last executing test programs: 5m52.726977006s ago: executing program 1 (id=1003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x2, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006040)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x4, 0x10}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x44}}, 0x4000080) 5m51.847529144s ago: executing program 1 (id=1006): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x208182) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x208182) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x80802) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) r1 = getpid() getpgrp(r1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 5m50.880139425s ago: executing program 1 (id=1008): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0xb7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)="f64c", 0x2}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x76d}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008004) socket$inet(0x2, 0x2, 0x1) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0xb7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)="f64c", 0x2}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x76d}, 0x8) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008004) (async) 5m50.768177888s ago: executing program 1 (id=1011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000010040"]) 5m50.301782582s ago: executing program 1 (id=1012): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x84, 0x1b, 0xfffffffffffffffe, &(0x7f0000000040)) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000ff2505a8a440000102030109021b000101ff50030904000602070138017257f3af987fd28646b00201090501022000db0d09"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x7, 0x7, 0x10, 0x4}, 0xc6, &(0x7f0000000340)=ANY=[@ANYBLOB="050fc600040b1001ee51000405010006ac1003bd072f504f25b97d1aeef94bed104e9d1bbf0bdfa9a672486de73e2b9bf394997d92afc7e18a3f5a590c2b9d6e4c8cdf0193b9be59037a71943760533beb6a2e9651dc3514b5e15f48aa2498bc226570af9956e6e0ac11e4eaf60703d5d6c5d431a90cb562b66df083ee1b4361585e2881cb6190186d1c5f253865b805e89a79af9a39ac75d2744d3f9253a808db6ee82063911a5480d104a521395631bd9e7f447adb0824c9ae5e828a4c10ea160b9b751337a103100b071002016701005a45105bb8f1b1f52e1bbc6f68895eb1e4c91eb6c3a6fccd0406de5478090bdbe71abf1b52fec7d787ab72"], 0x2, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "895ac84d3a4b0ea2485c0060ebedbbfa5c4fb8e883fa5dffe51051d5d24527289db15f10b70021dd9e7bd738920f76a4574cbbd075409cb9d9b37bf8f4ad50b23344418e3b6aa96c782e890d8fcdb44e0ea0ffc121715b0f5fd7e240db90be79a654c464576ee8ef8270b1bebf2fe4571a0b7273913bfb92d8f180bdc58f7b8759df55f01b10d6e2a1dcd0c6c942746209448bdd307936b8ba433079c515d300ac0549eab26dfae197cc164eb613475ba81edadae0b96f626d4854e0f82d6a1a27e2ce9f6d81d83c13eefc2377edc36dcae66922485f99847050c5536a294af92909129f1bee1776e29bd95d2559352a2bcf16d116998f9adf347c9378"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}]}) 5m50.017680648s ago: executing program 1 (id=1013): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80f6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x5, 0xd}]}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x56555958}}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pipe2$9p(&(0x7f0000000100), 0x880) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 5m49.562087426s ago: executing program 32 (id=1013): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80f6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x5, 0xd}]}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x56555958}}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pipe2$9p(&(0x7f0000000100), 0x880) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 4m13.748276939s ago: executing program 5 (id=1310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000180)=0x6e) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_uring_setup(0x5323, &(0x7f00000000c0)={0x0, 0x6852, 0x10, 0x3, 0x2002}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r6, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x15}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) creat(&(0x7f0000000200)='./file0\x00', 0x35) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000f40)={0x2, @sliced}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) 4m10.75914326s ago: executing program 5 (id=1315): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(0x0) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x4, 0x400, 0x10100, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x80001, 0x5) (async) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce22, @rand_addr=0x64010102}, 0x10) (async) listen(r5, 0x3) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) listen(r4, 0x3) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4m9.415996073s ago: executing program 5 (id=1318): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xea\xf2\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\xb05\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x866\xedpm\xccr\xd1\x16\xd7\xbd\x1b\x18\xe9+.6\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq'}, {0x20, 'cgroup.stat\x00'}, {0x20, '-,%\']\'\xb7'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e6c5efde436c765f41a756412d3e1313b12b8fe28392a16247bf698245c9a62a81049f9fb454ee5b079d185fb5fed191ccb57c7e6bc776ac44449b547d9638178ee672c8294fea94754c20d5f3a19cfd9b8c36883323e8b625e517fcb8b12db92727fd1580a5cf8d91d9709b1f2013689a9343cc0263cb8fe5ffaf5"}, 0x191) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000003000/0xf000)=nil, 0xf000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = getpid() waitid(0x0, r2, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 4m5.792119114s ago: executing program 5 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x4, "ab8e213d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x20, 0x3, 0x4, "1e4bb998"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0xb, 0xe9, 0x40, 0x5fc9, 0x61, 0xcd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0xa3, 0xc0, 0xfc, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4e, 0x7, 0x3}}]}}]}}]}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)={0x0, 0x15, 0x4, "ab8e213d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x20, 0x3, 0x4, "1e4bb998"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x48, 0xb, 0xe9, 0x40, 0x5fc9, 0x61, 0xcd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0xa3, 0xc0, 0xfc, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4e, 0x7, 0x3}}]}}]}}]}}, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) 4m2.362341198s ago: executing program 5 (id=1332): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, 0x0, 0x0, 0x2, 0x1}) write$sndseq(r1, &(0x7f0000000040)=[{0xfd, 0x2, 0x5, 0x4, @time={0xfffffc01, 0x9}, {0x2, 0xd}, {0x3}, @raw32={[0x6, 0x1, 0x5]}}, {0x1, 0x0, 0x0, 0x0, @time={0x9, 0x4}, {0x77, 0x3}, {0x0, 0x6b}, @queue={0x85, {0x8, 0x7}}}, {0x5, 0x9, 0x8, 0x7, @time={0x0, 0x73c}, {0x1b, 0x81}, {0x1, 0x8}, @note={0x4, 0x80, 0x3, 0x0, 0x100}}, {0x2, 0x2, 0x8, 0x8, @time={0x81, 0xfffffffc}, {0xe0, 0x2}, {0x2, 0x4}, @queue={0x0, {0x0, 0xfffffffd}}}, {0x7f, 0x3, 0x9, 0x4, @tick=0x7, {0x2, 0xa}, {0xf, 0x9}, @raw32={[0x8, 0x4, 0x7]}}, {0x4, 0x6, 0x7, 0xf9, @tick=0x9, {0x1}, {}, @ext={0x23, &(0x7f0000000000)="42fa27ee71f4996c2c5fac735c6752d93335a18b06f6311f2a33fab5fb81cb57818c34"}}], 0xa8) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x23}], 0x1, 0x10061, 0x0) 3m59.847418919s ago: executing program 5 (id=1343): r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000c00), &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r0, 0x992, 0x4214, 0x1, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, r1, 0x0) 3m58.589708359s ago: executing program 33 (id=1343): r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000c00), &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r0, 0x992, 0x4214, 0x1, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, r1, 0x0) 3m34.384856134s ago: executing program 2 (id=1425): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x1f, r3, 0x5, 0x10000000000005) open_by_handle_at(r0, &(0x7f0000000080)=@isofs={0x14, 0x1, {0x4, 0x7e5, 0x3, 0xfffffe01, 0x9}}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000340)=0x80, 0x1000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0xfffffeff, 0x8000, 0x6, 0xffffffff, 0x4, 0x10001, 0xa2}, &(0x7f0000000580)=0x9c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000003c0)={0x400, 0x1, &(0x7f0000000300)=[r8], &(0x7f00000000c0)=[0x2], &(0x7f0000000400)=[r6], &(0x7f00000001c0), 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x6, 0x3, 0x8, 0x2}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c00028004eca0e241601e3f360001"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c46f3d08a905302612550000000109026000010000000009040000000e0100001924"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 3m31.563168541s ago: executing program 2 (id=1431): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000320000a14000000140a010400000000000000000000000814000000060a010300000000000000000300000814000000060a01010000000000000000070000041400000011000100000000000000"], 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 3m30.242004115s ago: executing program 2 (id=1435): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40300c000000008000010a01000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x28, "42a8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e374bddce7c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x0, 0xe, 0x4, "6d517794"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="0024c6000000c62a80e6c62a418651145f08b8ee7ffba1f48d9c89ed568b19a237d4cee36d221a9077a5de6168493ac3faf2d4d8386d53de66e4d3b7f329f4a60d31272bdc7cd9db1e2b5a4b816a4032e84d3993c72f8d64b72fea4c7b2826b4ab618973e7e217aceccf533488285a84f3ababc05f4375fe452272adb3c42c22432d26864ae8ad38a74e01a74cca3cb2b1f88e7ef2ff50b3bc660bca5bce1fe2a5ee42a379c1ce2ad5a0d2e56c9d6f3fa643014ee1232235598f9d894a42ff535deb74b020433ae344963357"], &(0x7f00000004c0)={0x0, 0x3, 0x41, @string={0x41, 0x3, "36a7104cc42a9f11ccdf19100d5142caf6a623f4710f6c6fe89e529636c979bacf944f54b9e009cfdd188d28e3fd81277796c0c9cf16326ce21a82430f0f1e"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000240)={0x0, 0xa, 0x36, "81b0a37c3b29d5ed9fc820830416556716ae175b216abee4db5b4911f6cc189eb285eeb2d182dfccffa6b6d181aa8853dfce0005a533"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x0, 0x5b, {0x59, "3baafa1066519d852792561bf997217261117836d74e453eea916a1c7d0cd974155e6d45caefbc440e2a1af0ac3c69403e5c3f6649a3b9b5a208acba998e34e26e2d72257eed589a8a65b5a5cc6f009312e4a777c05dc70b8f"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x2, 0xd0, 0x9}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x80) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x802, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000740)) 3m26.867746426s ago: executing program 2 (id=1446): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x44, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11000000040000000400000022bf0000000000005a6a658b62e96fd29ab3b705c79dec474d0f321617d9564157d43c2c864c4545e574c53a92e2107799e6d09969b8450c5e0731c13200299ab93ffd02f6e21261e92ea0b0ab6311afcbb04168976f6d9c51ff5296ddf38371fd6ba9c19bd964ef9230b2c78d71d20bd22365a30ad0019b6a789a1b734e91661639", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000140)=""/18}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x8ab6a76a9e020e3c, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @default, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e24, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4b, 0x81}) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000180)='./file0\x00') r9 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000780)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400, 0x800, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000b00)={0x6, 0x9, {0x0}, {0xffffffffffffffff}, 0x5, 0x6}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b40)) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000580)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)="3dc6b29b26b436b47025cafa02f6144721284ee933f8dd79c5042f7e75e44d72428c43071fa91e3475cb7d24396f809991d9b218924151d31b17ac30d39c06b31fcb", 0x42}, {&(0x7f0000000700)="754840b29c6b5855effd", 0xa}], 0x2, &(0x7f0000003540)=ANY=[@ANYBLOB="1400000000000000010000000100000004c840ec4aa1efc8bd5300cfa6e28637fbdabe3af1e1011f0a615d1ddd5e4ef498d774d8c10372a85d94013de26640baf64cb0fb8fbb6b94338d3cdda0ef26200ab9fb05c5c981b0e96d767791b6c4342687b2f89c124a57479f4d53958d36a068602c8a1aca7f5b4e73ae4c235dc7ad373c69b0e1e192f4bdddf12bdf09d6529bbfa934d0d9c85835e89b6963b2f8bd30bc50c3a4bc9f916bf9b4922c082a5f64a928a26f2655e2679f602e14a646bda9464db2607506a6b03aa21146f3b551970b497527ff43abea7b693054d24b2eac22845c8764a9f94a21a5e8d610fdc75a62648e0ecf0b3b82f8949b405db8fc2b1bdfd051", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES16=r15, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00'/16, @ANYRES32=r5, @ANYRES32=r4, @ANYRES8=r2, @ANYRES32, @ANYRESHEX=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES16=r11, @ANYRES32=r16, @ANYBLOB="00000000b26782729e054e3547d3580545f95e6c9b9a074762438f8e107dadad8dc193"], 0xb8, 0x20000000}}, {{&(0x7f0000000d00)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f00000007c0)="27c9b5a45466258fca05e855f61e83ef463955131e5fe1a5378638e491657ad5e1e904c71a50663ccad536c48274e242bb040300ecfcc111b9e92a50ec49c1d7a04d18e9a7afb501eddfadb417bc34c85d7fbd3db0d7a6494b76dec358ed0e7b83079b352f2d2639677859f5e9a3df820c9a06e556783027ff440fea111a88046fa618b3c8c550ce52046de5aac1b1f5ab8d4a10a8b39ceef4acf3bde063971056d185a2b60a6d", 0xa7}, {&(0x7f0000000dc0)="006641941e1b949051a6a88105d2bb634643e6258ab8b3f3b3fcb49133c5f8f4c7ef76b02a089debdc7770bc6a3a6b70d37e717a6d60783edffce96b53521c03a524c5f89d47544d9929b0d9b52db9d43b004a13953de1960d2e347c1300929c9b5a1909de96eaf1819dafada8c57b2e078ca9c937e302a8bb01e09df6af18d52f2d26aeb2cae301e4c5afe0eef4a7bdf17400c3761780ffc3a724aeb55aee89a98ea3b0419089ad0963b0c46940c43fcc9371d366c4", 0xb6}, {&(0x7f0000000e80)="343e05ead1e71b5f65e2f0e59cc8113c3fa1e7fba86286c37ff4a2cd550d409be8c2366493e7a3dbcf3550f90039dfa4ac71784750883520a413d5650784f0504b2e0b0431106b4c05a662a916b0aa04d81ad38ab1fda8164c221a710932938a0751304daed63e06e3e387", 0x6b}, {&(0x7f0000001380)="50d42935ee34a76ab493e1992612637cebacf055706ed152352c08b94cb8f267eed16dca4df08a36e20a80ca51063eb0f750e36d92a9f255b81d1fd1bced0c5d2b7249512c3dbcc7d22f6d7a303d198e710ccec4d379b3e9f3c00f2d8f057e9b717cc2adcfc3a5e37f59069becf1907f8d9fb468f6d804b31e9e5142e27288c6279189a9d18019ade5a34b9496539ac15f70894de1820b4d4392a609c53de2cdc6958d6c94d0e9bcbd735a6da1405eb755e1767b2ebc2212a6dbde7f5d782ef89de6ca6f08fcc3120ec56992e238cbec71ca0a2bc6d2b61eac981d859b1e094afaa4f37b6d370e7637f8d4d7c9c8fa0030989e8b2bd92e5d41ef84c3162fb0de333b7edf922f4f3eb4d0b343ce7e591f0e56984bdfe04241b5658016d84f2491383562334f4005d55b78f69c97a874e6fa3b562a1fd5894136494b14e96c9bcf019df965726564559cfc03445b75a1ff112727db85f136b18ec2a61ea539db056ae97d8b2e0ee523bc7232899aef7dbc7a6e662d0021dfa889a31efe393446de19b74f8e1d2392d8ef1fe865d81f541fd456c606bcd213b54840bd54722d3e8c43fd1f36f6a6fe3a55cf3c6f40a83f8a88c7762a6344e8bfebea9a08206b24609c1a9156692364df041bdca1f674f82dbb440a792463eb4dbc9c691ad373c179f5d47ace940796f5ea4009f0eb5f0460b62ee3f8663f1e29d69ddac4bc65900c3d6f398587d33cb420c1e327916c3df07a1bfdb4442516f2198306033dcfb739c4bbc71193306977625a78557bdfd315e183636d3880507122601f5845ad581eead35529b4d1d23158826c6686f29f2f5a09ee2ab2203ba35c7fdf8af607dff1d33b5d150f2d5cea44705bcd3008b5c6b15b3feefa00611a50c52b7e428d576b8ee738b31e8b58c2b20a6e6f0578e43d2ffc24e13710794bf60ef0a452e47d7f911da7f2437899e5e5b6bbee928cbbaf9812c1f3afa98ff2fb64fdcc74be43b0074b7545ee08286818f28686fab1ebb1005083872e6dd6827d555ebe147f3b20bf45eedcfa3d11d1f00731006e6d3420e97e225b51a054da889149cf2dcd2dcaf6439b78c950fcdc9d300b7b051b1de5edb3ea6842a9e6e390fe4141a0c064dad7458a06b1073724b88316e83c08bb2803cee68de3494e16107fdf14748429cebad5ffd1a446f78869f738e92040ae88b7885f8003e32e1421dd46829636d1d26ad8e98159025fef730fc2ae095027ee476b873cf6516e114fc587331c559aedfb138f8e2e00d6bc934661c326b67351a7e5125888a7cd8e0bfe1f57dca048e5db286296469c651547fa534b19f4e38fa6b9f82de3792a28a78bd460276d912699169df00294cd4c642dee98bcf27bbd1f6d797667cdb1b20c37f0bfba418f04684fdea1abc146c5a166ba36de689e0f77854babae0df35911ae5ca32dacf9771d09b4180250daa9aac5008a776d58b6926d6dffbcb20fe7c637392ce7297cb9007e0a548ba789eafe6da037b699ee201fe1beaf6a9c54f4c1219ee95bfd82b0fc7d9d7b947a3f39561a70cb7378e5e0fc9dcd6511c370ce2544bbf44fb04debf7f10ee6543f984fd50404d8eed3274bee688c2da670f579737a13ff7dc089eca90f7d1a6c60c9d16bc81b0212f06b7c705f80c70f7f71f81db39fa7707fd55e25fc0ec7295bd925117765a6497bcfa2efca5215b7813fc19426854a52f9e5b6ca04ce085a3f636e9903580469dd344281d90498f063af1d1190ac3025135d0aa558219701bf9063bc7aa6f6379e7fbf018c3116b1240c3cd4910a0d1a5ce7302d1e778e2448f3d810cc9def2fe95c9289dffd64c29142d50ea7917549bb1e5f0107b25c07e51a28da4cbd34ddd2db7c09830639c1622906405d2cb5b6f1baad650dbeb8ec7c6d45fcf2210c57901e6c2f1fd9ee1be955c7caa0e99e99a042db23981696b60d9f0eff31c0c00f6c963b9fe25951903a22294e1746a59853aefe90786f3d35de95adfc89624f0838e88cba909c6164bb76da504bdc8f873cbe25517031250e0707dbf0559cc0e81f088ce7847d11ab586ffa0258fafbdc1a4e3a7ad84bac171671b3d157d58e9a7ae72d225240c55ac951b3342036755a03ca305611673398c61f42647353d3e6996504efb8b0aa3ece4e9c62dbd183967f845ae7632278b2163a533727dc2401feeb8ee9264b5b074e719b63e42dc45cc10ff5a827cffff890dda703fc3f4d68c4793dcd7a7d1a29b997265fcb0c77766dd744cbe824b1fa0827cb6cfb940a1d55013132b0b86cc6e0d57ff458964fb851073b75e337db3ff693ff8dcb2a600bf157d4489197d349c5f56545395da7ea8b2596baa936e5f819252196ee4ffc3e8673cde04e27d9da8ad257cf9b72be4d8be9e50a580c31dba3f4cdf4c11750076d1dbbc31fd543e87fd62d1fab4aeb71360b007ef66ad25144a745ff0730e9ce04663ca30605f21d0c8fe42de557524e2366913c9f6cad25249abd7c4f234965c57f3b8fd7d977b20abf3df6041bc352bcf88a01fe80da0518f45f14c7811bfe662174253a78daf9f1d8cf79bc722f1ee7b4b693b82ea69b6bbc0b9ebce996a1900491ceadbfc062a7aeef37af2c6560c5cf1e95ef117fd9ba1c54a005c14316f62cd8d0fdfed5d60645fc5d7708ae6605852e50aa3fdcb5b9b8e54c9147c63814e4911b7347fa6d81cba1a71e41731c295158dcfbed9fb863edcfb2026d3b7ac5072f19c0e2f8472220657ec2a305eef834d9da9e07145548d0ce4af1a7ca4f6bf71904e347281b306bbf6ddd5fb0f14a494053dab58b50878dd55ee06c59580771aae2d847fa0d736df55c45acc93d7d02f6b512443bd0b2b98c6d90345f8b37af2122d900d1689cfeeb0859dfab8624ebd1abc1fce77fbae5af9392c404e35b49df0e7f102c327512f7b80ec35e364da19b4c70e790f06ba4aa264f4a0caa0615d708d37d886fec1ff12cd532439a6cc05aa236e0578782ea12638a8213ffc5cabfd74699504e28567f2f728858c39b51143cf375b0ec10597c243a9c0aad51946f549c05472a27541cca7956a487480a8cb8ea72408a4b29cf9de76ca93795661ed35a161758508a4d9abf7ae4a85209d3183e72dc006fed8d6012cdc15bef2a678a920bcdf42bc7c427e040601b57a76dfd3cbf861eae30f88b973e6aa1481f91d2ebadff5146edd20fbc8756e57e9d2b5318bd3f14329404e3ab41eb50b04ae245dcec1ec5a30a8827e04f82eb751cba792f0bdc745d69f2ac1fa9e718a3dfaff08104e46755e8055bdd7e353aee5bc7d578516170d9bb11fee9f891629c8944a25262049c7f4fd28f7ea1982f109751767581a3ac09a99b404f1f970819a750327bae936247c0e0167e4ed5cff750ccbd58209f6843886a47b18d87bfe50f764eb5cd6fa2c5dfd338966abaf1610727278342a0b3e732f3d9b30ff8358cd9d93a78abd5e8383a607fca4dcd6f07b3fc0ee5daf0d275a42b535c0291dad52bdad0161448e2456c4a0569c134c6e11e7a11c96fc086ad1113566fa67975ffe8c2e044362c08ea4fd816cc0a5a94f2a1fb8dc08a65623f159fd57df7021bedaeb7ec36110562349813c787b12fe4848a24804cf1426695715479cfaa9eede28e219ec057260ddf1dd7d00bcf9b3161e43389a60d556bf52b47e5c736d73dac983e9f1d735ed4ddcf1757abb2350f64923e57e68d33b7560cbd62c4de2dcfdf32ba2b7746e93faaf4b2f420faa5bcf3eb53122e632e4e47f75373db82313119d75e4bcd8453147b3a40790a10c3d460815be63645beda476f062282a214c0063910fba50cb18dd2d85ec80bf6a964f5e77b0f1bcf3257d24b9dea02de4c9339c68b42a735281828f5d49ddbb4c62c2be967ce45c701583bc29084a1736e855b507316171199e8dbc9dc8cac132ec17f8ca1ad5385c17731b9edbf837642effb117455a3d7e3b6ec8cb05e4f619f5525c0c6f65e1211754fc1f92694480d1f0eeb14b78b19e66e2e599934ba30c6f5954f8b5e5d4776d43dd7a86e0f7671e450f3b71e36a55f9b58c83a036d1d1c55dbd8ec575d5d879169e1b2c3999703e65947d81b430552d6c1df349eb146c9a2ec9aabea3753ba47a99da1d29e0713499ba2dbd41713cb83374d5230f211bd1f8ce0add79d2ff42cd08d3929729c735f5ea523ae493be23e2919fe84c31bd2255858af857c48b9bb366e18aee7a3fec30c4619f7beae317a17b3611c38d8ae43e30684e463479e6ca0933c862a6373ab3ca1381c9cb46ac6380ffa26ee5c65d08d8278f658b7c4801acea28f9ca448bb9a58c61958286df9b29138b80c50e54aa3f71f592f93a9585b17df0c61e13b7580ff91dd0aa6f557e19ac662e8c80fee3d88fddd264ca0938042b008db33a5c5de5730d0958a4f602415ee75796a0a63854c8077a99c079eb1f89eb7fa7039090393c4226862bfbc2a7ca93a75c97b87707ec7240c856ce848165904495034ab300e386c415d619964806daca13a39742ecf2b81e26c7ec0af7e331966c94e69b8cb80ca4afc03d2fce8e4e5dca8abd8f29cfc0a3b7cf2384ae77cc263f1ebb257138427cb668863afe86339a88d5ff2ae5f58485aecfd79716a273d9f6a09c71a41525268b65b1aa6e00d4796ed38d32d97886e625a8eb1363f317dc9031d6c099d7e1e020a4597587997ad8546093ea21668e1e98b7f4044507c3b9658e31f102f3ac68f58acd24e2fb5bbc0280d675ee7cdd7a40cff3119711f68d6574e6a3fb19e14eec0347c5c5cce5c1c0af525527f0583555602801a12d571ebbb590574f9a2244e8c52f42b6257ed199ac55ecaca8922357ad70f7d23a33d8282e88a738436533ef3f49a42e14a13340f45c9fbbc6d95b3b8329f710def7c23131e8a67e5ed61264108d789ea82a037831f2941a422dd28d28e6db4aeab7e7cdf8e041fcab73f108e53b4177e852e082c93d84c03fdbb7b85ae310151ba0241bbd6fb958a346f5b257035c7c39b194e5d8a96a8c718ef815de32ba7e00a7fe30a4d96795146d2a94498b8cb34c4f5989b2875c4b922fa67bbc57b0571277e5084091585bc0e26901b0597f4a66cb413459cc72595139d0d2dc54c668ab6df1f34d449089704698c0fd2384014980ec43c27dcedb7a7f7ccb3404f4bffeb6b0165c58f7e18995dabc34fb41153cbe1c2d006fdfd9452d2b8f8e5ae0c0b6fb9cf540f455d5ba794c92ad1b8a944868b069271261271625c9fdf8674dcf2ea2647dad524212c8d0220021857b45f8368e62e76a4d7e85c97fe2edfbacf27a27d11708c23bc06c78a40e78eb8ea5de92147f867ff83e6efc4c57c769bcb7082ce7f3dd8c4e784703f19dc1f13b26ffe5c3c7b3004cac00b16dcdae61fb4fadd02e39cc74261289263eb852fdf138cc5e6278ee23f33755c814e9c7ce2a048f727e6834e808949e1ee61ef1f756468aacf0baf77b875dd0468138e9576021be30c1f1c0cb60877e77c5369486b2d73d14dcd570701e1910566c41bc0087772916111e1a8317a6bd6aa01114a99c8e2ac71b10aa468a6e6fa83e92b0394048d8e613aa6f0162d375be22b64cb33ddc1c630e1dcbb6e2d2b334ca0c85ceb2ac9ac5de255fcb0d8b185511dd45be3d0ab4e07313cff27a426b0e259228333698ad16e244033eb9d790dab2450230b1d2715bb18d6cf57ed4528fc0417f70cdc8d9a6ba43082da84b93a2eb7ba17b87d1584b7dec506d481541a23f74c7b9020a1eb216f5b0597eab8223257e5b16f0a369b158502c509e78305", 0x1000}, {&(0x7f0000000f00)="f2e38ebf0a41c5b693010aebb56c0fa2519461257600537a5c9a8387045c730f2121c61f6bec8be2aa0c43a94d5f8e83c35c3a9d353169a9b2b47e216769d93695ef4c37f2b5571aee80522763afab5cd38c3d3c672afd3a576deb9d663d66c68d4f0aef60fdf6bb202924b40d8b9eefc3f83a7142a1a7d66d15", 0x7a}, {&(0x7f0000000f80)="680ff0b131be94a1e664b526c4053195bf5b73009c00c2d770990a31e9677fa851045d23a6e2bb17506df6cc7d403d845ba6a9d79487346c943f2a3e317ff04bc6a409fe30168ce0e40f281c2cb395daf127d6d0a1506219a1fd1557954be716d90d3e2ef3aa683ccb91b3e927000e573a2610a330f0a30ad24fe6ffdd80464f206137a08196acb4ac851226820faf0d45a2c432dd4077e1523a2cb616e8f9af7be8853d1c04e4f4f53d2c3e431ff4c61e399222d490c47ca767bce775cc4fc02a3974a37757189f18ce30eb14dc108453ee0916", 0xd4}, {&(0x7f0000001080)="1e1a44395a21f6aea9b24c283f73d43563", 0x11}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f00000010c0)="f84d50c546a2aaccf0909bdc0e0a26faff69f6a905c4d9d32490bd02f6a6b8de12f521ab021bcb5860eab6e50010a2b9da1e287bbfc92dfa69f41983ff6e2dc7e124ed995ebfc908d0443125e67100936ffb1e20ad1046073108e5e0", 0x5c}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f0000001200)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000003380)="2c0ef4fd9088de51055e2e880702f609f4a1a5b5e35e9d9cabd68a0ce6b7f98bfa66b790a1b91e4c275d0c46f4fbb50457b6cc4010dd2187f87f05266c5b2a6b3eb14624e8a5527cd16910c500cd7e2dbfcd92a39aff30a27b02f897c19b47e906fc14405939165d838b8a2aace1b32f38920fc77c006441868b4e37d407131389ba912bc3dbd1c6e25927355ffe8cfbe234df584eb5425fa61dae0dc1f7aaa6af4c15db3bf2a9adf8a80bb62314d3b5010971005aea6b3986e81e92696657e31194c671e1f011dc78b2b86235752791c658", 0xd2}], 0x1, 0x0, 0x0, 0x4811}}], 0x3, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r17 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r17, 0x400448c9, &(0x7f0000000000)={@any, 0x4d2c}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x4, 0x0}) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003800)=ANY=[@ANYBLOB="00000000113cdc707e166195f0953f363be0310d2e7d24050626dcbe16cd399cb90b93338fbf6743cf9a8c994257d2853d741d922e6b16cff2d03e35624e1f5943a875fbd1d90d4b81fa9b1bfa1bb5c07f0bfea854f0ed33b1de979acc6cd31cb67bd55b6d00caa4fc1ea466e2f55a6577ffc2cabb8c2bb533b8e5f5f48883216e7f0af43ac7590a8bd8874f7131c98e59c9ea5fd920e4ece85696af19bf48b00f0b24faeeed6f47cf3be0ba508b95c6b2b9c976999f513ad666b4868e3510abb44855d48003d47c989edfc2c865a0fdfeb17b5fa839986328cc269b", @ANYRES16=r19, @ANYBLOB="010d000000000000000003000000200001800c000280080003000f0000000d0001007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x25}) 3m26.035329411s ago: executing program 2 (id=1452): syz_open_dev$video(0x0, 0x7, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e24, 0x4e20, 0x7}, {0x0, @remote, 0xe, 0x5, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x5}, {0x0, @broadcast, 0x8, 0x9, [0xf, 0x9]}, 0xff, 0x3}}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) lseek(r3, 0xfffffffffffffff5, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) preadv2(r1, 0x0, 0x0, 0x9, 0x4, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0x78, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, {0xb, 0x8}, {0x8, 0x800}, {0xd54, 0x0, 0x1}, {0x0, 0x20000000, 0x4}, 0x0, 0x10, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x200, 0x0, 0x6}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x1614) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x48b, 0x70bd25, 0x0, {}, [{0x60, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r7 = fanotify_init(0x2, 0x40000) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000002680)={0xc, 0x3, {0x6, @usage=0x4, 0x0, 0x7, 0xbe91, 0xfff, 0xffff, 0x6, 0x2, @usage=0x3, 0x7f, 0x800, [0x5, 0x9, 0x3, 0x2594, 0x6, 0xecf]}, {0x0, @struct={0x5, 0x5}, 0x0, 0x1000, 0x3, 0xffffffff, 0x854b, 0x8, 0x820, @struct={0x2, 0xb}, 0x6, 0x0, [0x7fffffff, 0x1, 0x6, 0x4, 0x2, 0x8]}, {0x5, @struct={0x3460292e, 0xcb4b}, 0x0, 0x3, 0x9, 0xe, 0x9, 0xb, 0x480, @struct={0x7, 0x9e9d}, 0x9fe, 0x800, [0x1, 0x1, 0x62f, 0x8, 0x708, 0x361a]}, {0x5, 0x987c}}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000002a80)={r8, 0xfffffffeffffffff, 0x1fe000000, 0x1}) 3m25.656371748s ago: executing program 2 (id=1455): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) pipe(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="650d487d57c59a6a7a010f4bce99508ea184a6052e3e52a957673f73c87307be260c7db33211dc8802b960bf84d3e6f7ad96fa365f041f23092b59244b25d46ed8185496cfb870aa416a785fa3fe73bfe7f2c9f669829af1e53bb8386d1326074cec34313134c1d61f2d0e81691b1a4fed1720a9b40717828ce9fa", 0x7b}, {&(0x7f0000000700)="ffa0e5160dd1d284d0d9491325526ace368b3e5aaf559c2c8ceb277b1974fa65f6f98cb5ef893331305bfef571987e90ff12c70db2bddb0588f640bc683010146af9e090682b8cf585671a5d2dcffcec1223c7e6f13f8961", 0x58}, {&(0x7f0000000380)="373e531051c62d4dd542a502da084bad1d60ef49841e42bb05fc5da6a680152804436b70a8f358b238a4494a6212a94369c8016f60c9c932a5529aa1afa6bd5b75ed8e5be0f02b251bdc77fb2b43cd809042ba68469bf099bc5efc2c6c9b45904584720350d39947c2c655d377c3428cb055854632714a2cfedc", 0x7a}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000017010000040000000200000000000000980000000000000017010000020000007d0000006e19c6329108a4c040c0bb4ca02e3aab6164dbae20ee67bf965431c89134d52fcebddc636274f982acb8f3ed7514739c1c4809546442469ebab6b095390d5ea0826a4b45efa5a1193b4a73db3a988ac51a32ba95feae89f77244652d251cfc1a4c06721260f5d27c951a145baf287b0c705fb85f6600000000000000"], 0xb0, 0x2c0008d4}], 0x1, 0x48c0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=@delchain={0x5b4, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x584, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_ACT={0x56c, 0x3, [@m_connmark={0x568, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x538, 0x6, "ad2aabcb0271ea4d60373b1be142c09918632b95d4916de5dbe4fece88c278e800bfad3fc3c5822e0af1af17a93b3242e8a275cdd7db89933af8320162adcaeb613a0324ff456e22639d4afc87b67e3ee655147dd0c1b74dc6a85539d2b11413e8f2af1261c4c457555916570033369993ab4bca13cbe9c842cb96c0c9d2b6ec9cc3415edbf7237a03ab46f64709a29ffea12eec4516366998ca71d9395e9e4ca2978be884defe49419730671607e693d22ac81a515ee13d36de057ab5e0a502263aa4784dedbda74e80658230f9afe3b2668c0b2ed440e9734d6543a9f97056ebe249e7fb311b03d1a59f548c9a9d80b31d276a7f1e5c4a7a4a1bee0b9d48c0f2d545d7d62019a0e5c897f1d8a58519c0246fc2b8e440c2a937d8b0781e616ea9a1f568f0c8e43b4ce267b8aff6f998ec5dca9a4773ae1a217ee4f8b714cda75839a47456b6883abbe03319bf39ac9c7489b0d3517f5f68abdacc61cfbd0f01dddfb6443b18306699f0e154fc712f3168c405df2c7c9fb2aad5f1e46b3a98ac3b58367703165908186579ed3e7132b63f7409daa31ac53d6a3b48487d6910fd7501fb8a88f013484c515e584bc66308863a6d1aed404ce3873550e43023324d4d450a3a220a17decfecce64bee847c7041633ff089ae8cc412cad40937f641a18fb19eefc6c874a630ec476afd7aebdb91cb365ba3f93511d81b53b463fdc88f9b0ce27d7caf42d85d6e9b38b9c968966aac71a52ef24c175b2f54b6f1e7cae3b08378120324ef0a4694d245df44b73ab2bf631109ab747d246dfd410ed67231be46a74eb9fc68046ce16b7bd73cb95154b39d08c5162c511c0edb325541b5ac71f54b3453bcdc0a0e7f5ada39056286409748ad5a9fe0b4b97be691675592ff01604c9a5aeaaaaa35aed9b209e7c804eb0260d538caa94004b66db9b085c94f14299081f123d28dab437d0fefba8f7538a7ecc4c403ddaf1a28a300a5fd94cfa354dcfdfb297a23c9d8c511767bdc5f9980f1d060bd35aa966ad983675d4e38a46750ff72b15ec788823f54a351e63bb47e75e0533d52015d5e7fdd44d24515445043744b989d4e84ee8cb432dd3aeb3c1ca1f86b8082a0b8b519f94319ebcc30a2314080f977242db3426451e022e15c7146656601cc23e0aadf71dcd4a3755f512f1632c9d88ec729b6b6eae6d1b40434fea9247e941ca61bd22550633bd6b5a230ff0a5f2488ea9b2c558ab6ddc7e36e20d9786fd76f778976ecc05ff00c959716453b9e54aeeb24f6e5f100e458dbbb04c3c53c8cc288752a4b0ed45d5baf3257cc4dbc765743364251448a5d11da216ea877f7ae903a616078d0efc86d609cebae47da7d6cad2f687a2399042110015794c7e6442782e82f88bb013f81e300f12345f14ecc02254eb0a692c14589320182abc697f27c0d0a05e5a339465b7d2704e197c2271732e32c33856aa8cc25ff278919d1009383219ee757b20f4befced2a9e97d717daef1087dbf8a3d3f70a2baef0dcd89ff01cc8a5aa391a292eb610d3deab80d002815dcecc8b0353095acd30f67dba0aa2aee1ab4b3767cc0e6a27b487756f18b31549beec8f9968327575fe146768fa84f421e4d45aa8e4b6b80340e676a2e0459df5621779aa2cbf8b82ff0a01b891cd86605bc7342a2af8309beb02d40f9a3f3f10177b825b20f3c3b1ce27a0d92661e68a792fa26df172555b25543f1ad0f954ba97e336618f4a94a363e289f26d893c0dfcfc69815815c9ba27f729079c65caa396073162a9443e629fdef4143726feeff467fd1d56f19c3f2a68e544345e90cf9c0651871ee3831eb18cf36dc4fca438919d8451dfd9923fa41033d9ae96894a81ab3b74b903dc02"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) 3m24.891274672s ago: executing program 34 (id=1455): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) pipe(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="650d487d57c59a6a7a010f4bce99508ea184a6052e3e52a957673f73c87307be260c7db33211dc8802b960bf84d3e6f7ad96fa365f041f23092b59244b25d46ed8185496cfb870aa416a785fa3fe73bfe7f2c9f669829af1e53bb8386d1326074cec34313134c1d61f2d0e81691b1a4fed1720a9b40717828ce9fa", 0x7b}, {&(0x7f0000000700)="ffa0e5160dd1d284d0d9491325526ace368b3e5aaf559c2c8ceb277b1974fa65f6f98cb5ef893331305bfef571987e90ff12c70db2bddb0588f640bc683010146af9e090682b8cf585671a5d2dcffcec1223c7e6f13f8961", 0x58}, {&(0x7f0000000380)="373e531051c62d4dd542a502da084bad1d60ef49841e42bb05fc5da6a680152804436b70a8f358b238a4494a6212a94369c8016f60c9c932a5529aa1afa6bd5b75ed8e5be0f02b251bdc77fb2b43cd809042ba68469bf099bc5efc2c6c9b45904584720350d39947c2c655d377c3428cb055854632714a2cfedc", 0x7a}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000017010000040000000200000000000000980000000000000017010000020000007d0000006e19c6329108a4c040c0bb4ca02e3aab6164dbae20ee67bf965431c89134d52fcebddc636274f982acb8f3ed7514739c1c4809546442469ebab6b095390d5ea0826a4b45efa5a1193b4a73db3a988ac51a32ba95feae89f77244652d251cfc1a4c06721260f5d27c951a145baf287b0c705fb85f6600000000000000"], 0xb0, 0x2c0008d4}], 0x1, 0x48c0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=@delchain={0x5b4, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x584, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_ACT={0x56c, 0x3, [@m_connmark={0x568, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x538, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) 8.688234669s ago: executing program 3 (id=2132): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x6}, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x4999fa8a21843244) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, 0x0, &(0x7f0000001700)=""/37}, 0x20) 8.449574611s ago: executing program 3 (id=2135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r1}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = creat(0x0, 0x84) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000180)) pread64(r4, 0x0, 0x0, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r8, 0x40046104, &(0x7f00000002c0)) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002c9e7ad0000b0000000000001090263e76239ac5e1c4fbab2de1200010000"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_usb_ep_read(r9, 0x6, 0xf3, &(0x7f00000001c0)=""/243) 6.616553806s ago: executing program 7 (id=2137): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000320000a14000000140a010400000000000000000000000814000000060a010300000000000000000300000814000000060a01010000000000000000070000041400000011000100000000000000"], 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 6.502379128s ago: executing program 7 (id=2139): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r4 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000001040)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) 6.266394928s ago: executing program 7 (id=2140): sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000427bd7000fbdbdf257b00000067ff9900689800004e0000000a00ffffffff00001428167e05dcfe0073283abffa104b272039395d18be885a0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582020002000110b45cc315ffe02f396e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0xb480bffadd91fdcd, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r3, 0x0) shutdown(r1, 0x0) connect$unix(r1, 0x0, 0x0) r6 = accept(r3, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3e1bf9bb3cdfb02b21dd8fb1"], 0x48) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) socket$inet6(0xa, 0x80002, 0x0) 6.167095503s ago: executing program 6 (id=2142): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000320000a14000000140a010400000000000000000000000814000000060a010300000000000000000300000814000000060a01010014000000000000070000041400000011"], 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 4.876032389s ago: executing program 6 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000f40), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000f80)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'macsec0\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000340)=0x2) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) r8 = dup(r3) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES8=r7, @ANYRES32=r5, @ANYBLOB="1f3af648b4b3e86b26b806f75ef384bf39ec24df997f93feac9bbe287bb86e60e620492b2d230001e3d1c5ff99470b2c6514026d67e9f6834785a97131053897dde1838cf1adfc9fd2608982be6757aae49d62426c10bfe3cf0d03a3d965b9f069d542617c8d1bf5970f66a5a64f1f492f6d8caf120d218f49bb19b1f1b2df18943f53e3c1543f4565c82d3423040117b8d931b6bfea9280c3e8fec9204edd17c73c9b6dba8aa77d16", @ANYRESOCT=r0]) 4.796850291s ago: executing program 3 (id=2145): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) wait4(r1, &(0x7f0000000200), 0x4, &(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100100000010ac05240200000000000109022400010000a000090400000103000201092100000001220700090581031000700000a9f6d57f78"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x100004fd) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) waitid(0x1, r1, &(0x7f00000003c0), 0x8, &(0x7f0000000440)) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000104000000000036cebe2e000000", @ANYRES32=0x0, @ANYRES64=r7], 0x48}}, 0x0) 4.776594885s ago: executing program 4 (id=2146): syz_usb_connect(0x6, 0x24, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0xe6, 0xf6, 0x52}}]}}]}}, 0x0) 4.180286105s ago: executing program 4 (id=2148): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async, rerun: 32) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async, rerun: 32) r6 = dup(r0) (rerun: 32) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) (async, rerun: 64) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0xa000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendfile(r7, r7, 0x0, 0x800000009) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000d0000000401ed82928822190936da4016963500000700000007000000c305000000800000b6b100000000000000000000000000000800008001800000040000000039010003170000010000000000000000000000ffffff7f00000000"]) (async, rerun: 32) r8 = socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r8], 0x1c}}, 0x4000000) (async) creat(&(0x7f0000000140)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1500003030302e7500000000000000000400000000"], 0x15) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.936747629s ago: executing program 4 (id=2149): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000320000a14000000140a010400000000000000000000000814000000060a010300000000000000000300000814000000060a01010000000000000000070000041400000011000100000000000000"], 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 3.041183923s ago: executing program 4 (id=2151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0xdddd0000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x80, 0xfffffffc, 0x800, {{0x10, 0x4, 0x0, 0x21, 0x40, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0xc, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@private=0xa010102, 0xffffffff}, {@remote, 0x3}, {@multicast1, 0x200}]}]}}}}}) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) preadv(r8, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/189, 0xbd}], 0x1, 0x8, 0x18) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = dup(r9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg0\x00'}]}}]}, 0x48}}, 0x24044094) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0xec, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x56, 0x3, "bf406c3ba7e414b8fcbf5775adac744e0d37ee39c5282318e0d1ab11327b9ef00053c96a1e242be1bece70fd95075293febef76cd21696b433b3c2ebad66718efe854b8dc41bf0061e8b961f0470b8576e94"}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r13, 0x6, 0x23, 0x0, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r14, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.628023919s ago: executing program 4 (id=2152): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400), 0x0, 0x20000095) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25120000003000018008000100", @ANYRES32=0x0, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x5, 0x6}, 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000480)={0xfffffff7, "715b18a2949b630585693ea0c70a25d9b31678965bc8672bd3c0ab4e5c72146781c9e4cf0624c17d3eebf597e9c08ed1cd94cc3c645a12e34f34289c7082d5113c117fc80310ecebdf98f3f8e4ad3fca49892a43a35ccc82c44f3c760a182be402f97019917db25af59191d17967c8843823aa761e4cd15740ce1c1790b477dd"}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r7) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) setns(r5, 0x4000000) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB='l'], 0x0, 0x0}) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "fe956d9907b032b9af0d7f22f09043956f1a969c2f2a9bfd428e2883d68781afdf4c34c81aba12a42897a9edb65971022295814e2619b3d02bab0a1125131f41", 0x31}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r10 = dup(0xffffffffffffffff) write$FUSE_BMAP(r10, &(0x7f0000000000)={0x18}, 0x18) 2.527995191s ago: executing program 7 (id=2153): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = io_uring_setup(0x8be, &(0x7f0000000200)={0x0, 0x1077e7, 0x80, 0x0, 0x191}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000002140)=""/183, 0xb7}, {0x0}, {&(0x7f0000002200)=""/4092, 0xffc}], &(0x7f0000001540)}, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="1201100102c6d640f0030121cc800102030109021200010301702a0904380a00ff020204d0429c095aaa20a2c95dd1"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xb}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf8, 0x6}, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800000002}, {0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], 0x8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x40, 0x1000000020000000, 0x80000000440, 0x6, 0x2, 0xfffffffffffffffd, 0x2004c8, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2000, 0x4], 0x0, 0x200306}) fcntl$dupfd(r3, 0x0, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002040), 0x82081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.672198644s ago: executing program 3 (id=2155): prlimit64(0x0, 0x1, &(0x7f00000000c0)={0x3, 0x8b}, 0x0) r0 = gettid() r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x14) (rerun: 64) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x6) (async, rerun: 32) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x4) (async, rerun: 32) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd344) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r4, r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000005c0)='[\r-$\x00\')~e\x1d0wp:\x9b\x8e\x88\xf3\xdf\xba\xfa\x13*x\x829\xef\xa3a3\xe8i\xee\x8c\f\xf2\xa7W[\x9c\x83\x02\a7\xaf|\n,\x16P|\xd7<\x99\t\t\x17\x17\x93\xf4m4\x0e!5\x8b\x06\xa3\v\x9c\"+-6\x7fT\xad\xfa\xe0+\xfee\xb6\xe9\xa76\x18\xed?*\x14\xf0\x10\xbciVd\x82\xdc\x932m\x81\xd1E\x10\f\xce\xfe\xef\x02\x13\xb1u\xc0\xb7\x1a\xb7I\x1d\x01M\xd3\xf8\xd2Jj]\xd5\xfe\x01\x18\x1d:\x84>\xa3\xd8\xa29\xd9\xe1\xcd*\xf5\\b\xc2\x84Ck\xfawK\b*\xe0\x8a\xef\xf7\xeb\ts*\xbb\\\x15\x06n,\xc9\xb7\v\xd1Jb~\xaeF5<\xb3\x00'/192, &(0x7f0000000480)='\xd3l\xb8\x00\x00Q\xd0~Df\x9b\xce8$\x00\x03\x00k7\xa78\x17\x00\xc1\x05\xb2~\x11Bt\x83\x92\x00\x00\x00\x00\x00\x00\xa0n\xe1\x19\xaf\xe2\xa1UL\xbf\xd5\xc0\xf9\xbbW(r\xa5\xf6\xa5xqF@0\x85\x91\xc7E\xcc\x97E#\x88\xfb\xf0\xec\xaa\x995\xff\x01\xe7W\v\xf0\xe7\x8a\xa4\xdci(\"\xa3\xb5~\xb0\x96B5+\x1a}4\xb6\xa8\x9d\xbda\x7fx\xde\x00\xf9y\x0eb\x0e,\xa0K\xefr!c_\xf11\xb4\x92\xa4\x8f\x8e[\x80 PN\xd9\xfd\xf3\x7f\x02a\xf5\x7f\xc7\xbfm\xd0Z\xc2!\xa5\xcf#\xfd>\xf6\xd3\xaa\xa4s\xa5\xb1\x92\xb4\x8f\xcc\x15s]\x91C\x03b5d\xc0\x06\xc7h)\x91\x91\xd3v\xaf\xe3x\xf1\x0f\xe5x\xbd\xe8\xd3z\x89\x7f\xdenh\t\x17E\r\xa3\x15\x17\xf2\xf8\x03Am\xefi\n\x8c%C\xdf>\xd9X\xff\xcc\fw\x1d\xe9+\xe9\xb3\x01\f\xd9\xdd\xf4\xef7%\x94\x00\xdd\x1es\xf5\xd3\xda\xf3~\xf6\x9b_\xb1(~\x1b\x8e\xbb\xdb\xaa\bN#\xc8\xe3b`\x98]\xe3\xda\xc6\xcf\xd5\x99\x13\x8e<\x89E\xcd\xba;~~V\xab\x9f\x1a\xb63\xd0B#\xa4\xd4w\x91\xbd\xe0\xfe\x90\x96\xc5\xa0\x00\x00\x00', 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x110, r1, 0xde750000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) nanosleep(0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x7faf04a5, 0x1d) 1.588330511s ago: executing program 7 (id=2156): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010027bd70000000180001000000080001000000000004000480080002000100000010000c800c000b8008000a00326c3000080108"], 0x140}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e295f120da5f73dc92fb30f4030109021b00010200000009042d000145efe400090501", @ANYRES64=r0], 0x0) 1.56509349s ago: executing program 6 (id=2157): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) fsopen(&(0x7f00000005c0)='ocfs2_dlmfs\x00', 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="495300000000fa20ab290b8100000880030058704814c2bae0ff5d42e1b2a3339eab63ddb14700978cf89f40e9054a1e9b3588242207b256c6d6f1bc75f7b988c78a20080350411f092051f79c76b021446823368cc57da504000000aa1d5ce5407bf1a154581c2ee2d8b8e4b88704c41db04812274da3d239a049db34ee6c6ffc1c34635d44", @ANYRES32=0x0, @ANYBLOB="0c00990008000000000000000800428004000080"], 0x30}}, 0x6048004) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="82000000000000008502"]) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$dupfd(r6, 0x406, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x0, 0x421}, 0x20) r13 = openat$cgroup_devices(r11, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r13], 0x8) r14 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8) write$6lowpan_enable(r14, &(0x7f0000000040)='0', 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) 1.323827025s ago: executing program 3 (id=2159): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @private, @loopback}, &(0x7f00000008c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x6, 0x0, 0x9, 0x7fffffff, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x700, 0x10, 0xfa3, 0xe}}) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000200)="2e2379318f02dcd86e9d6dfa7dcf0a427ee2b40155ac26146cd5492dedd257a5782baa5cb41a2aea9fec3215c4312c1524779ab6aed252c2e05657d41951bf69717b8cf2caf1ef1b2cc2a08421648a7d078cf629504e9f91fc54cc5c1e448b1d3d40843d64b96f173bd88c9532837a72eaf7d786218626a6bb16dc889ba90780eebfcc0e9b4477b4b6f3a18f8d03ca5fc03d3b723f5f1a35fa866bf08f5ba60c6bb5ee561930c7153ca97d49a768c7dfbf4fae91a62919ee7374e0ab751e6178fed35d8c37646e", 0xc7}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000740)="1642db58b7ebb0d67b357f0a19c5fe3e85bcb7114dd261ebe90f81c70962edf59f622c0b73195fcbd7f9d3d4f0b7e96145260af715f0dad027d21af572ab15a97a43c30fb9abdde05dc10d561899945e6bc8c207f973b658dafebf46ab43f62fd659337477d6b0f345fc3ac1c378bc3a5b781e5dab10ae178bbe8b70ce08076bc5b928cea27664eabb992ae687af9618ec71da194b5f58daf66ec27c563c51fc3858d4e9847858de7e909015dea3ef2e84216c889a0f10eb08575076e875be0875b890664be202fafed304a605b6134f61511f5f0f503bf405223183cab92e5784127eb8c79d7c6788b4b6cacb1f", 0xee}, {&(0x7f00000003c0)="22ab3edee520e9622115f3be1be2040146a5407e11684d0bdb1fb9d6a313ce8abf4a5c4676b8be71c0ad34c00d668dcb888717d18a0ed42b4829b6c290cdde84fb0939772907b5e508c1e8109a343309aeeeeab7649f6c7650ec0968e78cc11f99a43b0e8c096918c2301327173fd3c41fa263d47112c97cb01fa7b02c3446e77ef66da1448e3b34c34b", 0x8a}, {&(0x7f0000000300)="24c919a6ac66557086f6726804abbe30df70df7c3173738d9e690382093e81f4da22e6", 0x23}], 0x5, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x83}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0xb8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000003980)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000980)="15ca93a7c5", 0x5}], 0x1}}, {{&(0x7f0000002340)={0xa, 0x4e24, 0x5d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000002380)="e0999f724f", 0x5}], 0x1}}], 0x2, 0x20004000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = fanotify_init(0x1a, 0x800) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x101080, 0xa8) fanotify_mark(r6, 0x441, 0x4800001a, r7, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) sendmsg$inet_sctp(r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) io_setup(0x4, &(0x7f0000002380)=0x0) io_submit(r10, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x2009, r8, 0x0, 0x0, 0x2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="79000095000000000000007cdf939a7ed0366f72d187d997436e12a74207280c467f0086ee"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0xf64acd5248ba75b6}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.188717402s ago: executing program 0 (id=2161): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x300900, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4fa18e06e4bf3eff, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @value=r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 1.105564494s ago: executing program 6 (id=2162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x200000000000000, 0x7ffffffe}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7001fbdbdf250100000008000100020000002c000480050003000100000005000300020000000500030080ff0000050003000000000005000300010000000800020002"], 0x50}}, 0x0) 1.050262028s ago: executing program 0 (id=2163): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syncfs(r0) unshare(0x70000580) 1.016161175s ago: executing program 6 (id=2164): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000440)="0b06d62aea868078bed657fb42205a8dba3e3a38583c5916ffafce34ce71266b3a88eabde35b0ec4ecc8c34f8be128de51bf13d63363fba9d5db32f143ed4542425fe97aee70d1e8ca28811afb98bd4093a567e7aebbc21f2d09f631e2cd7e64afa9e77578a0d146706968ff66a48de983c5fa375d9cf0c78d0672c8f041417f8acad41d82917acd486503b1f94553c1af641c65ac41615c4fe80919173ddf61657f2b87e191d6eb9d14a4b967bdb89fd60417e83a02918be360de", 0xbb}, {&(0x7f0000001800)="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", 0x175}], 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 944.294775ms ago: executing program 0 (id=2165): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x82, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "e896c5", 0x4c, 0x2f, 0x1, @private0, @local, {[@fragment={0x87, 0x0, 0x5, 0x0, 0x0, 0x6, 0x60}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x60, 0x3, 0x0, 0x3, 0x5, 0x2}, 0x1, {0x1ff}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x7, 0x2, 0x0, 0x3, 0x0, 0xe}, 0x2, {0x0, 0x1, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket$unix(0x1, 0x5, 0x0) readahead(r1, 0x8, 0x926) (async) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 901.933825ms ago: executing program 7 (id=2166): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0x644a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newtfilter={0x1c4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x194, 0x2, [@TCA_CGROUP_ACT={0xc4, 0x1, [@m_bpf={0xc0, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x4, 0xfb, 0xa7, 0x8}, {0x9, 0x0, 0x7, 0xe}, {0x7, 0x5, 0x5, 0x4}, {0xff0d, 0x3, 0xd4, 0x3}, {0x1, 0xde, 0x7, 0xba1f}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x62, 0x6, "46182cc61a48045b142828f86ebfc3bd75961f9ec54201d1145a59f9cc42a75122a2c2052eb0842759e94bd4f3ef5f87b7f2fdf1eb3c04a2303482b52c67eba8a6b40b2d9555d9eb5e6107258cb8cfd90699e12d0234879d33252e891413"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0xcc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3bd5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="ef99758b19fe", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="359baf9a8e0f45327fdc", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d74e9d37", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4e, 0xb, 0x2}, {0x7, 0x3}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_CMP={0x18, 0x7f, 0x0, 0x0, {{0xcd34, 0x1, 0x3ff}, {0xd, 0x1, 0xa57, 0x8, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x2}, {{0x4, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf23}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4810}, 0x20004004) 852.188665ms ago: executing program 0 (id=2167): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x10010408, 0x2}}, 0x50) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x6}]}, {0xd}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0x7}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) open(0x0, 0x2a4c0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@verity_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000001180)='./bus\x00') 711.165633ms ago: executing program 6 (id=2168): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000000d00000000010000dd5a3b2c0dcfa3fa961d4d16017fe6f7", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x9, 0x200000001, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x5, 0x7, 0x2], 0xffff3000, 0x8340}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0xdb4, 0x0, 0x46, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3939, 0x6, 0x3, 0x5}]}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) ioctl$KVM_RUN(r9, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x31, {0x2000000008, 0x6d9}, 0x6}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 710.817703ms ago: executing program 0 (id=2169): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000320000a14000000140a010400000000000000000000000814000000060a010300000000000000000300000814000000060a0101003c000000000000070000041400000011"], 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 135.967546ms ago: executing program 4 (id=2170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x6f541, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f000041f000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000040), 0x8000000000000001, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) tee(r0, 0xffffffffffffffff, 0xfa1, 0x4) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota') 49.091025ms ago: executing program 0 (id=2171): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0x644a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newtfilter={0x1c4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x194, 0x2, [@TCA_CGROUP_ACT={0xc4, 0x1, [@m_bpf={0xc0, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x4, 0xfb, 0xa7, 0x8}, {0x9, 0x0, 0x7, 0xe}, {0x7, 0x5, 0x5, 0x4}, {0xff0d, 0x3, 0xd4, 0x3}, {0x1, 0xde, 0x7, 0xba1f}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x62, 0x6, "46182cc61a48045b142828f86ebfc3bd75961f9ec54201d1145a59f9cc42a75122a2c2052eb0842759e94bd4f3ef5f87b7f2fdf1eb3c04a2303482b52c67eba8a6b40b2d9555d9eb5e6107258cb8cfd90699e12d0234879d33252e891413"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0xcc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3bd5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="ef99758b19fe", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="359baf9a8e0f45327fdc", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d74e9d37", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4e, 0xb, 0x2}, {0x7, 0x3}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_CMP={0x18, 0x7f, 0x0, 0x0, {{0xcd34, 0x1, 0x3ff}, {0xd, 0x1, 0xa57, 0x8, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x2}, {{0x4, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf23}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4810}, 0x20004004) 0s ago: executing program 3 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002800c000280050001000000000006000340000000002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa0800074000000000180006801400040020000000000000000000000000000001"], 0xb4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): .238943][ T30] audit: type=1326 audit(1755529632.759:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 530.261413][ T30] audit: type=1326 audit(1755529632.759:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 530.286418][ T30] audit: type=1326 audit(1755529632.759:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 530.492498][ T30] audit: type=1326 audit(1755529632.759:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 530.523376][ T30] audit: type=1326 audit(1755529632.759:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 530.551164][ T30] audit: type=1326 audit(1755529632.759:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11143 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8b8ebe9 code=0x7ffc0000 [ 532.229136][ T5920] usb 7-1: USB disconnect, device number 2 [ 533.703636][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.930601][T11185] kAFS: No cell specified [ 533.993514][T11184] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 535.021381][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 535.040637][T11197] pim6reg1: entered promiscuous mode [ 535.063568][T11197] pim6reg1: entered allmulticast mode [ 535.097161][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1434'. [ 535.203742][ T5900] IPVS: starting estimator thread 0... [ 535.341378][T11206] IPVS: using max 25 ests per chain, 60000 per kthread [ 535.900620][T11218] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 539.438738][ T5951] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 539.560766][T11269] openvswitch: netlink: IPv4 tun info is not correct [ 539.609983][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 539.617987][ T5951] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.629441][ T5951] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.881051][ T5951] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 539.915951][ T5951] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 539.941297][ T5951] usb 7-1: Product: syz [ 539.945547][ T5951] usb 7-1: Manufacturer: syz [ 539.985303][ T5951] hub 7-1:4.0: USB hub found [ 540.111270][T11274] veth0_vlan: left promiscuous mode [ 540.201377][ T5951] hub 7-1:4.0: 2 ports detected [ 540.414655][T11255] MPI: mpi too large (128904 bits) [ 540.494915][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.540772][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.562613][ T5951] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 540.597202][ T5951] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 540.672175][T11281] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 540.680361][T11281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1459'. [ 540.682751][ T5951] usb 7-1: USB disconnect, device number 3 [ 541.177021][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.187860][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.196020][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.204433][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.213736][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.360945][T11289] wg1 speed is unknown, defaulting to 1000 [ 541.395212][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 541.753064][T11304] tmpfs: Unknown parameter 'quot' [ 541.762903][T11304] bio_check_eod: 2 callbacks suppressed [ 541.762945][T11304] syz.6.1463: attempt to access beyond end of device [ 541.762945][T11304] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 541.763356][T11304] SQUASHFS error: Failed to read block 0x0: -5 [ 541.763628][T11304] unable to read squashfs_super_block [ 541.940343][ T5900] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 542.135522][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.142641][ T5900] usb 5-1: config 3 has an invalid interface number: 209 but max is 0 [ 542.142721][ T5900] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 542.142796][ T5900] usb 5-1: config 3 has no interface number 0 [ 542.142922][ T5900] usb 5-1: too many endpoints for config 3 interface 209 altsetting 238: 244, using maximum allowed: 30 [ 542.147705][ T5900] usb 5-1: config 3 interface 209 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 542.147791][ T5900] usb 5-1: config 3 interface 209 has no altsetting 0 [ 542.314741][ T5900] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 542.463290][T11312] input: syz1 as /devices/virtual/input/input40 [ 542.541554][T11299] comedi: valid board names for 8255 driver are: [ 542.571522][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.575324][T11299] 8255 [ 542.579580][ T5900] usb 5-1: Product: syz [ 542.579601][ T5900] usb 5-1: Manufacturer: syz [ 542.579618][ T5900] usb 5-1: SerialNumber: syz [ 542.617530][T11289] chnl_net:caif_netlink_parms(): no params data found [ 542.624370][T11299] comedi: valid board names for vmk80xx driver are: [ 542.624390][T11299] vmk80xx [ 542.624399][T11299] comedi: valid board names for usbduxsigma driver are: [ 542.624412][T11299] usbduxsigma [ 542.624421][T11299] comedi: valid board names for usbduxfast driver are: [ 542.624495][T11299] usbduxfast [ 542.624506][T11299] comedi: valid board names for usbdux driver are: [ 542.624517][T11299] usbdux [ 542.624526][T11299] comedi: valid board names for ni6501 driver are: [ 542.624538][T11299] ni6501 [ 542.624547][T11299] comedi: valid board names for dt9812 driver are: [ 542.624558][T11299] dt9812 [ 542.624567][T11299] comedi: valid board names for ni_labpc_cs driver are: [ 542.624579][T11299] ni_labpc_cs [ 542.624588][T11299] comedi: valid board names for ni_daq_700 driver are: [ 542.624600][T11299] ni_daq_700 [ 542.624642][T11299] comedi: valid board names for labpc_pci driver are: [ 542.624654][T11299] labpc_pci [ 542.624663][T11299] comedi: valid board names for adl_pci9118 driver are: [ 542.624675][T11299] pci9118dg [ 542.624684][T11299] pci9118hg [ 542.624693][T11299] pci9118hr [ 542.624703][T11299] comedi: valid board names for 8255_pci driver are: [ 542.624718][T11299] 8255_pci [ 542.624727][T11299] comedi: valid board names for s526 driver are: [ 542.624738][T11299] s526 [ 542.624747][T11299] comedi: valid board names for multiq3 driver are: [ 542.624793][T11299] multiq3 [ 542.776634][T11299] comedi: valid board names for pcmuio driver are: [ 542.804550][T11299] pcmuio48 [ 542.811693][T11299] pcmuio96 [ 542.815443][T11299] comedi: valid board names for pcmmio driver are: [ 542.825155][T11299] pcmmio [ 542.829058][T11299] comedi: valid board names for pcmda12 driver are: [ 542.836158][T11299] pcmda12 [ 542.840051][T11299] comedi: valid board names for pcmad driver are: [ 542.846926][T11299] pcmad12 [ 542.850269][T11299] pcmad16 [ 542.853496][T11299] comedi: valid board names for ni_labpc driver are: [ 542.865746][T11299] lab-pc-1200 [ 542.869378][T11299] lab-pc-1200ai [ 542.988209][T11299] lab-pc+ [ 542.992745][T11299] comedi: valid board names for atmio16 driver are: [ 543.122579][T11299] atmio16 [ 543.211184][T11299] atmio16d [ 543.318486][T11299] comedi: valid board names for ni_at_ao driver are: [ 543.340177][T11299] at-ao-6 [ 543.451048][ T5156] Bluetooth: hci0: command tx timeout [ 543.487401][T11299] at-ao-10 [ 543.496076][T11299] comedi: valid board names for ni_at_a2150 driver are: [ 543.506868][T11299] ni_at_a2150 [ 543.510308][T11299] comedi: valid board names for adq12b driver are: [ 543.523121][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.543741][T11299] adq12b [ 543.546848][T11299] comedi: valid board names for mpc624 driver are: [ 543.555707][T11299] mpc624 [ 543.558809][T11299] comedi: valid board names for c6xdigio driver are: [ 543.566523][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.567016][T11299] c6xdigio [ 543.573894][T11289] bridge_slave_0: entered allmulticast mode [ 543.583807][T11299] comedi: valid board names for aio_iiro_16 driver are: [ 543.592163][T11289] bridge_slave_0: entered promiscuous mode [ 543.600891][T11299] aio_iiro_16 [ 543.604906][T11299] comedi: valid board names for aio_aio12_8 driver are: [ 543.604920][ T5900] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 543.612142][T11299] aio_aio12_8 [ 543.642620][T11299] aio_ai12_8 [ 543.646300][T11299] aio_ao12_4 [ 543.656921][T11299] comedi: valid board names for fl512 driver are: [ 543.664235][T11299] fl512 [ 543.667230][T11299] comedi: valid board names for dmm32at driver are: [ 543.674637][T11299] dmm32at [ 543.682159][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.706406][T11299] comedi: valid board names for dt282x driver are: [ 543.715097][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.724818][T11289] bridge_slave_1: entered allmulticast mode [ 543.733668][T11289] bridge_slave_1: entered promiscuous mode [ 543.743558][T11299] dt2821 [ 543.757437][T11299] dt2821-f [ 543.760633][T11299] dt2821-g [ 543.778919][T11299] dt2823 [ 543.781938][T11299] dt2824-pgh [ 543.785291][T11299] dt2824-pgl [ 543.807444][T11299] dt2825 [ 543.810597][T11299] dt2827 [ 543.816184][T11299] dt2828 [ 543.821491][T11299] dt2829 [ 543.824555][T11299] dt21-ez [ 543.832491][T11299] dt23-ez [ 543.835794][T11299] dt24-ez [ 543.839677][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.840848][T11299] dt24-ez-pgl [ 543.855559][T11299] comedi: valid board names for dt2817 driver are: [ 543.873095][T11299] dt2817 [ 543.873108][T11336] mkiss: ax0: crc mode is auto. [ 543.882682][T11299] comedi: valid board names for dt2815 driver are: [ 543.896572][T11299] dt2815 [ 543.899575][T11299] comedi: valid board names for dt2814 driver are: [ 543.900332][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.916367][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 543.922813][T11299] dt2814 [ 543.929611][ T5900] usb 5-1: device firmware changed [ 543.932836][T11299] comedi: valid board names for dt2811 driver are: [ 543.946019][ T5900] usb 5-1: USB disconnect, device number 50 [ 543.960886][T11299] dt2811-pgh [ 543.964327][T11299] dt2811-pgl [ 543.979103][T11299] comedi: valid board names for dt2801 driver are: [ 543.989959][T11299] dt2801 [ 543.995965][T11299] comedi: valid board names for das6402 driver are: [ 544.009713][T11299] das6402-12 [ 544.013141][T11299] das6402-16 [ 544.020904][T11299] comedi: valid board names for das1800 driver are: [ 544.033249][T11299] das-1701st [ 544.040687][T11299] das-1701st-da [ 544.044364][T11299] das-1702st [ 544.048904][T11299] das-1702st-da [ 544.052610][T11299] das-1702hr [ 544.056044][T11299] das-1702hr-da [ 544.064430][T11299] das-1701ao [ 544.069855][T11299] das-1702ao [ 544.073199][T11299] das-1801st [ 544.077335][T11299] das-1801st-da [ 544.085202][T11299] das-1802st [ 544.088750][T11299] das-1802st-da [ 544.092549][T11299] das-1802hr [ 544.095888][T11299] das-1802hr-da [ 544.104777][T11299] das-1801hc [ 544.108186][T11299] das-1802hc [ 544.111779][T11299] das-1801ao [ 544.119097][T11299] das-1802ao [ 544.122745][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 544.127424][T11289] team0: Port device team_slave_0 added [ 544.140177][T11299] comedi: valid board names for das800 driver are: [ 544.149816][T11299] das-800 [ 544.156367][T11299] cio-das800 [ 544.159743][T11299] das-801 [ 544.162998][T11299] cio-das801 [ 544.168063][T11289] team0: Port device team_slave_1 added [ 544.168955][T11299] das-802 [ 544.181325][T11299] cio-das802 [ 544.190290][T11299] cio-das802/16 [ 544.194193][T11299] comedi: valid board names for isa-das08 driver are: [ 544.204319][T11299] isa-das08 [ 544.209464][T11299] das08-pgm [ 544.212776][T11299] das08-pgh [ 544.216098][T11299] das08-pgl [ 544.224307][T11299] das08-aoh [ 544.229416][T11299] das08-aol [ 544.232698][T11299] das08-aom [ 544.236091][T11299] das08/jr-ao [ 544.247248][T11299] das08jr-16-ao [ 544.252774][T11299] pc104-das08 [ 544.256217][T11299] das08jr/16 [ 544.264498][T11299] comedi: valid board names for das16m1 driver are: [ 544.273303][T11299] das16m1 [ 544.276543][T11299] comedi: valid board names for dac02 driver are: [ 544.286617][T11299] dac02 [ 544.289660][T11299] comedi: valid board names for rti802 driver are: [ 544.293125][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 544.299022][T11299] rti802 [ 544.314044][ T5900] usb 5-1: config 3 has an invalid interface number: 209 but max is 0 [ 544.323053][ T5900] usb 5-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 544.324737][T11299] comedi: valid board names for rti800 driver are: [ 544.335081][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.346766][T11299] rti800 [ 544.346781][T11299] rti815 [ 544.346791][T11299] comedi: valid board names for pcm3724 driver are: [ 544.346802][T11299] pcm3724 [ 544.346811][T11299] comedi: valid board names for pcl818 driver are: [ 544.346823][T11299] pcl818l [ 544.346832][T11299] pcl818h [ 544.346841][T11299] pcl818hd [ 544.346849][T11299] pcl818hg [ 544.346859][T11299] pcl818 [ 544.346867][T11299] pcl718 [ 544.346876][T11299] pcm3718 [ 544.346884][T11299] comedi: valid board names for pcl816 driver are: [ 544.346896][T11299] pcl816 [ 544.346905][T11299] pcl814b [ 544.346913][T11299] comedi: valid board names for pcl812 driver are: [ 544.346926][T11299] pcl812 [ 544.346935][T11299] pcl812pg [ 544.346944][T11299] acl8112pg [ 544.346953][T11299] acl8112dg [ 544.346962][T11299] acl8112hg [ 544.346970][T11299] a821pgl [ 544.346980][T11299] a821pglnda [ 544.346989][T11299] a821pgh [ 544.346998][T11299] a822pgl [ 544.347007][T11299] a822pgh [ 544.347015][T11299] a823pgl [ 544.347024][T11299] a823pgh [ 544.347033][T11299] pcl813 [ 544.347042][T11299] pcl813b [ 544.347051][T11299] acl8113 [ 544.347060][T11299] iso813 [ 544.347069][T11299] acl8216 [ 544.347078][T11299] a826pg [ 544.347087][T11299] comedi: valid board names for pcl730 driver are: [ 544.347099][T11299] pcl730 [ 544.347108][T11299] iso730 [ 544.347117][T11299] acl7130 [ 544.347126][T11299] pcm3730 [ 544.347134][T11299] pcl725 [ 544.347143][T11299] p8r8dio [ 544.347152][T11299] acl7225b [ 544.347160][T11299] p16r16dio [ 544.347168][T11299] pcl733 [ 544.347176][T11299] pcl734 [ 544.347185][T11299] opmm-1616-xt [ 544.347194][T11299] pearl-mm-p [ 544.347204][T11299] ir104-pbf [ 544.347221][T11299] comedi: valid board names for pcl726 driver are: [ 544.347232][T11299] pcl726 [ 544.347255][T11299] pcl727 [ 544.347270][T11299] pcl728 [ 544.347279][T11299] acl6126 [ 544.347288][T11299] acl6128 [ 544.347297][T11299] comedi: valid board names for pcl724 driver are: [ 544.347309][T11299] pcl724 [ 544.347318][T11299] pcl722 [ 544.347327][T11299] pcl731 [ 544.347336][T11299] acl7122 [ 544.347345][T11299] acl7124 [ 544.347352][T11299] pet48dio [ 544.347360][T11299] pcmio48 [ 544.347368][T11299] onyx-mm-dio [ 544.347377][T11299] comedi: valid board names for pcl711 driver are: [ 544.347388][T11299] pcl711 [ 544.347397][T11299] pcl711b [ 544.347406][T11299] acl8112hg [ 544.347415][T11299] acl8112dg [ 544.347424][T11299] comedi: valid board names for amplc_pc263 driver are: [ 544.347436][T11299] pc263 [ 544.347445][T11299] comedi: valid board names for amplc_pc236 driver are: [ 544.347457][T11299] pc36at [ 544.347472][T11299] comedi: valid board names for amplc_dio200 driver are: [ 544.347484][T11299] pc212e [ 544.347493][T11299] pc214e [ 544.347502][T11299] pc215e [ 544.347511][T11299] pc218e [ 544.347520][T11299] pc272e [ 544.347529][T11299] comedi: valid board names for comedi_parport driver are: [ 544.347541][T11299] comedi_parport [ 544.347551][T11299] comedi: valid board names for comedi_test driver are: [ 544.347561][T11299] comedi_test [ 544.347570][T11299] comedi: valid board names for comedi_bond driver are: [ 544.347582][T11299] comedi_bond [ 544.355540][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 544.362145][ T5900] usb 5-1: config 3 has no interface number 0 [ 544.370799][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.371668][ T5900] usb 5-1: too many endpoints for config 3 interface 209 altsetting 238: 244, using maximum allowed: 30 [ 544.374269][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.377624][ T5900] usb 5-1: config 3 interface 209 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 544.377661][ T5900] usb 5-1: config 3 interface 209 has no altsetting 0 [ 544.380562][ T5900] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 544.390462][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.390480][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.390542][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.474663][T11346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.518938][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.518970][ T5900] usb 5-1: Product: syz [ 544.518987][ T5900] usb 5-1: Manufacturer: syz [ 544.519003][ T5900] usb 5-1: SerialNumber: syz [ 544.711908][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.485992][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.494495][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.502513][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.510635][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.518866][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.526920][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.534954][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.542934][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.550874][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.558950][T11363] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 545.671584][ T5156] Bluetooth: hci0: command tx timeout [ 545.739261][T11289] hsr_slave_0: entered promiscuous mode [ 545.760453][T11289] hsr_slave_1: entered promiscuous mode [ 545.768917][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.784667][T11289] Cannot create hsr debugfs directory [ 545.896450][ T5900] usb 5-1: USB disconnect, device number 51 [ 546.008329][T11364] wg1 speed is unknown, defaulting to 1000 [ 546.084254][T11359] wg1 speed is unknown, defaulting to 1000 [ 546.670030][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 546.670050][ T30] audit: type=1800 audit(1755529648.483:530): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1484" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 546.832824][T11289] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 546.890919][T11289] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 546.912120][T11289] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 546.936839][T11289] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 547.946324][ T5156] Bluetooth: hci0: command tx timeout [ 548.304046][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.407442][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.438532][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.445748][ T9072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.555274][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.562470][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.248546][T11411] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 550.118970][ T5156] Bluetooth: hci0: command tx timeout [ 550.568468][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.747573][T11414] delete_channel: no stack [ 550.866077][T11416] delete_channel: no stack [ 552.028127][T11440] slcan: can't register candev [ 552.033333][T11440] Falling back ldisc for ttyS3. [ 552.555024][T11289] veth0_vlan: entered promiscuous mode [ 552.593028][T11289] veth1_vlan: entered promiscuous mode [ 552.691908][T11289] veth0_macvtap: entered promiscuous mode [ 552.722726][T11289] veth1_macvtap: entered promiscuous mode [ 553.642334][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.685251][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.761836][T11289] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.779395][T11289] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.800742][T11289] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.810423][T11289] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.036514][ T6086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.044865][ T6086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.131648][ T9072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.156794][ T9072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.454123][T11457] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 555.199390][T11463] mkiss: ax0: crc mode is auto. [ 556.268539][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 556.718003][T11495] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1510'. [ 557.200774][T11500] 9pnet_fd: Insufficient options for proto=fd [ 557.319485][T11505] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1510'. [ 557.446147][T11505] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1510'. [ 557.933512][ T5920] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 558.115248][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 558.140291][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 558.205209][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 558.235237][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1515'. [ 558.254003][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.309644][ T5920] usb 5-1: config 0 descriptor?? [ 558.377824][T11517] comedi comedi3: pcl812: I/O port conflict (0x4,16) [ 558.392168][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 558.426654][T11516] bridge3: entered promiscuous mode [ 558.458879][T11517] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1515'. [ 558.498749][T11516] bridge3: entered allmulticast mode [ 558.553120][ C0] hrtimer: interrupt took 42928 ns [ 558.567894][ T5920] bcm5974 5-1:0.0: could not read from device [ 558.617069][ T5191] bcm5974 5-1:0.0: could not read from device [ 558.649009][ T5920] input: failed to attach handler mousedev to device input41, error: -5 [ 558.715717][ T5191] bcm5974 5-1:0.0: could not read from device [ 558.729026][ T5920] usb 5-1: USB disconnect, device number 52 [ 558.775484][ T5191] bcm5974 5-1:0.0: could not read from device [ 560.967821][T11540] overlayfs: failed to resolve './file1/file0': -2 [ 560.978804][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.084142][T11547] --map-set only usable from mangle table [ 561.239033][T11554] netlink: 'syz.0.1527': attribute type 4 has an invalid length. [ 561.300693][ T5920] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 561.330127][T11560] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1529'. [ 561.581484][ T5920] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 561.591697][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.608302][ T5920] usb 7-1: config 0 descriptor?? [ 561.620465][ T5920] cp210x 7-1:0.0: cp210x converter detected [ 561.766323][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1532'. [ 562.280186][ T5920] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 562.314619][ T5920] cp210x 7-1:0.0: querying part number failed [ 562.330845][ T5920] usb 7-1: cp210x converter now attached to ttyUSB0 [ 562.515156][T11575] sctp: [Deprecated]: syz.0.1533 (pid 11575) Use of int in max_burst socket option. [ 562.515156][T11575] Use struct sctp_assoc_value instead [ 562.571269][T11580] sctp: [Deprecated]: syz.0.1533 (pid 11580) Use of int in max_burst socket option. [ 562.571269][T11580] Use struct sctp_assoc_value instead [ 562.818771][ T5984] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 562.989778][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 563.007030][ T5984] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 563.086153][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.094748][ T5984] usb 4-1: Product: syz [ 563.107397][ T5984] usb 4-1: Manufacturer: syz [ 563.112095][ T5984] usb 4-1: SerialNumber: syz [ 563.120041][ T5984] usb 4-1: config 0 descriptor?? [ 563.619005][ T5984] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 566.203384][ T5984] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 566.269153][ T5920] usb 7-1: USB disconnect, device number 4 [ 566.309471][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 566.355866][ T5920] cp210x 7-1:0.0: device disconnected [ 566.415681][ T5984] usb 4-1: USB disconnect, device number 56 [ 566.606040][T11629] can0: slcan on ttyS3. [ 567.354725][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 568.664018][T11622] can0 (unregistered): slcan off ttyS3. [ 568.976718][ T5984] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 569.013779][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1550'. [ 569.309085][ T5984] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 569.327329][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.367647][ T5984] usb 5-1: config 0 descriptor?? [ 569.367666][ T5900] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 569.612028][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 569.637019][ T5900] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 569.637051][ T5984] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 569.669298][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.099084][ T5900] usb 7-1: config 0 descriptor?? [ 570.151186][ T5984] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 570.195487][ T5984] [drm] Initialized udl on minor 2 [ 570.383003][ T5900] usb 7-1: USB disconnect, device number 5 [ 570.436274][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.445229][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.465298][ T5984] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 570.474483][ T5984] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 570.487844][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.497549][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 570.507037][ T5984] usb 5-1: USB disconnect, device number 53 [ 571.069575][ T30] audit: type=1326 audit(2000000009.232:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.6.1555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59ac38ebe9 code=0x0 [ 572.409098][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1561'. [ 572.649773][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1563'. [ 572.785825][ T5939] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 573.274510][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 573.286492][ T5939] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 573.352791][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.390364][ T5939] usb 7-1: Product: syz [ 573.400541][ T5939] usb 7-1: Manufacturer: syz [ 573.408415][ T5939] usb 7-1: SerialNumber: syz [ 573.428968][ T5939] usb 7-1: config 0 descriptor?? [ 573.453762][ T5939] gspca_main: se401-2.14.0 probing 047d:5003 [ 573.512165][T11702] loop9: detected capacity change from 0 to 7 [ 573.522569][T11702] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 573.543937][T11702] loop9: partition table partially beyond EOD, truncated [ 573.560225][T11702] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 574.193647][ T5939] gspca_se401: Too many frame sizes [ 574.275616][T11711] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1567'. [ 574.329318][ T30] audit: type=1326 audit(2000000012.281:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 574.943290][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 575.711638][ T30] audit: type=1326 audit(2000000012.281:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.735034][ T30] audit: type=1326 audit(2000000012.319:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.756935][ T30] audit: type=1326 audit(2000000012.319:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.780258][ T30] audit: type=1326 audit(2000000012.319:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.803194][ T30] audit: type=1326 audit(2000000012.319:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.829321][ T30] audit: type=1326 audit(2000000012.319:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.855201][ T30] audit: type=1326 audit(2000000012.319:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 575.888765][ T30] audit: type=1326 audit(2000000012.319:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11709 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa218ebe9 code=0x7ffc0000 [ 576.001910][ T24] usb 7-1: USB disconnect, device number 6 [ 579.149561][T11753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43 [ 579.197683][ T5939] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 580.768126][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 580.816430][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42304, setting to 1024 [ 580.926711][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 580.974155][ T5939] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 580.992567][T11741] delete_channel: no stack [ 580.999270][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.027974][ T5939] usb 1-1: Product: syz [ 581.208445][ T5939] usb 1-1: Manufacturer: syz [ 581.235643][ T5939] usb 1-1: SerialNumber: syz [ 581.694043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.989514][ T5939] usb 1-1: config 0 descriptor?? [ 582.199387][ T5939] usb 1-1: can't set config #0, error -71 [ 582.253331][T11768] siw: device registration error -23 [ 582.345256][ T5939] usb 1-1: USB disconnect, device number 72 [ 582.945104][T11775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.172039][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 583.181771][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 584.199449][T11788] wg1 speed is unknown, defaulting to 1000 [ 585.531540][T11788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 585.783528][T11808] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 587.042081][T11810] tty tty33: ldisc open failed (-12), clearing slot 32 [ 587.183598][ T5927] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 587.210067][ T5927] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 587.430610][ T5927] usb 3-1: USB disconnect, device number 41 [ 587.887551][T11830] siw: device registration error -23 [ 587.899416][T11647] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 588.006362][ T5984] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 588.153578][T11647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.197265][T11647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 588.327405][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 588.349801][ T5984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.399518][T11647] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 588.479286][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.500645][T11647] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 588.530121][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 588.540102][ T5984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 588.565675][T11647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.574251][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.052391][T11647] usb 5-1: config 0 descriptor?? [ 589.080617][T11823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.089085][ T5984] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 589.129717][ T5984] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 589.186471][ T5984] usb 4-1: Manufacturer: syz [ 589.225624][ T5984] usb 4-1: config 0 descriptor?? [ 589.385222][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1602'. [ 589.552079][T11647] aureal 0003:0755:2626.001A: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 589.599270][T11647] aureal 0003:0755:2626.001A: unknown main item tag 0x6 [ 589.606329][T11647] aureal 0003:0755:2626.001A: report_id 29495 is invalid [ 589.620149][ T5984] rc_core: IR keymap rc-hauppauge not found [ 589.637436][ T5984] Registered IR keymap rc-empty [ 589.652449][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.660276][T11647] aureal 0003:0755:2626.001A: item 0 2 1 8 parsing failed [ 589.702354][T11647] aureal 0003:0755:2626.001A: probe with driver aureal failed with error -22 [ 589.716587][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.760557][ T5984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 589.812994][T11647] usb 5-1: USB disconnect, device number 54 [ 589.945129][T11842] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 589.978996][ T5984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 590.011511][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.038844][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.062532][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.102997][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.330289][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.615992][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.721533][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.753635][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.786096][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.839051][ T5984] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 590.887044][ T5984] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 590.935238][ T5984] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 590.961512][ T5984] usb 4-1: USB disconnect, device number 57 [ 592.478996][T11903] siw: device registration error -23 [ 592.625732][ C0] net_ratelimit: 44 callbacks suppressed [ 592.625755][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 595.203338][T11926] wg1 speed is unknown, defaulting to 1000 [ 595.243604][T11925] wg1 speed is unknown, defaulting to 1000 [ 595.286852][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 595.442328][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 595.442343][ T30] audit: type=1326 audit(2000000032.030:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.7.1623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca0718ebe9 code=0x0 [ 595.498265][ T5920] usb 7-1: Using ep0 maxpacket: 8 [ 595.523196][ T5920] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 595.546091][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.575704][ T5920] usb 7-1: Product: syz [ 595.591704][ T5920] usb 7-1: Manufacturer: syz [ 595.608133][ T5920] usb 7-1: SerialNumber: syz [ 595.624939][ T5920] usb 7-1: config 0 descriptor?? [ 595.646391][ T5920] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 595.659694][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 595.677640][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 595.711364][ T5920] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 595.736924][ T5920] usb 7-1: media controller created [ 595.806060][T11793] syz.0.1592 (11793): drop_caches: 1 [ 595.822501][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.930312][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 595.936524][ T5920] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 595.969436][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input46 [ 596.036505][ T5920] dvb-usb: schedule remote query interval to 50 msecs. [ 596.065211][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 596.076016][ T5920] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 596.132241][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 596.175602][ T5939] dvb-usb: error while querying for an remote control event. [ 596.333630][ T5920] usb 7-1: USB disconnect, device number 7 [ 596.756234][ T5920] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 596.975402][ T5939] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 597.168202][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 597.223547][T11949] netlink: 'syz.4.1626': attribute type 9 has an invalid length. [ 597.234025][T11949] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1626'. [ 597.525396][ T5939] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.563633][ T5939] usb 4-1: config 0 interface 0 has no altsetting 0 [ 597.605639][ T5939] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 597.646041][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 598.212417][ T5939] usb 4-1: Product: syz [ 598.221231][ T5939] usb 4-1: config 0 descriptor?? [ 598.519776][ T5984] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 598.755901][ T5984] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 598.782601][ T5984] usb 5-1: config 0 has no interface number 0 [ 598.799679][ T5984] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.827792][ T5984] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.871487][ T5984] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 598.903432][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.925104][ T5984] usb 5-1: Product: syz [ 598.929369][ T5984] usb 5-1: Manufacturer: syz [ 598.957666][ T5984] usb 5-1: SerialNumber: syz [ 598.977532][ T5984] usb 5-1: config 0 descriptor?? [ 599.009757][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1633'. [ 599.019144][ T5984] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 599.029573][ T5984] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22 [ 599.536671][ T5939] usbhid 4-1:0.0: can't add hid device: -71 [ 599.607340][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.627097][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 599.788012][ T5939] usb 4-1: USB disconnect, device number 58 [ 599.792699][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.056750][ T5156] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 600.070735][ T5984] usb 5-1: USB disconnect, device number 55 [ 600.367851][T11973] delete_channel: no stack [ 601.111427][T11998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 603.519828][T12036] bridge1: entered promiscuous mode [ 603.525273][T12036] bridge1: entered allmulticast mode [ 603.542359][T12036] team0: Port device bridge1 added [ 603.613658][T12032] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.621216][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.677011][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 603.725699][T12029] ceph: No mds server is up or the cluster is laggy [ 603.767398][T12032] Bluetooth: MGMT ver 1.23 [ 603.771931][T12032] Bluetooth: hci0: unsupported parameter 27913 [ 603.826100][T12032] Bluetooth: hci0: invalid len left 4, exp >= 258 [ 604.343074][ T5156] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 604.355114][ T5156] Bluetooth: hci3: Injecting HCI hardware error event [ 604.367759][ T5156] Bluetooth: hci3: hardware error 0x00 [ 604.706598][T12049] siw: device registration error -23 [ 605.422255][T12056] siw: device registration error -23 [ 605.887204][T12057] sp0: Synchronizing with TNC [ 606.043082][T12060] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 606.798934][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1661'. [ 606.826350][ T5156] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 609.298867][T12097] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 610.077120][T12095] delete_channel: no stack [ 610.130602][T12111] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 610.548746][T12121] xt_hashlimit: size too large, truncated to 1048576 [ 610.883831][T12121] warn_alloc: 1 callbacks suppressed [ 610.883854][T12121] syz.4.1675: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 610.963840][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.4.1675 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 610.963874][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.963889][T12121] Call Trace: [ 610.963902][T12121] [ 610.963913][T12121] dump_stack_lvl+0x189/0x250 [ 610.963950][T12121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.963977][T12121] ? __pfx__printk+0x10/0x10 [ 610.964007][T12121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 610.964037][T12121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 610.964069][T12121] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 610.964101][T12121] warn_alloc+0x214/0x310 [ 610.964136][T12121] ? __pfx_warn_alloc+0x10/0x10 [ 610.964174][T12121] ? __get_vm_area_node+0x28f/0x300 [ 610.964200][T12121] ? htable_create+0xfc/0x7a0 [ 610.964228][T12121] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 610.964291][T12121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 610.964325][T12121] ? rcu_is_watching+0x15/0xb0 [ 610.964351][T12121] ? htable_create+0xfc/0x7a0 [ 610.964373][T12121] ? htable_create+0xfc/0x7a0 [ 610.964393][T12121] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 610.964419][T12121] ? htable_create+0xfc/0x7a0 [ 610.964440][T12121] ? hashlimit_pernet+0x23/0x240 [ 610.964472][T12121] htable_create+0xfc/0x7a0 [ 610.964503][T12121] hashlimit_mt_check_common+0x719/0xa10 [ 610.964539][T12121] xt_check_match+0x3ce/0xab0 [ 610.964574][T12121] ? __pfx___mutex_lock+0x10/0x10 [ 610.964613][T12121] ? __pfx_xt_check_match+0x10/0x10 [ 610.964652][T12121] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 610.964687][T12121] ? xt_find_match+0x1f7/0x250 [ 610.964729][T12121] translate_table+0x1553/0x2040 [ 610.964788][T12121] ? __pfx_translate_table+0x10/0x10 [ 610.964823][T12121] ? __might_fault+0xb0/0x130 [ 610.964867][T12121] ? _copy_from_user+0x94/0xb0 [ 610.964906][T12121] do_ip6t_set_ctl+0x970/0xce0 [ 610.964946][T12121] ? rcu_is_watching+0x15/0xb0 [ 610.964969][T12121] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 610.965025][T12121] ? __pfx___mutex_lock+0x10/0x10 [ 610.965051][T12121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.965088][T12121] ? __lock_acquire+0xab9/0xd20 [ 610.965124][T12121] nf_setsockopt+0x26c/0x290 [ 610.965166][T12121] rawv6_setsockopt+0x23b/0x5b0 [ 610.965193][T12121] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 610.965219][T12121] ? sock_common_setsockopt+0x36/0xc0 [ 610.965247][T12121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 610.965279][T12121] do_sock_setsockopt+0x179/0x1b0 [ 610.965324][T12121] __x64_sys_setsockopt+0x13f/0x1b0 [ 610.965359][T12121] do_syscall_64+0xfa/0x3b0 [ 610.965383][T12121] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.965402][T12121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.965425][T12121] ? clear_bhb_loop+0x60/0xb0 [ 610.965453][T12121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.965475][T12121] RIP: 0033:0x7fe78ef8ebe9 [ 610.965495][T12121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.965516][T12121] RSP: 002b:00007fe78fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 610.965539][T12121] RAX: ffffffffffffffda RBX: 00007fe78f1b6090 RCX: 00007fe78ef8ebe9 [ 610.965556][T12121] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 610.965569][T12121] RBP: 00007fe78f011e19 R08: 0000000000000588 R09: 0000000000000000 [ 610.965583][T12121] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 610.965602][T12121] R13: 00007fe78f1b6128 R14: 00007fe78f1b6090 R15: 00007ffc9a91bfe8 [ 610.965638][T12121] [ 610.966898][T12121] Mem-Info: [ 611.455087][T12121] active_anon:13 inactive_anon:4727 isolated_anon:0 [ 611.455087][T12121] active_file:4070 inactive_file:605 isolated_file:0 [ 611.455087][T12121] unevictable:768 dirty:163 writeback:0 [ 611.455087][T12121] slab_reclaimable:11079 slab_unreclaimable:104028 [ 611.455087][T12121] mapped:30029 shmem:1368 pagetables:1322 [ 611.455087][T12121] sec_pagetables:0 bounce:0 [ 611.455087][T12121] kernel_misc_reclaimable:0 [ 611.455087][T12121] free:1351241 free_pcp:19755 free_cma:0 [ 611.547649][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1678'. [ 611.618415][T12121] Node 0 active_anon:52kB inactive_anon:22108kB active_file:16280kB inactive_file:2288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127216kB dirty:652kB writeback:0kB shmem:6836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12956kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 611.671270][T12121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 611.757329][T12121] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 611.870850][T12121] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 611.959875][T12121] Node 0 DMA32 free:1507284kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:24876kB active_file:14820kB inactive_file:2208kB unevictable:1536kB writepending:636kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:32080kB local_pcp:16436kB free_cma:0kB [ 612.024076][T12146] netlink: 212404 bytes leftover after parsing attributes in process `syz.7.1682'. [ 612.075021][T12121] lowmem_reserve[]: 0 0 1 1 1 [ 612.091105][T12121] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:312kB active_file:1460kB inactive_file:80kB unevictable:0kB writepending:16kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:4kB free_cma:0kB [ 612.233741][T12121] lowmem_reserve[]: 0 0 0 0 0 [ 612.317050][T12150] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 612.386258][T12121] Node 1 Normal free:3877484kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:43984kB local_pcp:31768kB free_cma:0kB [ 612.465355][T12121] lowmem_reserve[]: 0 0 0 0 0 [ 612.509218][T12121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 612.562604][T12121] Node 0 DMA32: 1032*4kB (UME) 691*8kB (UME) 848*16kB (UM) 650*32kB (UME) 462*64kB (UME) 315*128kB (UME) 155*256kB (UME) 66*512kB (UME) 32*1024kB (UM) 16*2048kB (M) 305*4096kB (M) = 1502200kB [ 612.615998][T12121] Node 0 Normal: 11*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52kB [ 612.647650][T12121] Node 1 Normal: 5*4kB (UE) 7*8kB (UME) 9*16kB (UME) 12*32kB (UME) 23*64kB (UME) 9*128kB (UME) 5*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 3*2048kB (UE) 943*4096kB (M) = 3877788kB [ 612.679815][T12121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.701248][T12121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.710634][T12121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.733035][ T5156] Bluetooth: hci1: command tx timeout [ 612.761396][T12121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.808160][T12121] 6064 total pagecache pages [ 612.812843][T12121] 0 pages in swap cache [ 612.817192][T12121] Free swap = 124996kB [ 612.974838][ T5939] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 612.983540][T12121] Total swap = 124996kB [ 612.988141][T12121] 2097051 pages RAM [ 613.001185][T12121] 0 pages HighMem/MovableOnly [ 613.005938][T12121] 424695 pages reserved [ 613.010160][T12121] 0 pages cma reserved [ 613.353291][ T5939] usb 7-1: device descriptor read/64, error -71 [ 613.748775][ T5939] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 614.136850][ T5939] usb 7-1: device descriptor read/64, error -71 [ 614.257932][ T5939] usb usb7-port1: attempt power cycle [ 614.946194][ T5156] Bluetooth: hci1: command tx timeout [ 614.956857][ T5939] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 615.427953][ T5939] usb 7-1: device descriptor read/8, error -71 [ 615.683992][ T5939] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 615.888646][ T5984] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 616.090311][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 616.157320][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.163601][ T5956] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 616.231713][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.254356][ T5939] usb 7-1: device descriptor read/8, error -71 [ 616.285537][ T5984] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 616.314114][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.343420][ T5984] usb 5-1: config 0 descriptor?? [ 616.368633][ T5939] usb usb7-port1: unable to enumerate USB device [ 616.392002][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.995611][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.024596][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.088497][ T5956] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.133295][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.177683][ T5956] usb 1-1: config 0 descriptor?? [ 617.252504][ T5984] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.001B/input/input47 [ 617.377216][T12203] delete_channel: no stack [ 617.451776][ T5984] appleir 0003:05AC:8241.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 617.463823][ T5956] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 617.498737][ T5984] usb 5-1: USB disconnect, device number 56 [ 617.530101][T12219] siw: device registration error -23 [ 617.631178][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 617.688823][ T5956] usb 1-1: USB disconnect, device number 73 [ 617.832818][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 617.842379][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 617.856604][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.871762][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.893429][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.906285][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.916558][ T10] usb 7-1: Product: syz [ 617.921897][ T10] usb 7-1: Manufacturer: syz [ 617.926766][ T10] usb 7-1: SerialNumber: syz [ 618.164356][ T5956] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 618.348598][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 618.378730][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 618.391193][ T10] usb 7-1: 0:2 : does not exist [ 618.399958][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 618.423699][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 618.615830][ T5956] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 618.881533][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.994711][ T5956] usb 1-1: Product: syz [ 618.999123][ T5956] usb 1-1: Manufacturer: syz [ 619.003877][ T5956] usb 1-1: SerialNumber: syz [ 619.025369][ T5956] usb 1-1: config 0 descriptor?? [ 619.050763][ T5956] iguanair 1-1:0.0: failed to submit urb: -90 [ 619.077860][ T5956] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 619.081016][T12242] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1712'. [ 619.389873][ T10] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 619.399666][ T5956] usb 1-1: USB disconnect, device number 74 [ 619.519388][T12245] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 619.823074][ T10] usb 7-1: USB disconnect, device number 12 [ 620.758364][T12250] delete_channel: no stack [ 620.883423][T12270] xt_hashlimit: max too large, truncated to 1048576 [ 620.893721][T12270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 621.713830][T12263] overlayfs: missing 'lowerdir' [ 621.787261][T12269] netlink: 'syz.4.1719': attribute type 2 has an invalid length. [ 622.052939][T12269] : entered promiscuous mode [ 623.165994][T12293] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 623.377301][T12300] bridge0: entered promiscuous mode [ 623.407600][T12300] macvlan2: entered promiscuous mode [ 623.626984][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 624.343388][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 624.359835][ T10] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 624.374252][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.402063][ T10] usb 5-1: config 0 has no interface number 0 [ 624.415320][ T10] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 624.442776][ T10] usb 5-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 624.461229][ T10] usb 5-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 624.470615][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.478965][ T10] usb 5-1: Product: syz [ 624.483298][ T10] usb 5-1: Manufacturer: syz [ 624.488900][ T10] usb 5-1: SerialNumber: syz [ 624.687239][ T10] usb 5-1: config 0 descriptor?? [ 624.699354][T12298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.220400][ T10] usb-storage 5-1:0.231: USB Mass Storage device detected [ 625.582021][T12315] delete_channel: no stack [ 625.746491][ T10] usb 5-1: USB disconnect, device number 57 [ 625.882676][ T5956] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 625.901688][ T5956] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 626.187034][T12340] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 627.065088][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'. [ 627.220023][T12349] netlink: 'syz.7.1741': attribute type 1 has an invalid length. [ 627.297739][T12349] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1741'. [ 627.946425][T12363] delete_channel: no stack [ 628.861096][T12391] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 628.940288][T12391] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 628.982984][T12391] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 629.026181][T12391] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 630.443740][T12419] netlink: 'syz.7.1760': attribute type 13 has an invalid length. [ 630.626703][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1760'. [ 631.932803][T12424] delete_channel: no stack [ 632.201994][T12438] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1763'. [ 632.656411][ T5951] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 632.928143][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 633.054023][ T5951] usb 7-1: config 9 has an invalid interface number: 160 but max is 0 [ 633.105857][ T5951] usb 7-1: config 9 has no interface number 0 [ 633.177215][ T5951] usb 7-1: config 9 interface 160 has no altsetting 0 [ 633.309798][ T5951] usb 7-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f [ 633.654721][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.662796][ T5951] usb 7-1: Product: syz [ 633.702686][ T5951] usb 7-1: Manufacturer: syz [ 633.707372][ T5951] usb 7-1: SerialNumber: syz [ 633.818456][T12448] netlink: 'syz.0.1768': attribute type 4 has an invalid length. [ 633.858686][T12448] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1768'. [ 633.955486][T12448] erspan0: entered promiscuous mode [ 634.004199][ T5951] ftdi_sio 7-1:9.160: FTDI USB Serial Device converter detected [ 634.026366][T12448] erspan0: left promiscuous mode [ 634.035027][ T5951] ftdi_sio ttyUSB0: unknown device type: 0x4e3f [ 634.046921][ T5951] usb 7-1: USB disconnect, device number 13 [ 634.062746][ T5951] ftdi_sio 7-1:9.160: device disconnected [ 634.463255][T12463] overlayfs: missing 'lowerdir' [ 634.820170][T11647] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 635.326295][T11647] usb 5-1: Using ep0 maxpacket: 32 [ 635.339432][T11647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 635.349009][T12473] delete_channel: no stack [ 635.393419][T11647] usb 5-1: config 129 has an invalid interface number: 249 but max is 0 [ 635.459258][T11647] usb 5-1: config 129 has no interface number 0 [ 635.479029][T11647] usb 5-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 635.519339][T11647] usb 5-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 635.718065][T11647] usb 5-1: config 129 interface 249 has no altsetting 0 [ 636.313574][T11647] usb 5-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 636.322993][T11647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.331300][T11647] usb 5-1: Product: syz [ 636.335581][T11647] usb 5-1: Manufacturer: syz [ 636.340328][T11647] usb 5-1: SerialNumber: syz [ 636.366688][T12468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 636.413164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.118067][T11647] smsc95xx v2.0.0 [ 637.127806][T11647] smsc95xx 5-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 637.155610][T11647] smsc95xx 5-1:129.249: probe with driver smsc95xx failed with error -71 [ 637.225829][T11647] usb 5-1: USB disconnect, device number 58 [ 638.027174][ T5900] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 638.189067][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 638.208759][ T5900] usb 1-1: config 254 has an invalid interface number: 167 but max is 0 [ 638.219072][ T5900] usb 1-1: config 254 has no interface number 0 [ 638.260001][T12516] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 638.268125][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 638.298810][T12516] team0: Port device geneve0 added [ 638.489646][ T5900] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 638.528931][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.893377][ T5900] usb 1-1: Product: syz [ 638.897597][ T5900] usb 1-1: Manufacturer: syz [ 638.930568][ T5900] usb 1-1: SerialNumber: syz [ 639.154130][T12519] delete_channel: no stack [ 639.400944][T12503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1782'. [ 640.956600][T11647] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 641.062906][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1796'. [ 641.084265][ T5900] mxuport 1-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 641.123048][ T5900] mxuport 1-1:254.167: probe with driver mxuport failed with error -5 [ 641.148936][T11647] usb 5-1: device descriptor read/64, error -71 [ 641.154803][ T5900] usb 1-1: USB disconnect, device number 75 [ 641.395130][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1798'. [ 641.448507][T11647] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 641.463799][T12556] libceph: resolve '4..' (ret=-3): failed [ 641.510028][T12556] x_tables: duplicate underflow at hook 2 [ 641.598023][T11647] usb 5-1: device descriptor read/64, error -71 [ 641.744319][T11647] usb usb5-port1: attempt power cycle [ 641.812447][T12563] siw: device registration error -23 [ 642.312507][T11647] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 642.431330][T11647] usb 5-1: device descriptor read/8, error -71 [ 642.608104][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1801'. [ 642.629826][T12565] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1801'. [ 642.721002][T11647] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 642.771482][T11647] usb 5-1: device descriptor read/8, error -71 [ 642.830018][T12570] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1803'. [ 642.919465][T11647] usb usb5-port1: unable to enumerate USB device [ 643.083899][ T5900] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 643.597757][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.631691][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 643.640413][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.698274][ T5900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.715942][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.757340][ T5900] usb 7-1: Product: syz [ 643.761681][ T5900] usb 7-1: Manufacturer: syz [ 643.766317][ T5900] usb 7-1: SerialNumber: syz [ 643.944114][T12586] bridge_slave_0: default FDB implementation only supports local addresses [ 643.960479][ T5956] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 644.035872][ T5900] usb 7-1: 0:2 : does not exist [ 644.054652][ T5900] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 644.120004][T12588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1809'. [ 644.180585][ T5956] usb 1-1: unable to get BOS descriptor or descriptor too short [ 644.189210][ T5900] usb 7-1: USB disconnect, device number 14 [ 644.200632][ T5956] usb 1-1: not running at top speed; connect to a high speed hub [ 644.219180][ T5956] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 644.238944][ T5956] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 644.266689][ T5956] usb 1-1: config 5 has no interface number 0 [ 644.277521][ T5956] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 644.304744][ T5956] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.336648][ T5956] usb 1-1: config 5 interface 246 has no altsetting 0 [ 644.361734][ T5956] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 644.372427][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.392864][ T5956] usb 1-1: Product: syz [ 644.397118][ T5956] usb 1-1: Manufacturer: syz [ 644.409618][ T5956] usb 1-1: SerialNumber: syz [ 644.807061][ T5956] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 644.810189][ T1154] usb 1-1: Failed to submit usb control message: -71 [ 644.821334][ T5956] usb 1-1: USB disconnect, device number 76 [ 645.136549][ T1154] usb 1-1: unable to send the bmi data to the device: -71 [ 645.147465][ T1154] usb 1-1: unable to get target info from device [ 645.155190][ T1154] usb 1-1: could not get target info (-71) [ 645.386318][ T1154] usb 1-1: could not probe fw (-71) [ 645.681878][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 646.014759][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 646.032841][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.054052][ T10] usb 7-1: config 0 descriptor?? [ 646.069412][ T10] cp210x 7-1:0.0: cp210x converter detected [ 646.501642][T12627] siw: device registration error -23 [ 646.575628][ T5900] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 646.593643][ T10] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 646.612542][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 646.793476][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 647.178766][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 647.197442][ T5900] usb 1-1: can't read configurations, error -61 [ 647.325336][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.366987][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.499681][ T5900] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 647.836427][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.991023][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 647.999212][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 648.007300][ T5900] usb 1-1: can't read configurations, error -61 [ 648.039106][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 648.101865][ T5900] usb usb1-port1: attempt power cycle [ 648.250603][T11647] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 648.485291][T11647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 648.506128][T11647] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 648.526099][ T5900] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 648.597004][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 649.234263][T11647] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 649.235878][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 649.255140][T11647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.265978][ T5900] usb 1-1: can't read configurations, error -61 [ 649.277389][T11647] usb 5-1: Product: syz [ 649.285386][T11647] usb 5-1: Manufacturer: syz [ 649.295287][T11647] usb 5-1: SerialNumber: syz [ 649.317381][T12647] block nbd0: server does not support multiple connections per device. [ 649.326843][T12647] block nbd0: shutting down sockets [ 649.429730][ T5900] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 649.460742][ T5900] usb 1-1: device descriptor read/8, error -71 [ 649.493677][ T5927] usb 7-1: USB disconnect, device number 15 [ 649.620550][ T5900] usb usb1-port1: unable to enumerate USB device [ 649.628243][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 649.672966][ T5927] cp210x 7-1:0.0: device disconnected [ 649.771309][T12662] bridge0: entered allmulticast mode [ 649.778497][T12664] overlayfs: failed to resolve './file1': -2 [ 649.799722][T12662] pim6reg: entered allmulticast mode [ 649.815383][T12662] pim6reg: left allmulticast mode [ 649.825801][T12662] bridge0: left allmulticast mode [ 650.099080][ T5900] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 650.225667][T11647] usb 5-1: reset high-speed USB device number 63 using dummy_hcd [ 650.278991][ T5927] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 650.392261][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 650.408485][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.418997][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 650.430113][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.440792][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.464132][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.483385][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 650.500722][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 650.522396][ T5927] usb 4-1: config 0 has an invalid interface number: 232 but max is 0 [ 650.530950][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.574118][ T5927] usb 4-1: config 0 has no interface number 0 [ 650.581595][ T5927] usb 4-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 650.632181][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 650.633327][ T5900] usb 1-1: config 0 descriptor?? [ 650.641925][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.677164][ T5927] usb 4-1: Product: syz [ 650.682153][ T5927] usb 4-1: Manufacturer: syz [ 650.687928][ T5927] usb 4-1: SerialNumber: syz [ 650.819962][ T5927] usb 4-1: config 0 descriptor?? [ 650.829492][T12668] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 650.852851][ T5927] em28xx 4-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 650.865157][ T5927] em28xx 4-1:0.232: Video interface 232 found: bulk [ 651.036115][ T5951] usb 1-1: USB disconnect, device number 81 [ 651.125467][ T5927] em28xx 4-1:0.232: unknown em28xx chip ID (0) [ 651.142251][T11647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 651.159492][T11647] usb 5-1: device firmware changed [ 651.169183][T11647] usb 5-1: USB disconnect, device number 63 [ 651.239517][ T5927] em28xx 4-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 651.260525][ T5927] em28xx 4-1:0.232: board has no eeprom [ 651.362892][ T5927] em28xx 4-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 651.372630][ T5927] em28xx 4-1:0.232: analog set to bulk mode. [ 651.382257][ T5951] em28xx 4-1:0.232: Registering V4L2 extension [ 651.551095][ T5927] usb 4-1: USB disconnect, device number 59 [ 651.613317][ T5927] em28xx 4-1:0.232: Disconnecting em28xx [ 652.158380][T12699] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 652.165454][T12699] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 652.188950][T12699] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 652.218519][T12699] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 652.250882][T12699] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 652.272033][T12699] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 652.293025][T12699] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 652.311102][ T5951] em28xx 4-1:0.232: Config register raw data: 0xffffffed [ 652.327383][ T5951] em28xx 4-1:0.232: AC97 chip type couldn't be determined [ 652.342106][ T5951] em28xx 4-1:0.232: No AC97 audio processor [ 652.348486][ T5951] em28xx 4-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 652.363686][ T5951] em28xx 4-1:0.232: Binding DVB extension [ 652.370212][ T5951] em28xx 4-1:0.232: no endpoint for DVB mode and transfer type 0 [ 652.391272][ T5951] em28xx 4-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 652.406290][ T5951] em28xx 4-1:0.232: Registering input extension [ 652.416806][ T5927] em28xx 4-1:0.232: Closing input extension [ 652.473129][ T5927] em28xx 4-1:0.232: Freeing device [ 653.069390][T12724] netlink: 'syz.6.1845': attribute type 4 has an invalid length. [ 653.077257][T12724] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1845'. [ 653.728485][T12711] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 654.617494][T12733] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1849'. [ 654.641164][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1849'. [ 654.749189][T12735] ipip1: entered promiscuous mode [ 654.754839][T12735] ipip1: entered allmulticast mode [ 655.103273][T12751] sp0: Synchronizing with TNC [ 656.378837][T12747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.387438][T12747] team0: Failed to send options change via netlink (err -105) [ 656.395328][T12747] team0: Port device bond3 added [ 657.289434][ T1154] Bluetooth: hci5: Frame reassembly failed (-84) [ 659.361514][T12803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.511923][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 659.522662][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 660.057241][T12808] tmpfs: Unknown parameter 'usrquotaization' [ 660.564546][T12818] netlink: 'syz.4.1868': attribute type 5 has an invalid length. [ 660.695638][T12818] ip6erspan0: entered promiscuous mode [ 661.475375][T12830] program syz.6.1873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.630513][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 662.366726][T12854] program syz.4.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.823625][ T5927] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 664.204949][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.217021][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.229534][ T5927] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 664.238810][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.252770][ T5927] usb 7-1: config 0 descriptor?? [ 664.369281][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 664.382220][ T5951] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 664.636507][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 664.689015][ T5951] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 664.792429][ T5951] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.896480][ T5951] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.935478][ T5951] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 664.992392][ T5951] usb 1-1: config 7 interface 0 has no altsetting 0 [ 665.023096][ T5951] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 665.064082][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.557836][ T5951] hid (null): invalid report_size 812540268 [ 666.597643][ T5951] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.001E/input/input52 [ 666.705063][ T5951] kye 0003:0458:5010.001E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 666.877530][ T5927] usbhid 7-1:0.0: can't add hid device: -71 [ 666.900895][ T5927] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 666.929510][ T5927] usb 7-1: USB disconnect, device number 16 [ 666.977910][ T5956] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 667.148697][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 667.158463][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.187532][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.217956][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 667.238090][ T5956] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 667.251375][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.268176][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1898'. [ 667.329847][ T5956] usb 4-1: config 0 descriptor?? [ 667.490954][ T5927] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 667.651037][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 667.665780][ T5927] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 667.680292][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.698484][ T5927] usb 5-1: config 0 has no interface number 0 [ 667.707020][ T5927] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.720109][ T5927] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 667.733873][ T5927] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.745871][ T5927] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.761664][ T5927] usb 5-1: config 0 interface 52 has no altsetting 0 [ 667.768621][ T5927] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 667.777863][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.791442][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.802955][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.804436][ T5927] usb 5-1: config 0 descriptor?? [ 667.825864][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.839432][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.078946][ T5956] usbhid 4-1:0.0: can't add hid device: -71 [ 668.099983][ T5956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 668.108433][ T5927] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input53 [ 668.146163][ T5956] usb 4-1: USB disconnect, device number 60 [ 668.195558][ T24] usb 1-1: USB disconnect, device number 82 [ 668.240919][T12927] can0: slcan on ttyS3. [ 668.320299][ T10] usb 5-1: USB disconnect, device number 64 [ 668.390785][T12928] can0 (unregistered): slcan off ttyS3. [ 669.301858][ T30] audit: type=1400 audit(2000000101.123:568): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=12952 comm="syz.6.1908" saddr=63.255.255.255 src=17475 daddr=172.20.20.170 dest=16961 netif=bpq1 [ 671.067645][T12973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 671.192026][ T5951] IPVS: starting estimator thread 0... [ 671.202118][T12973] binder: Bad value for 'max' [ 671.342771][T12977] IPVS: using max 36 ests per chain, 86400 per kthread [ 674.373474][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 674.385995][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 674.453480][T13001] netlink: 'syz.4.1919': attribute type 13 has an invalid length. [ 674.739086][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 674.852679][T13006] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 675.219844][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 675.311726][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.369435][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.418811][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 675.456099][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.958806][ T10] usb 1-1: config 0 descriptor?? [ 676.046968][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'. [ 676.147326][T13017] tmpfs: Bad value for 'size' [ 676.474111][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.483396][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.494127][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.501603][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.509213][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.553220][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 676.572006][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 677.121784][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 677.132248][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 677.139799][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 677.148307][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 677.155914][ T10] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 677.400818][ T10] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf3 found [ 677.418604][ T10] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf4 found [ 677.436466][ T10] usb 1-1: USB disconnect, device number 83 [ 677.848545][T13021] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 678.092009][T13039] wg1 speed is unknown, defaulting to 1000 [ 678.313178][T13058] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 678.345322][T13058] FAULT_INJECTION: forcing a failure. [ 678.345322][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 678.360693][T13058] CPU: 0 UID: 0 PID: 13058 Comm: syz.3.1938 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 678.360724][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.360737][T13058] Call Trace: [ 678.360744][T13058] [ 678.360751][T13058] dump_stack_lvl+0x189/0x250 [ 678.360774][T13058] ? __pfx____ratelimit+0x10/0x10 [ 678.360791][T13058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.360809][T13058] ? __pfx__printk+0x10/0x10 [ 678.360831][T13058] ? __pfx___might_resched+0x10/0x10 [ 678.360853][T13058] should_fail_ex+0x414/0x560 [ 678.360873][T13058] should_failslab+0xa8/0x100 [ 678.360891][T13058] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 678.360907][T13058] ? rcu_is_watching+0x15/0xb0 [ 678.360922][T13058] ? __alloc_skb+0x112/0x2d0 [ 678.360948][T13058] __alloc_skb+0x112/0x2d0 [ 678.360972][T13058] alloc_skb_with_frags+0xca/0x890 [ 678.361002][T13058] ? rcu_qs+0xc4/0x170 [ 678.361019][T13058] sock_alloc_send_pskb+0x857/0x990 [ 678.361049][T13058] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 678.361066][T13058] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 678.361096][T13058] hci_sock_sendmsg+0x207/0xef0 [ 678.361123][T13058] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 678.361148][T13058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.361163][T13058] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 678.361186][T13058] __sock_sendmsg+0x21c/0x270 [ 678.361206][T13058] sock_write_iter+0x258/0x330 [ 678.361225][T13058] ? __pfx_sock_write_iter+0x10/0x10 [ 678.361249][T13058] ? bpf_lsm_file_permission+0x9/0x20 [ 678.361266][T13058] ? security_file_permission+0x75/0x290 [ 678.361290][T13058] vfs_write+0x54b/0xa90 [ 678.361308][T13058] ? __pfx_sock_write_iter+0x10/0x10 [ 678.361325][T13058] ? __pfx_vfs_write+0x10/0x10 [ 678.361355][T13058] ? __fget_files+0x2a/0x420 [ 678.361380][T13058] ksys_write+0x145/0x250 [ 678.361396][T13058] ? __pfx_ksys_write+0x10/0x10 [ 678.361414][T13058] ? do_syscall_64+0xbe/0x3b0 [ 678.361434][T13058] do_syscall_64+0xfa/0x3b0 [ 678.361452][T13058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.361466][T13058] ? asm_sysvec_call_function_single+0x1a/0x20 [ 678.361482][T13058] ? clear_bhb_loop+0x60/0xb0 [ 678.361500][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.361515][T13058] RIP: 0033:0x7f35ccf8ebe9 [ 678.361530][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.361543][T13058] RSP: 002b:00007f35cdd36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.361560][T13058] RAX: ffffffffffffffda RBX: 00007f35cd1b6090 RCX: 00007f35ccf8ebe9 [ 678.361572][T13058] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000009 [ 678.361581][T13058] RBP: 00007f35cdd36090 R08: 0000000000000000 R09: 0000000000000000 [ 678.361592][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.361602][T13058] R13: 00007f35cd1b6128 R14: 00007f35cd1b6090 R15: 00007fffd72e7168 [ 678.361625][T13058] [ 679.143288][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 679.317774][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 679.374506][T13067] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 679.419890][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 679.910380][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.953387][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 679.993285][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.018890][ T10] usb 5-1: Product: syz [ 680.044333][ T10] usb 5-1: Manufacturer: syz [ 680.061345][ T10] usb 5-1: SerialNumber: syz [ 680.079372][ T10] usb 5-1: config 0 descriptor?? [ 680.168166][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.193707][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 680.581942][T13076] xt_hashlimit: max too large, truncated to 1048576 [ 680.846388][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 680.881946][ T10] em28xx 5-1:0.0: Config register raw data: 0x41 [ 681.315944][T13103] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.325362][T13103] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.334106][T13103] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.343073][T13103] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.396202][T13100] wg1 speed is unknown, defaulting to 1000 [ 681.471022][T13105] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 682.110201][T13121] sctp: [Deprecated]: syz.6.1954 (pid 13121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.110201][T13121] Use struct sctp_sack_info instead [ 683.135360][T13129] trusted_key: encrypted_key: insufficient parameters specified [ 683.147437][T13129] vcan0: MTU too low for tipc bearer [ 683.152861][T13129] tipc: Enabling of bearer rejected, failed to enable media [ 683.585898][ T10] usb 5-1: USB disconnect, device number 65 [ 683.613375][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 683.767309][ T10] em28xx 5-1:0.0: Freeing device [ 685.087453][ T5984] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 685.345117][ T5984] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 685.414284][ T5984] usb 4-1: config 0 has no interface number 0 [ 685.437838][ T5984] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 685.464055][ T5984] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 685.497864][ T5984] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 256, setting to 64 [ 685.520199][ T5984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 685.537997][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.552528][ T5984] usb 4-1: config 0 descriptor?? [ 685.559101][T13160] xt_NFQUEUE: number of total queues is 0 [ 685.786412][ T5984] usb 4-1: string descriptor 0 read error: -71 [ 685.806202][ T5984] usbtest 4-1:0.138: couldn't get endpoints, -22 [ 685.812689][ T5984] usbtest 4-1:0.138: probe with driver usbtest failed with error -22 [ 685.840557][ T5984] usb 4-1: USB disconnect, device number 61 [ 685.953182][ T5951] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 686.038850][ T5900] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 686.190695][ T5900] usb 7-1: device descriptor read/64, error -71 [ 686.254225][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 686.261453][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.272020][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.283719][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 686.294479][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.312465][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.322242][ T5951] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.330471][ T5951] usb 5-1: Manufacturer: syz [ 686.348152][ T5951] usb 5-1: config 0 descriptor?? [ 686.521509][T13173] can0: slcan on ttyS3. [ 686.573328][ T5900] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 686.586179][T13173] can0 (unregistered): slcan off ttyS3. [ 686.598340][T13173] sp0: Synchronizing with TNC [ 686.712247][ T5900] usb 7-1: device descriptor read/64, error -71 [ 686.841538][ T5900] usb usb7-port1: attempt power cycle [ 686.999880][T13180] binder: 13177:13180 unknown command 0 [ 687.006471][T13180] binder: 13177:13180 ioctl c0306201 200000000080 returned -22 [ 687.015458][T13180] binder: 13177:13180 ioctl 8010aebb 200000000000 returned -22 [ 687.257630][ T5951] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 687.353835][ T5900] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 687.448196][ T5900] usb 7-1: device descriptor read/8, error -71 [ 687.588937][ T5951] usb 1-1: device descriptor read/64, error -71 [ 687.653983][T13190] bridge0: port 3(syz_tun) entered blocking state [ 687.662177][T13190] bridge0: port 3(syz_tun) entered disabled state [ 687.670426][T13190] syz_tun: entered allmulticast mode [ 687.687518][T13190] syz_tun: entered promiscuous mode [ 687.696131][T13190] bridge0: port 3(syz_tun) entered blocking state [ 687.703257][T13190] bridge0: port 3(syz_tun) entered forwarding state [ 687.756721][T13190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.952915][ T5951] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 688.134350][ T5951] usb 1-1: device descriptor read/64, error -71 [ 688.315869][ T5900] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 688.340090][ T5951] usb usb1-port1: attempt power cycle [ 688.893691][ T5951] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 689.059854][ T5951] usb 1-1: device descriptor read/8, error -71 [ 689.460174][ T5951] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 689.598126][ T5951] usb 1-1: device descriptor read/8, error -71 [ 689.704130][ T5900] usb 7-1: device descriptor read/8, error -71 [ 689.711115][ T10] usb 5-1: USB disconnect, device number 66 [ 689.781994][ T5951] usb usb1-port1: unable to enumerate USB device [ 689.834788][ T5900] usb usb7-port1: unable to enumerate USB device [ 689.874286][T13205] trusted_key: encrypted_key: insufficient parameters specified [ 689.981563][T13208] input: syz0 as /devices/virtual/input/input54 [ 690.364127][T13178] [U] [ 690.424189][ T5900] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 690.678737][ T5951] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 690.721433][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 690.735623][ T5900] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.747008][ T5900] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.760116][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.767229][ T5900] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 690.780322][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.793981][ T5900] usb 5-1: config 0 descriptor?? [ 690.838862][ T5984] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 690.853516][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 690.862945][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.876275][ T5951] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 690.886234][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.897793][ T5951] usb 7-1: config 0 descriptor?? [ 690.999181][ T5984] usb 1-1: Using ep0 maxpacket: 16 [ 691.007646][ T5984] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.024121][ T5984] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 691.032809][ T5984] usb 1-1: config 1 has no interface number 0 [ 691.041985][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 691.044296][ T5984] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 691.060302][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.068749][ T5984] usb 1-1: Product: syz [ 691.073038][ T5984] usb 1-1: Manufacturer: syz [ 691.077966][ T5984] usb 1-1: SerialNumber: syz [ 691.202515][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 691.212005][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.222574][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.233599][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 691.254486][ T5900] wacom 0003:056A:0094.0020: ignoring exceeding usage max [ 691.262698][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.272505][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 691.282823][ T5900] wacom 0003:056A:0094.0020: Using device in hidraw-only mode [ 691.290876][ T10] usb 4-1: SerialNumber: syz [ 691.303813][ T5900] wacom 0003:056A:0094.0020: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 691.317073][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 691.326107][ T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 691.335706][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 691.347729][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.357004][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.369336][ T5951] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0 [ 691.378940][ T5951] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0 [ 691.386790][ T5951] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0 [ 691.394305][ T5951] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0 [ 691.402062][ T5951] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0 [ 691.468888][T11647] usb 5-1: USB disconnect, device number 67 [ 691.475261][ T5951] hid-picolcd 0003:04D8:C002.0021: No report with id 0x11 found [ 691.584435][ T10] usb 7-1: USB disconnect, device number 21 [ 692.113899][T13228] fuse: Unknown parameter '0x0000000000000005' [ 692.856763][T13231] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1987'. [ 693.437762][ T5900] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 693.626486][T13234] wg1 speed is unknown, defaulting to 1000 [ 693.736433][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 693.858388][ T5951] usb 4-1: USB disconnect, device number 62 [ 693.884756][ T5900] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 693.939224][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.948297][ T5900] usb 5-1: Product: syz [ 693.964426][ T5900] usb 5-1: Manufacturer: syz [ 693.969103][ T5900] usb 5-1: SerialNumber: syz [ 693.984228][ T5984] usb 1-1: USB disconnect, device number 88 [ 694.045026][ T5900] r8152-cfgselector 5-1: Unknown version 0x0000 [ 694.059684][ T5900] r8152-cfgselector 5-1: config 0 descriptor?? [ 694.975263][ T5900] r8152-cfgselector 5-1: Unknown version 0x0000 [ 695.008389][ T5900] r8152-cfgselector 5-1: bad CDC descriptors [ 695.069322][ T5900] r8152-cfgselector 5-1: USB disconnect, device number 68 [ 695.121748][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1994'. [ 695.131289][T13256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 695.139134][T13256] IPv6: NLM_F_CREATE should be set when creating new route [ 695.542750][ T5984] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 695.735072][ T5984] usb 1-1: Using ep0 maxpacket: 32 [ 695.744657][ T5984] usb 1-1: unable to get BOS descriptor or descriptor too short [ 695.756572][ T5984] usb 1-1: config 56 has an invalid interface number: 216 but max is 0 [ 695.765041][ T5984] usb 1-1: config 56 has no interface number 0 [ 695.771811][ T5984] usb 1-1: config 56 interface 216 has no altsetting 0 [ 695.809739][ T5984] usb 1-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 695.829878][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.862713][ T5984] usb 1-1: Product: syz [ 695.893672][ T5984] usb 1-1: Manufacturer: syz [ 695.949835][ T5984] usb 1-1: SerialNumber: syz [ 696.013148][ T5951] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 696.201682][ T5951] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 696.206978][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.217646][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.233605][ T5951] usb 5-1: Product: syz [ 696.239869][ T5951] usb 5-1: Manufacturer: syz [ 696.245680][ T5951] usb 5-1: SerialNumber: syz [ 696.248663][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.290381][ T5951] usb 5-1: config 0 descriptor?? [ 696.304688][ T5984] hub 1-1:56.216: bad descriptor, ignoring hub [ 696.320939][ T5951] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 696.331156][ T5984] hub 1-1:56.216: probe with driver hub failed with error -5 [ 696.371453][ T5984] option 1-1:56.216: GSM modem (1-port) converter detected [ 696.432057][ T5984] usb 1-1: USB disconnect, device number 89 [ 696.446175][ T5984] option 1-1:56.216: device disconnected [ 696.676025][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 696.889311][ T24] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 696.908787][ T24] usb 4-1: config 0 has no interface number 0 [ 696.927320][ T24] usb 4-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 696.960542][ T24] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 696.971238][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.985858][ T24] usb 4-1: Product: syz [ 696.991360][ T24] usb 4-1: Manufacturer: syz [ 696.996337][ T24] usb 4-1: SerialNumber: syz [ 697.010967][ T24] usb 4-1: config 0 descriptor?? [ 698.047512][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.434916][ T5951] usb 5-1: USB disconnect, device number 69 [ 699.460809][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.478115][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.486934][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.815971][ T24] esd_usb 4-1:0.45: sending version message failed [ 699.828921][ T24] esd_usb 4-1:0.45: probe with driver esd_usb failed with error -8 [ 699.884501][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 700.278632][ T24] usb 4-1: USB disconnect, device number 63 [ 701.959607][T13303] delete_channel: no stack [ 702.907102][T13321] delete_channel: no stack [ 704.297141][T13332] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 706.444631][T13344] /dev/nullb0: Can't open blockdev [ 706.650802][ T5900] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 707.123918][T13377] siw: device registration error -23 [ 707.344710][ T5900] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 707.376385][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.421728][ T5900] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 707.441737][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.505481][ T5900] usb 5-1: Product: syz [ 707.528231][ T5900] usb 5-1: Manufacturer: syz [ 707.548535][ T5900] usb 5-1: SerialNumber: syz [ 707.572091][ T5900] usb 5-1: config 0 descriptor?? [ 707.583162][ T5900] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 707.966169][T13385] sp1: Synchronizing with TNC [ 708.325308][T13394] overlayfs: failed to clone upperpath [ 708.368194][T13393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.931917][ T5900] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 709.349039][ T5900] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 709.397014][T13386] pim6reg1: entered promiscuous mode [ 709.419514][T13398] netlink: 'syz.3.2033': attribute type 23 has an invalid length. [ 709.445689][T13386] pim6reg1: entered allmulticast mode [ 709.621723][T13383] [U] [ 710.210428][T11647] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 710.532986][T11647] usb 7-1: device descriptor read/64, error -71 [ 710.751134][ T5951] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 710.827151][ T5984] usb 5-1: USB disconnect, device number 70 [ 710.833773][T11647] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 710.848080][T13407] delete_channel: no stack [ 710.927229][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 710.940519][T13420] siw: device registration error -23 [ 711.054911][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 711.062063][ T5951] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 711.105127][T11647] usb 7-1: device descriptor read/64, error -71 [ 711.123235][ T5951] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 711.168438][ T5951] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.180283][ T5951] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 711.191745][ T5951] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 711.250012][ T5951] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 711.259955][T11647] usb usb7-port1: attempt power cycle [ 711.275193][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.286865][ T5951] usb 1-1: Product: syz [ 711.292963][ T5951] usb 1-1: Manufacturer: syz [ 711.299421][ T5951] usb 1-1: SerialNumber: syz [ 711.376809][ T5951] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 711.397887][ T5951] imon 1-1:155.0: unable to initialize intf0, err -90 [ 711.406053][ T5951] imon:imon_probe: failed to initialize context! [ 711.711263][T13431] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 711.875919][ T5951] imon 1-1:155.0: unable to register, err -19 [ 712.046496][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.055963][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.180633][T13441] overlayfs: failed to clone upperpath [ 712.934967][T13455] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.047581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.669883][T13467] befs: (nbd3): No write support. Marking filesystem read-only [ 713.684938][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 713.696591][T13467] syz.3.2053: attempt to access beyond end of device [ 713.696591][T13467] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 713.712427][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2052'. [ 713.842363][T13471] siw: device registration error -23 [ 713.994830][ T5951] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 714.298271][T13480] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 714.588159][ T5951] usb 5-1: descriptor type invalid, skip [ 714.611924][ T5951] usb 5-1: No LPM exit latency info found, disabling LPM. [ 714.643493][ T5951] usb 5-1: config 1 interface 0 altsetting 248 endpoint 0x82 is Bulk; changing to Interrupt [ 714.646230][T13482] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2058'. [ 714.666457][T13482] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 714.675182][ T5951] usb 5-1: config 1 interface 0 altsetting 248 endpoint 0x3 is Bulk; changing to Interrupt [ 714.693576][ T5956] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 714.722240][T13484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2059'. [ 714.732108][ T5951] usb 5-1: config 1 interface 0 has no altsetting 0 [ 714.751074][ T5951] usb 5-1: string descriptor 0 read error: -22 [ 714.770557][ T5951] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.783434][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.813000][T13466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.827558][T13466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.949335][ T5951] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 714.970667][ T5956] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 714.983292][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.006874][ T5956] usb 7-1: config 0 descriptor?? [ 715.024323][ T5956] cp210x 7-1:0.0: cp210x converter detected [ 715.118603][ T5951] usb 5-1: USB disconnect, device number 71 [ 715.281381][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.301641][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.663165][ T5951] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 715.729474][T13507] netlink: 'syz.3.2066': attribute type 10 has an invalid length. [ 715.887303][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 715.973807][ T5956] usb 7-1: cp210x converter now attached to ttyUSB0 [ 715.976982][ T5951] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.987292][ T5956] usb 7-1: USB disconnect, device number 25 [ 716.054455][ T5951] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 716.094070][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 716.146831][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.151764][ T5956] cp210x 7-1:0.0: device disconnected [ 716.157988][ T5951] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 716.176682][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.257770][ T5951] usb 5-1: config 0 descriptor?? [ 716.330421][T13509] siw: device registration error -23 [ 716.479045][T13515] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2068'. [ 716.488711][T13515] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2068'. [ 717.110362][T13521] befs: (nullb0): invalid magic header [ 717.131632][T13498] Invalid logical block size (3) [ 717.360629][T13529] netlink: 'syz.3.2071': attribute type 3 has an invalid length. [ 717.368745][T13529] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2071'. [ 717.450496][T13531] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2072'. [ 717.805864][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 717.859127][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 718.090522][ T5951] usb 5-1: USB disconnect, device number 72 [ 718.493719][T13551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2078'. [ 719.489742][T13564] siw: device registration error -23 [ 720.338358][T13576] sg_write: data in/out 768/206 bytes for SCSI command 0x0-- guessing data in; [ 720.338358][T13576] program syz.6.2085 not setting count and/or reply_len properly [ 722.439263][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 723.181362][ T5900] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 723.409030][T13596] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 723.439393][ T5900] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 723.521810][ T5900] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 723.594831][ T5900] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.635669][ T5900] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 723.656203][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 723.691333][ T5900] usb 7-1: Product: syz [ 723.706873][ T5900] usb 7-1: Manufacturer: syz [ 723.711575][ T5900] usb 7-1: SerialNumber: syz [ 723.733610][ T30] audit: type=1326 audit(2000000152.032:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13603 comm="syz.3.2096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ccf8ebe9 code=0x0 [ 723.819951][T13609] siw: device registration error -23 [ 723.922704][T13607] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 723.955864][ T5900] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 724.188738][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.220807][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.300935][ T5900] usb 7-1: USB disconnect, device number 26 [ 724.328731][ T5900] usblp0: removed [ 725.332672][T13636] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2105'. [ 726.004132][ T30] audit: type=1326 audit(2000000153.501:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ccf8ebe9 code=0x7ffc0000 [ 726.046761][ T30] audit: type=1326 audit(2000000153.501:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ccf8d550 code=0x7ffc0000 [ 726.103692][ T30] audit: type=1326 audit(2000000153.510:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f35ccf90417 code=0x7ffc0000 [ 726.146161][ T30] audit: type=1326 audit(2000000153.510:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35ccf8ebe9 code=0x7ffc0000 [ 726.184774][T13640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2107'. [ 726.217222][ T30] audit: type=1326 audit(2000000153.519:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f35ccf90417 code=0x7ffc0000 [ 726.266794][ T30] audit: type=1326 audit(2000000153.519:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f35ccf8d84a code=0x7ffc0000 [ 726.382979][ T30] audit: type=1326 audit(2000000153.519:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ccf8ebe9 code=0x7ffc0000 [ 726.748088][ T30] audit: type=1326 audit(2000000153.519:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f35ccf8ebe9 code=0x7ffc0000 [ 727.051185][ T30] audit: type=1326 audit(2000000153.519:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ccf8ebe9 code=0x7ffc0000 [ 727.556480][T13666] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 727.558217][T13667] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 728.424023][T13674] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2114'. [ 728.449313][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 729.348164][T13682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.260316][T13686] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 730.295088][T13683] binder_alloc: 13676: binder_alloc_buf size 12280 failed, no address space [ 730.305231][T13683] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 730.556984][T13682] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 732.016134][T13697] delete_channel: no stack [ 733.149336][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.163935][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.536630][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.549037][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.965234][T13711] delete_channel: no stack [ 736.480371][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2131'. [ 736.741855][T13752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 737.172091][ T24] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 737.232559][T13764] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 738.091600][ T5951] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 738.293994][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.342527][ T5951] usb 4-1: device descriptor read/64, error -71 [ 738.357698][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.404216][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.422881][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.442124][ T24] usb 5-1: Product: syz [ 738.485776][ T24] usb 5-1: Manufacturer: syz [ 738.513299][ T24] usb 5-1: SerialNumber: syz [ 738.640913][ T5951] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 738.701381][T13768] batman_adv: batadv0: Adding interface: ipvlan2 [ 738.717587][T13768] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.758637][T13768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.783179][ T24] usb 5-1: 0:2 : does not exist [ 738.807849][T13768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.808696][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 738.821014][T13768] batman_adv: batadv0: Interface activated: ipvlan2 [ 738.832869][ T5951] usb 4-1: device descriptor read/64, error -71 [ 738.855556][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 738.948045][ T5951] usb usb4-port1: attempt power cycle [ 738.965888][ T24] usb 5-1: USB disconnect, device number 73 [ 739.380976][ T5951] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 739.439966][ T5951] usb 4-1: device descriptor read/8, error -71 [ 739.762013][ T5951] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 739.948797][ T5951] usb 4-1: device descriptor read/8, error -71 [ 740.080754][ T5951] usb usb4-port1: unable to enumerate USB device [ 740.646355][ T5939] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 740.806968][ T5939] usb 7-1: Using ep0 maxpacket: 16 [ 740.824260][ T5939] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 740.834164][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.842499][ T5939] usb 7-1: Product: syz [ 740.847145][ T5939] usb 7-1: Manufacturer: syz [ 740.851654][ T5951] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 740.851936][ T5939] usb 7-1: SerialNumber: syz [ 740.868653][ T5939] usb 7-1: config 0 descriptor?? [ 740.880309][ T5939] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 741.031275][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 741.048256][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 741.060207][ T5951] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 741.070343][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.091454][ T5951] usb 4-1: config 0 descriptor?? [ 741.677644][ T5939] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 742.237181][T13816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2145'. [ 742.271981][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.296165][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.321018][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2150'. [ 742.448651][ T5951] usb 4-1: string descriptor 0 read error: -71 [ 742.485855][ T5951] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 742.526098][ T5191] bcm5974 4-1:0.0: could not read from device [ 742.551183][ T5191] bcm5974 4-1:0.0: could not read from device [ 742.586842][ T5951] usb 4-1: USB disconnect, device number 68 [ 742.596139][ T5191] bcm5974 4-1:0.0: could not read from device [ 742.955540][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 743.251599][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 743.326157][ T24] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 743.490257][ T24] usb 5-1: Product: syz [ 743.528113][ T24] usb 5-1: Manufacturer: syz [ 743.546088][ T24] usb 5-1: SerialNumber: syz [ 743.575646][ T5900] usb 7-1: USB disconnect, device number 27 [ 743.593344][ T24] usb 5-1: config 0 descriptor?? [ 743.640295][ T24] ch341 5-1:0.0: ch341-uart converter detected [ 743.700515][T13836] netlink: 'syz.6.2157': attribute type 10 has an invalid length. [ 743.742408][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.753647][T13836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 743.766722][T13836] netlink: 'syz.6.2157': attribute type 10 has an invalid length. [ 743.777995][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2157'. [ 743.794408][T13836] batadv0: entered promiscuous mode [ 743.799695][T13836] batadv0: entered allmulticast mode [ 743.807083][T13836] bond0: (slave batadv0): Releasing backup interface [ 743.838491][T13836] bridge0: port 3(batadv0) entered blocking state [ 743.857095][ T24] usb 5-1: failed to receive control message: -121 [ 743.865605][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 743.887418][T13836] bridge0: port 3(batadv0) entered disabled state [ 744.015797][T13847] sctp: [Deprecated]: syz.3.2159 (pid 13847) Use of int in max_burst socket option deprecated. [ 744.015797][T13847] Use struct sctp_assoc_value instead [ 744.079411][ T24] usb 5-1: USB disconnect, device number 74 [ 744.087251][ T24] ch341 5-1:0.0: device disconnected [ 744.103992][T13854] netlink: 'syz.6.2162': attribute type 1 has an invalid length. [ 744.117156][T13854] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2162'. [ 744.315686][ T9073] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 744.325660][ T9073] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 745.086051][T13882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 745.193195][T13882] ------------[ cut here ]------------ [ 745.199359][T13882] WARNING: CPU: 0 PID: 13882 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 745.209791][T13882] Modules linked in: [ 745.214212][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.6.2168 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 745.224274][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.235124][T13882] RIP: 0010:folio_memcg+0x1a8/0x310 [ 745.240858][T13882] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 745.250332][T13885] /dev/sg0: Can't lookup blockdev [ 745.260554][T13882] RSP: 0018:ffffc900159b7250 EFLAGS: 00010283 [ 745.260615][T13882] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 745.260634][T13882] RDX: ffffc9000c7ac000 RSI: 00000000000031db RDI: 00000000000031dc [ 745.288762][T13882] RBP: 0000000000000000 R08: ffffea0000c93707 R09: 1ffffd40001926e0 [ 745.297472][T13882] R10: dffffc0000000000 R11: fffff940001926e1 R12: ffffea0000c93730 [ 745.305493][T13882] R13: dffffc0000000000 R14: ffff888077303400 R15: 0000000000000002 [ 745.313563][T13882] FS: 00007f59aa5f66c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 745.322582][T13882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.329309][T13882] CR2: 0000000000000000 CR3: 000000005c944000 CR4: 00000000003526f0 [ 745.337327][T13882] Call Trace: [ 745.340687][T13882] [ 745.344078][T13882] workingset_activation+0x5f/0x4a0 [ 745.349347][T13882] ? folio_mark_accessed+0x361/0x4a0 [ 745.355001][T13882] folio_mark_accessed+0x3b5/0x4a0 [ 745.360180][T13882] kvm_release_page_clean+0x9a/0xe0 [ 745.365474][T13882] kvm_tdp_page_fault+0x2dd/0x370 [ 745.370543][T13882] kvm_mmu_do_page_fault+0x2c5/0x640 [ 745.376330][T13882] ? vmx_vcpu_run+0xd8b/0x25d0 [ 745.381129][T13882] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 745.387243][T13882] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 745.392833][T13882] kvm_mmu_page_fault+0x22f/0xb70 [ 745.398402][T13882] ? __pfx_handle_ept_violation+0x10/0x10 [ 745.404559][T13882] vmx_handle_exit+0x1090/0x18a0 [ 745.409601][T13882] ? vcpu_run+0x361c/0x6f70 [ 745.414133][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.418950][T13882] vcpu_run+0x432e/0x6f70 [ 745.423315][T13882] ? vcpu_run+0x361c/0x6f70 [ 745.428011][T13882] ? __pfx_vcpu_run+0x10/0x10 [ 745.432718][T13882] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 745.438501][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.443288][T13882] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 745.448913][T13882] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 745.454958][T13882] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 745.461347][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.466130][T13882] ? look_up_lock_class+0x74/0x170 [ 745.471303][T13882] ? register_lock_class+0x51/0x320 [ 745.476528][T13882] ? __lock_acquire+0xab9/0xd20 [ 745.481472][T13882] kvm_vcpu_ioctl+0x95c/0xe90 [ 745.486200][T13882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 745.491527][T13882] ? __lock_acquire+0xab9/0xd20 [ 745.496435][T13882] ? __asan_memset+0x22/0x50 [ 745.501102][T13882] ? smack_file_ioctl+0x302/0x340 [ 745.506638][T13882] ? __pfx_smack_file_ioctl+0x10/0x10 [ 745.512467][T13882] ? __fget_files+0x2a/0x420 [ 745.517082][T13882] ? __fget_files+0x3a0/0x420 [ 745.521805][T13882] ? __fget_files+0x2a/0x420 [ 745.526411][T13882] ? bpf_lsm_file_ioctl+0x9/0x20 [ 745.531404][T13882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 745.536687][T13882] __se_sys_ioctl+0xfc/0x170 [ 745.541317][T13882] do_syscall_64+0xfa/0x3b0 [ 745.545964][T13882] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.551208][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.557399][T13882] ? clear_bhb_loop+0x60/0xb0 [ 745.562586][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.568938][T13882] RIP: 0033:0x7f59ac38ebe9 [ 745.573375][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.593170][T13882] RSP: 002b:00007f59aa5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.601653][T13882] RAX: ffffffffffffffda RBX: 00007f59ac5b5fa0 RCX: 00007f59ac38ebe9 [ 745.609755][T13882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 745.618500][T13882] RBP: 00007f59ac411e19 R08: 0000000000000000 R09: 0000000000000000 [ 745.627145][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.635221][T13882] R13: 00007f59ac5b6038 R14: 00007f59ac5b5fa0 R15: 00007ffe6ef08ce8 [ 745.643374][T13882] [ 745.646441][T13882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 745.653793][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.6.2168 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 745.663824][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.674186][T13882] Call Trace: [ 745.677615][T13882] [ 745.680593][T13882] dump_stack_lvl+0x99/0x250 [ 745.685227][T13882] ? __asan_memcpy+0x40/0x70 [ 745.689870][T13882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.695100][T13882] ? __pfx__printk+0x10/0x10 [ 745.699732][T13882] panic+0x2db/0x790 [ 745.703664][T13882] ? __pfx_panic+0x10/0x10 [ 745.708126][T13882] __warn+0x31b/0x4b0 [ 745.712131][T13882] ? folio_memcg+0x1a8/0x310 [ 745.716788][T13882] ? folio_memcg+0x1a8/0x310 [ 745.721443][T13882] report_bug+0x2be/0x4f0 [ 745.725798][T13882] ? folio_memcg+0x1a8/0x310 [ 745.730431][T13882] ? folio_memcg+0x1a8/0x310 [ 745.735052][T13882] ? folio_memcg+0x1aa/0x310 [ 745.739682][T13882] handle_bug+0x84/0x160 [ 745.743969][T13882] exc_invalid_op+0x1a/0x50 [ 745.748679][T13882] asm_exc_invalid_op+0x1a/0x20 [ 745.753560][T13882] RIP: 0010:folio_memcg+0x1a8/0x310 [ 745.758792][T13882] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 745.778515][T13882] RSP: 0018:ffffc900159b7250 EFLAGS: 00010283 [ 745.784610][T13882] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 745.792613][T13882] RDX: ffffc9000c7ac000 RSI: 00000000000031db RDI: 00000000000031dc [ 745.800610][T13882] RBP: 0000000000000000 R08: ffffea0000c93707 R09: 1ffffd40001926e0 [ 745.808610][T13882] R10: dffffc0000000000 R11: fffff940001926e1 R12: ffffea0000c93730 [ 745.816623][T13882] R13: dffffc0000000000 R14: ffff888077303400 R15: 0000000000000002 [ 745.824639][T13882] ? folio_memcg+0x1a7/0x310 [ 745.829273][T13882] workingset_activation+0x5f/0x4a0 [ 745.834496][T13882] ? folio_mark_accessed+0x361/0x4a0 [ 745.839818][T13882] folio_mark_accessed+0x3b5/0x4a0 [ 745.844968][T13882] kvm_release_page_clean+0x9a/0xe0 [ 745.850194][T13882] kvm_tdp_page_fault+0x2dd/0x370 [ 745.855293][T13882] kvm_mmu_do_page_fault+0x2c5/0x640 [ 745.860604][T13882] ? vmx_vcpu_run+0xd8b/0x25d0 [ 745.865398][T13882] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 745.871247][T13882] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 745.876831][T13882] kvm_mmu_page_fault+0x22f/0xb70 [ 745.881895][T13882] ? __pfx_handle_ept_violation+0x10/0x10 [ 745.887645][T13882] vmx_handle_exit+0x1090/0x18a0 [ 745.892616][T13882] ? vcpu_run+0x361c/0x6f70 [ 745.897170][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.901966][T13882] vcpu_run+0x432e/0x6f70 [ 745.906338][T13882] ? vcpu_run+0x361c/0x6f70 [ 745.910905][T13882] ? __pfx_vcpu_run+0x10/0x10 [ 745.915619][T13882] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 745.921378][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.926165][T13882] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 745.931759][T13882] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 745.937507][T13882] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 745.943517][T13882] ? rcu_is_watching+0x15/0xb0 [ 745.948319][T13882] ? look_up_lock_class+0x74/0x170 [ 745.953461][T13882] ? register_lock_class+0x51/0x320 [ 745.958692][T13882] ? __lock_acquire+0xab9/0xd20 [ 745.963584][T13882] kvm_vcpu_ioctl+0x95c/0xe90 [ 745.968386][T13882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 745.973608][T13882] ? __lock_acquire+0xab9/0xd20 [ 745.978514][T13882] ? __asan_memset+0x22/0x50 [ 745.983134][T13882] ? smack_file_ioctl+0x302/0x340 [ 745.988176][T13882] ? __pfx_smack_file_ioctl+0x10/0x10 [ 745.993571][T13882] ? __fget_files+0x2a/0x420 [ 745.998185][T13882] ? __fget_files+0x3a0/0x420 [ 746.002976][T13882] ? __fget_files+0x2a/0x420 [ 746.007601][T13882] ? bpf_lsm_file_ioctl+0x9/0x20 [ 746.012563][T13882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 746.017789][T13882] __se_sys_ioctl+0xfc/0x170 [ 746.022406][T13882] do_syscall_64+0xfa/0x3b0 [ 746.026940][T13882] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.032156][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.038258][T13882] ? clear_bhb_loop+0x60/0xb0 [ 746.042956][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.048867][T13882] RIP: 0033:0x7f59ac38ebe9 [ 746.053325][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.072961][T13882] RSP: 002b:00007f59aa5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.081489][T13882] RAX: ffffffffffffffda RBX: 00007f59ac5b5fa0 RCX: 00007f59ac38ebe9 [ 746.089475][T13882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 746.097459][T13882] RBP: 00007f59ac411e19 R08: 0000000000000000 R09: 0000000000000000 [ 746.105449][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.113437][T13882] R13: 00007f59ac5b6038 R14: 00007f59ac5b5fa0 R15: 00007ffe6ef08ce8 [ 746.121547][T13882] [ 746.124846][T13882] Kernel Offset: disabled [ 746.129201][T13882] Rebooting in 86400 seconds..