 descriptor?? [ 815.221914][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 815.259321][ T5889] usb 9-1: setting power ON [ 815.284241][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 815.293963][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 815.304140][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 815.312934][ T5889] usb 9-1: media controller created [ 815.318611][ T30] audit: type=1400 audit(814.866:1175): avc: denied { connect } for pid=15685 comm="syz.5.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 815.435962][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.541438][T15688] netlink: 'syz.8.2233': attribute type 10 has an invalid length. [ 815.672280][T15688] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2233'. [ 815.812533][T15690] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2233'. [ 815.823542][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.824945][ T5889] usb 9-1: selecting invalid altsetting 6 [ 815.843622][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.853581][ T5889] usb 9-1: digital interface selection failed (-22) [ 815.861178][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 815.871814][ T5889] usb 9-1: setting power OFF [ 815.877435][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 815.883465][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 818.052600][ T5889] (NULL device *): no alternate interface [ 818.185268][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 818.208694][ T5889] usb 9-1: USB disconnect, device number 32 [ 818.742395][T15715] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 819.331882][T15715] bond1: (slave lo): Enslaving as a backup interface with an up link [ 819.344747][T15715] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 819.538857][T15725] overlayfs: missing 'lowerdir' [ 819.925444][ T5889] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 820.713581][ T5889] usb 9-1: device descriptor read/64, error -71 [ 821.258452][ T5889] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 821.559239][ T7207] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 821.825207][ T7207] usb 10-1: Using ep0 maxpacket: 16 [ 821.826575][ T5889] usb 9-1: device descriptor read/64, error -71 [ 821.886043][ T7207] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 821.917809][ T7207] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.928050][ T7207] usb 10-1: Product: syz [ 821.959878][ T7207] usb 10-1: Manufacturer: syz [ 821.975424][ T5889] usb usb9-port1: attempt power cycle [ 821.980324][ T7207] usb 10-1: SerialNumber: syz [ 822.017734][ T7207] usb 10-1: config 0 descriptor?? [ 822.725326][ T5889] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 823.056387][ T7207] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 824.529624][ T5889] usb 9-1: device not accepting address 35, error -71 [ 824.698408][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 824.811566][T15762] tipc: Started in network mode [ 824.816614][T15762] tipc: Node identity 6edb3e19f791, cluster identity 4711 [ 824.824085][T15762] tipc: Enabled bearer , priority 0 [ 824.832275][T15762] syzkaller0: entered promiscuous mode [ 824.838200][T15762] syzkaller0: entered allmulticast mode [ 824.873175][T15762] tipc: Resetting bearer [ 824.899326][T15761] tipc: Resetting bearer [ 824.951544][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2265'. [ 824.978062][T15761] tipc: Disabling bearer [ 825.243555][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2265'. [ 825.539569][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d88c00: rx timeout, send abort [ 826.020773][ T5926] usb 10-1: USB disconnect, device number 20 [ 826.047885][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d88c00: abort rx timeout. Force session deactivation [ 827.595807][ T7207] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 827.759200][ T7207] usb 10-1: Using ep0 maxpacket: 32 [ 827.776188][ T7207] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 827.784504][ T7207] usb 10-1: config 0 has no interface number 0 [ 827.798085][ T7207] usb 10-1: config 0 interface 196 has no altsetting 0 [ 827.807291][ T7207] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 827.821841][ T7207] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.832888][ T7207] usb 10-1: Product: syz [ 827.845178][ T7207] usb 10-1: Manufacturer: syz [ 827.849900][ T7207] usb 10-1: SerialNumber: syz [ 827.873880][ T7207] usb 10-1: config 0 descriptor?? [ 828.466863][T15833] netlink: 'syz.4.2281': attribute type 11 has an invalid length. [ 829.358869][ T7198] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 829.377343][ T7198] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 829.390339][ T7198] usb 6-1: USB disconnect, device number 21 [ 829.748761][ T7207] ipheth 10-1:0.196: Unable to find endpoints [ 829.781753][ T7207] usb 10-1: USB disconnect, device number 21 [ 830.644921][ T7198] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 830.816491][ T7198] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.837381][ T7198] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.875451][ T7198] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 830.897629][ T7198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.908029][ T7198] usb 9-1: config 0 descriptor?? [ 831.397762][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.410062][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.442946][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.473288][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.507964][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.531308][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.541471][ T7198] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 831.559909][ T7198] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 831.656202][ T7198] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 831.961588][T15862] blktrace: Concurrent blktraces are not allowed on nullb0 [ 832.134444][T15870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 832.141766][T15870] IPv6: NLM_F_CREATE should be set when creating new route [ 832.149050][T15870] IPv6: NLM_F_CREATE should be set when creating new route [ 832.156328][T15870] IPv6: NLM_F_CREATE should be set when creating new route [ 832.390568][ T7198] cp2112 0003:10C4:EA90.0010: error reading lock byte: -71 [ 832.471867][ T7198] usb 9-1: USB disconnect, device number 37 [ 832.479931][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'. [ 832.537386][T15875] trusted_key: encrypted_key: insufficient parameters specified [ 835.441668][T15933] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 835.802709][T15921] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 836.107839][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2323'. [ 836.137531][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 836.516356][T15953] tipc: Enabled bearer , priority 0 [ 836.558396][ T30] audit: type=1326 audit(836.106:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 836.559478][T15953] syzkaller0: entered promiscuous mode [ 836.590556][T15953] syzkaller0: entered allmulticast mode [ 836.609733][T15953] tipc: Resetting bearer [ 836.613934][T15956] FAULT_INJECTION: forcing a failure. [ 836.613934][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 836.628329][T15956] CPU: 1 UID: 0 PID: 15956 Comm: syz.5.2324 Not tainted syzkaller #0 PREEMPT(full) [ 836.628352][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 836.628364][T15956] Call Trace: [ 836.628370][T15956] [ 836.628376][T15956] dump_stack_lvl+0x116/0x1f0 [ 836.628402][T15956] should_fail_ex+0x512/0x640 [ 836.628422][T15956] should_failslab+0xc2/0x120 [ 836.628439][T15956] kmem_cache_alloc_noprof+0x75/0x6e0 [ 836.628461][T15956] ? __send_signal_locked+0x159/0x12c0 [ 836.628481][T15956] ? __send_signal_locked+0x159/0x12c0 [ 836.628494][T15956] __send_signal_locked+0x159/0x12c0 [ 836.628513][T15956] force_sig_info_to_task+0x31d/0x660 [ 836.628535][T15956] force_sig_fault+0xc4/0x100 [ 836.628552][T15956] ? __pfx_force_sig_fault+0x10/0x10 [ 836.628573][T15956] ? fixup_vdso_exception+0x34b/0x400 [ 836.628599][T15956] __bad_area_nosemaphore+0x329/0x690 [ 836.628619][T15956] do_kern_addr_fault+0x5b/0x80 [ 836.628634][T15956] exc_page_fault+0xb2/0xc0 [ 836.628656][T15956] asm_exc_page_fault+0x26/0x30 [ 836.628669][T15956] RIP: 0033:0x200000000006 [ 836.628687][T15956] Code: Unable to access opcode bytes at 0x1fffffffffdc. [ 836.628693][T15956] RSP: 002b:00007f6fd75e4338 EFLAGS: 00010282 [ 836.628705][T15956] RAX: ffffffffffffffea RBX: 00007f6fd69e5fa0 RCX: 00007f6fd678efc9 [ 836.628714][T15956] RDX: 00007f6fd75e4340 RSI: 00007f6fd75e4470 RDI: 000000000000000d [ 836.628723][T15956] RBP: 00007f6fd75e5090 R08: 0000000000000000 R09: 0000000000000000 [ 836.628731][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.628739][T15956] R13: 00007f6fd69e6038 R14: 00007f6fd69e5fa0 R15: 00007ffea21eab98 [ 836.628759][T15956] [ 836.792877][ T30] audit: type=1326 audit(836.106:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 836.823723][T15952] tipc: Resetting bearer [ 836.894654][ T30] audit: type=1326 audit(836.106:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 836.992470][T15952] tipc: Disabling bearer [ 837.405331][ T30] audit: type=1326 audit(836.106:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 837.450176][ T30] audit: type=1326 audit(836.106:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 837.502094][ T30] audit: type=1326 audit(836.136:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 837.574518][ T30] audit: type=1326 audit(836.136:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 837.802656][ T30] audit: type=1326 audit(836.136:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 838.083093][ T30] audit: type=1326 audit(836.136:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 838.283806][ T30] audit: type=1326 audit(836.146:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x7ffc0000 [ 841.149983][T16023] IPv6: Can't replace route, no match found [ 842.035145][ T5875] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 842.897498][ T5875] usb 6-1: config 128 has an invalid interface number: 72 but max is 0 [ 842.931213][ T5875] usb 6-1: config 128 has no interface number 0 [ 842.961538][ T5875] usb 6-1: config 128 interface 72 has no altsetting 0 [ 843.065895][ T5875] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 843.075226][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.083707][ T5875] usb 6-1: Product: syz [ 843.090538][ T5875] usb 6-1: Manufacturer: syz [ 843.095364][ T5875] usb 6-1: SerialNumber: syz [ 844.563575][T16079] tipc: Started in network mode [ 844.571159][T16079] tipc: Node identity ae033c96af87, cluster identity 4711 [ 844.581443][T16079] tipc: Enabled bearer , priority 0 [ 844.609686][T16079] syzkaller0: entered promiscuous mode [ 844.619671][T16079] syzkaller0: entered allmulticast mode [ 844.645618][T16079] tipc: Resetting bearer [ 844.663071][T16077] tipc: Resetting bearer [ 844.681582][T16077] tipc: Disabling bearer [ 844.917997][T16090] syz_tun (unregistering): left promiscuous mode [ 845.384547][ T5875] usb 6-1: USB disconnect, device number 22 [ 846.186273][T16107] geneve1: entered allmulticast mode [ 846.585151][ T7207] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 846.624242][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 846.624259][ T30] audit: type=1804 audit(846.166:1201): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.2380" name="/newroot/211/bus/file1" dev="overlay" ino=1167 res=1 errno=0 [ 846.735199][ T7207] usb 9-1: Using ep0 maxpacket: 8 [ 846.750216][ T7207] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 846.770401][ T7207] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.785318][ T7207] usb 9-1: Product: syz [ 846.791921][ T7207] usb 9-1: Manufacturer: syz [ 846.799232][ T7207] usb 9-1: SerialNumber: syz [ 846.809238][ T7207] usb 9-1: config 0 descriptor?? [ 846.827685][ T7207] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 846.848874][ T7207] usb 9-1: setting power ON [ 846.906684][ T7207] dvb-usb: bulk message failed: -22 (2/0) [ 846.944802][ T7207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 846.975696][ T7207] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 846.984187][ T7207] usb 9-1: media controller created [ 847.009424][ T7207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.081297][T16137] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2386'. [ 847.113026][ T7207] usb 9-1: selecting invalid altsetting 6 [ 847.124811][T16113] netlink: 'syz.8.2376': attribute type 10 has an invalid length. [ 847.151761][ T7207] usb 9-1: digital interface selection failed (-22) [ 847.166429][T16140] netlink: 192 bytes leftover after parsing attributes in process `syz.8.2376'. [ 847.174302][T16113] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2376'. [ 847.178338][T16140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.195808][ T7207] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 847.220733][ T7207] usb 9-1: setting power OFF [ 847.226326][ T7207] dvb-usb: bulk message failed: -22 (2/0) [ 847.232535][T16140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.243093][ T7207] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 847.272428][ T7207] (NULL device *): no alternate interface [ 847.302587][T16142] xt_CT: No such helper "pptp" [ 847.392770][ T7207] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 847.565654][ T7207] usb 9-1: USB disconnect, device number 38 [ 848.620060][T16171] openvswitch: netlink: Tunnel attr 8206 out of range max 16 [ 848.630994][ T7198] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 849.109218][ T7198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.131909][ T7198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 849.166679][ T7198] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 849.188270][ T7198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.266086][ T7198] usb 2-1: Product: syz [ 849.270334][ T7198] usb 2-1: Manufacturer: syz [ 849.286125][ T7198] usb 2-1: SerialNumber: syz [ 849.304187][ T7198] usb 2-1: config 0 descriptor?? [ 849.320658][ T7198] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 849.339535][ T7198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 849.365920][ T7198] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 849.476604][ T7198] usb 2-1: media controller created [ 849.526872][ T7198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.138527][T16194] tmpfs: Unknown parameter '00000000000000000000003' [ 850.150422][ T7198] DVB: Unable to find symbol tda10046_attach() [ 850.157388][ T7198] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 850.210038][ T7198] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 850.549802][ T7198] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 850.767385][ T7198] usb 2-1: USB disconnect, device number 50 [ 851.269952][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2412'. [ 851.278965][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 852.792439][T16216] Set syz1 is full, maxelem 65536 reached [ 853.105307][ T7198] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 853.625413][ T7198] usb 10-1: Using ep0 maxpacket: 8 [ 853.705408][ T7198] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 853.714698][ T7198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.722901][ T7198] usb 10-1: Product: syz [ 853.727270][ T7198] usb 10-1: Manufacturer: syz [ 853.731973][ T7198] usb 10-1: SerialNumber: syz [ 853.738920][ T7198] usb 10-1: config 0 descriptor?? [ 853.747867][ T7198] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 853.756059][ T7198] usb 10-1: setting power ON [ 853.760811][ T7198] dvb-usb: bulk message failed: -22 (2/0) [ 853.816615][ T5889] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 853.833551][ T7198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.843975][ T7198] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 853.854587][ T7198] usb 10-1: media controller created [ 853.873658][ T7198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.902079][ T7198] usb 10-1: selecting invalid altsetting 6 [ 853.908379][ T7198] usb 10-1: digital interface selection failed (-22) [ 853.918561][ T7198] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 853.932984][ T7198] usb 10-1: setting power OFF [ 853.938744][ T7198] dvb-usb: bulk message failed: -22 (2/0) [ 853.957231][ T7198] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 853.995438][ T5889] usb 6-1: config 128 has an invalid interface number: 72 but max is 0 [ 854.044632][ T7198] (NULL device *): no alternate interface [ 854.093860][ T5889] usb 6-1: config 128 has no interface number 0 [ 854.133074][ T5889] usb 6-1: config 128 interface 72 has no altsetting 0 [ 854.324629][T16225] netlink: 192 bytes leftover after parsing attributes in process `syz.9.2415'. [ 854.327792][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 854.336469][ T7198] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 854.375763][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.381518][T16245] netlink: 'syz.9.2415': attribute type 10 has an invalid length. [ 854.392859][T16245] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2415'. [ 854.479710][ T5889] usb 6-1: Product: syz [ 854.483916][ T5889] usb 6-1: Manufacturer: syz [ 854.518818][ T5889] usb 6-1: SerialNumber: syz [ 854.548562][T16252] netlink: 'syz.4.2424': attribute type 10 has an invalid length. [ 854.567091][T13660] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 854.586266][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.658920][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.717805][ T5926] usb 10-1: USB disconnect, device number 22 [ 854.738218][T13660] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.901285][T13660] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 856.019605][T13660] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.037597][T13660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 856.052229][T13660] usb 2-1: SerialNumber: syz [ 856.160900][T13660] usb 2-1: bad CDC descriptors [ 857.110547][T16272] overlayfs: failed lookup in lower (newroot/224, name='file1', err=-40): overlapping layers [ 857.145629][T16272] overlayfs: failed lookup in lower (newroot/224, name='file1', err=-40): overlapping layers [ 857.190770][ T5889] usb 6-1: USB disconnect, device number 23 [ 857.220486][ T30] audit: type=1800 audit(856.756:1202): pid=16275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2431" name="file1" dev="overlay" ino=1243 res=0 errno=0 [ 858.040971][ T7198] usb 2-1: USB disconnect, device number 51 [ 859.712310][T16301] Set syz1 is full, maxelem 65536 reached [ 860.374430][ T7207] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 860.416616][T16290] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 860.423172][T16290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.539939][T16316] vhci_hcd: connection closed [ 860.541255][T16290] vhci_hcd vhci_hcd.0: Device attached [ 860.559286][ T3491] vhci_hcd: stop threads [ 860.573739][ T3491] vhci_hcd: release socket [ 860.578316][ T5889] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 860.595626][ T3491] vhci_hcd: disconnect device [ 860.698584][ T7207] usb 2-1: config 128 has an invalid interface number: 72 but max is 0 [ 860.710938][ T7207] usb 2-1: config 128 has no interface number 0 [ 860.735156][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 860.735156][ T7207] usb 2-1: config 128 interface 72 has no altsetting 0 [ 860.737149][ T7207] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=e9.21 [ 860.741581][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 860.815096][ T5889] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 860.815384][ T7207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.848180][ T5889] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 860.857380][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.873631][ T5889] usb 6-1: Product: syz [ 860.898177][ T5889] usb 6-1: Manufacturer: syz [ 860.902773][ T5889] usb 6-1: SerialNumber: syz [ 860.915720][ T7207] usb 2-1: Product: syz [ 860.933273][ T7207] usb 2-1: Manufacturer: syz [ 860.943412][ T7207] usb 2-1: SerialNumber: syz [ 860.952868][ T5889] usb 6-1: config 0 descriptor?? [ 861.198683][T16321] overlayfs: failed lookup in lower (newroot/547, name='file1', err=-40): overlapping layers [ 861.209866][T16321] overlayfs: failed lookup in lower (newroot/547, name='file1', err=-40): overlapping layers [ 861.222541][ T30] audit: type=1800 audit(860.766:1203): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2444" name="file1" dev="overlay" ino=2977 res=0 errno=0 [ 861.870211][T16312] delete_channel: no stack [ 861.888629][T13660] usb 6-1: USB disconnect, device number 24 [ 863.353435][ T7207] usb 2-1: USB disconnect, device number 52 [ 863.573076][T16341] netlink: 'syz.9.2450': attribute type 3 has an invalid length. [ 863.675646][T16348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.061407][T16379] FAULT_INJECTION: forcing a failure. [ 866.061407][T16379] name failslab, interval 1, probability 0, space 0, times 0 [ 866.077363][T16379] CPU: 1 UID: 0 PID: 16379 Comm: syz.8.2461 Not tainted syzkaller #0 PREEMPT(full) [ 866.077389][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 866.077406][T16379] Call Trace: [ 866.077412][T16379] [ 866.077420][T16379] dump_stack_lvl+0x16c/0x1f0 [ 866.077453][T16379] should_fail_ex+0x512/0x640 [ 866.077474][T16379] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 866.077504][T16379] should_failslab+0xc2/0x120 [ 866.077525][T16379] kmem_cache_alloc_noprof+0x75/0x6e0 [ 866.077551][T16379] ? getname_flags.part.0+0x4c/0x550 [ 866.077581][T16379] ? getname_flags.part.0+0x4c/0x550 [ 866.077604][T16379] getname_flags.part.0+0x4c/0x550 [ 866.077631][T16379] getname_flags+0x93/0xf0 [ 866.077648][T16379] path_listxattrat+0x2e8/0x370 [ 866.077665][T16379] ? ksys_write+0x1ac/0x250 [ 866.077682][T16379] ? __pfx_path_listxattrat+0x10/0x10 [ 866.077707][T16379] do_syscall_64+0xcd/0xfa0 [ 866.077736][T16379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.077754][T16379] RIP: 0033:0x7f3c1ad8efc9 [ 866.077769][T16379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.077785][T16379] RSP: 002b:00007f3c1bcf0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 866.077803][T16379] RAX: ffffffffffffffda RBX: 00007f3c1afe5fa0 RCX: 00007f3c1ad8efc9 [ 866.077815][T16379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 866.077824][T16379] RBP: 00007f3c1bcf0090 R08: 0000000000000000 R09: 0000000000000000 [ 866.077835][T16379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.077845][T16379] R13: 00007f3c1afe6038 R14: 00007f3c1afe5fa0 R15: 00007ffc4190e568 [ 866.077871][T16379] [ 866.255592][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.387477][T16387] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2465'. [ 867.015196][ T7185] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 867.176786][ T7185] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 867.238929][ T7185] usb 2-1: config 0 interface 0 has no altsetting 0 [ 867.245961][ T7185] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 867.271603][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2472'. [ 867.280741][ T7185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.309801][ T5889] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 867.482388][ T7185] usb 2-1: config 0 descriptor?? [ 867.595316][ T5889] usb 10-1: Using ep0 maxpacket: 16 [ 867.697963][ T5889] usb 10-1: config 6 has an invalid interface number: 191 but max is 0 [ 867.711401][ T5889] usb 10-1: config 6 has no interface number 0 [ 867.773731][ T5889] usb 10-1: config 6 interface 191 has no altsetting 0 [ 867.822172][ T5889] usb 10-1: string descriptor 0 read error: -22 [ 867.829363][ T5889] usb 10-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=d9.6a [ 867.849683][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.922733][ T5889] qmi_wwan 10-1:6.191: bogus CDC Union: master=0, slave=0 [ 867.983977][ T7185] apple 0003:05AC:022B.0011: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.1-1/input0 [ 868.522745][ T7185] usb 2-1: USB disconnect, device number 53 [ 868.921021][ T5889] qmi_wwan 10-1:6.191: probe with driver qmi_wwan failed with error -22 [ 868.933536][T16421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.951615][ T5889] usb 10-1: USB disconnect, device number 23 [ 869.829004][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2485'. [ 870.079981][T16455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.291793][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.298158][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.374623][T16461] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2487'. [ 872.956506][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2499'. [ 872.965623][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2499'. [ 872.999975][ T30] audit: type=1326 audit(872.546:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.5.2496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fd678efc9 code=0x0 [ 873.225220][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 873.477348][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 873.490527][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 873.500624][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 873.522368][ T5889] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 873.535295][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.552320][ T5889] usb 2-1: Product: syz [ 873.563015][ T5889] usb 2-1: Manufacturer: syz [ 873.571886][ T5889] usb 2-1: SerialNumber: syz [ 873.588835][ T5889] usb 2-1: config 0 descriptor?? [ 873.648355][T16505] netlink: 'syz.4.2503': attribute type 20 has an invalid length. [ 873.665753][T16505] IPv6: NLM_F_CREATE should be specified when creating new route [ 874.093952][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 874.104976][T16492] delete_channel: no stack [ 874.155721][ T5889] usb 2-1: USB disconnect, device number 54 [ 876.975200][T16558] binder: 16556:16558 ioctl 0 200000000040 returned -22 [ 878.005319][T13660] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 878.140984][T16581] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 878.488847][T13660] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.500959][T13660] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 879.170569][T13660] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.180516][T13660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.200357][T13660] usb 9-1: SerialNumber: syz [ 879.238720][T13660] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 879.820186][T16585] Set syz1 is full, maxelem 65536 reached [ 881.009741][ T7185] usb 9-1: USB disconnect, device number 39 [ 881.896220][T16624] overlay: ./file1 is not a directory [ 882.469327][ T7207] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 882.728536][ T7207] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.760553][ T7207] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 882.785833][ T7207] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.801371][ T7207] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 882.821792][ T7207] usb 9-1: SerialNumber: syz [ 882.846033][ T7207] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 882.975527][ T7185] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 883.645153][ T7185] usb 6-1: Using ep0 maxpacket: 32 [ 883.660443][ T7185] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 883.758229][ T7185] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 883.789072][ T7185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.800551][ T7185] usb 6-1: Product: syz [ 883.804818][ T7185] usb 6-1: Manufacturer: syz [ 883.822838][ T7185] usb 6-1: SerialNumber: syz [ 883.833463][ T7185] usb 6-1: config 0 descriptor?? [ 884.023560][T16646] xt_connbytes: Forcing CT accounting to be enabled [ 884.030720][T16646] set match dimension is over the limit! [ 884.266109][ T7185] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 884.378853][T16653] usb usb7: usbfs: process 16653 (syz.9.2548) did not claim interface 0 before use [ 884.656766][T16657] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 884.690166][ T30] audit: type=1400 audit(884.186:1205): avc: denied { read append } for pid=16654 comm="syz.4.2549" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 885.049286][ T7185] gspca_topro: reg_w err -110 [ 885.075661][ T7185] gspca_topro: Sensor soi763a [ 885.151973][ T7207] usb 6-1: USB disconnect, device number 25 [ 885.789221][ T7198] usb 9-1: USB disconnect, device number 40 [ 885.959624][T16673] xt_policy: output policy not valid in PREROUTING and INPUT [ 886.352032][ T7198] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 886.737935][ T7198] usb 6-1: config index 0 descriptor too short (expected 38445, got 45) [ 886.755151][ T7198] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.826123][ T7198] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.049615][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2559'. [ 887.237381][ T7198] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.272449][ T7198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 887.283239][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2559'. [ 887.294333][ T7198] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 887.304445][ T7198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.315886][T16693] netlink: 'syz.9.2561': attribute type 11 has an invalid length. [ 888.173278][ T7198] usb 6-1: config 0 descriptor?? [ 888.378246][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2565'. [ 888.392680][T16705] tipc: Started in network mode [ 888.411176][T16705] tipc: Node identity 369f399f5d7d, cluster identity 4711 [ 888.447056][T16705] tipc: Enabled bearer , priority 0 [ 888.484669][T16710] syzkaller0: entered promiscuous mode [ 888.500556][T16710] syzkaller0: entered allmulticast mode [ 888.556327][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2567'. [ 888.570110][T16703] tipc: Resetting bearer [ 888.589191][T16703] tipc: Disabling bearer [ 889.388581][ T30] audit: type=1326 audit(888.936:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.498249][ T30] audit: type=1326 audit(889.036:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.551712][ T30] audit: type=1326 audit(889.046:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.608455][ T30] audit: type=1326 audit(889.046:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.639049][ T30] audit: type=1326 audit(889.046:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.725247][ T30] audit: type=1326 audit(889.046:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.788119][ T30] audit: type=1326 audit(889.066:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.816200][ T30] audit: type=1326 audit(889.066:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.840110][ T30] audit: type=1326 audit(889.066:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.863518][ T7185] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 889.912981][ T30] audit: type=1326 audit(889.096:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 889.939996][T16738] netlink: 'syz.4.2575': attribute type 4 has an invalid length. [ 889.954860][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2575'. [ 889.984745][ T30] audit: type=1326 audit(889.096:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 890.050462][ T30] audit: type=1326 audit(889.096:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 890.074554][ T7185] usb 10-1: Using ep0 maxpacket: 8 [ 890.138142][ T7185] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 890.158803][ T7185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.176209][ T30] audit: type=1326 audit(889.096:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 890.199703][ T7185] usb 10-1: Product: syz [ 890.204036][ T7185] usb 10-1: Manufacturer: syz [ 890.214932][ T7185] usb 10-1: SerialNumber: syz [ 890.216677][ T30] audit: type=1326 audit(889.096:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 890.306971][ T30] audit: type=1326 audit(889.096:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.8.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3c1ad8efc9 code=0x7ffc0000 [ 890.344098][ T7185] usb 10-1: config 0 descriptor?? [ 890.381129][ T7185] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 890.389752][ T7185] usb 10-1: setting power ON [ 890.404812][ T7185] dvb-usb: bulk message failed: -22 (2/0) [ 890.422458][ T7185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.457852][ T7185] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 890.478186][ T7185] usb 10-1: media controller created [ 890.567255][T16729] netlink: 'syz.9.2571': attribute type 10 has an invalid length. [ 890.575343][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2571'. [ 890.586982][T16729] netlink: 192 bytes leftover after parsing attributes in process `syz.9.2571'. [ 890.612343][ T7185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.628298][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.648668][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.696689][ T7185] usb 10-1: selecting invalid altsetting 6 [ 890.702706][ T7185] usb 10-1: digital interface selection failed (-22) [ 890.740105][ T7185] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 890.758927][ T7185] usb 10-1: setting power OFF [ 890.763845][ T7185] dvb-usb: bulk message failed: -22 (2/0) [ 890.772566][ T7185] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 890.819094][ T7185] (NULL device *): no alternate interface [ 890.838128][ T7198] usbhid 6-1:0.0: can't add hid device: -71 [ 890.866990][ T7198] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 890.892463][ T7198] usb 6-1: USB disconnect, device number 26 [ 890.908423][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2581'. [ 891.086251][ T7185] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 891.247859][T16757] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 891.351052][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 891.360022][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 891.732379][ T7185] usb 10-1: USB disconnect, device number 24 [ 893.126494][ T7207] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 893.143727][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2592'. [ 893.330619][ T7207] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 893.355149][ T7207] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.495962][ T7207] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 893.515125][ T7207] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.526079][ T7207] usb 10-1: config 0 descriptor?? [ 893.676463][T16802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16802 comm=syz.8.2597 [ 893.696556][T16802] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2597'. [ 893.968321][T16813] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2599'. [ 894.061793][ T7207] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 894.086171][T16810] 0: reclassify loop, rule prio 0, protocol 800 [ 894.687887][T16779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.712210][T16779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.787990][ T7207] isku 0003:1E7D:319C.0012: couldn't init struct isku_device [ 894.817984][ T7207] isku 0003:1E7D:319C.0012: couldn't install keyboard [ 894.950945][ T7207] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -32 [ 894.976821][ T7207] usb 10-1: USB disconnect, device number 25 [ 895.190600][T16813] syz.8.2599 (16813): drop_caches: 2 [ 895.728067][T16823] overlayfs: failed to resolve './file1': -2 [ 897.134352][T16843] IPv6: Can't replace route, no match found [ 898.229560][T16855] netlink: 'syz.1.2613': attribute type 10 has an invalid length. [ 898.281414][T16855] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 898.759202][T16872] loop9: detected capacity change from 0 to 7 [ 898.766895][T16872] Dev loop9: unable to read RDB block 7 [ 898.772628][T16872] loop9: unable to read partition table [ 898.783470][T16872] loop9: partition table beyond EOD, truncated [ 898.809861][T16872] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 898.825553][T16874] netlink: 'syz.8.2616': attribute type 1 has an invalid length. [ 898.884960][T16874] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 898.896058][T16874] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 898.938042][T16880] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 900.178488][T16898] overlayfs: failed to resolve './file0': -2 [ 900.663742][T16911] fuse: Unknown parameter 'ãÅB¤¦Š†³ôÚfç3?$žñ±Û¬*í¡Õn‚’Ï[@Ϭ0xffffffffffffffff' [ 902.322573][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 902.322588][ T30] audit: type=1400 audit(901.668:1240): avc: denied { map } for pid=16919 comm="syz.5.2629" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 902.364400][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2630'. [ 902.652185][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2632'. [ 904.482126][ T30] audit: type=1800 audit(904.028:1241): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2637" name="bus" dev="tmpfs" ino=1291 res=0 errno=0 [ 909.244750][T16972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2644'. [ 911.507249][T16974] syzkaller0: entered promiscuous mode [ 911.560783][T16974] syzkaller0: entered allmulticast mode [ 918.725109][ T7218] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 919.755106][ T7218] usb 9-1: Using ep0 maxpacket: 16 [ 919.802354][ T7218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.860127][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2661'. [ 919.911148][ T7218] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 919.948992][ T7218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.123927][ T7207] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 920.176972][ T7218] usb 9-1: config 0 descriptor?? [ 921.189327][ T7218] usb 9-1: can't set config #0, error -71 [ 921.252146][ T7218] usb 9-1: USB disconnect, device number 41 [ 925.655259][ T7207] usb 6-1: device descriptor read/64, error -110 [ 925.955188][ T7207] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 926.687222][ T7207] usb 6-1: device descriptor read/64, error -32 [ 926.995354][ T7207] usb usb6-port1: attempt power cycle [ 927.017880][ T30] audit: type=1400 audit(926.318:1242): avc: denied { read } for pid=17062 comm="syz.4.2673" path="socket:[59318]" dev="sockfs" ino=59318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 927.808058][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 927.832469][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 933.005951][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.015125][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.148307][T15518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.161588][T15518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.181503][T15518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.189550][T15518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.198294][T15518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.310546][T17114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 956.321287][T17114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 956.334791][T17114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 956.343691][T17114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 956.352136][T17114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 956.361690][T17114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 956.372141][T17114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 956.384638][T17114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 956.397965][T17114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 956.411661][T17114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 956.419006][T17114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 956.427189][T17114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 956.455390][T17115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 956.470064][T17115] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 956.479238][T17115] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 957.196921][T17093] bridge0: port 1(syz_tun) entered disabled state [ 957.432264][T17093] syz_tun (unregistering): left allmulticast mode [ 957.438919][T17093] syz_tun (unregistering): left promiscuous mode [ 957.446139][T17093] bridge0: port 1(syz_tun) entered disabled state [ 958.285827][T17115] Bluetooth: hci2: command tx timeout [ 958.563637][T17115] Bluetooth: hci6: command tx timeout [ 958.570114][T17115] Bluetooth: hci7: command tx timeout [ 958.628216][ T52] Bluetooth: hci8: command tx timeout [ 959.527202][ T3451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.539046][ T3451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.694478][ T3451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.708354][ T3451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.869059][ T3451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.879707][ T3451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.970905][ T3451] bond0: (slave netdevsim0): Releasing backup interface [ 959.987140][ T3451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.999155][ T3451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.041440][T17105] chnl_net:caif_netlink_parms(): no params data found [ 960.382452][ T52] Bluetooth: hci2: command tx timeout [ 960.478006][T17107] chnl_net:caif_netlink_parms(): no params data found [ 960.610414][ T52] Bluetooth: hci7: command tx timeout [ 960.610421][T17115] Bluetooth: hci6: command tx timeout [ 960.686470][ T52] Bluetooth: hci8: command tx timeout [ 960.784532][T17108] chnl_net:caif_netlink_parms(): no params data found [ 960.827219][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.834346][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.843256][T17105] bridge_slave_0: entered allmulticast mode [ 960.851808][T17105] bridge_slave_0: entered promiscuous mode [ 961.420789][T17112] chnl_net:caif_netlink_parms(): no params data found [ 961.445799][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.452920][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.496366][T17105] bridge_slave_1: entered allmulticast mode [ 961.515309][T17105] bridge_slave_1: entered promiscuous mode [ 962.412128][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.447557][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.454857][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.463491][T17107] bridge_slave_0: entered allmulticast mode [ 962.471321][T17107] bridge_slave_0: entered promiscuous mode [ 962.477732][ T52] Bluetooth: hci2: command tx timeout [ 962.530645][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.542912][T17107] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.550948][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.559989][T17107] bridge_slave_1: entered allmulticast mode [ 962.567729][T17107] bridge_slave_1: entered promiscuous mode [ 962.593257][T17108] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.601122][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.611005][T17108] bridge_slave_0: entered allmulticast mode [ 962.619038][T17108] bridge_slave_0: entered promiscuous mode [ 962.669703][ T3451] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.685993][ T52] Bluetooth: hci6: command tx timeout [ 962.691443][ T52] Bluetooth: hci7: command tx timeout [ 962.767569][ T52] Bluetooth: hci8: command tx timeout [ 962.809148][T17108] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.816953][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.824251][T17108] bridge_slave_1: entered allmulticast mode [ 962.832628][T17108] bridge_slave_1: entered promiscuous mode [ 962.882442][T17105] team0: Port device team_slave_0 added [ 963.008054][ T3451] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.028503][T17105] team0: Port device team_slave_1 added [ 963.039387][T17107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.053579][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.063782][T17112] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.092766][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.111116][T17112] bridge_slave_0: entered allmulticast mode [ 963.126382][T17112] bridge_slave_0: entered promiscuous mode [ 963.141483][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.159263][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.174876][T17112] bridge_slave_1: entered allmulticast mode [ 963.200645][T17112] bridge_slave_1: entered promiscuous mode [ 963.334838][T17107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.360816][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.471919][ T3451] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.558996][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.585395][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.642191][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.929576][ T3451] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.007403][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.021439][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.031137][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.057079][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.067517][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.104512][T17108] team0: Port device team_slave_0 added [ 964.120343][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.141927][T17107] team0: Port device team_slave_0 added [ 964.150798][T17107] team0: Port device team_slave_1 added [ 964.159193][T17108] team0: Port device team_slave_1 added [ 964.292688][T17112] team0: Port device team_slave_0 added [ 964.332364][T17105] hsr_slave_0: entered promiscuous mode [ 964.340101][T17105] hsr_slave_1: entered promiscuous mode [ 964.347700][T17105] debugfs: 'hsr0' already exists in 'hsr' [ 964.353502][T17105] Cannot create hsr debugfs directory [ 964.413152][T17112] team0: Port device team_slave_1 added [ 964.424785][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.438305][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.465797][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.519842][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.527305][ T52] Bluetooth: hci2: command tx timeout [ 964.547016][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.572933][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.580423][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.631043][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.640257][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.670613][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.692874][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.701916][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.729719][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.765132][T17115] Bluetooth: hci6: command tx timeout [ 964.775213][ T52] Bluetooth: hci7: command tx timeout [ 964.780947][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.791506][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.818410][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.845787][ T52] Bluetooth: hci8: command tx timeout [ 964.877376][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.884923][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.912641][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.378793][T17108] hsr_slave_0: entered promiscuous mode [ 965.393742][T17108] hsr_slave_1: entered promiscuous mode [ 965.416251][T17108] debugfs: 'hsr0' already exists in 'hsr' [ 965.430439][T17108] Cannot create hsr debugfs directory [ 965.574720][T17107] hsr_slave_0: entered promiscuous mode [ 965.595362][T17107] hsr_slave_1: entered promiscuous mode [ 965.608160][T17107] debugfs: 'hsr0' already exists in 'hsr' [ 965.623570][T17107] Cannot create hsr debugfs directory [ 965.701432][T17112] hsr_slave_0: entered promiscuous mode [ 965.718873][T17112] hsr_slave_1: entered promiscuous mode [ 965.734803][T17112] debugfs: 'hsr0' already exists in 'hsr' [ 965.750693][T17112] Cannot create hsr debugfs directory [ 966.003589][ T3451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.026830][ T3451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.200480][ T3451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.211149][ T3451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.348531][ T3451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.359042][ T3451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.524790][ T3451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.568882][ T3451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.664124][ T3451] bridge_slave_1: left allmulticast mode [ 967.689236][ T3451] bridge_slave_1: left promiscuous mode [ 967.697889][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.730608][ T3451] bridge_slave_0: left allmulticast mode [ 967.742771][ T3451] bridge_slave_0: left promiscuous mode [ 967.755720][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.790148][ T3451] batman_adv: batadv0: Interface deactivated: gretap1 [ 968.481527][ T3451] batman_adv: batadv0: Removing interface: gretap1 [ 968.806119][ T3451] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 968.838443][ T3451] bond0 (unregistering): Released all slaves [ 968.856816][ T3451] bond1 (unregistering): (slave lo): Releasing backup interface [ 968.866211][ T3451] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 968.878626][ T3451] bond1 (unregistering): Released all slaves [ 968.933037][ T3451] ip6gretap0 (unregistering): left promiscuous mode [ 969.217401][ T3451] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 969.283971][ T3451] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 969.473906][ T3451] bond0 (unregistering): Released all slaves [ 969.494044][ T3451] bond1 (unregistering): Released all slaves [ 969.510852][ T3451] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 969.529822][ T3451] bond2 (unregistering): (slave vcan2): Releasing backup interface [ 969.540872][ T3451] bond2 (unregistering): Released all slaves [ 969.559406][ T3451] bond3 (unregistering): Released all slaves [ 969.609480][ T3451] ip6gretap0 (unregistering): left promiscuous mode [ 970.081808][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.096009][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.118123][ T3451] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 970.156711][ T3451] bond0 (unregistering): Released all slaves [ 970.317980][ T3451] : left promiscuous mode [ 970.394604][ T3451] tipc: Left network mode [ 970.446919][ T3451] tipc: Left network mode [ 970.480096][ T3451] tipc: Left network mode [ 972.624125][ T3451] hsr_slave_0: left promiscuous mode [ 972.647222][ T3451] hsr_slave_1: left promiscuous mode [ 972.653257][ T3451] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 972.662822][ T3451] batman_adv: batadv0: Removing interface: virt_wifi0 [ 972.710160][ T3451] hsr_slave_0: left promiscuous mode [ 972.722644][ T3451] hsr_slave_1: left promiscuous mode [ 972.730808][ T3451] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 972.738642][ T3451] batman_adv: batadv0: Removing interface: virt_wifi0 [ 972.775444][ T3451] hsr_slave_0: left promiscuous mode [ 972.793801][ T3451] hsr_slave_1: left promiscuous mode [ 972.808427][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.830200][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.849584][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.866731][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.934636][ T3451] veth1_vlan: left allmulticast mode [ 972.940580][ T3451] veth1_macvtap: left promiscuous mode [ 972.946363][ T3451] veth0_macvtap: left promiscuous mode [ 972.951965][ T3451] veth1_vlan: left promiscuous mode [ 972.966318][ T3451] veth0_vlan: left promiscuous mode [ 973.018492][ T3451] veth1_macvtap: left promiscuous mode [ 973.030062][ T3451] veth0_macvtap: left promiscuous mode [ 973.045204][ T3451] veth1_vlan: left promiscuous mode [ 973.108791][ T3451] veth1_macvtap: left promiscuous mode [ 973.132378][ T3451] veth0_macvtap: left promiscuous mode [ 973.142053][ T3451] veth1_vlan: left promiscuous mode [ 973.148042][ T3451] veth0_vlan: left promiscuous mode [ 977.453336][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 977.520452][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 978.295617][T17108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 978.326324][T17108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 978.354637][T17108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 978.455776][T17108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 979.334105][T17108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.433439][T17108] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.603196][T17107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 979.631206][T17107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 979.950095][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.957273][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.965743][T17107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 979.988255][T17107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 980.144407][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.151590][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.332397][ T3451] IPVS: stop unused estimator thread 0... [ 980.410884][ T3451] IPVS: stop unused estimator thread 0... [ 980.922444][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.953432][T17112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 980.980198][T17112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.070271][T17112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 981.118372][T17112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 981.430857][T17107] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.477579][T17105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.510229][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.517385][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.529329][T17105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.551903][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.559087][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.584758][T17105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.630011][T17105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 981.657374][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.904146][T17107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 981.961297][T17112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.049215][T17112] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.142079][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.149237][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.200893][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.208043][T10448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.463714][T17112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.539900][T17112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.619630][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.790606][T17105] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.826636][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.833754][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.847487][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.854625][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.899521][T17107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.030175][T17108] veth0_vlan: entered promiscuous mode [ 983.188091][T17105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.244700][T17108] veth1_vlan: entered promiscuous mode [ 983.317252][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.368038][T17108] veth0_macvtap: entered promiscuous mode [ 983.434137][T17108] veth1_macvtap: entered promiscuous mode [ 983.974018][T17112] veth0_vlan: entered promiscuous mode [ 984.006655][T17108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.062348][T17112] veth1_vlan: entered promiscuous mode [ 984.077790][T17108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.179775][ T3451] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.334684][T17107] veth0_vlan: entered promiscuous mode [ 984.367018][T17105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.390493][ T3451] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.406811][ T3451] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.591169][T17112] veth0_macvtap: entered promiscuous mode [ 984.615784][ T3451] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.668889][T17107] veth1_vlan: entered promiscuous mode [ 984.953834][T17112] veth1_macvtap: entered promiscuous mode [ 985.089814][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.107572][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.140011][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.187356][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.236172][T17105] veth0_vlan: entered promiscuous mode [ 985.293534][T10446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.313030][T10446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.377979][T10446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.399706][T17107] veth0_macvtap: entered promiscuous mode [ 985.417027][T10441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.432743][T10441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.443251][T17105] veth1_vlan: entered promiscuous mode [ 985.484767][T10446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.541172][T17107] veth1_macvtap: entered promiscuous mode [ 985.777148][T17107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.868142][T17107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.692135][T17105] veth0_macvtap: entered promiscuous mode [ 991.490503][T10446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.875494][T10446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.943744][T17105] veth1_macvtap: entered promiscuous mode [ 992.030241][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.038251][T10446] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.102172][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.110001][T10446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.837815][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.850692][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.720768][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.864878][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1117.871833][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5175/1:b..l P17102/1:b..l [ 1117.881480][ C0] rcu: (detected by 0, t=10502 jiffies, g=76553, q=531 ncpus=2) [ 1117.889188][ C0] task:syz-executor state:R running task stack:25912 pid:17102 tgid:17102 ppid:5799 task_flags:0x40050c flags:0x00080002 [ 1117.903554][ C0] Call Trace: [ 1117.906828][ C0] [ 1117.909755][ C0] __schedule+0x1190/0x5de0 [ 1117.914277][ C0] ? __pfx___schedule+0x10/0x10 [ 1117.919120][ C0] ? lock_acquire+0x179/0x350 [ 1117.923798][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1117.928820][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1117.934197][ C0] preempt_schedule_common+0x44/0xc0 [ 1117.939479][ C0] preempt_schedule_thunk+0x16/0x30 [ 1117.944682][ C0] _raw_spin_unlock+0x3e/0x50 [ 1117.949363][ C0] unmap_page_range+0xf71/0x41b0 [ 1117.954317][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1117.959680][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 1117.964612][ C0] ? uprobe_munmap+0x20/0x600 [ 1117.969281][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 1117.975172][ C0] unmap_vmas+0x218/0x470 [ 1117.979496][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1117.984365][ C0] exit_mmap+0x1b2/0xb90 [ 1117.988625][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1117.993404][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 1117.998946][ C0] __mmput+0x12a/0x410 [ 1118.003014][ C0] mmput+0x62/0x70 [ 1118.006730][ C0] do_exit+0x7c7/0x2bf0 [ 1118.010884][ C0] ? find_held_lock+0x2b/0x80 [ 1118.015559][ C0] ? __pfx_do_exit+0x10/0x10 [ 1118.020145][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1118.025158][ C0] ? find_held_lock+0x2b/0x80 [ 1118.029832][ C0] do_group_exit+0xd3/0x2a0 [ 1118.034340][ C0] get_signal+0x2671/0x26d0 [ 1118.038849][ C0] ? css_rstat_updated+0x1c2/0x510 [ 1118.043959][ C0] ? __pfx_get_signal+0x10/0x10 [ 1118.048808][ C0] ? __do_sys_wait4+0xd1/0x170 [ 1118.053569][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 1118.059108][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1118.065267][ C0] exit_to_user_mode_loop+0x85/0x130 [ 1118.070545][ C0] do_syscall_64+0x426/0xfa0 [ 1118.075139][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.081023][ C0] RIP: 0033:0x7f89215850d3 [ 1118.085427][ C0] RSP: 002b:00007ffdc72b5498 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1118.093830][ C0] RAX: fffffffffffffe00 RBX: 00000000000042d4 RCX: 00007f89215850d3 [ 1118.101795][ C0] RDX: 0000000040000000 RSI: 00007ffdc72b54ac RDI: 00000000ffffffff [ 1118.109752][ C0] RBP: 00007ffdc72b54ac R08: 0000000000000000 R09: 0000000000000000 [ 1118.117709][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1118.125669][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1118.133640][ C0] [ 1118.136648][ C0] task:klogd state:R running task stack:24728 pid:5175 tgid:5175 ppid:1 task_flags:0x400100 flags:0x00080001 [ 1118.150125][ C0] Call Trace: [ 1118.153392][ C0] [ 1118.156315][ C0] __schedule+0x1190/0x5de0 [ 1118.160816][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1118.166018][ C0] ? write_profile+0x131/0x150 [ 1118.170780][ C0] ? kernel_text_address+0x8d/0x100 [ 1118.175985][ C0] ? __pfx___schedule+0x10/0x10 [ 1118.180857][ C0] ? mark_held_locks+0x49/0x80 [ 1118.185630][ C0] preempt_schedule_irq+0x51/0x90 [ 1118.190652][ C0] irqentry_exit+0x36/0x90 [ 1118.195069][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1118.201041][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1118.206230][ C0] Code: 94 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 18 e9 0e 0f 82 74 02 00 00 8b 35 8a 48 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 94 08 12 0f 85 c7 02 00 00 48 83 c4 [ 1118.225831][ C0] RSP: 0018:ffffc90003caf6e8 EFLAGS: 00000206 [ 1118.231897][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 00000000fd57315f [ 1118.239862][ C0] RDX: 0000000000000000 RSI: ffffffff8da056e0 RDI: ffffffff8bf07040 [ 1118.247823][ C0] RBP: 0000000000000002 R08: 13af9f48ce65b07e R09: 0000000000000000 [ 1118.255786][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1118.263745][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.271721][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1118.276918][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.283068][ C0] unwind_next_frame+0xd1/0x20a0 [ 1118.287994][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1118.293097][ C0] ? do_syslog+0x3dc/0x6c0 [ 1118.297509][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.303661][ C0] arch_stack_walk+0x94/0x100 [ 1118.308345][ C0] ? do_syslog+0x3dc/0x6c0 [ 1118.312762][ C0] stack_trace_save+0x8e/0xc0 [ 1118.317437][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1118.322806][ C0] ? __lock_acquire+0x622/0x1c90 [ 1118.327751][ C0] save_stack+0x160/0x1f0 [ 1118.332080][ C0] ? __pfx_save_stack+0x10/0x10 [ 1118.336930][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 1118.342296][ C0] ? __put_partials+0x130/0x170 [ 1118.347138][ C0] ? qlist_free_all+0x4d/0x120 [ 1118.351887][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1118.357507][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1118.362521][ C0] ? __kmalloc_cache_noprof+0x274/0x780 [ 1118.368061][ C0] ? syslog_print+0xf6/0x620 [ 1118.372641][ C0] ? do_syslog+0x3dc/0x6c0 [ 1118.377054][ C0] ? page_ext_put+0x3e/0xd0 [ 1118.381562][ C0] __reset_page_owner+0x84/0x1a0 [ 1118.386493][ C0] __free_frozen_pages+0x7df/0x1160 [ 1118.391696][ C0] __put_partials+0x130/0x170 [ 1118.396373][ C0] qlist_free_all+0x4d/0x120 [ 1118.400956][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1118.406411][ C0] __kasan_slab_alloc+0x69/0x90 [ 1118.411258][ C0] __kmalloc_cache_noprof+0x274/0x780 [ 1118.416631][ C0] ? syslog_print+0xf6/0x620 [ 1118.421214][ C0] ? syslog_print+0xf6/0x620 [ 1118.425793][ C0] syslog_print+0xf6/0x620 [ 1118.430204][ C0] ? __pfx_syslog_print+0x10/0x10 [ 1118.435221][ C0] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1118.440593][ C0] ? avc_has_perm+0x144/0x1f0 [ 1118.445281][ C0] do_syslog+0x3dc/0x6c0 [ 1118.449516][ C0] ? __pfx_do_syslog+0x10/0x10 [ 1118.454269][ C0] ? __rseq_handle_notify_resume+0x66e/0x10c0 [ 1118.460337][ C0] ? rcu_is_watching+0x12/0xc0 [ 1118.465092][ C0] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1118.471162][ C0] ? xfd_validate_state+0x61/0x180 [ 1118.476275][ C0] __x64_sys_syslog+0x74/0xb0 [ 1118.480946][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1118.486142][ C0] do_syscall_64+0xcd/0xfa0 [ 1118.490643][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.496524][ C0] RIP: 0033:0x7f1fd1891a37 [ 1118.500931][ C0] RSP: 002b:00007fff6238adb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 1118.509336][ C0] RAX: ffffffffffffffda RBX: 00007f1fd1a31490 RCX: 00007f1fd1891a37 [ 1118.517295][ C0] RDX: 00000000000003ff RSI: 00007f1fd1a31490 RDI: 0000000000000002 [ 1118.525252][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.533212][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f1fd1a31490 [ 1118.541170][ C0] R13: 00007f1fd1a0edfe R14: 00007f1fd1a31520 R15: 00007f1fd1a31520 [ 1118.549142][ C0] [ 1118.552150][ C0] rcu: rcu_preempt kthread starved for 9410 jiffies! g76553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1118.563244][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1118.573199][ C0] rcu: RCU grace-period kthread stack dump: [ 1118.579073][ C0] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1118.592551][ C0] Call Trace: [ 1118.595818][ C0] [ 1118.598748][ C0] __schedule+0x1190/0x5de0 [ 1118.603265][ C0] ? __pfx___schedule+0x10/0x10 [ 1118.608117][ C0] ? find_held_lock+0x2b/0x80 [ 1118.612787][ C0] ? schedule+0x2d7/0x3a0 [ 1118.617120][ C0] schedule+0xe7/0x3a0 [ 1118.621184][ C0] schedule_timeout+0x123/0x290 [ 1118.626026][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1118.631395][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1118.636680][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1118.642482][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1118.647945][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1118.652698][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1118.657977][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1118.663184][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1118.668123][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1118.672969][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1118.678776][ C0] rcu_gp_kthread+0x26d/0x380 [ 1118.683446][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1118.688634][ C0] ? rcu_is_watching+0x12/0xc0 [ 1118.693394][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1118.698593][ C0] ? __kthread_parkme+0x19e/0x250 [ 1118.703619][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1118.708809][ C0] kthread+0x3c5/0x780 [ 1118.712867][ C0] ? __pfx_kthread+0x10/0x10 [ 1118.717449][ C0] ? rcu_is_watching+0x12/0xc0 [ 1118.722206][ C0] ? __pfx_kthread+0x10/0x10 [ 1118.726789][ C0] ret_from_fork+0x675/0x7d0 [ 1118.731366][ C0] ? __pfx_kthread+0x10/0x10 [ 1118.735944][ C0] ret_from_fork_asm+0x1a/0x30 [ 1118.740718][ C0] [ 1118.743726][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1118.750035][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1118.758956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1118.768996][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1118.774628][ C0] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1118.794229][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1118.800288][ C0] RAX: 00000000055b62fd RBX: 0000000000000000 RCX: ffffffff8b6082a9 [ 1118.808248][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 1118.816210][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1118.824176][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1118.832137][ C0] R13: ffffffff8e097a00 R14: ffffffff908203d0 R15: 0000000000000000 [ 1118.840097][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 1118.849018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.855594][ C0] CR2: 00007fde679bbebc CR3: 000000005b31d000 CR4: 00000000003526f0 [ 1118.863563][ C0] Call Trace: [ 1118.866840][ C0] [ 1118.869762][ C0] default_idle+0x13/0x20 [ 1118.874085][ C0] default_idle_call+0x6c/0xb0 [ 1118.878843][ C0] do_idle+0x38d/0x500 [ 1118.882910][ C0] ? __pfx_do_idle+0x10/0x10 [ 1118.887499][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1118.892695][ C0] cpu_startup_entry+0x4f/0x60 [ 1118.897455][ C0] rest_init+0x16b/0x2b0 [ 1118.901689][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1118.906967][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1118.912507][ C0] start_kernel+0x3f6/0x4e0 [ 1118.917005][ C0] x86_64_start_reservations+0x18/0x30 [ 1118.922460][ C0] x86_64_start_kernel+0x130/0x190 [ 1118.927565][ C0] common_startup_64+0x13e/0x148 [ 1118.932507][ C0]