last executing test programs: 17m2.025058716s ago: executing program 4 (id=756): syz_emit_ethernet(0x7c, &(0x7f0000001440)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe, [0x55]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002100)=0x1) r2 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000002240)={0x10000001}) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8744, 0x7fffffff, 0x80}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x8001, 0x200}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r3, 0x9, 0x4, 0x1ff, 0x1, 0xa, 0x8, 0x3, {r4, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x376452ff, 0x769f, 0x3, 0x80800001}}, &(0x7f00000001c0)=0xb0) 17m1.574045234s ago: executing program 4 (id=759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00000010001ffffcffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100677265746170000034000280060010004e240000050009000600000008000700ac1414aa05000a000000000006000e00030000000800150093550a0008000a00", @ANYRES32=r3], 0x6c}}, 0x0) 17m1.123200851s ago: executing program 4 (id=761): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88e83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0x0, 0x4a9}]}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bffffd, 0x13012, r1, 0x0) unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x408302, 0x0, 0x30}, 0x18) syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003c3fe5d08c016df05166b0102030109021b00010707200009044300010300000209058a1308000307db774a10eb7f23be175dbf7b4200532f8ea36f2d54375c7af095265f9e16fdfde3637472614f5327c8f94fe3595c84521ced3e2beebb27ed3131a3c70f7e25ce6eeee16b52c2a602b1f6dec830e3d70a1d19d91134b3eb1915d09105e3bf3a284068fa585d6db093ee667246bd83d6d94812bf94ca20c4132e484cb72cc472a02d5f", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000040)) 17m0.182462874s ago: executing program 4 (id=772): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x80000001]}}) r4 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 16m57.888182992s ago: executing program 4 (id=781): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000080ffffff000000000000000a004000", @ANYRES32=0xee01], 0xb8}}, 0x0) 16m57.093646076s ago: executing program 4 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000e5dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c210280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 16m56.527672064s ago: executing program 32 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000e5dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c210280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 15m49.487741878s ago: executing program 1 (id=1124): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000001440)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}}, 0x0) (fail_nth: 2) 15m48.929953956s ago: executing program 1 (id=1129): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8c", 0x1}]) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x36, &(0x7f0000000000)=""/54}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)={0xd4, r10, 0xf1aad47e89fb45b7, 0x0, 0x8000400, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8e, 0xa8, @random="77302073faaa81c5bd55fa8c83c8dab9a18570c800a7553ccd81ef9f3f0d574847f5058b1906c1f8d79e5586073c2eaab5d7ceb958a1b065c2bde281817acd167702c1bd3af737157baf56ca17630b18cab5a129025122e06ba6b27ecb18cd0011bbd015e7caa5ec2d3ec92f8d5a70e9dc8eb06bfb39afbdb76662eca26bf408bad283ed1c7acfd1f128"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000040) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x1000, 0x0, @private1, 0x6}}, {{0xa, 0x0, 0x7, @private2, 0xfffffff8}}}, 0x104) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 15m47.131881876s ago: executing program 1 (id=1140): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}], {0x95, 0x0, 0x90}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m46.990655969s ago: executing program 1 (id=1142): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000001440)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}}, 0x0) 15m46.494929039s ago: executing program 1 (id=1145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x110, 0x940c, 0x3002, 0x0, 0x2c0, 0x20c, 0x3d8, 0x3d8, 0x20c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffff00], 'syz_tun\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@inet=@set2={{0x24}, {{0x0, 0x6, 0x1}}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xab0e}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {0x20010000}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0x1, 0x4, 0x7}, 0x0, 0x1000}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) 15m46.028927275s ago: executing program 1 (id=1146): syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x502, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa0000006) (async) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa0000006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) eventfd2(0x2, 0x80800) (async) eventfd2(0x2, 0x80800) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0xc000850}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r7) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000040)={0x200000, 0x0, 0x29}, 0x18) close(0x3) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGETKEYCODE(r8, 0x4b4c, &(0x7f0000000080)={0x541, 0xfffffffb}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) socket$pppoe(0x18, 0x1, 0x0) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f00000001c0)) 15m30.931323815s ago: executing program 33 (id=1146): syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x502, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa0000006) (async) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0xa0000006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) eventfd2(0x2, 0x80800) (async) eventfd2(0x2, 0x80800) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0xc000850}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r7) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000040)={0x200000, 0x0, 0x29}, 0x18) close(0x3) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGETKEYCODE(r8, 0x4b4c, &(0x7f0000000080)={0x541, 0xfffffffb}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) socket$pppoe(0x18, 0x1, 0x0) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f00000001c0)) 5m28.59839856s ago: executing program 0 (id=4127): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x11c, 0xb, 0xd0e0011, 0x11c, 0xc6, 0x1ac, 0x1d8, 0x190, 0x1ac, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0xd4, 0x11c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xffffffff}}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x9001, 0x70, 0x94}, {0x24}}}}, 0x29c) 5m28.427825824s ago: executing program 0 (id=4128): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 5m28.144850623s ago: executing program 0 (id=4131): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xde9, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "54cefc", 0x4, 0x2f, 0x1, @local, @local, {[], "b760c2f6"}}}}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x344, &(0x7f0000000200)=ANY=[@ANYBLOB="d700004e474da80cd35a548252f12fde36777dd581b1a4de07a37768c269ceccc2748ff3b8818e184241f0580be66b6c449f95b15819621ae31f6755816ff3f4c966efb4cb781e2057bda0e683d9aa4152e354eb822dfd8b32a1300496b073f894a8dc069855f9aa73da8f4562bbef58173c9a7be8890981b78f42786258357332231bdab38cf9b50132fe7f624d7977efb0b41e9f3b4ce84fdd248a6cb6a4f1e5e8f6e1d38dbaf2187ade748844806e7d01dc043a8c644d43fbb356634937139b9df9f70998be275a6df990d65bc42fe38d903d3a582e3e5f306000f800004e2d63"]) syz_usb_disconnect(r1) 5m24.973004305s ago: executing program 0 (id=4153): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000300)={0x18, r5, 0x100000001}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x2, 0x1, 0x19, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a940091f8c7211fe1406584ae7df4af14e1df82d00", [0x7b, 0xd]}) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) io_setup(0x77f, &(0x7f0000000240)=0x0) io_destroy(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 5m23.899302245s ago: executing program 0 (id=4158): openat$kvm(0xffffff9c, &(0x7f0000000080), 0x101200, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640), 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_emit_ethernet(0xfb5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 5m23.521103698s ago: executing program 0 (id=4160): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201200200000040ac055202400001020301090224000101060002090400050203010308092120000701226902090581f621"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 5m22.62963249s ago: executing program 34 (id=4160): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201200200000040ac055202400001020301090224000101060002090400050203010308092120000701226902090581f621"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 5m15.163809371s ago: executing program 3 (id=4184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00000010001ffffcffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="00dc050000000000440012800b000100677265746170000034000280060010004e240000050009000600000008000700ac1414aa05000a000000000006000e00030000000800150093550a0008000a00", @ANYRES32=r3], 0x6c}}, 0x0) 5m14.243639209s ago: executing program 3 (id=4186): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x77359400}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000840)={0xe, {0x7, 0x0, 0x5, 0x8}}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r3, &(0x7f0000000200)) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'geneve1\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r9, 0x0, 0x80, 0x4) read(r6, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000380)=ANY=[], 0x45) r10 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000180)=""/22, 0x16}], 0x2, 0x8, 0x0) mbind(&(0x7f00009ce000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x2) 5m13.280912031s ago: executing program 3 (id=4188): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$inet(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x2, 0x2, 0xdd, 0xdd6, 0x3, 0x1, 0x81}, &(0x7f0000000200)={0x3, 0x100000001, 0xfffffffffffffffe, 0xffff, 0x10, 0x8, 0x2, 0x7ff}, &(0x7f0000000240)={0x0, 0x0, 0x3eea, 0x800, 0x6, 0x1452, 0x2, 0x78b7}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xf, 0x5]}, 0x8}) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000330001600326bd70fcdbdf2503"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @private=0xa010102, @rand_addr=0x64010100]}, 0x24) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) 5m13.219547584s ago: executing program 3 (id=4189): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000300)={0x18, r5, 0x100000001}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x2, 0x1, 0x19, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a940091f8c7211fe1406584ae7df4af14e1df82d00", [0x7b, 0xd]}) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) io_setup(0x77f, &(0x7f0000000240)=0x0) io_destroy(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 5m12.754023058s ago: executing program 3 (id=4192): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5m12.058898581s ago: executing program 3 (id=4195): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8c", 0x1}]) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x36, &(0x7f0000000000)=""/54}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040841}, 0x4000040) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x1000, 0x0, @private1, 0x6}}, {{0xa, 0x0, 0x7, @private2, 0xfffffff8}}}, 0x104) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 5m11.379540287s ago: executing program 35 (id=4195): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8c", 0x1}]) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x36, &(0x7f0000000000)=""/54}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040841}, 0x4000040) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x1000, 0x0, @private1, 0x6}}, {{0xa, 0x0, 0x7, @private2, 0xfffffff8}}}, 0x104) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 1m50.72086625s ago: executing program 2 (id=4962): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="0b036c00e0ff64000200475400f6a13bb10000000800884748031c16908a054c2804d479290cb8f1255abde7ab111a6881a27db71dee06e376835d59fa3bc05f012c775c143ff20ccf4df39693f78881e113f835b9b9204edf98bdd4521dd7b76470e957e3d3f09f16b09a386c4f752b9c2e722842", 0x75, 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000beda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m50.29489594s ago: executing program 2 (id=4965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0xf694, 0x10100, 0x0, 0x168, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) syz_emit_ethernet(0x22, &(0x7f00000002c0)={@link_local, @random="000200", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x30, 0x14, 0x67, 0x0, 0xba, 0x73, 0x0, @private=0xa010101, @remote}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10], 0x2c}}, 0x0) r11 = memfd_create(&(0x7f0000000080), 0x0) splice(r6, 0x0, r11, 0x0, 0x408cd, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r14 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r14, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r14, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r15 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r15, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r12, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m47.687263326s ago: executing program 7 (id=4976): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13980300231a0500580012800b00010069703667726500004800068014000700ff0200d7000000000000003d9df794148bb7c7710b9196000000000108000d00a6000000080015009b19050005000b0000000441cd5979e972145372e4c4c6762cc5fa37690a81728904803b170d0e7fb999354729265a485d47906c8535c6a777edd073585a4394dafa0fa4d2ffb60be1db0ad89aec1d2807aab98efd6ef1c9a2190304a044cc542f2252ea6d354b57ea06ac6d1cfafbf5e3cdaf0deeecb780fbf527f37b21a835", @ANYRES32=0x0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000640)={0x0, {{0xa, 0x4e24, 0xab, @private0, 0x7}}, {{0xa, 0x4e20, 0x800, @local, 0xfffffffd}}}, 0x104) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xf) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000040)=0xfffffffb, 0x0, 0x4) 1m47.566281721s ago: executing program 7 (id=4977): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 1m47.400648088s ago: executing program 7 (id=4979): capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x30}}, 0x40) 1m47.193769691s ago: executing program 7 (id=4980): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="0b036c00e0ff64000200475400f6a13bb10000000800884748031c16908a054c2804d479290cb8f1255abde7ab111a6881a27db71dee06e376835d59fa3bc05f012c775c143ff20ccf4df39693f78881e113f835b9b9204edf98bdd4521dd7b76470e957e3d3f09f16b09a386c4f752b9c2e722842", 0x75, 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000ffee00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m46.984195247s ago: executing program 7 (id=4981): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103901) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042844}, 0x44895) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x9, 0x36, 0x540, 0x6, 0x9, 0xd95}) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000fa43"], 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000140)={@mcast2}, &(0x7f0000000200)=0x14) dup3(0xffffffffffffffff, r3, 0x0) 1m46.983883109s ago: executing program 6 (id=4982): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00000010001ffffcffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="00ffffffef000000440012800b000100677265746170000034000280060010004e240000050009000600000008000700ac1414aa05000a000000000006000e00030000000800150093550a0008000a00", @ANYRES32=r3], 0x6c}}, 0x0) 1m46.920743878s ago: executing program 2 (id=4983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@jmp={0x5, 0x1, 0xd, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5d, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0xc841, 0x7, 0x1, {0x22, 0x23a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0x8, 0x10, 0x8, 0x6}, 0x1c, &(0x7f0000000240)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x6, 0xf0f, 0x7, [0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x6, 0x9}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x186a}}, {0x85, &(0x7f0000000300)=@string={0x85, 0x3, "2de16bacd27bfce6e11400d550f26145474d9c64e9ed1462d007c815a50469ad395d929123be6565edc45ec7469069892f6858bea18d02ea9f02698953b394c557f734b7ed5b7f722bdb8dd231979e4b84be711982c9eafce0df2972af8b63c176a027a5096ebc1b70624a1a928ccf194c4ce9ee89b31af67030905feb92f1e171edc5"}}, {0xa3, &(0x7f0000000400)=@string={0xa3, 0x3, "74a64dd93436e90c4b8de5788dbafd15090d3e4efcc8f8ba88243d9e3aa5c9fa7e27ca76b216679f64f86d935f88155ac673a076218e4cd4dae6c527b81c033168464cbddae82206b9f02367d18db7244552986b104ea2d7bc1e09dbd4ad05351aa1cc8131d5b071675c6740198e36d75028cb977a6e9fc468deb0055856aa936ec7b4e22f9ff44557dce9aeb8e446297c8e48ac9d8c3dc9aee444b82f8915772d"}}, {0xdd, &(0x7f00000004c0)=@string={0xdd, 0x3, "5e8cd6a1c4974871648fd09edb03d0184a9a60818f3a60b999f13dcf1b71ea15dc4c9beaf66117fefea575007cd850ecd0bcb0330c62de1a0ec607711d9a8a40b3d31cd7b41b6da25581538bdcd1f85829ef13ea03c380fbe82bdc0855323e28b633ff73211a2287ffff7ba5e78be1ee8c5c5ddf8278e20d729c74414928527818a7d9ad1398791f35d2d10aaafcae8b2e2b3022e030eb94ead8652e47a189a535206036aea18f0da50613439e1b0278eb098e67cb09cd5571164cb038fe31b5b6973b5fa128c69d87dd7748f15b88dd3e8a83f23bc6961561b1d9"}}, {0xd7, &(0x7f00000005c0)=@string={0xd7, 0x3, "5b1f3c4014ebb8c2b970170d8d69d00a49795a645d5102a43f107cc47a80a9153fccf22fc34affe5970e03e135a7b905c3209c4f2b8f50f3a6c18582006d4ee1a74577ad6d2b4bf832ad26162e49d881f8092d0696c8dc14e5dfb976d6cdcbb13117094d98f650f27ddfcecf87c29ef3eded31ae69d7d9d3084346b153236262e158576ca8a55182e5882e4691a9e5d3ee0e2a342a0f76a1fa2adb097718228039111acff90541cd0a537c9db4f8b4b5398e4800531d06363aa6341b243c887ea47a7819106ae4058a5a08f58d32337a87a70d267a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41a}}]}) 1m46.586051809s ago: executing program 6 (id=4987): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="0b036c00e0ff64000200475400f6a13bb10000000800884748031c16908a054c2804d479290cb8f1255abde7ab111a6881a27db71dee06e376835d59fa3bc05f012c775c143ff20ccf4df39693f78881e113f835b9b9204edf98bdd4521dd7b76470e957e3d3f09f16b09a386c4f752b9c2e722842", 0x75, 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m46.433508416s ago: executing program 6 (id=4988): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13980300231a0500580012800b00010069703667726500004800068014000700ff0200d7000000000000003d9df794148bb7c7710b9196000000000108000d00a6000000080015009b19050005000b0000000441cd5979e972145372e4c4c6762cc5fa37690a81728904803b170d0e7fb999354729265a485d47906c8535c6a777edd073585a4394dafa0fa4d2ffb60be1db0ad89aec1d2807aab98efd6ef1c9a2190304a044cc542f2252ea6d354b57ea06ac6d1cfafbf5e3cdaf0deeecb780fbf527f37b21a835", @ANYRES32=0x0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000640)={0x0, {{0xa, 0x4e24, 0xab, @private0, 0x7}}, {{0xa, 0x4e20, 0x800, @local, 0xfffffffd}}}, 0x104) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xf) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000040)=0xfffffffb, 0x0, 0x4) 1m45.53806922s ago: executing program 6 (id=4999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x50bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x5}, 0x400, 0x0, 0x0, 0x1, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000001100000001"], 0xfdef) 1m45.245591679s ago: executing program 8 (id=4992): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f38"], 0x178) (async) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) (async) close(r2) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async, rerun: 32) munlockall() (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16=0x0, @ANYBLOB="d58ebbce8a325b58494c81398c4e257b748291e1419dcae28daf4ff4c79c4982af7cf3c734940ef6b0a8923eca003b0708a7be90d9bf27bd44ef04fd9ceb4d5f2b674a123d88e0bb5fb4e3f3b24aff628be3327694865a5a1173094530008e440ca31e293cfcdbfeb99086eca2c7ddb62b3d7334f9c6ad458b483af3ab5f3d01461c85f0890d18a83977d2e85b39c1276b88086cf1d63fe75a1a9745"], 0x44}, 0x1, 0x0, 0x0, 0x200008d4}, 0x4014) 1m45.234271832s ago: executing program 6 (id=4993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x50bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x5}, 0x400, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082100fe88a43de1a400000000000000007d01ff020000000000000000000000030001"], 0xfdef) 1m45.066998175s ago: executing program 8 (id=4994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x7fa0, &(0x7f0000000180)={0x0, 0xec80, 0x40, 0x2, 0x380}) r3 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x41998, 0x400, 0x2000006, 0x315, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) kcmp(0x0, 0xffffffffffffffff, 0x4, r0, r0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e22, 0x54, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}, 0x7, 0x4, 0x3, 0x71, 0x58, 0x5, 0x4}, 0x9c) 1m44.832561931s ago: executing program 6 (id=4995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000000300000000, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8805) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x24008071}, 0x20008041) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020022", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{0x7f, 0x24, 0x3}, {0x101, 0x9, 0x40, 0x6}, {0xffff, 0x3, 0x8a, 0x7763c7e6}, {0x7fff, 0x8, 0xb8, 0x5}, {0xadae, 0xac, 0xe, 0x7}, {0x400, 0x8, 0x3, 0x55}, {0x5, 0x7, 0x1, 0x1ff}, {0x5, 0x81, 0xb, 0x3}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 1m44.088688666s ago: executing program 8 (id=4996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) syz_emit_ethernet(0x25e, &(0x7f0000000400)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x228, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x2}]}, @srh={0x32, 0xe, 0x4, 0x7, 0x8, 0x0, 0x7, [@dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x1d}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00', @loopback, @rand_addr=' \x01\x00']}, @srh={0x0, 0xe, 0x4, 0x7, 0x71, 0x30, 0x7f, [@remote, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}, @fragment={0x32, 0x0, 0x20, 0x1, 0x0, 0x6, 0x66}, @hopopts={0x73, 0x15, '\x00', [@generic={0x57, 0x99, "85061955c7471cc3e05f8527ccff46c49fc432c529d00888dff87a6d55f9e28e14bf5224b573d8a98634d3876d0250b63f7cdf1b5d70782387f874d354af28ebe299b79d51b8b29dbadb9c323c0ab583e31246e5c5f307bbca7190c7352cea30de6510b7e2b18a219b11cc81f874d5bd6ffe13abd6a18f19412403d4f81dbb036ddb43668d7b8c4bff58bc11484607acc1060e76d3354b48d1"}, @hao={0xc9, 0x10, @remote}]}, @hopopts={0x32}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x400, 0x0, 0x0, {[@generic={0x13, 0x12, "7b75025967cab3581549c6260523d439"}]}}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$inet_smc(0x2b, 0x1, 0x0) 1m43.778709056s ago: executing program 8 (id=4998): r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x3, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0xaf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001880)=[{{&(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="a2063c427772ea763f78acad1da4ef2ca45b03e0b79bb8adcf0405892d101a877ea9ddfc1d1b51c6f307298b9ded5b5846d5de58ccb32afa5c3d70b339af67b7e94e4fb453223b374a847975dee92b80a003f9edbbe79b8cbdca480404435803e1a70f37f1e765aa87cdefda99f8f32ec0025dd0b53c5dcf576cce1c71938a5ffbece52564995c49eb2bbadca3389e2b0634dbcb206b436a098aad44bfaef4a6f0001182b1761ea521418db66be01d6135a81b787ef33c983e067cc2475e1e3e26938c4fae2daa2f0de959f7d7de6d", 0xcf}], 0x2, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="280000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYRESOCT=r1, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0xe0, 0x80}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)="dc7930e58e2bf587ebfe45b5826c9ff8aca19a68897a3bdd59305be2bc96bdf064d51083ecff92a658e7b5714607bff2d13da58e6c35e074a6b800b984112398635b89068be72d8bfea158bcfefaf35983776a5e5473246ca4700c8edf0c10035de1e329b64cb0942a08c3d3c15f409ebf5bc201fd4f77391298aa8d8bdc37a518e06f302c2d40efbb2886dd1dd8aeda17d1f113f6638a6978b3e1b293", 0x9d}], 0x1, &(0x7f00000017c0)=ANY=[@ANYBLOB="3000000001000000010000fa", @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="100000000100000001000000", @ANYRES8=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x94, 0x804}}], 0x2, 0x20008080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x1b3002) setreuid(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) syz_clone(0x1200, &(0x7f00000002c0)="293843f59b7a3dab6f0f78e1ce9e1d41a568a0bdd487892f45264e15ee213bb253760318c37a18331c451099404af3f39b612817b68dc2de79f6", 0x3a, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, 0x0, 0x8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x4, 0x2}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) write$snapshot(0xffffffffffffffff, &(0x7f0000002100)="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", 0x1000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xf) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x4, 0xb}, {0x9, 0x1}, 0x5, 0x6, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9a9) 1m43.672008648s ago: executing program 2 (id=5000): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r0, &(0x7f0000000300)='./file2\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xee, 0x80) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x18000) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 1m42.327809786s ago: executing program 5 (id=5001): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1, 0x2000000}}}, &(0x7f0000000040)=0x84) 1m41.307657755s ago: executing program 8 (id=5002): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8c", 0x1}]) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x36, &(0x7f0000000000)=""/54}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)={0xd4, r11, 0xf1aad47e89fb45b7, 0x0, 0x8000400, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8e, 0xa8, @random="77302073faaa81c5bd55fa8c83c8dab9a18570c800a7553ccd81ef9f3f0d574847f5058b1906c1f8d79e5586073c2eaab5d7ceb958a1b065c2bde281817acd167702c1bd3af737157baf56ca17630b18cab5a129025122e06ba6b27ecb18cd0011bbd015e7caa5ec2d3ec92f8d5a70e9dc8eb06bfb39afbdb76662eca26bf408bad283ed1c7acfd1f128"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000040) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x1000, 0x0, @private1, 0x6}}, {{0xa, 0x0, 0x7, @private2, 0xfffffff8}}}, 0x104) bind$inet(r0, 0x0, 0x0) 1m41.293729862s ago: executing program 2 (id=5012): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') open_tree(r0, &(0x7f0000002ec0)='./mnt\x00', 0x9001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20040000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) openat(r0, &(0x7f0000000fc0)='./file0\x00', 0x640900, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000f80), 0x1, 0x44800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty=0x2000000}}}, 0x90) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xfffffffc, 0xdc67}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m40.125237687s ago: executing program 2 (id=5003): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="8c", 0x1}]) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400009f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x36, &(0x7f0000000000)=""/54}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)={0xd4, r11, 0xf1aad47e89fb45b7, 0x0, 0x8000400, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8e, 0xa8, @random="77302073faaa81c5bd55fa8c83c8dab9a18570c800a7553ccd81ef9f3f0d574847f5058b1906c1f8d79e5586073c2eaab5d7ceb958a1b065c2bde281817acd167702c1bd3af737157baf56ca17630b18cab5a129025122e06ba6b27ecb18cd0011bbd015e7caa5ec2d3ec92f8d5a70e9dc8eb06bfb39afbdb76662eca26bf408bad283ed1c7acfd1f128"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000040) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x1000, 0x0, @private1, 0x6}}, {{0xa, 0x0, 0x7, @private2, 0xfffffff8}}}, 0x104) bind$inet(r0, 0x0, 0x0) 1m39.197718585s ago: executing program 5 (id=5004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0xa, 0x27, 0x0, 0x7, 0xb0, 0xd, 0xd, 0xe, 0x10, 0x7, 0x4, 0x0, 0x0, 0x9, 0x0, 0x9, 0x7, 0xb, '\x00', 0x3, 0xffff}) 1m38.606652179s ago: executing program 5 (id=5005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00fc3c000280140002410000000000000000000000000000000108001400ff01000014000300ff"], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 1m38.563707513s ago: executing program 7 (id=5006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m37.953404162s ago: executing program 8 (id=5007): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r4}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00008e2000/0x3000)=nil, 0x3000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x12}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x0) 1m37.826772617s ago: executing program 5 (id=5008): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00000010001ffffcffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="00fffffffe000000440012800b000100677265746170000034000280060010004e240000050009000600000008000700ac1414aa05000a000000000006000e00030000000800150093550a0008000a00", @ANYRES32=r3], 0x6c}}, 0x0) 1m36.377771706s ago: executing program 5 (id=5009): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="0b036c00e0ff64000200475400f6a13bb10000000800884748031c16908a054c2804d479290cb8f1255abde7ab111a6881a27db71dee06e376835d59fa3bc05f012c775c143ff20ccf4df39693f78881e113f835b9b9204edf98bdd4521dd7b76470e957e3d3f09f16b09a386c4f752b9c2e722842", 0x75, 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m34.221213457s ago: executing program 5 (id=5010): r0 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x2, 0x0, @auto=[0x17, 0x18]}, 0xa, r0) keyctl$read(0xb, r0, &(0x7f0000002280)=""/4100, 0x1004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002000330100000000000000000000043b", @ANYRES32=0x0, @ANYBLOB="00a3000000000000cc6be4238081832902c9ccf533c2911f4bee93a09c61f3d82ecd14bb22adcddda816689eb9fd9998a36651cffd0ebd5cef91297d28bf07"], 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = dup(r6) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x40, 0x7, 0xfffffff9, 0x5, {{0x5, 0x4, 0x3, 0x3a, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 1m18.46552751s ago: executing program 36 (id=4995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000000300000000, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8805) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x24008071}, 0x20008041) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020022", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{0x7f, 0x24, 0x3}, {0x101, 0x9, 0x40, 0x6}, {0xffff, 0x3, 0x8a, 0x7763c7e6}, {0x7fff, 0x8, 0xb8, 0x5}, {0xadae, 0xac, 0xe, 0x7}, {0x400, 0x8, 0x3, 0x55}, {0x5, 0x7, 0x1, 0x1ff}, {0x5, 0x81, 0xb, 0x3}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 0s ago: executing program 37 (id=5006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 7.739608][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1047.900258][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1047.911490][ T5907] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.930969][ T5907] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1047.947740][ T5907] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.972231][ T5907] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1047.992093][ T5907] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1048.003187][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.013019][ T5907] usb 3-1: Product: syz [ 1048.017236][ T5907] usb 3-1: Manufacturer: syz [ 1048.029610][ T5907] usb 3-1: SerialNumber: syz [ 1048.080459][ T5824] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1048.103934][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1048.118566][ T5907] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input63 [ 1048.255822][T21591] loop2: detected capacity change from 0 to 7 [ 1048.269974][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 1048.276352][T21591] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1048.286992][T21591] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1048.294505][ T5824] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1048.298503][T21591] Dev loop2: unable to read RDB block 7 [ 1048.312214][T21591] loop2: unable to read partition table [ 1048.318683][T21591] loop2: partition table beyond EOD, truncated [ 1048.332508][T21591] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1048.344254][ T5824] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1048.353566][ T5907] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1048.380294][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1048.388828][ T5907] (id 0x00) [ 1048.409138][ T5824] usb 7-1: Product: syz [ 1048.414734][ T5824] usb 7-1: Manufacturer: syz [ 1048.439971][ T5824] usb 7-1: SerialNumber: syz [ 1048.470159][ T5824] usb 7-1: config 0 descriptor?? [ 1048.505779][T21578] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1048.579950][ T5907] rc_core: IR keymap rc-imon-pad not found [ 1048.602163][ T5907] Registered IR keymap rc-empty [ 1048.617010][ T5907] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1048.659238][ T5907] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1048.726007][ T5907] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1048.783001][ T5907] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input64 [ 1048.859564][ T5907] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:5> initialized [ 1048.942846][ T5907] usb 3-1: USB disconnect, device number 5 [ 1049.328124][ T30] audit: type=1326 audit(1766008761.573:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21581 comm="syz.8.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1049.355873][ T30] audit: type=1326 audit(1766008761.603:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21581 comm="syz.8.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1049.408991][ T30] audit: type=1326 audit(1766008761.643:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21581 comm="syz.8.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1049.445145][ T30] audit: type=1326 audit(1766008761.693:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21581 comm="syz.8.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1049.479004][ T30] audit: type=1326 audit(1766008761.723:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21581 comm="syz.8.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1050.296921][T21614] loop6: detected capacity change from 0 to 7 [ 1050.336660][T21614] loop6: [ 1050.360981][T21614] loop6: partition table partially beyond EOD, truncated [ 1050.880911][ T795] usb 7-1: USB disconnect, device number 88 [ 1050.993985][T21625] netlink: 'syz.8.4537': attribute type 1 has an invalid length. [ 1051.228548][T21625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.356294][T21626] bond1: (slave gretap1): making interface the new active one [ 1051.378598][T21626] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1051.421121][T21638] tipc: Failed to obtain node identity [ 1051.434384][T21638] tipc: Enabling of bearer rejected, failed to enable media [ 1051.751227][T21649] loop2: detected capacity change from 0 to 7 [ 1051.780797][T21649] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1051.816196][T21649] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1051.840418][T21649] Dev loop2: unable to read RDB block 7 [ 1051.861693][T21649] loop2: unable to read partition table [ 1051.881465][T21649] loop2: partition table beyond EOD, truncated [ 1051.892359][T21649] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1052.746687][T21665] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1053.238449][T21673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.259793][T21673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.366411][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1053.431311][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1053.548529][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1053.578816][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1054.224556][ T30] audit: type=1326 audit(1766008766.473:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.343402][ T30] audit: type=1326 audit(1766008766.503:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.489106][ T30] audit: type=1326 audit(1766008766.503:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.601411][ T30] audit: type=1326 audit(1766008766.503:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.713486][ T30] audit: type=1326 audit(1766008766.503:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.848711][ T30] audit: type=1326 audit(1766008766.513:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1054.952950][ T30] audit: type=1326 audit(1766008766.513:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1055.031188][ T30] audit: type=1326 audit(1766008766.513:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1055.136542][ T30] audit: type=1326 audit(1766008766.513:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1055.200405][ T30] audit: type=1326 audit(1766008766.513:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1055.245668][ T30] audit: type=1326 audit(1766008766.513:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21657 comm="syz.8.4547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1055.697517][T21700] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4558'. [ 1055.720053][T21705] vhci_hcd vhci_hcd.0: port 0 already used [ 1055.750348][T21700] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4558'. [ 1056.327592][T21715] loop2: detected capacity change from 0 to 7 [ 1056.346426][T20973] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1056.388564][T20973] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1056.398560][T20973] Dev loop2: unable to read RDB block 7 [ 1056.406583][T20973] loop2: unable to read partition table [ 1056.413737][T20973] loop2: partition table beyond EOD, truncated [ 1056.422045][T21715] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1056.440123][T21715] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1056.447204][T21715] Dev loop2: unable to read RDB block 7 [ 1056.482425][T21715] loop2: unable to read partition table [ 1056.489455][T21715] loop2: partition table beyond EOD, truncated [ 1056.515818][T21715] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1056.559941][T17938] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1056.769743][T17938] usb 9-1: device descriptor read/64, error -71 [ 1057.031141][T17938] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1057.159957][ T795] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1057.180326][T17938] usb 9-1: device descriptor read/64, error -71 [ 1057.291119][T17938] usb usb9-port1: attempt power cycle [ 1057.351587][ T795] usb 7-1: Using ep0 maxpacket: 32 [ 1057.362978][ T795] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.384935][ T795] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1057.417566][ T795] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1057.451999][ T795] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1057.503356][ T795] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1057.518440][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.547021][ T795] usb 7-1: Product: syz [ 1057.561030][ T795] usb 7-1: Manufacturer: syz [ 1057.574447][ T795] usb 7-1: SerialNumber: syz [ 1057.610324][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1057.626928][ T795] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input65 [ 1057.680610][T17938] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1057.720796][T17938] usb 9-1: device descriptor read/8, error -71 [ 1057.820108][ T795] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1057.839563][ T795] (id 0x00) [ 1058.001002][ T795] rc_core: IR keymap rc-imon-pad not found [ 1058.008628][T17938] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1058.021285][ T795] Registered IR keymap rc-empty [ 1058.026939][ T795] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1058.045394][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1058.057995][ T795] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1058.069468][T17938] usb 9-1: device descriptor read/8, error -71 [ 1058.078701][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1058.097620][ T795] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1058.108895][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1058.130924][ T795] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input66 [ 1058.166823][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1058.180839][ T795] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:90> initialized [ 1058.190479][T17938] usb usb9-port1: unable to enumerate USB device [ 1058.344890][T17938] usb 7-1: USB disconnect, device number 90 [ 1058.534431][T21740] loop2: detected capacity change from 0 to 7 [ 1058.554519][T21740] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1058.566434][T21740] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1058.574416][T21740] Dev loop2: unable to read RDB block 7 [ 1058.583688][T21740] loop2: unable to read partition table [ 1058.589746][T21740] loop2: partition table beyond EOD, truncated [ 1058.604008][T21740] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1059.150399][T21746] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1059.293869][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4573'. [ 1059.480853][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1059.480881][ T30] audit: type=1326 audit(1766008771.723:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1059.582538][ T30] audit: type=1326 audit(1766008771.733:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1059.610663][ T30] audit: type=1326 audit(1766008771.733:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1059.748935][ T30] audit: type=1326 audit(1766008771.733:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1059.785156][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.792032][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.869682][ T30] audit: type=1326 audit(1766008771.733:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.008572][ T30] audit: type=1326 audit(1766008771.733:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.140781][ T30] audit: type=1326 audit(1766008771.733:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.242371][T21764] loop6: detected capacity change from 0 to 7 [ 1060.259934][ T30] audit: type=1326 audit(1766008771.783:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.292232][T21764] loop6: [ 1060.295985][T21764] loop6: partition table partially beyond EOD, truncated [ 1060.368757][ T30] audit: type=1326 audit(1766008771.783:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.475984][ T30] audit: type=1326 audit(1766008771.783:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.5.4568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1060.928522][T21777] PKCS7: Unknown OID: [5] (bad) [ 1060.966795][T21777] PKCS7: Only support pkcs7_signedData type [ 1061.040056][ T6460] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1061.171307][T21781] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1061.178706][T21781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1061.199333][T21781] vhci_hcd vhci_hcd.0: Device attached [ 1061.401584][ T6460] usb 3-1: Using ep0 maxpacket: 32 [ 1061.423412][ T6460] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.458168][T21783] vhci_hcd: connection closed [ 1061.458482][T14098] vhci_hcd vhci_hcd.8: stop threads [ 1061.475907][T16743] usb 50-1: SetAddress Request (2) to port 0 [ 1061.498392][T16743] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1061.527387][ T6460] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1061.543287][T14098] vhci_hcd vhci_hcd.8: release socket [ 1061.576742][ T6460] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.600047][T14098] vhci_hcd vhci_hcd.8: disconnect device [ 1061.640026][ T6460] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1061.721010][ T6460] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1061.734691][ T6460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.756898][ T6460] usb 3-1: Product: syz [ 1061.776620][ T6460] usb 3-1: Manufacturer: syz [ 1061.822756][ T6460] usb 3-1: SerialNumber: syz [ 1061.872064][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1061.897993][ T6460] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input67 [ 1062.100479][ T6460] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1062.159110][ T6460] (id 0x00) [ 1062.339466][T21792] loop6: detected capacity change from 0 to 7 [ 1062.410354][ T6460] rc_core: IR keymap rc-imon-pad not found [ 1062.420142][ T6460] Registered IR keymap rc-empty [ 1062.420639][T21792] loop6: [ 1062.426131][ T6460] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1062.459383][ T6460] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1062.461954][T21792] loop6: partition table partially beyond EOD, truncated [ 1062.571618][ T6460] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1062.693065][ T6460] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input68 [ 1062.800460][ T6460] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:6> initialized [ 1062.841535][T21795] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4587'. [ 1062.929869][ T6460] usb 3-1: USB disconnect, device number 6 [ 1063.415890][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1063.478992][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1063.532838][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1063.572601][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1063.585829][T21804] loop2: detected capacity change from 0 to 7 [ 1063.647082][T21804] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1063.664453][T21804] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1063.698622][T21804] Dev loop2: unable to read RDB block 7 [ 1063.807962][T21804] loop2: unable to read partition table [ 1063.861500][T21804] loop2: partition table beyond EOD, truncated [ 1063.912089][T21804] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.946485][T21815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1064.103499][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4593'. [ 1064.208300][T21819] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1064.235265][T21819] macvtap1: entered allmulticast mode [ 1064.251962][T21819] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1064.600651][ T30] audit: type=1326 audit(1766008776.843:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1064.809005][ T30] audit: type=1326 audit(1766008776.853:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1064.868211][ T30] audit: type=1326 audit(1766008776.853:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1064.893346][ T30] audit: type=1326 audit(1766008776.853:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.324680][ T30] audit: type=1326 audit(1766008776.853:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.379360][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1065.410609][ T30] audit: type=1326 audit(1766008776.853:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.457247][ T30] audit: type=1326 audit(1766008776.853:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.529066][ T30] audit: type=1326 audit(1766008776.853:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.613560][ T30] audit: type=1326 audit(1766008776.853:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1065.638803][ T30] audit: type=1326 audit(1766008776.853:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21822 comm="syz.7.4594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1066.379270][T21846] vhci_hcd vhci_hcd.0: port 0 already used [ 1066.650090][T16743] usb 50-1: device descriptor read/8, error -110 [ 1066.721698][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4603'. [ 1066.779791][ T10] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1066.919652][ T10] usb 7-1: device descriptor read/64, error -71 [ 1067.071427][T16743] usb usb50-port1: attempt power cycle [ 1067.169697][ T10] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1067.325212][ T10] usb 7-1: device descriptor read/64, error -71 [ 1067.452296][ T10] usb usb7-port1: attempt power cycle [ 1067.641497][T16743] usb usb50-port1: unable to enumerate USB device [ 1067.819675][ T10] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1067.832413][T21867] netlink: 'syz.8.4605': attribute type 10 has an invalid length. [ 1067.891171][ T10] usb 7-1: device descriptor read/8, error -71 [ 1067.905194][T21871] loop6: detected capacity change from 0 to 7 [ 1067.935027][T21871] loop6: [ 1067.938047][T21871] loop6: partition table partially beyond EOD, truncated [ 1068.122053][T21878] loop2: detected capacity change from 0 to 7 [ 1068.137232][T21878] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1068.150448][ T10] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1068.163926][T21878] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1068.174437][ T10] usb 7-1: device descriptor read/8, error -71 [ 1068.187321][T21878] Dev loop2: unable to read RDB block 7 [ 1068.198307][T21878] loop2: unable to read partition table [ 1068.209070][T21878] loop2: partition table beyond EOD, truncated [ 1068.227183][T21878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1068.290426][ T10] usb usb7-port1: unable to enumerate USB device [ 1068.425178][T21867] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 1068.434822][T21788] bond0: (slave wlan1): link status definitely up [ 1069.157256][T21893] loop2: detected capacity change from 0 to 7 [ 1069.188538][T20973] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1069.218352][T20973] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1069.239712][T20973] Dev loop2: unable to read RDB block 7 [ 1069.246034][T20973] loop2: unable to read partition table [ 1069.261122][T20973] loop2: partition table beyond EOD, truncated [ 1069.373281][T21893] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1069.392824][T21893] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1069.413668][T21893] Dev loop2: unable to read RDB block 7 [ 1069.419948][T21893] loop2: unable to read partition table [ 1069.447124][T21893] loop2: partition table beyond EOD, truncated [ 1069.472948][T21893] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1069.912877][T21899] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1070.402943][T21903] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4614'. [ 1070.523064][T21897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1071.001385][T21912] vhci_hcd vhci_hcd.0: port 0 already used [ 1072.090279][T20473] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.155177][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1072.275535][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4621'. [ 1072.316589][ T10] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1072.351641][T21924] loop6: detected capacity change from 0 to 7 [ 1072.362731][T20973] loop6: [ 1072.365769][T20973] loop6: partition table partially beyond EOD, truncated [ 1072.382411][T21924] loop6: [ 1072.385991][T21924] loop6: partition table partially beyond EOD, truncated [ 1072.471354][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1072.530140][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1072.589987][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1072.681137][T21933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1072.684982][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.797883][T21937] netlink: 'syz.2.4628': attribute type 1 has an invalid length. [ 1072.837289][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.851984][T21937] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1072.921142][ T10] usb 7-1: Product: syz [ 1072.964900][ T10] usb 7-1: Manufacturer: syz [ 1072.997919][ T10] usb 7-1: SerialNumber: syz [ 1073.154092][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1073.264105][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1073.325869][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1073.362045][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1074.148277][T20973] udevd[20973]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.167470][ T10] usb 7-1: USB disconnect, device number 95 [ 1074.390542][T21965] loop2: detected capacity change from 0 to 7 [ 1074.412315][T20973] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1074.425041][T20973] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1074.432389][T20973] Dev loop2: unable to read RDB block 7 [ 1074.443344][T20973] loop2: unable to read partition table [ 1074.476852][T20973] loop2: partition table beyond EOD, truncated [ 1074.496694][T21965] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1074.533278][T21965] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1074.549306][T21965] Dev loop2: unable to read RDB block 7 [ 1074.568961][T21965] loop2: unable to read partition table [ 1074.580274][ T10] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1074.621925][T21965] loop2: partition table beyond EOD, truncated [ 1074.649408][T21965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1074.799950][ T10] usb 7-1: device descriptor read/64, error -71 [ 1075.119680][ T10] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1075.396735][ T10] usb 7-1: device descriptor read/64, error -71 [ 1075.503175][T21969] delete_channel: no stack [ 1075.512720][ T10] usb usb7-port1: attempt power cycle [ 1075.802600][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4638'. [ 1075.940086][ T10] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1075.957509][T21976] fuse: Bad value for 'group_id' [ 1075.980628][ T10] usb 7-1: device descriptor read/8, error -71 [ 1075.997167][T21976] fuse: Bad value for 'group_id' [ 1076.032658][T21976] fuse: Unknown parameter '' [ 1076.071989][T21976] netlink: 19 bytes leftover after parsing attributes in process `syz.8.4639'. [ 1076.189180][T21982] loop6: detected capacity change from 0 to 7 [ 1076.211153][T21982] loop6: [ 1076.214184][T21982] loop6: partition table partially beyond EOD, truncated [ 1076.240388][ T10] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1076.290354][ T10] usb 7-1: device descriptor read/8, error -71 [ 1076.410006][ T10] usb usb7-port1: unable to enumerate USB device [ 1076.486829][T21987] loop6: detected capacity change from 0 to 7 [ 1076.519202][T21987] loop6: [ 1076.528922][T21987] loop6: partition table partially beyond EOD, truncated [ 1076.774552][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1076.774567][ T30] audit: type=1326 audit(1766008789.023:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22000 comm="syz.2.4646" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x0 [ 1076.982516][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1077.019146][T22002] bridge_slave_0: left allmulticast mode [ 1077.039042][T22002] bridge_slave_0: left promiscuous mode [ 1077.047456][T22002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.088256][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4645'. [ 1077.150340][T22002] bridge_slave_1: left allmulticast mode [ 1077.163994][T22010] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1077.167386][T22002] bridge_slave_1: left promiscuous mode [ 1077.184671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1077.225214][T22002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.392596][T22002] bond0: (slave bond_slave_0): Releasing backup interface [ 1077.471002][T22002] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.510075][T22012] usb usb8: usbfs: process 22012 (syz.7.4647) did not claim interface 2 before use [ 1077.553314][T22002] team0: Port device team_slave_0 removed [ 1077.599777][T17726] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1077.632415][T22002] team0: Port device team_slave_1 removed [ 1077.672791][T22002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.710268][T22002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.766477][T22002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.790919][T22002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.804638][T17726] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 1077.829129][T22020] loop2: detected capacity change from 0 to 7 [ 1077.849493][T17726] usb 3-1: config 0 has an invalid interface number: 199 but max is 0 [ 1077.862760][T22020] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1077.906505][T17726] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1077.945134][T22020] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1077.957096][T22002] bond3: (slave gretap1): Releasing active interface [ 1077.977250][T17726] usb 3-1: config 0 has no interface number 0 [ 1077.998739][T22020] Dev loop2: unable to read RDB block 7 [ 1078.018198][T17726] usb 3-1: config 0 has no interface number 1 [ 1078.045449][T22020] loop2: unable to read partition table [ 1078.065403][T17726] usb 3-1: config 0 interface 254 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1078.084205][T22020] loop2: partition table beyond EOD, truncated [ 1078.117284][T22020] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1078.135612][T17726] usb 3-1: config 0 interface 254 altsetting 0 endpoint 0xF has invalid maxpacket 52843, setting to 64 [ 1078.198352][T17726] usb 3-1: config 0 interface 254 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1078.306926][T17726] usb 3-1: too many endpoints for config 0 interface 199 altsetting 70: 136, using maximum allowed: 30 [ 1078.363418][T17726] usb 3-1: config 0 interface 199 altsetting 70 has an invalid descriptor for endpoint zero, skipping [ 1078.444600][T17726] usb 3-1: config 0 interface 199 altsetting 70 has 2 endpoint descriptors, different from the interface descriptor's value: 136 [ 1078.530471][T17726] usb 3-1: config 0 interface 199 has no altsetting 0 [ 1078.600234][T17726] usb 3-1: New USB device found, idVendor=0413, idProduct=6025, bcdDevice=8b.6c [ 1078.614799][T17726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.627938][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1078.653018][T17726] usb 3-1: Product: syz [ 1078.671900][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1078.685314][T17726] usb 3-1: Manufacturer: syz [ 1078.692876][T17726] usb 3-1: SerialNumber: syz [ 1078.713635][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1078.724673][T17726] usb 3-1: config 0 descriptor?? [ 1078.733885][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1078.767995][T17726] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in cold state, will try to load a firmware [ 1078.816154][T17726] usb 3-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1078.851713][T17726] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1078.901120][T22026] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1078.909630][T22026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1078.974468][T22026] vhci_hcd vhci_hcd.0: Device attached [ 1079.209026][ T795] usb 46-1: SetAddress Request (43) to port 0 [ 1079.272152][ T795] usb 46-1: new SuperSpeed USB device number 43 using vhci_hcd [ 1079.499185][T22027] vhci_hcd: connection reset by peer [ 1079.508076][ T4877] vhci_hcd vhci_hcd.6: stop threads [ 1079.574097][ T4877] vhci_hcd vhci_hcd.6: release socket [ 1079.661755][ T4877] vhci_hcd vhci_hcd.6: disconnect device [ 1080.940339][T22039] vlan2: entered allmulticast mode [ 1080.946272][T22039] bond0: entered allmulticast mode [ 1081.065162][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1081.186291][T22044] loop6: detected capacity change from 0 to 7 [ 1081.193574][T22044] loop6: [ 1081.196566][T22044] loop6: partition table partially beyond EOD, truncated [ 1081.312485][T22047] loop2: detected capacity change from 0 to 7 [ 1081.354607][T22047] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1081.403053][T22050] netlink: 'syz.8.4658': attribute type 3 has an invalid length. [ 1081.417206][T22047] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1081.514491][T22053] loop6: detected capacity change from 0 to 7 [ 1081.521539][T22053] loop6: [ 1081.524585][T22053] loop6: partition table partially beyond EOD, truncated [ 1081.537661][T22047] Dev loop2: unable to read RDB block 7 [ 1081.551054][ T5203] loop6: [ 1081.563337][ T5203] loop6: partition table partially beyond EOD, truncated [ 1081.571994][T22047] loop2: unable to read partition table [ 1081.577952][T22047] loop2: partition table beyond EOD, truncated [ 1081.659050][T22047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1081.836237][T22058] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4663'. [ 1082.036867][T22062] loop2: detected capacity change from 0 to 7 [ 1082.065887][T22062] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1082.105588][T22062] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1082.132268][T22062] Dev loop2: unable to read RDB block 7 [ 1082.138528][T22062] loop2: unable to read partition table [ 1082.146449][T22062] loop2: partition table beyond EOD, truncated [ 1082.189647][T17938] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1082.207355][T22062] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1082.330156][T15527] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.381174][T17938] usb 7-1: Using ep0 maxpacket: 16 [ 1082.395023][T17938] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1082.410419][T17938] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1082.422439][T17938] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1082.453042][T17938] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.500427][T17938] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.553635][T17938] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.583617][T17938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.622544][T17938] usb 7-1: Product: syz [ 1082.626877][T17938] usb 7-1: Manufacturer: syz [ 1082.641628][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4666'. [ 1082.650545][T17938] usb 7-1: SerialNumber: syz [ 1082.862586][T22080] vlan3: entered promiscuous mode [ 1082.941969][T17938] usb 7-1: USB disconnect, device number 100 [ 1083.219264][T22086] netlink: 'syz.5.4673': attribute type 1 has an invalid length. [ 1083.326448][T22086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.409840][ T795] usb 46-1: device descriptor read/8, error -110 [ 1084.515303][T22116] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4680'. [ 1084.587535][T22116] netlink: 59 bytes leftover after parsing attributes in process `syz.7.4680'. [ 1084.678393][T22120] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1084.834247][T22122] loop6: detected capacity change from 0 to 7 [ 1084.838519][ T795] usb usb46-port1: attempt power cycle [ 1084.878938][T22122] loop6: [ 1084.889067][T22122] loop6: partition table partially beyond EOD, truncated [ 1085.116961][ T30] audit: type=1326 audit(1766008797.353:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.146525][ T30] audit: type=1326 audit(1766008797.353:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.173853][ T30] audit: type=1326 audit(1766008797.353:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.199669][T22127] loop6: detected capacity change from 0 to 7 [ 1085.213697][ T6123] loop6: [ 1085.217065][ T6123] loop6: partition table partially beyond EOD, truncated [ 1085.228721][ T30] audit: type=1326 audit(1766008797.393:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.271006][T22127] loop6: [ 1085.279246][T22127] loop6: partition table partially beyond EOD, truncated [ 1085.287477][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1085.311831][T22129] loop2: detected capacity change from 0 to 7 [ 1085.330193][ T30] audit: type=1326 audit(1766008797.393:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.390629][T22129] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1085.411095][T22129] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1085.446190][T22129] Dev loop2: unable to read RDB block 7 [ 1085.467017][ T30] audit: type=1326 audit(1766008797.393:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.496458][T22129] loop2: unable to read partition table [ 1085.516744][T22129] loop2: partition table beyond EOD, truncated [ 1085.550185][T22129] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1085.583354][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.584711][ T30] audit: type=1326 audit(1766008797.393:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.629440][ T795] usb usb46-port1: unable to enumerate USB device [ 1085.709994][ T30] audit: type=1326 audit(1766008797.393:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.749731][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.787486][ T10] usb 9-1: Product: syz [ 1085.822642][ T30] audit: type=1326 audit(1766008797.553:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1085.829640][ T10] usb 9-1: Manufacturer: syz [ 1085.957515][ T10] usb 9-1: SerialNumber: syz [ 1085.991799][ T30] audit: type=1326 audit(1766008797.553:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22111 comm="syz.6.4679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1086.048225][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1086.075935][T22133] loop2: detected capacity change from 0 to 7 [ 1086.097123][T16214] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1086.126480][ T5907] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1086.136160][T16214] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1086.154929][T16214] Dev loop2: unable to read RDB block 7 [ 1086.174428][T16214] loop2: unable to read partition table [ 1086.195516][T16214] loop2: partition table beyond EOD, truncated [ 1086.222703][T22133] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1086.261706][T22133] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1086.268488][T22133] Dev loop2: unable to read RDB block 7 [ 1086.299468][T22133] loop2: unable to read partition table [ 1086.307190][T22133] loop2: partition table beyond EOD, truncated [ 1086.325311][T22133] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1086.389733][ T5203] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1086.419715][ T5203] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1086.454009][ T5203] Dev loop2: unable to read RDB block 7 [ 1086.493446][ T5203] loop2: unable to read partition table [ 1086.499451][ T5203] loop2: partition table beyond EOD, truncated [ 1086.653187][T22142] vlan3: entered promiscuous mode [ 1086.789279][T22152] netlink: 'syz.6.4693': attribute type 1 has an invalid length. [ 1086.933567][T22152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1087.004829][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4695'. [ 1087.145557][T22161] netlink: 'syz.6.4696': attribute type 21 has an invalid length. [ 1087.178261][T22161] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4696'. [ 1087.210012][ T5907] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1087.217918][ T5907] ath9k_htc: Failed to initialize the device [ 1087.235287][T22161] binder: 22160:22161 ioctl c0306201 800001c0 returned -14 [ 1087.296928][T22167] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1087.307402][ T5907] usb 9-1: ath9k_htc: USB layer deinitialized [ 1087.326630][ T795] IPVS: starting estimator thread 0... [ 1087.385203][T22166] netlink: 'syz.7.4694': attribute type 11 has an invalid length. [ 1087.440035][T22168] IPVS: using max 27 ests per chain, 64800 per kthread [ 1087.797130][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4700'. [ 1088.047054][ T6460] usb 9-1: USB disconnect, device number 13 [ 1088.330494][T22183] loop6: detected capacity change from 0 to 7 [ 1088.361898][T22183] loop6: [ 1088.371372][T22183] loop6: partition table partially beyond EOD, truncated [ 1088.519666][ T6460] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1088.739155][ T6460] usb 9-1: Using ep0 maxpacket: 32 [ 1088.764046][ T6460] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1088.816121][ T6460] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1088.833155][T22191] fuse: Bad value for 'fd' [ 1088.838698][T22191] fuse: Unknown parameter 'flR' [ 1088.963042][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4705'. [ 1088.990146][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4705'. [ 1089.020816][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4705'. [ 1089.033690][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4705'. [ 1089.077692][ T6460] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.103983][ T6460] usb 9-1: Product: syz [ 1089.120066][ T6460] usb 9-1: Manufacturer: syz [ 1089.142872][ T6460] usb 9-1: SerialNumber: syz [ 1089.168554][ T6460] usb 9-1: config 0 descriptor?? [ 1089.185669][T22181] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1089.215577][ T6460] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input69 [ 1089.742886][T22200] loop2: detected capacity change from 0 to 7 [ 1089.791237][T22200] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1089.822846][T22200] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1089.850374][T22200] Dev loop2: unable to read RDB block 7 [ 1089.906774][T22200] loop2: unable to read partition table [ 1089.953946][T22200] loop2: partition table beyond EOD, truncated [ 1089.984907][T22200] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1090.034871][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4707'. [ 1090.535834][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.584928][ T3545] bridge_slave_0: left allmulticast mode [ 1090.613561][ T3545] bridge_slave_0: left promiscuous mode [ 1090.651752][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.104396][T22220] netlink: 'syz.5.4714': attribute type 1 has an invalid length. [ 1091.317231][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1091.326612][ T6460] usb 9-1: USB disconnect, device number 14 [ 1091.444962][ T30] audit: type=1326 audit(1766008803.693:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.8.4715" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43539 code=0x0 [ 1091.469400][ T3545] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1091.508946][ T3545] bond12 (unregistering): (slave gretap2): Releasing active interface [ 1091.849674][ T6460] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1092.020587][ T6460] usb 9-1: Using ep0 maxpacket: 16 [ 1092.032312][ T6460] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1092.043698][ T6460] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.055973][ T6460] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1092.069262][ T6460] usb 9-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1092.078420][ T6460] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.089234][ T6460] usb 9-1: config 0 descriptor?? [ 1092.146583][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.158396][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.172785][ T3545] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1092.182492][ T3545] bond0 (unregistering): Released all slaves [ 1092.317320][ T3545] bond1 (unregistering): Released all slaves [ 1092.473547][ T3545] bond2 (unregistering): Released all slaves [ 1092.516328][ T6460] apple 0003:05AC:0264.0066: unknown main item tag 0x0 [ 1092.524958][ T6460] apple 0003:05AC:0264.0066: unknown main item tag 0x0 [ 1092.533139][ T6460] apple 0003:05AC:0264.0066: unknown main item tag 0x0 [ 1092.544005][ T6460] apple 0003:05AC:0264.0066: unknown main item tag 0x0 [ 1092.551365][ T6460] apple 0003:05AC:0264.0066: unknown main item tag 0x0 [ 1092.568285][ T6460] apple 0003:05AC:0264.0066: hidraw0: USB HID v0.00 Device [HID 05ac:0264] on usb-dummy_hcd.8-1/input0 [ 1092.702592][ T3545] bond3 (unregistering): Released all slaves [ 1092.838181][ T3545] bond4 (unregistering): Released all slaves [ 1092.970529][ T3545] bond5 (unregistering): Released all slaves [ 1093.108704][ T3545] bond6 (unregistering): Released all slaves [ 1093.242957][ T3545] bond7 (unregistering): Released all slaves [ 1093.381871][ T3545] bond8 (unregistering): Released all slaves [ 1093.537489][ T3545] bond9 (unregistering): Released all slaves [ 1093.682626][ T3545] bond10 (unregistering): Released all slaves [ 1093.839031][ T3545] bond11 (unregistering): Released all slaves [ 1093.856806][ T3545] bond12 (unregistering): Released all slaves [ 1093.998076][ T3545] bond13 (unregistering): Released all slaves [ 1094.137806][ T3545] bond14 (unregistering): Released all slaves [ 1094.285738][ T3545] bond15 (unregistering): Released all slaves [ 1094.415961][ T3545] bond16 (unregistering): Released all slaves [ 1094.454674][T17938] usb 9-1: USB disconnect, device number 15 [ 1094.612710][ T3545] bond17 (unregistering): Released all slaves [ 1094.748358][ T3545] bond18 (unregistering): Released all slaves [ 1094.897279][T22242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1094.939338][ T3545] bond19 (unregistering): Released all slaves [ 1095.117982][ T3545] bond20 (unregistering): Released all slaves [ 1095.250375][ T3545] bond21 (unregistering): Released all slaves [ 1095.381456][ T3545] bond22 (unregistering): Released all slaves [ 1095.507862][ T3545] bond23 (unregistering): Released all slaves [ 1095.647242][ T3545] bond24 (unregistering): Released all slaves [ 1095.710951][T22220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1095.724155][T22223] tipc: Enabling of bearer rejected, failed to enable media [ 1095.784771][T22251] loop6: detected capacity change from 0 to 7 [ 1095.814554][T22251] loop6: [ 1095.829034][T22251] loop6: partition table partially beyond EOD, truncated [ 1096.133090][ T3545] tipc: Left network mode [ 1096.285417][T22266] sctp: [Deprecated]: syz.6.4727 (pid 22266) Use of int in maxseg socket option. [ 1096.285417][T22266] Use struct sctp_assoc_value instead [ 1096.291575][ T5907] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1096.459623][ T5833] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1096.497094][ T5907] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 1096.523774][ T5907] usb 6-1: config 0 has no interface number 0 [ 1096.615747][ T5907] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1096.635743][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.640480][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 1096.647911][ T5907] usb 6-1: Product: syz [ 1096.679800][ T5833] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.688516][ T5907] usb 6-1: Manufacturer: syz [ 1096.695370][ T5833] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1096.707478][ T5907] usb 6-1: SerialNumber: syz [ 1096.715386][ T5833] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.717768][ T5907] usb 6-1: config 0 descriptor?? [ 1096.727390][ T5833] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1096.754999][ T3545] hsr_slave_0: left promiscuous mode [ 1096.777401][ T3545] hsr_slave_1: left promiscuous mode [ 1096.779383][ T5833] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1096.805050][ T5907] peak_usb 6-1:0.246: probe with driver peak_usb failed with error 246 [ 1096.818525][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.837187][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.859573][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.894389][ T5833] usb 9-1: Product: syz [ 1096.906173][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.909627][ T5833] usb 9-1: Manufacturer: syz [ 1096.929438][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.948542][ T5833] usb 9-1: SerialNumber: syz [ 1097.007188][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1097.065131][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input70 [ 1097.074891][ T3545] veth1_to_batadv: left promiscuous mode [ 1097.115313][ T3545] veth1_macvtap: left promiscuous mode [ 1097.130095][ T3545] veth0_macvtap: left promiscuous mode [ 1097.146732][ T3545] veth1_vlan: left promiscuous mode [ 1097.158055][ T3545] veth0_vlan: left promiscuous mode [ 1097.229885][ T5833] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1097.245691][ T5833] (id 0x00) [ 1097.318390][ T30] audit: type=1326 audit(1766008809.563:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22263 comm="syz.2.4726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1097.352635][ T30] audit: type=1326 audit(1766008809.603:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22263 comm="syz.2.4726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1097.375447][ T5833] rc_core: IR keymap rc-imon-pad not found [ 1097.391747][ T5833] Registered IR keymap rc-empty [ 1097.396812][ T5833] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1097.410620][ T5833] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1097.450905][ T5833] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1097.473930][ T5833] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input71 [ 1097.495214][ T30] audit: type=1326 audit(1766008809.723:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22263 comm="syz.2.4726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1097.526148][ T5833] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:16> initialized [ 1097.638988][ T5833] usb 9-1: USB disconnect, device number 16 [ 1097.663962][ T30] audit: type=1326 audit(1766008809.903:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22263 comm="syz.2.4726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1098.308039][T22291] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 1098.842401][T22293] cgroup: fork rejected by pids controller in /syz2 [ 1099.015634][ T5833] usb 6-1: USB disconnect, device number 122 [ 1099.213060][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 1099.478108][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 1099.584404][T22493] loop6: detected capacity change from 0 to 7 [ 1099.594869][ T6123] loop6: [ 1099.613551][ T6123] loop6: partition table partially beyond EOD, truncated [ 1099.659364][T22493] loop6: [ 1099.664854][T22493] loop6: partition table partially beyond EOD, truncated [ 1099.837359][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4734'. [ 1100.926143][ T3545] bridge_slave_1: left allmulticast mode [ 1100.934766][ T3545] bridge_slave_1: left promiscuous mode [ 1100.947504][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.974788][ T3545] bridge_slave_0: left allmulticast mode [ 1100.990820][ T3545] bridge_slave_0: left promiscuous mode [ 1100.997743][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.257504][T22524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1102.100576][ T3545] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1102.201704][T17938] IPVS: starting estimator thread 0... [ 1102.352518][T22533] IPVS: using max 36 ests per chain, 86400 per kthread [ 1102.414740][T22535] netlink: 'syz.8.4744': attribute type 11 has an invalid length. [ 1102.585637][ T30] audit: type=1326 audit(1766008814.763:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1102.626652][ T3545] bond28 (unregistering): (slave geneve2): Releasing active interface [ 1102.649892][ T3545] geneve2 (unregistering): left promiscuous mode [ 1102.666719][ T30] audit: type=1326 audit(1766008814.773:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1102.793627][ T3545] geneve2 (unregistering): left allmulticast mode [ 1102.820715][T20473] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.905646][ T30] audit: type=1326 audit(1766008814.773:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.007732][ T30] audit: type=1326 audit(1766008814.773:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.107771][ T30] audit: type=1326 audit(1766008814.773:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.187638][ T3545] bond11 (unregistering): (slave bridge1): Releasing active interface [ 1103.205784][ T30] audit: type=1326 audit(1766008814.773:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.253494][ T30] audit: type=1326 audit(1766008814.783:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.355831][ T30] audit: type=1326 audit(1766008814.783:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.408754][ T30] audit: type=1326 audit(1766008814.793:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.464972][ T30] audit: type=1326 audit(1766008814.793:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22507 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1103.773656][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.797636][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.823633][ T3545] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1103.842589][ T3545] bond0 (unregistering): Released all slaves [ 1104.145393][ T3545] bond1 (unregistering): Released all slaves [ 1104.426778][ T3545] bond2 (unregistering): Released all slaves [ 1104.489936][ T5907] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1104.593040][ T3545] bond3 (unregistering): Released all slaves [ 1104.765279][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.826025][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.872106][ T5907] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1104.897221][T22560] loop2: detected capacity change from 0 to 7 [ 1104.910229][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.940196][T22560] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1104.974321][T22560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1104.989244][ T5907] usb 7-1: config 0 descriptor?? [ 1105.027757][T22560] Dev loop2: unable to read RDB block 7 [ 1105.040529][T22560] loop2: unable to read partition table [ 1105.079091][T22560] loop2: partition table beyond EOD, truncated [ 1105.116572][T22560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1105.392302][ T3545] bond4 (unregistering): Released all slaves [ 1106.025988][ T3545] bond5 (unregistering): Released all slaves [ 1106.089110][ T3545] bond6 (unregistering): Released all slaves [ 1106.187836][ T3545] bond7 (unregistering): Released all slaves [ 1106.766177][ T3545] bond8 (unregistering): Released all slaves [ 1106.992182][ T3545] bond9 (unregistering): Released all slaves [ 1107.226712][ T3545] bond10 (unregistering): Released all slaves [ 1107.250025][ T3545] bond11 (unregistering): Released all slaves [ 1107.527095][ T3545] bond12 (unregistering): Released all slaves [ 1107.780487][ T3545] bond13 (unregistering): Released all slaves [ 1108.021526][ T3545] bond14 (unregistering): Released all slaves [ 1108.276828][ T3545] bond15 (unregistering): Released all slaves [ 1108.509843][ T3545] bond16 (unregistering): Released all slaves [ 1108.771487][ T3545] bond17 (unregistering): Released all slaves [ 1108.991737][ T3545] bond18 (unregistering): Released all slaves [ 1109.207525][ T3545] bond19 (unregistering): Released all slaves [ 1109.445872][ T3545] bond20 (unregistering): Released all slaves [ 1109.670586][ T3545] bond21 (unregistering): Released all slaves [ 1109.911987][ T3545] bond22 (unregistering): Released all slaves [ 1110.125266][ T3545] bond23 (unregistering): Released all slaves [ 1110.262606][ T5907] usbhid 7-1:0.0: can't add hid device: -32 [ 1110.268691][ T5907] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1110.335708][ T3545] bond24 (unregistering): Released all slaves [ 1110.492236][ T3545] bond25 (unregistering): Released all slaves [ 1110.671443][ T3545] bond26 (unregistering): Released all slaves [ 1110.816789][ T3545] bond27 (unregistering): Released all slaves [ 1110.833820][ T3545] bond28 (unregistering): Released all slaves [ 1110.992073][ T3545] bond29 (unregistering): Released all slaves [ 1111.145449][ T3545] bond30 (unregistering): Released all slaves [ 1111.293513][ T3545] bond31 (unregistering): Released all slaves [ 1111.433351][ T3545] bond32 (unregistering): Released all slaves [ 1111.448549][T22523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4742'. [ 1111.713878][ T5824] usb 7-1: USB disconnect, device number 101 [ 1111.726551][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4753'. [ 1112.154416][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1112.164477][T22587] loop6: detected capacity change from 0 to 7 [ 1112.168023][T22587] loop6: [ 1112.185134][T22587] loop6: partition table partially beyond EOD, truncated [ 1112.558257][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1112.638878][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1112.725371][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1112.811211][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1113.296952][ T30] audit: type=1326 audit(1766008825.543:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1113.407275][ T30] audit: type=1326 audit(1766008825.543:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1113.564224][ T30] audit: type=1326 audit(1766008825.543:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1113.594738][ T3545] veth1_macvtap: left promiscuous mode [ 1113.616875][ T3545] veth0_macvtap: left promiscuous mode [ 1113.636882][ T3545] veth1_vlan: left promiscuous mode [ 1113.677328][ T3545] veth0_vlan: left promiscuous mode [ 1113.707628][ T30] audit: type=1326 audit(1766008825.543:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1113.791375][ T30] audit: type=1326 audit(1766008825.543:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1113.919731][ T30] audit: type=1326 audit(1766008825.543:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1114.075508][ T30] audit: type=1326 audit(1766008825.603:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1114.141538][ T3545] pim6reg (unregistering): left allmulticast mode [ 1114.179613][ T30] audit: type=1326 audit(1766008825.603:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22582 comm="syz.6.4757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1114.646223][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4765'. [ 1116.102286][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 1116.391556][T22632] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1116.873597][T22629] vlan2: entered promiscuous mode [ 1117.264939][T22646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1117.542749][T22650] netlink: 'syz.5.4772': attribute type 1 has an invalid length. [ 1117.561242][ T5833] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1117.604226][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1117.652543][T22654] loop2: detected capacity change from 0 to 7 [ 1117.670299][T22650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.684467][T22654] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1117.733672][T22654] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1117.733898][T22654] Dev loop2: unable to read RDB block 7 [ 1117.733935][T22654] loop2: unable to read partition table [ 1117.734138][T22654] loop2: partition table beyond EOD, truncated [ 1117.739137][T22654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1117.863869][T22656] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 1118.361996][T22667] loop6: detected capacity change from 0 to 7 [ 1118.380380][T22667] loop6: [ 1118.383428][T22667] loop6: partition table partially beyond EOD, truncated [ 1118.779748][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.844347][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.883673][ T5833] usb 9-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1118.927761][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.980724][ T5833] usb 9-1: config 0 descriptor?? [ 1119.293089][ T30] audit: type=1326 audit(1766008831.543:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.5.4776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1119.386579][ T30] audit: type=1326 audit(1766008831.623:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.5.4776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1119.531760][ T30] audit: type=1326 audit(1766008831.633:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.5.4776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1119.697945][ T30] audit: type=1326 audit(1766008831.633:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.5.4776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1120.159301][T22690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.221143][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.234570][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.331603][ T5833] usbhid 9-1:0.0: can't add hid device: -71 [ 1121.371174][ T5833] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1121.430062][ T5833] usb 9-1: USB disconnect, device number 17 [ 1121.730480][ T30] audit: type=1326 audit(1766008833.983:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.8.4783" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43539 code=0x0 [ 1122.322894][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4787'. [ 1122.790788][T22724] loop6: detected capacity change from 0 to 7 [ 1122.818959][T22724] loop6: [ 1122.823260][T22724] loop6: partition table partially beyond EOD, truncated [ 1124.065646][ T30] audit: type=1326 audit(1766008836.313:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.247530][T22750] loop2: detected capacity change from 0 to 7 [ 1124.262528][T22750] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1124.294279][ T30] audit: type=1326 audit(1766008836.323:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.341404][T22750] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1124.378703][T22750] Dev loop2: unable to read RDB block 7 [ 1124.388155][ T30] audit: type=1326 audit(1766008836.323:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.400069][T22750] loop2: unable to read partition table [ 1124.442012][T22750] loop2: partition table beyond EOD, truncated [ 1124.450289][ T30] audit: type=1326 audit(1766008836.333:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.473261][ T30] audit: type=1326 audit(1766008836.333:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.495597][ T30] audit: type=1326 audit(1766008836.343:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.519845][T22750] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1124.559769][ T30] audit: type=1326 audit(1766008836.383:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.664071][ T30] audit: type=1326 audit(1766008836.413:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.772907][ T30] audit: type=1326 audit(1766008836.413:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1124.864661][ T30] audit: type=1326 audit(1766008836.413:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22733 comm="syz.8.4793" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1125.137357][T22763] loop2: detected capacity change from 0 to 7 [ 1125.150482][ T6123] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1125.166286][ T6123] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1125.175972][T22764] loop6: detected capacity change from 0 to 7 [ 1125.176243][ T6123] Dev loop2: unable to read RDB block 7 [ 1125.195225][ T6123] loop2: unable to read partition table [ 1125.197387][T22764] loop6: [ 1125.202836][ T6123] loop2: partition table beyond EOD, truncated [ 1125.210880][T22764] loop6: partition table partially beyond EOD, truncated [ 1125.247178][T22763] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1125.274188][T22763] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1125.296034][T22763] Dev loop2: unable to read RDB block 7 [ 1125.312193][T22763] loop2: unable to read partition table [ 1125.335145][T22763] loop2: partition table beyond EOD, truncated [ 1125.359640][T22763] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1125.396373][T22768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1125.544564][T22770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4805'. [ 1125.597720][T22773] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1125.813286][T22781] loop6: detected capacity change from 0 to 7 [ 1125.843602][ T6123] loop6: [ 1125.850818][ T6123] loop6: partition table partially beyond EOD, truncated [ 1125.885461][T22781] loop6: [ 1125.888491][T22781] loop6: partition table partially beyond EOD, truncated [ 1125.968600][T22783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1126.039912][ T5833] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1126.164339][T22791] vlan2: entered promiscuous mode [ 1126.229672][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 1126.246475][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.271092][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.297449][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1126.327123][ T5833] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1126.355056][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.408547][ T5833] usb 7-1: config 0 descriptor?? [ 1126.725491][T22802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4815'. [ 1126.887558][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0067/input/input73 [ 1127.123782][ T5833] microsoft 0003:045E:07DA.0067: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1127.440763][T22809] kvm: emulating exchange as write [ 1127.819350][T22780] IPv6: sit1: Disabled Multicast RS [ 1127.923474][T22780] sit1: entered allmulticast mode [ 1128.210404][ T6460] usb 7-1: reset high-speed USB device number 102 using dummy_hcd [ 1128.707964][ T30] audit: type=1326 audit(1766008840.933:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.5.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1128.830490][ T30] audit: type=1326 audit(1766008840.943:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.5.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1129.086823][T22815] syzkaller1: entered promiscuous mode [ 1129.105555][T22815] syzkaller1: entered allmulticast mode [ 1129.168858][ T5833] usb 7-1: USB disconnect, device number 102 [ 1129.799990][ T5833] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1129.970556][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 1129.998626][ T5833] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.046678][ T5833] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1130.147502][ T5833] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1130.190043][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.199766][ T5833] usb 6-1: Product: syz [ 1130.203969][ T5833] usb 6-1: Manufacturer: syz [ 1130.253802][ T5833] usb 6-1: SerialNumber: syz [ 1130.497558][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1130.570490][ T5833] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1130.579936][T22825] bond_slave_0: entered promiscuous mode [ 1130.585879][T22825] bond_slave_1: entered promiscuous mode [ 1130.608878][ T5833] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1130.616712][T22825] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1130.629202][ T5833] imon:imon_probe: failed to initialize context! [ 1130.633014][T22836] loop2: detected capacity change from 0 to 7 [ 1130.650615][ T5833] imon 6-1:155.0: unable to register, err -19 [ 1130.662347][T22825] bond_slave_0: left promiscuous mode [ 1130.667783][T22825] bond_slave_1: left promiscuous mode [ 1130.723285][ T6226] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1130.734857][ T6226] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1130.765399][ T5833] usb 6-1: USB disconnect, device number 123 [ 1130.773506][ T6226] Dev loop2: unable to read RDB block 7 [ 1130.805634][ T6226] loop2: unable to read partition table [ 1130.826355][ T6226] loop2: partition table beyond EOD, truncated [ 1130.842488][T22836] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1130.879965][T22836] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1130.892617][T22836] Dev loop2: unable to read RDB block 7 [ 1130.908573][T22836] loop2: unable to read partition table [ 1130.931720][T22836] loop2: partition table beyond EOD, truncated [ 1130.944446][T22836] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1131.258403][T22844] loop6: detected capacity change from 0 to 7 [ 1131.268711][ T6123] loop6: [ 1131.275533][ T6123] loop6: partition table partially beyond EOD, truncated [ 1131.284933][T22844] loop6: [ 1131.287942][T22844] loop6: partition table partially beyond EOD, truncated [ 1131.292728][T22846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1131.513541][T22848] loop2: detected capacity change from 0 to 7 [ 1131.550269][T22848] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1131.571117][T22848] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1131.577876][T22848] Dev loop2: unable to read RDB block 7 [ 1131.590173][T22854] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1131.632996][T22848] loop2: unable to read partition table [ 1131.659430][T22848] loop2: partition table beyond EOD, truncated [ 1131.708366][T22848] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1131.753468][T22858] netlink: 'syz.7.4832': attribute type 1 has an invalid length. [ 1131.881846][T22863] loop6: detected capacity change from 0 to 7 [ 1131.922204][T22858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1131.945274][T22863] loop6: [ 1131.959865][T22863] loop6: partition table partially beyond EOD, truncated [ 1132.199971][ T5833] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1132.431123][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4835'. [ 1132.539093][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1132.539119][ T30] audit: type=1326 audit(1766008844.783:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1132.689981][ T30] audit: type=1326 audit(1766008844.823:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1132.763597][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4839'. [ 1132.852234][ T30] audit: type=1326 audit(1766008844.823:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1132.931333][ T30] audit: type=1326 audit(1766008844.823:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1133.038914][ T30] audit: type=1326 audit(1766008844.823:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1133.311158][ T30] audit: type=1326 audit(1766008844.823:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22849 comm="syz.5.4829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1134.869742][ T5922] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1135.041858][ T5922] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1135.057596][ T5922] usb 6-1: config 0 has no interface number 0 [ 1135.066284][ T5922] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1135.082550][ T5922] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x8F has invalid maxpacket 512, setting to 64 [ 1135.096239][ T5922] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1135.111892][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.130455][ T5922] usb 6-1: Product: syz [ 1135.142720][ T5922] usb 6-1: Manufacturer: syz [ 1135.152689][ T5922] usb 6-1: SerialNumber: syz [ 1135.167383][ T5922] usb 6-1: config 0 descriptor?? [ 1135.180394][T22916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.201846][T22916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.216514][ T5922] smsc95xx v2.0.0 [ 1135.332044][T22920] loop6: detected capacity change from 0 to 7 [ 1135.339105][T22920] loop6: [ 1135.344987][T22920] loop6: partition table partially beyond EOD, truncated [ 1135.500371][T22921] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.523862][T22921] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.652920][T22928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1135.717475][T22916] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1135.769295][ T5922] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1135.793323][T22916] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1135.809270][T22930] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1135.810862][ T5922] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1135.833374][T22923] batman_adv: batadv0: Adding interface: dummy0 [ 1135.845810][T22923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.884322][T22923] batman_adv: batadv0: Interface activated: dummy0 [ 1135.893006][T22932] loop2: detected capacity change from 0 to 7 [ 1135.910617][ T6226] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1135.947159][ T6226] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1135.955731][ T6226] Dev loop2: unable to read RDB block 7 [ 1135.966176][ T6226] loop2: unable to read partition table [ 1135.990100][ T6226] loop2: partition table beyond EOD, truncated [ 1136.001127][T22932] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1136.027470][T22932] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1136.039887][T22932] Dev loop2: unable to read RDB block 7 [ 1136.045580][T22932] loop2: unable to read partition table [ 1136.052357][T22932] loop2: partition table beyond EOD, truncated [ 1136.068802][T22932] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1136.100491][T22936] loop6: detected capacity change from 0 to 7 [ 1136.107878][T22936] loop6: [ 1136.112426][T22936] loop6: partition table partially beyond EOD, truncated [ 1136.322546][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4859'. [ 1136.473303][T22946] vlan2: entered promiscuous mode [ 1136.516089][ T5922] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1136.548021][ T5922] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1136.593385][ T5922] usb 6-1: USB disconnect, device number 124 [ 1136.830248][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4863'. [ 1136.850897][T22953] syz_tun: entered promiscuous mode [ 1136.856878][T22953] macvtap1: entered promiscuous mode [ 1136.864425][T22953] macvtap1: entered allmulticast mode [ 1136.870514][T22953] syz_tun: entered allmulticast mode [ 1136.888900][T22953] syz_tun: left allmulticast mode [ 1136.904612][T22953] syz_tun: left promiscuous mode [ 1137.930051][ T5824] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1137.956832][ T30] audit: type=1326 audit(1766008850.203:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.047544][ T30] audit: type=1326 audit(1766008850.203:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.169691][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 1138.179444][ T30] audit: type=1326 audit(1766008850.243:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.185988][ T5824] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1138.261650][T22975] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1138.273955][ T30] audit: type=1326 audit(1766008850.243:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.365088][ T5824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1138.370184][ T30] audit: type=1326 audit(1766008850.243:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.490122][ T5824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1138.500425][ T30] audit: type=1326 audit(1766008850.243:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.565951][ T30] audit: type=1326 audit(1766008850.243:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.638775][ T5824] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.663881][ T30] audit: type=1326 audit(1766008850.243:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.751459][ T30] audit: type=1326 audit(1766008850.253:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.833907][ T30] audit: type=1326 audit(1766008850.263:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.6.4857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1138.879235][ T5824] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1138.900589][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4873'. [ 1138.909726][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.017380][T22986] loop2: detected capacity change from 0 to 7 [ 1139.034016][T22982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1139.071307][T22986] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1139.112650][T22986] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1139.134920][ T5824] usb 6-1: GET_CAPABILITIES returned 0 [ 1139.142088][ T5824] usbtmc 6-1:16.0: can't read capabilities [ 1139.160206][T22986] Dev loop2: unable to read RDB block 7 [ 1139.190125][T22986] loop2: unable to read partition table [ 1139.210443][T22986] loop2: partition table beyond EOD, truncated [ 1139.235392][T22986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1139.384131][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.393656][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.402787][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.472467][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.481631][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.546169][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.555304][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.564380][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.606528][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.615679][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.624773][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.639411][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.648552][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.657747][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.690096][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1139.699341][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1139.913264][ T5833] usb 6-1: USB disconnect, device number 125 [ 1139.960122][ T6460] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1140.101778][T16743] hid-generic 0000:0003:0001.0068: item fetching failed at offset 0/2 [ 1140.115375][T16743] hid-generic 0000:0003:0001.0068: probe with driver hid-generic failed with error -22 [ 1140.150729][ T6460] usb 7-1: Using ep0 maxpacket: 32 [ 1140.161292][ T6460] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1140.177548][ T6460] usb 7-1: config 0 has no interface number 0 [ 1140.185060][ T6460] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1140.196467][ T6460] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1140.208770][ T6460] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1140.225640][ T6460] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1140.248468][ T6460] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1140.290458][ T6460] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1140.315395][ T6460] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1140.328744][ T6460] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1140.345131][ T6460] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.368678][ T6460] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1140.378016][ T6460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.386996][ T6460] usb 7-1: Product: syz [ 1140.393640][ T6460] usb 7-1: Manufacturer: syz [ 1140.398420][ T6460] usb 7-1: SerialNumber: syz [ 1140.414976][ T6460] usb 7-1: config 0 descriptor?? [ 1140.435074][T22991] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1140.463931][ T6460] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1140.478019][ T6460] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1140.783750][ T6460] hid-generic 0000:0004:0000.0069: unknown main item tag 0x0 [ 1140.793456][ T6460] hid-generic 0000:0004:0000.0069: unknown main item tag 0x0 [ 1140.801597][ T6460] hid-generic 0000:0004:0000.0069: unknown main item tag 0x0 [ 1140.814108][T16743] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1140.822084][ T6460] hid-generic 0000:0004:0000.0069: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1140.962291][ T6460] usb 7-1: USB disconnect, device number 104 [ 1140.982054][T23018] fido_id[23018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1140.999918][T16743] usb 6-1: Using ep0 maxpacket: 32 [ 1141.018368][T16743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.049285][T16743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.069818][T16743] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1141.084671][T16743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.110619][T16743] usb 6-1: config 0 descriptor?? [ 1141.553240][T23009] usb usb8: usbfs: process 23009 (syz.5.4882) did not claim interface 0 before use [ 1141.576774][T23009] fuse: Unknown parameter '18446744073709551615' [ 1141.591930][ T5824] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1141.662137][T23031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1141.693039][T17726] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1141.750302][ T5824] usb 9-1: Using ep0 maxpacket: 16 [ 1141.760131][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.794589][T17726] dvb_usb_dibusb_mc 3-1:0.254: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 1141.795346][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.849081][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.862700][ T5824] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.874200][ T5824] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.892512][ T5824] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1141.904378][ T5824] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1141.914586][ T5824] usb 9-1: Manufacturer: syz [ 1141.939005][ T5824] usb 9-1: config 0 descriptor?? [ 1141.948123][T17726] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in cold state, will try to load a firmware [ 1142.010335][T17726] usb 3-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1142.041372][T17726] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1142.238630][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4889'. [ 1142.489789][ T5824] rc_core: IR keymap rc-hauppauge not found [ 1142.505995][ T5824] Registered IR keymap rc-empty [ 1142.520072][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1142.571224][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1142.626533][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1142.701651][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4886'. [ 1142.861334][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input75 [ 1142.886379][T23048] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4886'. [ 1142.970350][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.007814][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.029746][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.076147][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.139875][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.186752][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.216156][T23051] loop6: detected capacity change from 0 to 7 [ 1143.224425][T23051] loop6: [ 1143.227560][T23051] loop6: partition table partially beyond EOD, truncated [ 1143.299809][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.349981][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.379944][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.432081][ T5824] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.492838][ T5824] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1143.529351][ T5824] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1143.598618][T16743] usbhid 6-1:0.0: can't add hid device: -71 [ 1143.631959][T16743] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1143.677524][T16743] usb 6-1: USB disconnect, device number 126 [ 1144.074624][T23060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.104308][T23060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.137122][T23060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.149042][T23062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.161657][T23060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.170152][T23062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.240869][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1144.299783][T16743] usb 9-1: USB disconnect, device number 18 [ 1144.503012][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4896'. [ 1144.731449][T23072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4899'. [ 1144.767940][T23072] syz_tun: entered promiscuous mode [ 1144.775451][T23072] macvtap1: entered promiscuous mode [ 1144.781063][T23072] macvtap1: entered allmulticast mode [ 1144.786688][T23072] syz_tun: entered allmulticast mode [ 1144.797379][T23075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4900'. [ 1144.807934][T23072] syz_tun: left allmulticast mode [ 1144.813509][T23072] syz_tun: left promiscuous mode [ 1144.829755][ T5833] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1144.870955][T23075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1144.989774][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 1145.001668][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.025757][ T5833] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.050411][ T5833] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.069599][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.077756][ T5833] usb 6-1: Product: syz [ 1145.089928][ T5833] usb 6-1: Manufacturer: syz [ 1145.094595][ T5833] usb 6-1: SerialNumber: syz [ 1145.149853][T16743] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1145.309820][T16743] usb 7-1: Using ep0 maxpacket: 16 [ 1145.316995][T16743] usb 7-1: config 0 has an invalid interface number: 204 but max is 0 [ 1145.333878][T16743] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.348194][T16743] usb 7-1: config 0 has no interface number 0 [ 1145.362663][T16743] usb 7-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1145.389446][T16743] usb 7-1: config 0 interface 204 altsetting 0 endpoint 0xC has an invalid bInterval 58, changing to 9 [ 1145.401938][T23081] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1145.408505][T23081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1145.418424][T16743] usb 7-1: config 0 interface 204 altsetting 0 endpoint 0x3 has invalid maxpacket 29797, setting to 1024 [ 1145.433992][T23081] vhci_hcd vhci_hcd.0: Device attached [ 1145.446273][T16743] usb 7-1: config 0 interface 204 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1145.474328][T16743] usb 7-1: config 0 interface 204 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 1145.493718][T16743] usb 7-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=1a.0e [ 1145.510115][T16743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.526582][T16743] usb 7-1: Product: syz [ 1145.535747][T16743] usb 7-1: Manufacturer: syz [ 1145.547635][T16743] usb 7-1: SerialNumber: syz [ 1145.575479][T16743] usb 7-1: config 0 descriptor?? [ 1145.593775][T23075] raw-gadget.6 gadget.6: fail, usb_ep_enable returned -22 [ 1145.700027][ T5824] usb 50-1: SetAddress Request (6) to port 0 [ 1145.707565][ T5824] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1145.859142][T23075] veth0_to_batadv: mtu less than device minimum [ 1145.880321][T16743] usb 7-1: USB disconnect, device number 105 [ 1146.153224][T23082] vhci_hcd: connection reset by peer [ 1146.162158][T13429] vhci_hcd vhci_hcd.8: stop threads [ 1146.176219][T13429] vhci_hcd vhci_hcd.8: release socket [ 1146.191333][T13429] vhci_hcd vhci_hcd.8: disconnect device [ 1146.635636][T23096] netlink: 'syz.2.4904': attribute type 1 has an invalid length. [ 1146.682188][T23096] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1146.829676][T16743] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1146.994923][T16743] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1147.003832][T16743] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1147.015003][T16743] usb 7-1: config 0 has no interface number 0 [ 1147.028800][T16743] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1147.043500][T16743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.060150][T16743] usb 7-1: Product: syz [ 1147.076969][T16743] usb 7-1: Manufacturer: syz [ 1147.105474][T16743] usb 7-1: SerialNumber: syz [ 1147.128367][T16743] usb 7-1: config 0 descriptor?? [ 1147.291520][T23105] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1147.568808][T16743] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1147.584256][T16743] uvcvideo 7-1:0.64: No valid video chain found. [ 1147.601573][T16743] usb 7-1: USB disconnect, device number 106 [ 1147.611826][T23116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.692536][ T5833] usb 6-1: 0:2 : does not exist [ 1147.753002][ T5833] usb 6-1: unit 6 not found! [ 1147.790124][ T5833] usb 6-1: USB disconnect, device number 127 [ 1147.806623][T23120] loop6: detected capacity change from 0 to 7 [ 1147.814281][T23120] loop6: [ 1147.817624][T23120] loop6: partition table partially beyond EOD, truncated [ 1148.004788][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1148.015715][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4914'. [ 1148.131489][T23125] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1148.338341][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1148.338361][ T30] audit: type=1326 audit(1766008860.583:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.469331][ T30] audit: type=1326 audit(1766008860.613:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.552442][ T30] audit: type=1326 audit(1766008860.613:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.635281][ T30] audit: type=1326 audit(1766008860.613:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.703579][ T30] audit: type=1326 audit(1766008860.623:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.755075][ T30] audit: type=1326 audit(1766008860.623:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.824207][ T30] audit: type=1326 audit(1766008860.623:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.879864][ T30] audit: type=1326 audit(1766008860.623:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.905458][ T30] audit: type=1326 audit(1766008860.633:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1148.938646][ T30] audit: type=1326 audit(1766008860.633:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1149.184983][T23137] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1149.191670][T23137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1149.222296][T23137] vhci_hcd vhci_hcd.0: Device attached [ 1149.336343][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1149.489891][T23086] usb 46-1: SetAddress Request (47) to port 0 [ 1149.500412][T23086] usb 46-1: new SuperSpeed USB device number 47 using vhci_hcd [ 1149.686993][T23138] vhci_hcd: connection reset by peer [ 1149.696095][ T4786] vhci_hcd vhci_hcd.6: stop threads [ 1149.706210][ T4786] vhci_hcd vhci_hcd.6: release socket [ 1149.722454][ T4786] vhci_hcd vhci_hcd.6: disconnect device [ 1150.431481][T23154] loop2: detected capacity change from 0 to 7 [ 1150.456696][T23154] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1150.478988][T23154] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1150.493954][T23154] Dev loop2: unable to read RDB block 7 [ 1150.500773][T23154] loop2: unable to read partition table [ 1150.506680][T23154] loop2: partition table beyond EOD, truncated [ 1150.531106][T23154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1150.652324][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4922'. [ 1150.692377][T23156] syz_tun: entered promiscuous mode [ 1150.709362][T23156] macvtap2: entered promiscuous mode [ 1150.719700][T23156] macvtap2: entered allmulticast mode [ 1150.727348][T23160] loop2: detected capacity change from 0 to 7 [ 1150.736079][T23160] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1150.740278][T23156] syz_tun: entered allmulticast mode [ 1150.748199][T23160] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1150.758807][T23160] Dev loop2: unable to read RDB block 7 [ 1150.780056][T23159] syz_tun: left allmulticast mode [ 1150.785302][T23159] syz_tun: left promiscuous mode [ 1150.800582][T23160] loop2: unable to read partition table [ 1150.806398][T23160] loop2: partition table beyond EOD, truncated [ 1150.821100][ T5824] usb 50-1: device descriptor read/8, error -110 [ 1150.832294][T23160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1151.099184][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4926'. [ 1151.127341][T23167] vlan2: entered promiscuous mode [ 1151.211771][ T5824] usb usb50-port1: attempt power cycle [ 1151.782824][ T5824] usb usb50-port1: unable to enumerate USB device [ 1152.014594][T23194] loop6: detected capacity change from 0 to 7 [ 1152.037514][T23194] loop6: [ 1152.040900][T23194] loop6: partition table partially beyond EOD, truncated [ 1152.730833][T23203] x_tables: duplicate underflow at hook 3 [ 1152.842456][T23208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1153.285286][T23216] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1153.291946][T23216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1153.344886][T23216] vhci_hcd vhci_hcd.0: Device attached [ 1153.642022][ T5824] usb 48-1: SetAddress Request (2) to port 0 [ 1153.705036][ T5824] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1153.961614][T23230] loop2: detected capacity change from 0 to 7 [ 1153.980608][T23230] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1154.020666][T23217] vhci_hcd: connection reset by peer [ 1154.026374][T23230] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1154.063335][T14461] vhci_hcd vhci_hcd.7: stop threads [ 1154.072327][T14461] vhci_hcd vhci_hcd.7: release socket [ 1154.077854][T23230] Dev loop2: unable to read RDB block 7 [ 1154.096210][T14461] vhci_hcd vhci_hcd.7: disconnect device [ 1154.109141][T23230] loop2: unable to read partition table [ 1154.179462][T23230] loop2: partition table beyond EOD, truncated [ 1154.214574][T23230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1154.576004][T23086] usb 46-1: device descriptor read/8, error -110 [ 1154.975478][T23243] mmap: syz.8.4947 (23243): VmData 37371904 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1155.020984][T23086] usb usb46-port1: attempt power cycle [ 1155.183346][T23245] netlink: 'syz.6.4948': attribute type 1 has an invalid length. [ 1155.300671][T23245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1155.335824][T23251] syzkaller0: entered promiscuous mode [ 1155.364954][T23251] syzkaller0: entered allmulticast mode [ 1155.601266][T23086] usb usb46-port1: unable to enumerate USB device [ 1155.637334][T23255] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1155.807135][T23259] loop6: detected capacity change from 0 to 7 [ 1155.819773][T23086] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1155.828959][T23259] loop6: [ 1155.846074][T23259] loop6: partition table partially beyond EOD, truncated [ 1155.980883][T23086] usb 7-1: device descriptor read/64, error -71 [ 1156.115217][T23263] fuse: Bad value for 'user_id' [ 1156.139725][T23263] fuse: Bad value for 'user_id' [ 1156.159386][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4955'. [ 1156.249633][T23086] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1156.399872][T23086] usb 7-1: device descriptor read/64, error -71 [ 1156.550017][T23086] usb usb7-port1: attempt power cycle [ 1156.605908][T23278] syzkaller0: entered promiscuous mode [ 1156.612683][T23278] syzkaller0: entered allmulticast mode [ 1156.679699][T23278] loop7: detected capacity change from 0 to 16384 [ 1156.842979][ C1] I/O error, dev loop7, sector 15984 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1156.849906][T23278] loop7: detected capacity change from 16384 to 0 [ 1156.853401][ C1] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 1156.939758][T23086] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1157.001856][T23086] usb 7-1: device descriptor read/8, error -71 [ 1157.270503][T23086] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1157.323341][T23086] usb 7-1: device descriptor read/8, error -71 [ 1157.452098][T23086] usb usb7-port1: unable to enumerate USB device [ 1158.227178][T23294] loop2: detected capacity change from 0 to 7 [ 1158.257029][T23294] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1158.288514][T23294] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1158.308625][T23294] Dev loop2: unable to read RDB block 7 [ 1158.323983][T23294] loop2: unable to read partition table [ 1158.360884][T23294] loop2: partition table beyond EOD, truncated [ 1158.382983][T23294] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1158.487969][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1158.488000][ T30] audit: type=1326 audit(1766008870.733:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23287 comm="syz.8.4961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1158.578539][ T30] audit: type=1326 audit(1766008870.783:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23287 comm="syz.8.4961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1158.644044][ T30] audit: type=1326 audit(1766008870.783:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23287 comm="syz.8.4961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1158.701624][T23297] loop2: detected capacity change from 0 to 7 [ 1158.735419][T23297] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1158.755198][ T30] audit: type=1326 audit(1766008870.783:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23287 comm="syz.8.4961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1158.769611][T23297] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1158.822268][ T5824] usb 48-1: device descriptor read/8, error -110 [ 1158.917027][T23305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1158.931198][T23297] Dev loop2: unable to read RDB block 7 [ 1158.945216][T23297] loop2: unable to read partition table [ 1158.974708][T23297] loop2: partition table beyond EOD, truncated [ 1158.985236][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4964'. [ 1159.006421][T23297] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1159.117374][T23302] syz_tun: entered promiscuous mode [ 1159.166099][T23302] macvtap2: entered promiscuous mode [ 1159.186520][T23302] macvtap2: entered allmulticast mode [ 1159.194167][T23302] syz_tun: entered allmulticast mode [ 1159.242239][ T5824] usb usb48-port1: attempt power cycle [ 1159.851789][ T5824] usb usb48-port1: unable to enumerate USB device [ 1160.345878][T23331] loop6: detected capacity change from 0 to 7 [ 1160.377789][T23331] loop6: [ 1160.393403][T23331] loop6: partition table partially beyond EOD, truncated [ 1160.805459][T23335] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1161.513108][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1161.691319][T23349] loop2: detected capacity change from 0 to 7 [ 1161.698342][T23349] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1161.709135][T23349] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1161.717949][T23349] Dev loop2: unable to read RDB block 7 [ 1161.728198][T23349] loop2: unable to read partition table [ 1161.741112][T23349] loop2: partition table beyond EOD, truncated [ 1161.747393][T23349] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1161.975705][T23351] netlink: 'syz.6.4982': attribute type 1 has an invalid length. [ 1162.120213][T23351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1162.138646][T23359] random: crng reseeded on system resumption [ 1162.277880][T23369] loop2: detected capacity change from 0 to 7 [ 1162.285193][T23369] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1162.296156][T23369] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1162.303212][T23369] Dev loop2: unable to read RDB block 7 [ 1162.309993][T23369] loop2: unable to read partition table [ 1162.315848][T23369] loop2: partition table beyond EOD, truncated [ 1162.323219][T23369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1162.481215][T23366] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4986'. [ 1163.368406][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4999'. [ 1163.405419][T23384] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4990'. [ 1164.837362][T23407] kvm: kvm [23406]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1164.922491][ T30] audit: type=1326 audit(1766008877.173:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1164.956539][ T30] audit: type=1326 audit(1766008877.193:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1164.992500][ T30] audit: type=1326 audit(1766008877.193:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1165.023253][ T30] audit: type=1326 audit(1766008877.193:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1165.293981][ T30] audit: type=1326 audit(1766008877.193:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1166.439641][ T30] audit: type=1326 audit(1766008877.203:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1166.527985][ T30] audit: type=1326 audit(1766008877.203:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1166.698590][ T30] audit: type=1326 audit(1766008877.203:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1167.201226][ T30] audit: type=1326 audit(1766008877.203:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1167.298822][ T30] audit: type=1326 audit(1766008877.203:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23402 comm="syz.6.4995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1170.569414][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1171.785855][T23453] netlink: 'syz.5.5008': attribute type 1 has an invalid length. [ 1172.147130][T23453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1172.190614][T23456] trusted_key: encrypted_key: keylen parameter is missing [ 1173.042766][T23462] loop2: detected capacity change from 0 to 7 [ 1173.177046][ T6123] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1173.239341][ T6123] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1173.446734][ T6123] Dev loop2: unable to read RDB block 7 [ 1173.511601][ T6123] loop2: unable to read partition table [ 1173.534894][ T6123] loop2: partition table beyond EOD, truncated [ 1173.575985][T23462] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1173.929361][T23462] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1174.031964][T23462] Dev loop2: unable to read RDB block 7 [ 1174.037644][T23462] loop2: unable to read partition table [ 1174.068472][T23462] loop2: partition table beyond EOD, truncated [ 1174.118422][T23462] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1179.387769][ C1] sched: DL replenish lagged too much [ 1182.766633][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.781568][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.023770][ T5203] udevd[5203]: worker [20973] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1207.845385][T17726] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1208.396630][T17726] dvb_usb_dibusb_mc 3-1:0.199: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 1246.106678][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.138759][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1276.719750][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1276.726751][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23405/1:b..l [ 1276.735622][ C0] rcu: (detected by 0, t=10503 jiffies, g=163021, q=1719 ncpus=2) [ 1276.743554][ C0] task:syz.6.4995 state:R running task stack:25360 pid:23405 tgid:23402 ppid:20475 task_flags:0x40044c flags:0x10080000 [ 1276.758466][ C0] Call Trace: [ 1276.761792][ C0] [ 1276.764761][ C0] __schedule+0x14bc/0x5000 [ 1276.769313][ C0] ? rcu_is_watching+0x15/0xb0 [ 1276.774133][ C0] ? __pfx___schedule+0x10/0x10 [ 1276.779046][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1276.784371][ C0] preempt_schedule_irq+0xb5/0x150 [ 1276.789517][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1276.795276][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1276.800291][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1276.806141][ C0] irqentry_exit+0x5d8/0x660 [ 1276.810781][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1276.816807][ C0] RIP: 0010:lock_release+0x2a6/0x3b0 [ 1276.822145][ C0] Code: 4d 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 52 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 ba 06 e0 10 <48> 3b 44 24 28 75 75 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 [ 1276.842127][ C0] RSP: 0000:ffffc900042dead0 EFLAGS: 00000206 [ 1276.848385][ C0] RAX: 82a80b54ba2fe200 RBX: 0000000000000202 RCX: 82a80b54ba2fe200 [ 1276.856413][ C0] RDX: 0000000000000001 RSI: ffffffff8d978ff2 RDI: ffffffff8bc08360 [ 1276.864437][ C0] RBP: ffff88807a50e6d8 R08: ffffc900042def70 R09: 0000000000000000 [ 1276.872456][ C0] R10: ffffc900042dec58 R11: fffff5200085bd8d R12: 0000000000000001 [ 1276.880459][ C0] R13: 0000000000000001 R14: ffffffff8df41a20 R15: ffff88807a50db80 [ 1276.888491][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1276.893651][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1276.898810][ C0] unwind_next_frame+0x1ab1/0x23d0 [ 1276.903970][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1276.909116][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 1276.914351][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1276.920556][ C0] arch_stack_walk+0x11c/0x150 [ 1276.925366][ C0] ? folios_put_refs+0x584/0x670 [ 1276.930352][ C0] stack_trace_save+0x9c/0xe0 [ 1276.935186][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1276.940598][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1276.945673][ C0] save_stack+0xf5/0x1f0 [ 1276.949964][ C0] ? __pfx_save_stack+0x10/0x10 [ 1276.954853][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 1276.960104][ C0] ? page_ext_put+0x97/0xc0 [ 1276.964650][ C0] __reset_page_owner+0x71/0x1f0 [ 1276.969626][ C0] free_unref_folios+0xdb3/0x14f0 [ 1276.974687][ C0] ? __page_cache_release+0x8a6/0xbb0 [ 1276.980101][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 1276.986116][ C0] folios_put_refs+0x584/0x670 [ 1276.990941][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1276.996229][ C0] ? free_swap_cache+0x109/0x300 [ 1277.001171][ C0] free_pages_and_swap_cache+0x277/0x520 [ 1277.006810][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1277.012192][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1277.018347][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1277.023583][ C0] ? tlb_table_flush+0x145/0x410 [ 1277.028525][ C0] tlb_flush_mmu+0x3a0/0x680 [ 1277.033126][ C0] ? unmap_page_range+0x393d/0x4170 [ 1277.038329][ C0] unmap_page_range+0x3962/0x4170 [ 1277.043382][ C0] ? mas_next_slot+0xc20/0xcf0 [ 1277.048170][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1277.053546][ C0] ? mas_find+0xb0e/0xd30 [ 1277.057878][ C0] ? unmap_vmas+0x144/0x580 [ 1277.062398][ C0] unmap_vmas+0x399/0x580 [ 1277.066734][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1277.071618][ C0] exit_mmap+0x239/0xb10 [ 1277.075876][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1277.081082][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1277.085849][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1277.091529][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1277.096227][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1277.101454][ C0] __mmput+0x118/0x430 [ 1277.105530][ C0] exit_mm+0x1da/0x2c0 [ 1277.109610][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1277.114244][ C0] do_exit+0x658/0x2310 [ 1277.118411][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1277.123449][ C0] ? __pfx_do_exit+0x10/0x10 [ 1277.128056][ C0] do_group_exit+0x21c/0x2d0 [ 1277.132674][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.137871][ C0] get_signal+0x1285/0x1340 [ 1277.142392][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1277.147951][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1277.154126][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1277.159586][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 1277.164875][ C0] ? rcu_is_watching+0x15/0xb0 [ 1277.169648][ C0] __do_fast_syscall_32+0x3b4/0x590 [ 1277.174862][ C0] ? do_fast_syscall_32+0x34/0x80 [ 1277.179891][ C0] do_fast_syscall_32+0x34/0x80 [ 1277.184739][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.191077][ C0] RIP: 0023:0xf7f32539 [ 1277.195160][ C0] RSP: 002b:00000000f53e460c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1277.203607][ C0] RAX: fffffffffffffe00 RBX: 00000000f73f50b8 RCX: 0000000000000080 [ 1277.211591][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f50bc [ 1277.219561][ C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1277.227530][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1277.235497][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.243483][ C0] [ 1277.246571][ C0] rcu: rcu_preempt kthread starved for 615 jiffies! g163021 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1277.257709][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1277.267709][ C0] rcu: RCU grace-period kthread stack dump: [ 1277.273629][ C0] task:rcu_preempt state:R running task stack:27344 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1277.287175][ C0] Call Trace: [ 1277.290482][ C0] [ 1277.293448][ C0] __schedule+0x14bc/0x5000 [ 1277.297997][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.303218][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1277.309158][ C0] ? __pfx___schedule+0x10/0x10 [ 1277.314058][ C0] ? schedule+0x91/0x360 [ 1277.318332][ C0] schedule+0x165/0x360 [ 1277.322533][ C0] schedule_timeout+0x12b/0x270 [ 1277.327418][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1277.332807][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1277.338745][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1277.344074][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1277.349667][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1277.354562][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1277.360728][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1277.366045][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1277.371983][ C0] ? finish_swait+0xcd/0x1f0 [ 1277.376642][ C0] rcu_gp_kthread+0x99/0x390 [ 1277.381265][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1277.386490][ C0] ? __kthread_parkme+0x7b/0x200 [ 1277.391440][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1277.396537][ C0] kthread+0x711/0x8a0 [ 1277.400646][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1277.405878][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.410525][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.415761][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.420970][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.425595][ C0] ret_from_fork+0x599/0xb30 [ 1277.430227][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.435380][ C0] ? __switch_to_asm+0x39/0x70 [ 1277.440186][ C0] ? __switch_to_asm+0x33/0x70 [ 1277.444987][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.449592][ C0] ret_from_fork_asm+0x1a/0x30 [ 1277.454413][ C0] [ 1277.457455][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1277.463805][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1277.469049][ C1] NMI backtrace for cpu 1 [ 1277.469069][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.469105][ C1] Tainted: [L]=SOFTLOCKUP [ 1277.469115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.469131][ C1] RIP: 0010:__lock_acquire+0x2a2/0x2cf0 [ 1277.469154][ C1] Code: 01 00 00 4c 8b 84 24 28 01 00 00 4c 8b 74 24 08 4d 8d be 30 0b 00 00 83 fd 31 48 89 74 24 18 0f 83 14 28 00 00 48 89 6c 24 28 <48> 8d 04 ad 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 [ 1277.469175][ C1] RSP: 0018:ffffc90000a07ab0 EFLAGS: 00000087 [ 1277.469192][ C1] RAX: 00000000000000af RBX: 0000000000000000 RCX: ffffffff932763b0 [ 1277.469205][ C1] RDX: 0000000000000002 RSI: 0000000000000007 RDI: 0000000000000000 [ 1277.469215][ C1] RBP: 0000000000000002 R08: ffffffff81743f85 R09: ffffffff8df41a20 [ 1277.469227][ C1] R10: ffffc90000a07db8 R11: ffffffff81ada120 R12: 0000000000000000 [ 1277.469240][ C1] R13: 0000000000000002 R14: ffff88801cab5b80 R15: ffff88801cab66b0 [ 1277.469254][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1277.469268][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1277.469280][ C1] CR2: 00000000f3e80218 CR3: 000000007cafa000 CR4: 00000000003526f0 [ 1277.469296][ C1] Call Trace: [ 1277.469304][ C1] [ 1277.469315][ C1] ? rcu_is_watching+0x15/0xb0 [ 1277.469339][ C1] ? trace_netif_rx_exit+0x79/0x1d0 [ 1277.469367][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469391][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469410][ C1] lock_acquire+0x117/0x340 [ 1277.469431][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469455][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469474][ C1] ? handle_softirqs+0x27d/0x850 [ 1277.469493][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469513][ C1] unwind_next_frame+0xc2/0x23d0 [ 1277.469533][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469556][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1277.469577][ C1] ? net_rx_action+0x672/0xe50 [ 1277.469595][ C1] ? handle_softirqs+0x27d/0x850 [ 1277.469614][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1277.469642][ C1] arch_stack_walk+0x11c/0x150 [ 1277.469665][ C1] ? handle_softirqs+0x27d/0x850 [ 1277.469684][ C1] stack_trace_save+0x9c/0xe0 [ 1277.469711][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1277.469739][ C1] ? ip_output+0x29f/0x450 [ 1277.469759][ C1] kasan_save_track+0x3e/0x80 [ 1277.469776][ C1] ? kasan_save_track+0x3e/0x80 [ 1277.469793][ C1] ? kasan_save_free_info+0x46/0x50 [ 1277.469817][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1277.469835][ C1] ? kmem_cache_free+0x197/0x620 [ 1277.469853][ C1] ? skb_release_data+0x62d/0x7c0 [ 1277.469872][ C1] ? consume_skb+0x9e/0xf0 [ 1277.469890][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1277.469908][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1277.469927][ C1] ? nft_do_chain+0x40c/0x1920 [ 1277.469943][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1277.469960][ C1] ? nf_hook_slow+0xc5/0x220 [ 1277.469982][ C1] ? NF_HOOK+0x206/0x3a0 [ 1277.470005][ C1] ? NF_HOOK+0x30c/0x3a0 [ 1277.470028][ C1] ? __netif_receive_skb+0x143/0x380 [ 1277.470044][ C1] ? process_backlog+0x622/0x1500 [ 1277.470061][ C1] ? __napi_poll+0xae/0x320 [ 1277.470075][ C1] ? net_rx_action+0x672/0xe50 [ 1277.470093][ C1] ? handle_softirqs+0x27d/0x850 [ 1277.470128][ C1] kasan_save_free_info+0x46/0x50 [ 1277.470153][ C1] __kasan_slab_free+0x5c/0x80 [ 1277.470178][ C1] kmem_cache_free+0x197/0x620 [ 1277.470196][ C1] ? skb_release_data+0x62d/0x7c0 [ 1277.470218][ C1] skb_release_data+0x62d/0x7c0 [ 1277.470243][ C1] consume_skb+0x9e/0xf0 [ 1277.470262][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1277.470284][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1277.470302][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1277.470327][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1277.470346][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1277.470364][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.470385][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1277.470403][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.470427][ C1] nft_do_chain+0x40c/0x1920 [ 1277.470443][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1277.470468][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1277.470498][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1277.470518][ C1] nft_do_chain_inet+0x25d/0x340 [ 1277.470535][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1277.470553][ C1] ? ipt_do_table+0x2a3/0x1640 [ 1277.470571][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1277.470594][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1277.470612][ C1] nf_hook_slow+0xc5/0x220 [ 1277.470637][ C1] NF_HOOK+0x206/0x3a0 [ 1277.470662][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1277.470687][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1277.470710][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1277.470744][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1277.470770][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1277.470795][ C1] ? skb_dst+0x4f/0xd0 [ 1277.470818][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1277.470842][ C1] NF_HOOK+0x30c/0x3a0 [ 1277.470866][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1277.470889][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1277.470911][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1277.470934][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1277.470957][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1277.470984][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1277.471006][ C1] __netif_receive_skb+0x143/0x380 [ 1277.471023][ C1] ? process_backlog+0x2d9/0x1500 [ 1277.471041][ C1] process_backlog+0x622/0x1500 [ 1277.471066][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1277.471087][ C1] __napi_poll+0xae/0x320 [ 1277.471102][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1277.471119][ C1] net_rx_action+0x672/0xe50 [ 1277.471136][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1277.471158][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1277.471196][ C1] handle_softirqs+0x27d/0x850 [ 1277.471215][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1277.471235][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1277.471255][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1277.471280][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1277.471297][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1277.471319][ C1] irq_exit_rcu+0x9/0x30 [ 1277.471335][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1277.471351][ C1] [ 1277.471357][ C1] [ 1277.471364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1277.471382][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1277.471399][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1277.471413][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1277.471427][ C1] RAX: c5e96d95f6311d00 RBX: ffffffff81978fda RCX: c5e96d95f6311d00 [ 1277.471457][ C1] RDX: 0000000000000001 RSI: ffffffff8d7922ac RDI: ffffffff8bc08360 [ 1277.471469][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1277.471483][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f821f70 [ 1277.471496][ C1] R13: 1ffff11003956b70 R14: 0000000000000001 R15: 0000000000000001 [ 1277.471510][ C1] ? do_idle+0x1ea/0x520 [ 1277.471533][ C1] default_idle+0x13/0x20 [ 1277.471553][ C1] default_idle_call+0x73/0xb0 [ 1277.471573][ C1] do_idle+0x1ea/0x520 [ 1277.471591][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 1277.471611][ C1] ? __pfx_do_idle+0x10/0x10 [ 1277.471637][ C1] cpu_startup_entry+0x44/0x60 [ 1277.471657][ C1] start_secondary+0x101/0x110 [ 1277.471682][ C1] common_startup_64+0x13e/0x147 [ 1277.471712][ C1]