last executing test programs: 34m58.660379988s ago: executing program 2 (id=137): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x8, 0x2, 0x0, 0x0, [0x0], [0x0, 0xfffffffc], [0xfffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r3}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r4}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x260, &(0x7f0000000900)={[{0x83, 0x4e00, "8a85a02ff3a27af1fc8048f02b464376a30b2ee18dd42dc62e2c78b08904ff11766e1c507941c4ff770ab780af9c4630dcdb040998566e89f83f2e6dc077f9a736d1c13bc049a3dd8123fd456aa0c40667361864310bebd5ac5d72c2ae403db7fbffbee63c5b81e55aa079d9a0e95b8169cdb81c8a2f58ed06c88f711e3c0243deca2d"}, {0xdf, 0x4e00, "4665e1628408d5ef7ac94c811bbc8261c9c2823906e86bac1f5bdf65b065ea9ac9af9e746bc8aa2730367b8a5c4a6adb5d69ecb1ec833266d51c2053d6161614fc87104474b2b4b413a74536723eead77fa9ef12b8b363295364462e79e63b95ba1dbf63e5be507ce3c3dd47c4a293fdaaeb00a8261c2dc28dc7ac41ee692af53f88ef8e66ece07c4fec99b8ad524ec5aa50ba0b0e159f2807af753ddaa5e4e82a7b6335a1d13987e406fd20e91b6a43f167e655e99f26b9c6f3d8880f9cfdf6dadf574e7aa93bde7734476540637cdace3fdf96f3f374cc1725e7b8d21e45"}, {0xcb, 0x4e00, "6059538cea3150aafbaa261076f14241b5e97c50d7e0d4ea5918fdb38c1c818d267078eae2c44f09ad513776db6de21351cda384b03fdbf94c7bb9ec26cac4aeb2126a7f38d0647d5be0aa13cc8c79372c7a5a2ba33fee594bbc0a2c6a2f9ba97f4e5c1049e558fe3b64ed43d8d504ffd764ca7aba8e9e600ea6b3ced9004cb9b2dcd984ccf54042c4a6cff65e3949c82fd369f00ca668bffa39d62affd3d903283e1c532c1d12fbd4b8f9156c68cc324d63dc15425192b37339ec393488b6bfce9ffae496901e8927ef1e"}, {0x13, 0x4e00, "8bc9b2f0f6d9f7af2d90ba77fa4b6fd253a374"}, {0x5, 0x4e00, "3bd7b2abb4"}]}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x51, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xff, 0x3, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7f, 0x4}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x6, 0x1, 0x40, 0xa}, 0x50, &(0x7f0000000080)={0x5, 0xf, 0x50, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x5, 0x2, 0xf320, 0xd}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x3, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6a2d43a89562e4de0259384e21f428fa"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ccd871a0cac616cc78d2dcdebcd1744a"}]}, 0x5, [{0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "8f82c773cb2bf5bebaca61c771598808317394063cd4d1d64c7de00204a0e7c7919d109580a1091a2ea7196e3b9f5e8c3d0be525d7fa250464695696ca6f55c664360a50c7b8809976fe17b3398ff6ff94439ae7c6045fbd8bfab8ab9fb77516ba5c53f24eae9e214772c6a1702d6796e03f814269e711793201450eedfb5deb660efc143c646e1b65b5d56382927358c4f41c8035118062298755fb3e23e425754fff61a9d8e1fda42cfc773aeb87acf06c003514ca299672481f8edeaa5484f0cc9b84e9656033d2cde4efbe5752e3ef"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2001}}, {0x9b, &(0x7f0000000300)=@string={0x9b, 0x3, "baad4b6de6ec2950b783572632d268572f2693a82cf6c0892ac3fa9e389111e4e31bf6aa54def7e7feac17bcd34c0a5e8641d6f690e9f1f482abce5277975ba5baac141bd6a07db4efbca088d48f084e2e69dd01f10b9f4cc37e3a383fc6b6fc6a255c1a0c1fcd4c5afbd0383d9edb0b4b6368ba656ca1ffbe76e4272a43d77681024b2fc32ad540529ab5965d37f0513f748aeb3e4977322b"}}, {0x27, &(0x7f0000000140)=@string={0x27, 0x3, "c13f344b9190816220fb6fa2005f6de2cbcd37e22561e7dbe306448f7e5bcfbcc91ee77c76"}}, {0x6e, &(0x7f00000003c0)=@string={0x6e, 0x3, "d8befad1fc457115bb01ae3b030e68fa1da21f8a78354be66c1f88bfd9f208850027a389a6431bbcc583cda3af0ad5aa75bb3a223e69befc9584aaf926fca989c20c897c7c5843e7bf7af4382034f248f7d5bd226772174f4d4729797c4a271fe3e42013c1dadcab78826123"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0xd, 0xd7, {0xd7, 0xc, "60a006d3fef998dd7fc6f36edb21b576a16bffb51f1d00481e3773e75188a12b23e6339a67875fd437e70be6c84396fde5d23699c42dd7aef50e1225eb6a514941f5ef69738aa1d9e6e40e383ef35cd438f59d6a478e6e876caab4d153441472b2cfe788c7abf98039506958a28630ee0da02ce19479fa8572463523cdad95b6ad401911955737dc6932c7369ab5069ca6366f73a5c1d65b02fd0f73ad4ef27825225671946e381656925833c0f9ec4188e9c5816a0d70b7bd4ebd0a91bb9f0df53bb972cf7787ad8423b16ae72d8b99556d7ddf8d"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x0, 0x14, 0x9c, "70bc7b4abe646503f7178be41934ddea704ef498113fce330b68c2222b37050ad1b26d6b0b0e414ce950e84532e8f9d03c85caae1c268e9c62cabcb7387643321b868fa20ee430ce22e46f5e5d6226976548ccef01bfedebdbdcba3545dce9abfbff6d9867c261e23332e9721441dc18714189c8e4520e3274b5a98d26e717431675f9e23a3146067d521caa0601e43847f04dd37dffa13d0edbed86"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000800)={0x20, 0x0, 0x1c, {0x1a, "877a7e611f40a84839e6e5cac67b76c10d5b573392f34e4ee837"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0xf0}}) 34m54.082584566s ago: executing program 2 (id=152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) dup(r0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x5, 0xd9, 0x14}, {@remote, 0x4e23, 0x3, 0x4, 0x7, 0xe}}, 0x44) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r8, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e24f963bd0ba55eac612828f859b4c0e1742375dfbb4c0437d6ac6e6da746cb82cf211486f", @ANYRES32=0x0, @ANYBLOB="a905040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 34m52.7679572s ago: executing program 2 (id=154): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f00000003c0)=0xfffffc00) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x80000000}) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)={0x3c4, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x3b1, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x2c4, 0x64, 0x0, 0x1, [@nested={0x68, 0x121, 0x0, 0x1, [@generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05", @nested={0x1e6, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic, @nested={0xf0, 0x17, 0x0, 0x1, [@nested={0xc, 0x13f, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0xaa, 0x0, 0x0, @fd}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @nested={0xce, 0x2e, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd=r8}, @generic="55cce4f23f83bcdc4436529563b389515227daabf963754de9d95bfe42b6368b5908c3597bdffa41aaea7d3eaa178d43491d96c1a808ae92a6db49052a48e2b1e77eca4a0f17842abbbf3b9b4bc60d45dd1e05f3e2928fc6e1c3b26ab296fcf4f473e273346d6cf428b7a6e9e5213e7727b6a01c6eed3f265a9fe374c9b4704deaaedfb58438bf29a9c916aa085c1d9f83019c3a0372a07337d3cbbed59f1f966a13d3328413f5a01734e040fcda8c48c487343386978d9015ee078b982c11254e1a"]}]}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r7}, @generic="9cc827864d5efd3f362ce54d6c6d17f0c689ae7115de0ed9c5b68ade33d3cd2d08b4d38bc19ab22b6da9f1c32f7096727cc49003944984a4023dd0fc3119810ba5df99a3a15b87ce30e305b1cb9250a903f867180a7a2d0ba7d1604bee4395801f291f22e1ebdfc1892d61d82b92fcaca291328f24af5ccf0169438d653f8f718486dd7b2a5459033e218850d0e31a645f5a84c36649e1f80d902d9fb481509bd30a5b67372336394438d400b8bbee155b2bfc17adc214b2f0e3efeaf8ff4a5ed2fb6b6d7ce925067ba2545200f08c721cf99e9a824ff385f9b69aabea12"]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x612}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x3c4}], 0x1}, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x1, 0x1}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}, {[], 0x400000}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 34m51.533815949s ago: executing program 2 (id=155): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) times(&(0x7f0000000180)) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='cramfs\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x200008, 0xb}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000190000000000070000000000050000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 34m50.148038632s ago: executing program 2 (id=158): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = getpgrp(0x0) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r0], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={r9, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x500, 0x0, 0x32315258, 0x2, 0x0, [{0x5, 0xffffffff}, {}, {}, {0x10000000, 0xffff}, {0x0, 0xffffffff}, {0xfffffffe}], 0x0, 0x8, 0x0, 0x0, 0x1}}) 34m48.171515764s ago: executing program 2 (id=164): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) dup(r0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x5, 0xd9, 0x14}, {@remote, 0x4e23, 0x3, 0x4, 0x7, 0xe}}, 0x44) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r8, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e24f963bd0ba55eac612828f859b4c0e1742375dfbb4c0437d6ac6e6da746cb82cf211486f", @ANYRES32=0x0, @ANYBLOB="a905040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 34m32.371178587s ago: executing program 32 (id=164): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) dup(r0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x5, 0xd9, 0x14}, {@remote, 0x4e23, 0x3, 0x4, 0x7, 0xe}}, 0x44) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r8, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e24f963bd0ba55eac612828f859b4c0e1742375dfbb4c0437d6ac6e6da746cb82cf211486f", @ANYRES32=0x0, @ANYBLOB="a905040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 20.17281473s ago: executing program 5 (id=6881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0xe4ffffff}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffe4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 19.432805107s ago: executing program 5 (id=6884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x8004}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.125339056s ago: executing program 5 (id=6889): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r0, 0xf}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, r1) keyctl$clear(0x7, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0xc4ec, 0x52f981) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') (async) chdir(&(0x7f0000000240)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) (async) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x105000, 0x0, 0x8, 0x9c9cb4de96036a06}, 0x20) 17.396076432s ago: executing program 5 (id=6891): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x26) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x5, 0x8, 0x2, 0x0, 0x7f}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) fcntl$getown(0xffffffffffffffff, 0x5) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = socket$inet6(0x18, 0x5, 0x1) setsockopt$sock_int(r5, 0xffff, 0x800, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x44}], 0x37, 0x7) syz_usbip_server_init(0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x0}) 16.2909634s ago: executing program 3 (id=6894): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$rfkill(r0, &(0x7f0000000180)={0x4, 0x0, 0x2, 0x1, 0x1}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x280, 0x31) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5}, 0x48) 16.04956427s ago: executing program 4 (id=6896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x20000400) (async) unshare(0x20000400) getsockopt$rose(r6, 0x104, 0xc, 0x0, &(0x7f0000000040)) (async) getsockopt$rose(r6, 0x104, 0xc, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0xf, 0x4, {{}, @val={0x76, 0x6, {0x0, 0x2, 0x3c, 0x7}}}}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x4020050, r1, 0x894a1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15.361738337s ago: executing program 4 (id=6899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$media(0x0, 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000f40)) socket(0x24, 0x80000, 0xffffff01) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x80049367, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 15.351568066s ago: executing program 0 (id=6900): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000102000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095", @ANYRES8=r0], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000018", @ANYRES16=r2], 0x44}}, 0x0) 15.284735684s ago: executing program 3 (id=6901): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000209}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_io_uring_setup(0x6367, &(0x7f0000000340)={0x0, 0x47ed, 0x100, 0x1, 0x24a}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x4000, @fd=r0, 0xfffffffffffff616, 0x0, 0x0, 0x2, 0x1, {0x1}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff0000000000002000"}}) 15.17373882s ago: executing program 0 (id=6902): r0 = socket(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e8010000000105050000000084ff00000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e21000008000740"], 0x1e8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14.647727455s ago: executing program 1 (id=6903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}], 0x4, 0x40010020, 0x0) 13.628680154s ago: executing program 5 (id=6904): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) (async) close(r0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) (async) 13.598234195s ago: executing program 0 (id=6905): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000fff500000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0x70, 0x6}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_buf(r4, 0x1, 0x38, &(0x7f0000000480)=""/234, &(0x7f0000000280)=0xea) 13.596976621s ago: executing program 4 (id=6906): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f00000003c0)=0xfffffc00) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x80000000}) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)={0x3c4, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x3b1, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x2c3, 0x64, 0x0, 0x1, [@nested={0x68, 0x121, 0x0, 0x1, [@generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff", @nested={0x1e6, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic, @nested={0xf0, 0x17, 0x0, 0x1, [@nested={0xc, 0x13f, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0xaa, 0x0, 0x0, @fd}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @nested={0xce, 0x2e, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd=r8}, @generic="55cce4f23f83bcdc4436529563b389515227daabf963754de9d95bfe42b6368b5908c3597bdffa41aaea7d3eaa178d43491d96c1a808ae92a6db49052a48e2b1e77eca4a0f17842abbbf3b9b4bc60d45dd1e05f3e2928fc6e1c3b26ab296fcf4f473e273346d6cf428b7a6e9e5213e7727b6a01c6eed3f265a9fe374c9b4704deaaedfb58438bf29a9c916aa085c1d9f83019c3a0372a07337d3cbbed59f1f966a13d3328413f5a01734e040fcda8c48c487343386978d9015ee078b982c11254e1a"]}]}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r7}, @generic="9cc827864d5efd3f362ce54d6c6d17f0c689ae7115de0ed9c5b68ade33d3cd2d08b4d38bc19ab22b6da9f1c32f7096727cc49003944984a4023dd0fc3119810ba5df99a3a15b87ce30e305b1cb9250a903f867180a7a2d0ba7d1604bee4395801f291f22e1ebdfc1892d61d82b92fcaca291328f24af5ccf0169438d653f8f718486dd7b2a5459033e218850d0e31a645f5a84c36649e1f80d902d9fb481509bd30a5b67372336394438d400b8bbee155b2bfc17adc214b2f0e3efeaf8ff4a5ed2fb6b6d7ce925067ba2545200f08c721cf99e9a824ff385f9b69aabea12"]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x612}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x3c4}], 0x1}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {0x0, 0x3000000}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 13.397596734s ago: executing program 1 (id=6907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x100000000, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000120000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000000000000000002", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 12.203985922s ago: executing program 3 (id=6908): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 12.017720358s ago: executing program 4 (id=6909): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x2) fchdir(r2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd344) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) pwritev2(r6, &(0x7f0000000400)=[{&(0x7f0000000240)="fb4e", 0x2}], 0x1, 0xd58, 0x8, 0x1) close(0x3) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 11.953830768s ago: executing program 5 (id=6910): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) nanosleep(&(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x81044d03, 0x0) r2 = dup2(r1, r0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0xfffffffffffffff5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='.\x00', 0x2) 11.94454378s ago: executing program 1 (id=6911): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000059c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050129bd7000fddbdf251100000008000300", @ANYRES32=r4, @ANYBLOB="7473604560be2bc3450f581ba89a7382b54507469dade9969c775b4ec11245ce5fde7a1b7f6798bea763a7daef4e68afc06cf3b420dbeae2b81ae6a7f4527ffd3f8faeee9e01b921f7a40c20f44344dc7e9d3a49e6c3cfc7cfd42609ba8f8cd8712dedc82498e6902ae7809b39c6d491fea141fb9b25618c45d76053fd8fc8d822108d0b1466276cce06faa0310b724458f50115739ddc58aa3a4041f34186982aeb45c0329fe6935308"], 0x1c}}, 0x20008804) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x200000, @dev={0xfe, 0x80, '\x00', 0x40}, 0xffff}}, 0x1}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000106d00004608f93960383e8cc47bcc960b945d7035f2f892847f8038d2a68787ed6d88fbe45163764c9ce8d91e0579cd6513570a67d3b81f257f9b061bff092d32282571a56f3523a6f491647987ebe87c97b1044547a17af37d4475f1c6191c7190729ac3b6dfc8834336073778b8460e0277a9fea2332004cb5900"/159], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000384000/0x3000)=nil, 0x3000, 0xd, 0x8031, 0xffffffffffffffff, 0x53930000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x1, 0x0) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f00000061c0)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000005c0)="2dc8c57d2ad98ed4bcba22391c54f229f793ad9dc0befd0081a98a7ba8ce446f5705bd38ee95481771b2aff5793eb994ae91f7d6e7fa41c15e146b3240fbf62d8c375674ed8cbd4b233a96582e3b9275b4789e09922926556c00a143273c4bbe30410ccf00b7bcaac0bb506d7cbdcf5f4bcd79471fe2783affd0dce9f751563b6d426c673e5dd424edb5b6bca7a476ef18f9930e04a18be7f44fca6e254d68d68958", 0xa2}, {&(0x7f00000000c0)="bc1abc0557bd196a1042e4b3ef5b8862a396619efad1593686acf82e9f0a542c984f08a0a37e16f555462e3caa64783df7e5", 0x32}, {&(0x7f0000000680)="9a4bb6ddfe1f3c4836f5a3fc96ddc1229e513e29d5194781e243c653485961d021d5fc828e7cb5f933923607f3f5b38938953ed1f5ed487bc15b8ed0d00d3a1bcbab2d07a28600073d94ac3f9b0183cd717fc84c289446abf132f6f9d5528e13b713ca4050f395866c6e8ef509a01b0a1b79bd7eaf370721e59751bc0330cce2646d06e1415f0935c8cc93f8e719001f242c508f5bd9c321229fa06e2acc279530c3cdc11d8d8b0f", 0xa8}, {&(0x7f0000000740)="3a8a13ad818522f13def032404dee3c28c1fe66abb149537c223dd88d6a1f6b6df90d94fa30f3661d96e43c06c10f2f2d9b06d3c03964cc859af449ed5e700948398d9a57b796f94806d7bcc55a9c5e3b870c1358d6ea2aedce67016bd459d3f1288e4a450a43570176943f69d9c34856cd4b8ee4f2db3b76695a41f4222144e3897a14f62e59472d9db39b7f63a27d4bc9f1de1f8496b34246448f62d557e", 0x9f}, {&(0x7f0000000300)="d21ffdea92261a84759a5851", 0xc}], 0x5, &(0x7f0000000880)}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000009c0)="e2f7390e7d2ca08c790f6c7482ed195b927cda20ddffcc9f1071e091c0eaee1b80c2f90b38f2b6d3888a90f868c38a9accfb94feb2de815a1135e8869b7fd78ba9028756cc1f82e5fa83e1fbe92718b4c51ee76b7b3b7b78cb707fd84221001442d1c938d75626df3320dc34fdd9f1e63673ad989e85cc3c11aaaf8471298c70130998b8fa11171d06e20cbd97aa826570c0eabbdbbd38bce723b8dd5e76ec4a164724ccfe6aa9cb493fcaf97d336ebeca83d9eef39ccfa9cff0a029da10ab6997c3f94b49947bca84b8e499359b20bc1c1b1e", 0xd3}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0x1000}], 0x3, &(0x7f0000002d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x38, 0x1, 0x1, [r0, r5, r1, r5, 0xffffffffffffffff, r6, r8, r0, r3, r3]}}, @rights={{0x24, 0x1, 0x1, [r3, r6, r3, r8, r9]}}], 0xc0, 0x2004c864}}, {{&(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000002e80)="d2353d708ae87f7549435640bace2a74ada99d912dbc78e4baec9ea37d274ffe05ab2b577f2e7948cb8881e1a9db50b59bd6b31d24ec08f50d25574ab2495d0154e62122b72d3b75c3d4fb76aa71abab7d2b8e0931b8fc2e33c44c83f3a345da27a181937d8c8da8dbc61d75b2a3d8d28a6b9a27bdc21caf2f5e057280783deb9a425eaa101fb375757ffcebb01a302ceee955a413d487bf830aa901513e039d4a934ab4e6e9043d9147f493a3ef344dad56c4ebb1cb02731e75ea4db0498f73c0784cc2ea0637102b1676f7c82636f6c67c92", 0xd3}, {&(0x7f0000002f80)="857bcf5bd0bb3968aa02f25c1759e3c2df3cbaab53a924adb1c2d1d32f6519146a1b38759d3f5de007647624706eee09f109ba704821dfeaf7a7e6e798dd3f1a2366fc7323407ed134ce1d5627cb8195cda9f2102611b12a17e6c91089ff41f3931259f332ba1a5dbc6570d039f76ff335de4d19136d3c1a88910a9da4d2f25a2aed1ba91f533fca1345ff2f134939ad5166b3ca8276ff48569ce5466b6c8969ddf72a93f1feffc7cdaad6b3869cdb4cb9995e30794ecefad875dc451b555139fd635d05d0110c109464540e2cda7736", 0xd0}, {&(0x7f0000003080)="7215e1a6b1e655c7ee6234167ad5b4b7f03f6487974ecab4f6db34ede54c586ab542f1277a8efeabcd984315dbe1103d33462671e9e7a48364429f33e98ccd34844b60b9a3634452332c25938a06652e584fe3e32cb52e501618c4f34306f9bb0ad1dab06aafe6dee5d65dc5fab8265c51dff593595124f2f764d37b393b08ccee2bbaa6f79cf7f4c986aeade3275ae27a1c544a3542cd8317fadf866ebec969b4842b0f38dd41ae89781e9019ea0a340b7e71ffe0ee5bc6470e2eba72d0743172ead9216a3fc0ef9dc0", 0xca}, {&(0x7f0000003180)="910b52526d009e4e475c48109dea9a03b1a980ac749bd9507c68818ad0ab88e441c6bfb67a2c972bfb2d5cfd67d2838caec137587c7a83b8bb1290e2185e93736493f317f60885eb8c0df74982dfc1a323b07bd566f107606ad9354e1d99f709957bb77028c26a656629410a77a963c851568f3a1ef740a115d68ed9085573bba80fd7dd869c9ebd41add79de8130f97c797ac22ebf2d2187a62851501c990f6b6246fa557822340de6f5f2aa7c164fc0b", 0xfffffffffffffe24}, {&(0x7f0000003240)="49a71bc95018a085e3e2a300b40a639daa652250f98e530c236a718d20e20635244001fcf813a1b37c14f4f089f63f06f4e20c169d53651ff767288222a57b7c2c5d5cf787d5425e254e49ded9cce754b268ab56385c17176842d7d35b841b79631f2bb535106cd110dfde2e160b9cb2668ef895b6ed38ba82409fbec38fe0d324b7471fbc05ca00d05a2dae7aca6a57abbc4596fdbb41a32c520ce4d9185d768df550dc88715362b60c489e9b4d446dd366b9d40b418cbceaf9e5b0a3f4ab30bef6bd42db426f5c60c8e3602bae5c604b2b", 0xd2}, {&(0x7f0000003340)="6ae5bbb47f", 0x5}, {&(0x7f0000003380)="7382ecbf2c4e8413089c39d1ff8de44c7e88ec86738a20e22e586049efafdc4e21dab1967ffdb23f893cf86ebd9c450d491683f8ba90036ed37ce32417cb30cde98faffd640885944cc28031b6f477f24e3a5518076db72b482ab9787057faea440111e1a54dbbfc7b383c7cbc62e0a87ff65a71c0b7ae1b7acca732a08784e7a6bb130e595f474d2c269ec51625fe2d3dff37cdae556d82b82867b1974d9cf87fc021dd75c7d5d76476b1d913598ac8f79a5e442498367b834dd92f8bcdfd22ab3c5431cd268457ed5902e532049eef2c6bcb762b449738d182f04c5010fa471bfab908acb6353d8ccb", 0xea}], 0x7, &(0x7f0000004f40), 0x0, 0x20000000}}, {{&(0x7f0000004c40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000053c0)=[{&(0x7f0000005080)="fda3a5eee08102054f7134b08bdeb619072e0007e76df0f906b2e22a89d65c4c75143769b4e2a223b59f6538c80a977447d8e650de8f41660158851101364f13761eaa42c8e9cb532fc7ba5e00e0b0291a5677bf7027d72da022d4c5f7dcbb01c9", 0x61}, {&(0x7f0000005780)="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", 0xfb}, {&(0x7f0000005140)}, {&(0x7f0000005180)="6bc8055af3ae0cc099db85", 0xb}], 0x4, &(0x7f0000005640)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r6, r5, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x444}}, {{&(0x7f0000005f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005fc0)="665cdb629294983e61360dfc65cfb83d1d38e31de55099508da8aa9e975be332e427aafb9b03672aedbf0891141d345eadfad39e98d152efc440af891b34c709e2248c7d257bc92f4c4124841c994ea6147ee0ec247a062a4d2f2134915d8f81dd8e6349484bf0068d224a6d19ea55e2d5f723e5e270a945a59bc205ed06cbac460cd2ad508630d71849335473baf755dd478569d832bc34dea33d4b4ce8d952a6f776480f5c38d4e423b277e900c37522cf94c82ebd18e2ae0b50981f75471d7c8389990ca2", 0xc6}, {&(0x7f00000060c0)="5fcffa938884c34210ab9135f1481f73361dd57a547ed0e7d770e7360351c4869f86ff0264c05d1f54a2eee05caba1e69377895c77a050b91c22298e33d37e871ab46d90f7b0346f47b0b98dfd63213158d39fbf6cc45863f46452909487dc2bde11518ef0da93aff26ee4fbe20d8feb2264b85cc1bb8c9c2687c680cf25ce4c74cef473ace998058d9d19e864d518cf57aced8a768cfdb3d517bb713c9ffaf249a2c7785e08ee2141b520d88de8d17eddd06648f2864d7e247c7e1927f3220b6463c7063c8aef5813083320081201d4c4372c8044097d590e6a37c398843bdf9e9be62589350bd3a15e393eddae121c4cf6dd", 0xf3}], 0x2, 0x0, 0x0, 0x4040080}}], 0x5, 0x4014) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r7, 0x5, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$getown(r5, 0x9) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000980)={'wg2\x00'}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 11.784888711s ago: executing program 0 (id=6912): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) times(&(0x7f0000000180)) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='cramfs\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x200008, 0xb}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000019000000000000000000000005001f000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 11.736101789s ago: executing program 3 (id=6913): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = dup3(r0, r1, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500010}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4bef4264}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5d}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x767}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x15f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2449}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x806}, 0x4) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000200)="ced2cb1a6e1c270e4876af2e412ee53941bd8511f813a020bc2e60503b6cd0a8fb2594d3b08091ca145a2d844e374e13b45ea35a14ead4e48cbbd88c94993368cc8890624998d00fe0fb2a01d0272d6f2e1c77d15cfb256214d0b589d1a69cd8733195fc7460ce5a74dfdbdb7bd799b028b1f627bfaca3974baf6b9c5e14cdcc98c3184a41cc16e4a7458289a222d896c4aec374e8da", 0x96, 0xfffffffffffffffd}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={r5, 0xc7a0, 0x6}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x8, 0x2) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000b80)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x7, 0xc92, 0x58, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x8000, 0x7fff, 0xaae}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r6, 0x29, 0x4, 0x8e, 0xd919, 0x14, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x7, 0x10, 0xff, 0x5}}) r7 = open$dir(&(0x7f0000000d40)='./file0\x00', 0x0, 0x12c) faccessat(r7, &(0x7f0000000d80)='./file0/../file0\x00', 0x0) accept4(r2, &(0x7f0000000dc0)=@in6, &(0x7f0000000e40)=0x80, 0x1000) syz_io_uring_setup(0xf57, &(0x7f0000000e80)={0x0, 0x5800, 0x8000, 0x3, 0x146, 0x0, r0}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)) r9 = syz_io_uring_setup(0x7c87, &(0x7f0000000f80)={0x0, 0xfac4, 0x2000, 0x1, 0x168, 0x0, r0}, &(0x7f0000001000), &(0x7f0000001040)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000001100)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, r7, &(0x7f0000001080)='./file0/../file0\x00', &(0x7f00000010c0)='./file0/../file0\x00', 0x0, 0x0, 0x1, {0x0, r11}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000001140)=0xfffffffe, 0x4) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000001180)={0x18, 0x1, 0x0, 0x0, r4, 0xf}) r12 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x6, 0x1, 0x105, 0x0, 0x0, {0x6, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000024) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000002640)=[{&(0x7f00000012c0)=""/196, 0xc4}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001440)=""/222, 0xde}, {&(0x7f0000001540)=""/106, 0x6a}, {&(0x7f00000015c0)=""/102, 0x66}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x6) ioctl$int_in(r12, 0x5452, &(0x7f00000026c0)=0x100000000) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002700)={0x5, 0x3, {0xffffffffffffffff}, {0xee01}, 0x100, 0x19}) prctl$PR_SCHED_CORE(0x3e, 0x4, r13, 0x2, &(0x7f0000002740)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002800)={0x0, 0x4, 0x1, [0x7]}, &(0x7f0000002840)=0xa) 10.544872746s ago: executing program 0 (id=6914): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x30) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="e904a200000001802caed05e0a65db2c2e27c200000081004e000800450000200000e0200011907800000000ac1e01010000"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="e904a200000001802caed05e0a65db2c2e27c200000081004e000800450000200000e0200011907800000000ac1e01010000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r3, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40010040, 0x0) (async) recvmmsg(r3, 0x0, 0x0, 0x40010040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c15aa890abbd1cf189e05a0619e9", @ANYRES16=r5, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c15aa890abbd1cf189e05a0619e9", @ANYRES16=r5, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x3, 0xfe, 0x5, 0x0, 0x6, 0xd9, 0x40, 0x4, 0xff, 0xc, 0xc, 0x0, 0x6, 0x40, 0x1, 0x5}}) 10.206982489s ago: executing program 1 (id=6915): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000800418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.125621052s ago: executing program 4 (id=6916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$media(0x0, 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000f40)) socket(0x24, 0x80000, 0xffffff01) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x80049367, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 10.081754205s ago: executing program 3 (id=6917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2b4080, 0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x206, r2}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x29, 0x80, 0x5, 0xfffffffc, 0x50, @mcast1, @private2, 0x7800, 0x8, 0x3c0, 0x9}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x88}}, 0x2) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @remote, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) chdir(&(0x7f0000000580)='./file0\x00') r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040810}, 0x40080) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r10, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, 'ib'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'team_slave_0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_SET_MACPARAMS(r13, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r14, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xcf}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r13) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r15, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d80)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000dc0)={0x10}) r16 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r16, &(0x7f0000000e00)={0x2, 0x4e22, @private=0xa010101}, 0x10) 9.493726155s ago: executing program 1 (id=6918): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/254], 0x15f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000ff97000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 9.40958324s ago: executing program 3 (id=6919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000001540b07188ad65091d5c1b9e12a409b5e2fc9dab626ebdbfb5aa456742e80745b14db2"], 0x0) shutdown(r0, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000340)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x40000) 9.105935955s ago: executing program 4 (id=6920): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x40004}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x38, r4, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x38}}, 0x0) 5.113901029s ago: executing program 0 (id=6921): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000410e000a00100000000b8000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=6922): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x9, 0x0, 0xfffff008}, {0x6, 0x1, 0x8}]}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000881) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) r7 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r3, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0xffff}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000009700000000"], 0x50) kernel console output (not intermixed with test programs): driver snd-usb-audio failed with error -2 [ 1910.077602][T24869] usb 1-1: USB disconnect, device number 19 [ 1910.155691][T23639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1910.167291][T23639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1910.179768][T23639] bond0 (unregistering): Released all slaves [ 1910.333718][T23639] bond1 (unregistering): Released all slaves [ 1910.350407][T26389] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1910.359036][T26313] team0: Port device team_slave_0 added [ 1910.385312][T26394] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 1910.411082][T26394] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 1910.438607][T26313] team0: Port device team_slave_1 added [ 1910.637855][T23639] tipc: Disabling bearer [ 1910.650744][T26425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1910.654247][T26090] Bluetooth: hci5: command tx timeout [ 1910.668496][T23639] tipc: Left network mode [ 1910.684158][T26313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.692073][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.785787][T26313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.835468][T26313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.842495][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.898643][T26313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1912.398689][T26313] hsr_slave_0: entered promiscuous mode [ 1912.443423][T26313] hsr_slave_1: entered promiscuous mode [ 1912.472523][T26313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1912.480900][T26313] Cannot create hsr debugfs directory [ 1912.954510][T26467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5869'. [ 1913.517674][T23639] hsr_slave_0: left promiscuous mode [ 1913.537878][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.558662][T23639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.580865][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.595144][T23639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.859143][T23639] veth1_macvtap: left promiscuous mode [ 1913.866821][T23639] veth0_macvtap: left promiscuous mode [ 1913.873272][T23639] veth1_vlan: left promiscuous mode [ 1914.318987][T26485] netlink: 'syz.3.5876': attribute type 10 has an invalid length. [ 1915.792364][T23639] team0 (unregistering): Port device team_slave_1 removed [ 1915.850781][T23639] team0 (unregistering): Port device team_slave_0 removed [ 1916.719968][T26485] veth0_vlan: left promiscuous mode [ 1916.731445][T26485] veth0_vlan: entered promiscuous mode [ 1916.768662][T26485] team0: Device veth0_vlan failed to register rx_handler [ 1916.789857][T26498] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1916.799550][T26498] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1916.808512][T26498] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1918.035247][T26519] No such timeout policy "syz0" [ 1918.716676][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5886'. [ 1919.965156][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.972037][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.079964][T26525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1922.377510][T23639] IPVS: stop unused estimator thread 0... [ 1922.430435][T26313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1922.528000][T26313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1922.606070][T26313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1922.652697][T26313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1922.685987][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1922.795099][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1924.112621][T26313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1924.210895][T26313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1924.276737][T23639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.283987][T23639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.346841][T23639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.354099][T23639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.943313][T26607] netlink: 'syz.3.5904': attribute type 10 has an invalid length. [ 1925.548397][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5906'. [ 1925.737937][T26313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1925.973627][T26313] veth0_vlan: entered promiscuous mode [ 1926.460972][T26635] netlink: 316 bytes leftover after parsing attributes in process `syz.4.5910'. [ 1927.299595][T26631] xt_CT: No such helper "pptp" [ 1928.389274][T26639] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1928.400022][T26639] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1928.408896][T26639] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1928.484858][T26313] veth1_vlan: entered promiscuous mode [ 1928.611395][T26313] veth0_macvtap: entered promiscuous mode [ 1928.666013][T26313] veth1_macvtap: entered promiscuous mode [ 1928.719495][T26313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1928.738867][ C0] Unknown status report in ack skb [ 1928.752591][T26313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.806233][T26313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.853554][T26313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.874162][T26313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.911187][T26313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.277601][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.808543][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.054120][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.066389][ T5840] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1930.095892][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.794174][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 1930.818555][ T5840] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1930.829639][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.844399][ T5840] usb 1-1: config 0 has no interface number 0 [ 1930.851185][ T5840] usb 1-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1931.398802][ T5840] usb 1-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1931.412094][ T5840] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1931.419012][T26693] netlink: 'syz.1.5817': attribute type 23 has an invalid length. [ 1931.421586][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.457345][ T5840] usb 1-1: config 0 descriptor?? [ 1931.506570][ T5840] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1931.771095][T26700] udevd[26700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1931.826510][ T5840] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 1931.861199][ T5840] usb 1-1: USB disconnect, device number 20 [ 1931.873679][T26704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1933.424562][T26719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1934.819767][T15640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1934.832648][T15640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1934.841069][T15640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1934.851323][T15640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1934.858949][T15640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1935.386101][T26740] lo speed is unknown, defaulting to 1000 [ 1935.426037][T26740] virt_wifi0 speed is unknown, defaulting to 1000 [ 1936.131385][T26740] chnl_net:caif_netlink_parms(): no params data found [ 1936.964241][T15640] Bluetooth: hci3: command tx timeout [ 1937.453643][T26740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.474639][T26740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.482010][T26740] bridge_slave_0: entered allmulticast mode [ 1937.532525][T26740] bridge_slave_0: entered promiscuous mode [ 1937.549602][T26740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.596786][T26740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.611258][ T30] audit: type=1326 audit(1755613393.295:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26783 comm="syz.0.5946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x0 [ 1937.624247][T26740] bridge_slave_1: entered allmulticast mode [ 1937.668629][T26740] bridge_slave_1: entered promiscuous mode [ 1937.799095][T26740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1938.075285][T26740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1938.812973][T26800] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5948'. [ 1938.822504][T26800] netlink: 19720 bytes leftover after parsing attributes in process `syz.0.5948'. [ 1938.963182][T26740] team0: Port device team_slave_0 added [ 1939.019602][T26740] team0: Port device team_slave_1 added [ 1939.044342][T15640] Bluetooth: hci3: command tx timeout [ 1940.083584][T26740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.456226][T26817] xt_CT: No such helper "pptp" [ 1940.475681][T26740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.604337][T26740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.617606][T26740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1940.634891][T26740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.702154][T26740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1940.820898][T26828] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1940.829580][T26828] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1940.838068][T26828] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1940.980819][T26740] hsr_slave_0: entered promiscuous mode [ 1941.011394][T26740] hsr_slave_1: entered promiscuous mode [ 1941.043085][T26740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1941.076902][T26740] Cannot create hsr debugfs directory [ 1941.125474][T15640] Bluetooth: hci3: command tx timeout [ 1941.459774][T26849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5957'. [ 1943.204277][T15640] Bluetooth: hci3: command tx timeout [ 1943.479036][T26867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1943.487749][T26866] Cannot find del_set index 1 as target [ 1943.693894][T24871] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1943.712250][T26880] netlink: 'syz.0.5965': attribute type 1 has an invalid length. [ 1943.743194][T26880] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1943.761519][T26740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1943.784386][T26740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.865963][T24871] usb 2-1: Using ep0 maxpacket: 16 [ 1943.901115][T24871] usb 2-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 1943.921188][T24871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.943854][T24871] usb 2-1: Product: syz [ 1943.948566][T24871] usb 2-1: Manufacturer: syz [ 1943.953226][T24871] usb 2-1: SerialNumber: syz [ 1943.987081][T24871] usb 2-1: config 0 descriptor?? [ 1944.008296][T24871] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 1944.035903][T26740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1944.037261][T24871] dvb-usb: bulk message failed: -22 (3/0) [ 1944.073345][T24871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1944.074836][T26740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.100918][T24871] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 1944.131954][T24871] usb 2-1: media controller created [ 1944.187721][T24871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1944.822983][T26897] overlayfs: failed to clone upperpath [ 1945.392070][T24871] dvb-usb: bulk message failed: -22 (6/0) [ 1945.434219][T24871] dvb-usb: bulk message failed: -22 (6/0) [ 1945.631154][T24871] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 1946.031233][T24871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 1946.101444][T24871] dvb-usb: schedule remote query interval to 150 msecs. [ 1946.144473][T24871] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 1946.248428][T26740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.261599][T26740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.305066][T24871] dvb-usb: bulk message failed: -22 (1/0) [ 1946.333118][T24871] dvb-usb: error while querying for an remote control event. [ 1946.461888][T26740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.480594][T26740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.534204][T24871] dvb-usb: bulk message failed: -22 (1/0) [ 1946.552757][T24871] dvb-usb: error while querying for an remote control event. [ 1946.764960][T18672] usb 2-1: USB disconnect, device number 9 [ 1946.791398][T24871] dvb-usb: bulk message failed: -22 (1/0) [ 1946.798250][T24871] dvb-usb: error while querying for an remote control event. [ 1947.655898][T18672] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 1947.734898][T26740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1947.778324][T26740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1947.831813][T26740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1947.878728][T26740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1948.627228][T26740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1948.674701][T26740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1948.690499][T26942] netlink: 'syz.5.5981': attribute type 10 has an invalid length. [ 1948.710440][T26942] veth0_vlan: left promiscuous mode [ 1948.728706][T26942] veth0_vlan: entered promiscuous mode [ 1948.754159][T26942] team0: Device veth0_vlan failed to register rx_handler [ 1948.821396][T23641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.828698][T23641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1948.885201][T23641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.892453][T23641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.048051][T26952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1951.219096][T26740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.109081][T26740] veth0_vlan: entered promiscuous mode [ 1952.204597][T26740] veth1_vlan: entered promiscuous mode [ 1952.282751][T26740] veth0_macvtap: entered promiscuous mode [ 1952.474664][T26740] veth1_macvtap: entered promiscuous mode [ 1952.507479][T26740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.237935][T26740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.257878][T26740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.272244][T26740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.323261][T26740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.344135][T26740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.582069][T27013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1954.780711][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.368524][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.376708][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.469935][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.975266][T27033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1956.314270][T18672] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1956.784102][T18672] usb 2-1: Using ep0 maxpacket: 16 [ 1956.831428][T18672] usb 2-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 1957.154656][T27047] No such timeout policy "syz0" [ 1957.841578][T18672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.892782][T18672] usb 2-1: Product: syz [ 1957.914665][T18672] usb 2-1: Manufacturer: syz [ 1957.927970][T18672] usb 2-1: SerialNumber: syz [ 1958.189830][T18672] usb 2-1: config 0 descriptor?? [ 1958.541295][T18672] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 1958.572767][T18672] dvb-usb: bulk message failed: -22 (3/0) [ 1958.624165][T18672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1958.670787][T18672] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 1958.724460][T18672] usb 2-1: media controller created [ 1959.640242][T18672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1959.738096][T27065] fuse: Bad value for 'fd' [ 1959.768675][T27065] overlay: ./file0 is not a directory [ 1959.802041][T27066] overlay: ./file0 is not a directory [ 1959.813135][T18672] dvb-usb: bulk message failed: -22 (6/0) [ 1959.846217][T18672] dvb-usb: bulk message failed: -22 (6/0) [ 1959.860041][T18672] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 1959.912947][T18672] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 1959.967836][T18672] dvb-usb: schedule remote query interval to 150 msecs. [ 1959.976368][T18672] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 1960.144269][T18672] dvb-usb: bulk message failed: -22 (1/0) [ 1960.162450][T18672] dvb-usb: error while querying for an remote control event. [ 1960.300519][T27080] overlayfs: failed to clone upperpath [ 1960.377680][T18672] dvb-usb: bulk message failed: -22 (1/0) [ 1960.383545][T18672] dvb-usb: error while querying for an remote control event. [ 1960.624001][T18672] dvb-usb: bulk message failed: -22 (1/0) [ 1960.638307][T18672] dvb-usb: error while querying for an remote control event. [ 1960.657192][ T5840] usb 2-1: USB disconnect, device number 10 [ 1960.800255][ T5840] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 1963.343710][T27124] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1965.426079][T27132] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1965.482432][T27132] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1965.547136][T27132] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1966.826289][T27157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1968.662979][T27175] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 1968.690043][T27175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1968.697792][T27175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1968.734834][T27175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1968.746713][T27175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1969.731518][T27193] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6045'. [ 1969.788947][T27193] gretap0: entered promiscuous mode [ 1969.854039][T27195] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6045'. [ 1969.913692][T27195] 0{X: renamed from gretap0 [ 1970.026615][T27199] No such timeout policy "syz0" [ 1970.051407][T27195] 0{X: left promiscuous mode [ 1970.217925][T27195] 0{X: entered allmulticast mode [ 1970.613981][T27195] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1972.457988][T27225] xt_CT: No such helper "pptp" [ 1976.132080][T27270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1976.504753][T27278] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1979.082757][T27309] Invalid logical block size (535) [ 1981.373213][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.379801][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.010418][T27341] [U] [ 1983.513328][T27344] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1983.521864][T27344] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1983.530495][T27344] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1984.024221][T14109] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1984.883963][T14109] usb 2-1: device descriptor read/64, error -71 [ 1985.097688][T27363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1985.121527][T27363] vxcan3: entered promiscuous mode [ 1985.133931][T14109] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1985.276405][T14109] usb 2-1: device descriptor read/64, error -71 [ 1985.383382][T27369] netlink: 'syz.0.6096': attribute type 10 has an invalid length. [ 1985.391645][T27369] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 1985.564336][T14109] usb usb2-port1: attempt power cycle [ 1986.543059][T14109] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1986.773933][T14109] usb 2-1: device descriptor read/8, error -71 [ 1987.060608][T27387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1987.448122][T27395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6102'. [ 1987.457463][T27395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6102'. [ 1989.107098][T27419] Cannot find del_set index 1 as target [ 1989.643487][T27442] Bluetooth: MGMT ver 1.23 [ 1989.652993][T27432] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1989.656999][T27442] @: renamed from vlan0 (while UP) [ 1990.312394][T27449] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6116'. [ 1990.778252][T27456] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1990.811481][T27456] pim6reg: entered allmulticast mode [ 1990.831491][T27457] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 1990.920089][T27467] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1990.928434][T27467] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1990.937096][T27467] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1991.684542][T15640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1991.947803][T27465] lo speed is unknown, defaulting to 1000 [ 1991.993459][T27465] virt_wifi0 speed is unknown, defaulting to 1000 [ 1992.462774][T27465] kvm: user requested TSC rate below hardware speed [ 1994.262709][T27499] JFS: charset not found [ 1994.602947][T27512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1994.975333][T27517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6136'. [ 1995.253122][T27520] erofs: Unknown parameter 'acl R8_r' [ 1995.551435][T27521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1995.701855][T27521] ip6gretap0: entered promiscuous mode [ 1995.776222][T27521] ip6gretap0: left promiscuous mode [ 1996.244723][T27538] netlink: 384 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1996.254505][T27538] netlink: 'syz.1.6143': attribute type 2 has an invalid length. [ 1997.460833][T27549] Cannot find del_set index 1 as target [ 1998.538374][T27558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6150'. [ 1998.614148][T27561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1998.781824][T27567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1998.895547][T27566] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1999.142871][T27575] netlink: 384 bytes leftover after parsing attributes in process `syz.5.6155'. [ 1999.152612][T27575] netlink: 'syz.5.6155': attribute type 2 has an invalid length. [ 2001.211910][T27596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2001.749799][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 2001.817203][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 2002.761204][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6173'. [ 2003.552622][T27649] batman_adv: batadv0: Adding interface: dummy0 [ 2003.594383][T27649] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2003.668715][T27657] netlink: 384 bytes leftover after parsing attributes in process `syz.0.6179'. [ 2003.678473][T27657] netlink: 'syz.0.6179': attribute type 2 has an invalid length. [ 2003.779181][T27649] batman_adv: batadv0: Interface activated: dummy0 [ 2003.926794][T27660] netlink: 'syz.5.6180': attribute type 10 has an invalid length. [ 2004.489592][T27644] mkiss: ax0: crc mode is auto. [ 2004.504385][ T5915] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2004.515127][T27652] batadv0: mtu less than device minimum [ 2004.522412][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.534584][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.546636][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.558676][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.570677][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.582741][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.594826][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.606848][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.618893][T27652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2004.716145][T27660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.777878][T27660] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2004.854566][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2004.904592][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2004.937128][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2004.981976][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2005.025578][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2005.061021][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2005.085278][T27668] No control pipe specified [ 2005.177923][ T5915] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2005.204337][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.235239][ T5915] usb 5-1: Product: syz [ 2005.239497][ T5915] usb 5-1: Manufacturer: syz [ 2005.286058][ T5915] usb 5-1: SerialNumber: syz [ 2005.324953][ T5915] usb 5-1: config 0 descriptor?? [ 2005.356030][ T5915] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 2005.394175][ T5915] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 2005.816077][T24869] usb 5-1: USB disconnect, device number 37 [ 2006.149293][T26090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2006.163422][T26090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2006.172912][T26090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2006.186201][T26090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2006.201381][T23639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.205413][T26090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2006.473405][T23639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.520987][T27686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2006.735339][T27690] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 512, id = 0 [ 2006.758619][T27688] IPVS: stopping backup sync thread 27690 ... [ 2007.373441][T23639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.517948][T27678] lo speed is unknown, defaulting to 1000 [ 2007.556293][T27678] virt_wifi0 speed is unknown, defaulting to 1000 [ 2008.314112][T26090] Bluetooth: hci0: command tx timeout [ 2008.432219][T23639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.433347][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6196'. [ 2008.489833][T27716] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6195'. [ 2008.500421][T27716] netlink: 19720 bytes leftover after parsing attributes in process `syz.0.6195'. [ 2010.324119][T26090] Bluetooth: hci0: command tx timeout [ 2010.674880][T27713] hsr_slave_0 (unregistering): left promiscuous mode [ 2012.408549][T15640] Bluetooth: hci0: command tx timeout [ 2014.439615][T15640] Bluetooth: hci2: command 0x0406 tx timeout [ 2014.625302][T26090] Bluetooth: hci0: command tx timeout [ 2015.088819][T27799] netlink: 552 bytes leftover after parsing attributes in process `syz.1.6216'. [ 2015.320493][T23639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2015.341094][T23639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2015.357300][T23639] bond0 (unregistering): Released all slaves [ 2015.435150][T27799] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2015.530509][T27804] No such timeout policy "syz0" [ 2016.171667][T23639] tipc: Disabling bearer [ 2016.223287][T23639] tipc: Left network mode [ 2016.240743][T27678] chnl_net:caif_netlink_parms(): no params data found [ 2016.270874][T27806] overlay: ./file0 is not a directory [ 2017.565592][T27824] netlink: 'syz.0.6223': attribute type 1 has an invalid length. [ 2017.586080][T27827] No such timeout policy "syz0" [ 2017.611837][T27824] netlink: 'syz.0.6223': attribute type 2 has an invalid length. [ 2017.627421][T27828] syz.1.6221: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2017.642390][T27828] CPU: 0 UID: 0 PID: 27828 Comm: syz.1.6221 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2017.642423][T27828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2017.642439][T27828] Call Trace: [ 2017.642449][T27828] [ 2017.642460][T27828] dump_stack_lvl+0x189/0x250 [ 2017.642500][T27828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2017.642534][T27828] ? __pfx__printk+0x10/0x10 [ 2017.642566][T27828] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2017.642597][T27828] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2017.642631][T27828] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2017.642665][T27828] warn_alloc+0x214/0x310 [ 2017.642692][T27828] ? stack_depot_save_flags+0x40/0x900 [ 2017.642723][T27828] ? __pfx_warn_alloc+0x10/0x10 [ 2017.642753][T27828] ? kasan_save_track+0x4f/0x80 [ 2017.642791][T27828] ? xskq_create+0x56/0x170 [ 2017.642814][T27828] ? xsk_init_queue+0xb0/0x110 [ 2017.642834][T27828] ? xsk_setsockopt+0x43f/0x710 [ 2017.642869][T27828] ? do_sock_setsockopt+0x179/0x1b0 [ 2017.642902][T27828] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2017.642936][T27828] ? do_syscall_64+0xfa/0x3b0 [ 2017.642961][T27828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.642995][T27828] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2017.643058][T27828] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2017.643098][T27828] ? xskq_create+0x56/0x170 [ 2017.643124][T27828] ? __kasan_kmalloc+0x93/0xb0 [ 2017.643152][T27828] vmalloc_user_noprof+0xad/0xf0 [ 2017.643178][T27828] ? xskq_create+0xbf/0x170 [ 2017.643204][T27828] xskq_create+0xbf/0x170 [ 2017.643231][T27828] xsk_init_queue+0xb0/0x110 [ 2017.643258][T27828] xsk_setsockopt+0x43f/0x710 [ 2017.643299][T27828] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2017.643340][T27828] ? __fget_files+0x2a/0x420 [ 2017.643371][T27828] ? __fget_files+0x2a/0x420 [ 2017.643395][T27828] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2017.643419][T27828] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2017.643457][T27828] do_sock_setsockopt+0x179/0x1b0 [ 2017.643498][T27828] __x64_sys_setsockopt+0x13f/0x1b0 [ 2017.643540][T27828] do_syscall_64+0xfa/0x3b0 [ 2017.643569][T27828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.643592][T27828] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2017.643616][T27828] ? clear_bhb_loop+0x60/0xb0 [ 2017.643645][T27828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.643668][T27828] RIP: 0033:0x7f66b7f8ebe9 [ 2017.643689][T27828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2017.643710][T27828] RSP: 002b:00007f66b8d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2017.643740][T27828] RAX: ffffffffffffffda RBX: 00007f66b81b6180 RCX: 00007f66b7f8ebe9 [ 2017.643756][T27828] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 2017.643769][T27828] RBP: 00007f66b8011e19 R08: 0000000000000052 R09: 0000000000000000 [ 2017.643784][T27828] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2017.643800][T27828] R13: 00007f66b81b6218 R14: 00007f66b81b6180 R15: 00007ffefb106ea8 [ 2017.643838][T27828] [ 2017.972856][T27828] Mem-Info: [ 2017.979872][T27828] active_anon:20419 inactive_anon:16561 isolated_anon:0 [ 2017.979872][T27828] active_file:20476 inactive_file:39385 isolated_file:0 [ 2017.979872][T27828] unevictable:769 dirty:178 writeback:0 [ 2017.979872][T27828] slab_reclaimable:11746 slab_unreclaimable:109920 [ 2017.979872][T27828] mapped:39586 shmem:13404 pagetables:1439 [ 2017.979872][T27828] sec_pagetables:0 bounce:0 [ 2017.979872][T27828] kernel_misc_reclaimable:0 [ 2017.979872][T27828] free:1264356 free_pcp:9316 free_cma:0 [ 2018.028745][T27828] Node 0 active_anon:81676kB inactive_anon:66244kB active_file:81708kB inactive_file:157540kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:158344kB dirty:708kB writeback:0kB shmem:52080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13372kB pagetables:5600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2018.139945][T27828] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2018.171816][T27828] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.200996][T27828] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 2018.209945][T27828] Node 0 DMA32 free:1125416kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81672kB inactive_anon:66200kB active_file:79956kB inactive_file:157472kB unevictable:1540kB writepending:664kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:34796kB local_pcp:6596kB free_cma:0kB [ 2018.242904][T27828] lowmem_reserve[]: 0 0 1 1 1 [ 2018.247977][T27828] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2018.277478][T27828] lowmem_reserve[]: 0 0 0 0 0 [ 2018.282482][T27828] Node 1 Normal free:3916628kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2644kB local_pcp:372kB free_cma:0kB [ 2018.317302][T27828] lowmem_reserve[]: 0 0 0 0 0 [ 2018.322343][T27828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2018.335649][T27828] Node 0 DMA32: 166*4kB (UE) 32*8kB (UM) 323*16kB (UM) 813*32kB (UME) 511*64kB (UME) 216*128kB (UME) 151*256kB (UM) 48*512kB (UME) 19*1024kB (UME) 10*2048kB (ME) 227*4096kB (UM) = 1125416kB [ 2018.435091][T27828] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2018.448241][T27828] Node 1 Normal: 123*4kB (UME) 55*8kB (UME) 49*16kB (UME) 233*32kB (UME) 116*64kB (UME) 35*128kB (UME) 9*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 947*4096kB (UM) = 3916628kB [ 2018.468009][T27828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.477984][T27828] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2018.488039][T27828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.497834][T27828] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2018.507347][T27828] 73266 total pagecache pages [ 2018.515792][T27828] 4 pages in swap cache [ 2018.520089][T27828] Free swap = 124980kB [ 2018.524484][T27828] Total swap = 124996kB [ 2018.528743][T27828] 2097051 pages RAM [ 2018.532657][T27828] 0 pages HighMem/MovableOnly [ 2018.537585][T27828] 424695 pages reserved [ 2018.541833][T27828] 0 pages cma reserved [ 2019.281451][T27824] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.6223'. [ 2019.558032][T27838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6224'. [ 2020.745357][T27678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.777230][T27678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.794079][T27678] bridge_slave_0: entered allmulticast mode [ 2021.033106][T27678] bridge_slave_0: entered promiscuous mode [ 2021.042927][T27678] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.050644][T27678] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.065023][T27678] bridge_slave_1: entered allmulticast mode [ 2021.125736][T27678] bridge_slave_1: entered promiscuous mode [ 2023.605489][T27678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2023.643919][T27859] lo speed is unknown, defaulting to 1000 [ 2023.656596][T27678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2023.704159][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6230'. [ 2023.721065][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6237'. [ 2023.743518][T27861] veth0: entered promiscuous mode [ 2023.782602][T27859] virt_wifi0 speed is unknown, defaulting to 1000 [ 2023.941006][T27895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6238'. [ 2024.388282][T23639] hsr_slave_0: left promiscuous mode [ 2024.435930][T23639] veth1_macvtap: left promiscuous mode [ 2024.441594][T23639] veth0_macvtap: left promiscuous mode [ 2024.447379][T23639] veth1_vlan: left promiscuous mode [ 2024.631263][T23639] pim6reg (unregistering): left allmulticast mode [ 2025.201577][T27916] Cannot find del_set index 1 as target [ 2025.222547][T23639] team0 (unregistering): Port device team_slave_1 removed [ 2025.295925][T23639] team0 (unregistering): Port device team_slave_0 removed [ 2026.030456][T27678] team0: Port device team_slave_0 added [ 2026.039247][T27889] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 2026.058239][T14109] lo speed is unknown, defaulting to 1000 [ 2026.064339][T14109] infiniband syz2: ib_query_port failed (-19) [ 2026.070188][T27889] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 2026.112823][T27678] team0: Port device team_slave_1 added [ 2026.250595][T27920] virt_wifi0 speed is unknown, defaulting to 1000 [ 2026.254791][T27678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.264332][T27678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.311820][T27678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.649691][T27924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6246'. [ 2027.284653][T27678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2027.300967][T27678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.339972][T27678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2027.733613][T27678] hsr_slave_0: entered promiscuous mode [ 2027.770067][T27678] hsr_slave_1: entered promiscuous mode [ 2029.251797][T27967] No such timeout policy "syz0" [ 2029.584356][T15640] Bluetooth: hci5: command 0x0406 tx timeout [ 2030.166144][T23639] bridge_slave_0: left allmulticast mode [ 2030.204905][T23639] bridge_slave_0: left promiscuous mode [ 2030.229033][T23639] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.688582][T27986] rdma_op ffff8880604979f0 conn xmit_rdma 0000000000000000 [ 2031.054455][ T5987] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 2031.128534][T23639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2031.137613][T23639] bond_slave_0: left promiscuous mode [ 2031.148871][T23639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2031.158057][T23639] bond_slave_1: left promiscuous mode [ 2031.171008][T23639] bond0 (unregistering): (slave team0): Releasing backup interface [ 2031.179977][T23639] team0: left promiscuous mode [ 2031.185404][T23639] team_slave_0: left promiscuous mode [ 2031.192153][T23639] team_slave_1: left promiscuous mode [ 2031.201602][T23639] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2031.212461][T23639] bridge_slave_1: left promiscuous mode [ 2031.220546][T23639] bond0 (unregistering): Released all slaves [ 2031.221375][ T5987] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 2031.242536][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.251019][ T5987] usb 2-1: Product: syz [ 2031.260749][ T5987] usb 2-1: Manufacturer: syz [ 2031.265718][ T5987] usb 2-1: SerialNumber: syz [ 2031.281742][ T5987] usb 2-1: config 0 descriptor?? [ 2031.450339][T23639] bond1 (unregistering): Released all slaves [ 2031.620183][T23639] tipc: Left network mode [ 2032.582993][ T24] usb 2-1: USB disconnect, device number 15 [ 2036.110376][T28032] net_ratelimit: 11 callbacks suppressed [ 2036.110401][T28032] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:4000:7d01 with DS=0xe [ 2036.427388][T28039] rdma_op ffff88805309e9f0 conn xmit_rdma 0000000000000000 [ 2037.520575][T28055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2037.653120][T28058] netlink: 'syz.1.6277': attribute type 10 has an invalid length. [ 2037.836081][T28060] [U] [ 2038.466613][T28058] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 2038.543537][T27678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2038.853042][T27678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2039.812572][T27678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2039.941046][T27678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2039.976004][T28081] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6282'. [ 2040.322899][T23639] hsr_slave_0: left promiscuous mode [ 2040.461610][T23639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2040.485807][T23639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2042.858087][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.866451][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.547467][T23639] team0 (unregistering): Port device team_slave_1 removed [ 2044.620463][T23639] team0 (unregistering): Port device team_slave_0 removed [ 2045.619385][T27678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2046.710877][T27678] 8021q: adding VLAN 0 to HW filter on device team0 [ 2046.808910][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.816225][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.985522][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.992842][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2048.437832][T28155] No such timeout policy "syz0" [ 2049.109479][T23639] IPVS: stop unused estimator thread 0... [ 2049.168222][T27678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2049.190039][T28156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2049.391426][T28176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6303'. [ 2049.524981][ T5987] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2049.685091][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 2049.696929][ T5987] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2049.748353][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.780104][ T5987] usb 5-1: Product: syz [ 2049.794544][ T5987] usb 5-1: Manufacturer: syz [ 2049.800367][ T5987] usb 5-1: SerialNumber: syz [ 2049.832652][ T5987] usb 5-1: config 0 descriptor?? [ 2049.867830][ T5987] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2049.897500][ T5987] dvb-usb: bulk message failed: -22 (3/0) [ 2049.939868][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2049.991702][ T5987] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2050.042077][ T5987] usb 5-1: media controller created [ 2050.103330][T27678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.676705][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2050.809978][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2050.845174][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2050.874689][ T5987] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2050.947534][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 2050.978483][T27678] veth0_vlan: entered promiscuous mode [ 2051.018894][ T5987] dvb-usb: schedule remote query interval to 150 msecs. [ 2051.031564][T27678] veth1_vlan: entered promiscuous mode [ 2051.054990][ T5987] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2051.163807][T27678] veth0_macvtap: entered promiscuous mode [ 2051.214630][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2051.237117][T27678] veth1_macvtap: entered promiscuous mode [ 2051.244942][ T5987] dvb-usb: error while querying for an remote control event. [ 2051.361531][T27678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.421454][T27678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.445194][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2051.468171][ T5987] dvb-usb: error while querying for an remote control event. [ 2051.536203][T27678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.570101][T27678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.613342][T27678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.628821][T27678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.684816][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2051.723490][ T5987] dvb-usb: error while querying for an remote control event. [ 2051.795393][T28212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.924599][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2051.937935][ T5987] dvb-usb: error while querying for an remote control event. [ 2051.970789][T28216] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6311'. [ 2052.114758][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2052.137059][ T5987] dvb-usb: error while querying for an remote control event. [ 2052.304911][ T5915] usb 5-1: USB disconnect, device number 38 [ 2052.377632][T23641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.418763][T23641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.742954][T28232] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2052.763015][T28232] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2052.773734][T28232] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2053.006042][ T5915] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2053.133459][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.171662][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.419076][T28242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6317'. [ 2054.460475][ T30] audit: type=1326 audit(1755613510.095:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2054.586564][T28257] No such timeout policy "syz0" [ 2055.257667][ T30] audit: type=1326 audit(1755613510.095:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2055.280703][ T30] audit: type=1326 audit(1755613510.095:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2055.459402][ T30] audit: type=1326 audit(1755613510.095:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2056.373860][ T30] audit: type=1326 audit(1755613510.095:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2056.512225][ T30] audit: type=1326 audit(1755613510.095:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2056.578189][ T30] audit: type=1326 audit(1755613510.095:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2056.658718][T28282] [U] [ 2057.326306][ T30] audit: type=1326 audit(1755613510.095:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2057.348723][ T30] audit: type=1326 audit(1755613510.095:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2057.371210][ T30] audit: type=1326 audit(1755613510.095:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28241 comm="syz.4.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2057.473367][T28288] netlink: 'syz.0.6326': attribute type 1 has an invalid length. [ 2057.505717][T28288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2060.004610][T14109] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2060.531701][T15640] Bluetooth: hci3: command 0x0406 tx timeout [ 2060.950238][T14109] usb 5-1: Using ep0 maxpacket: 16 [ 2060.960427][T14109] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 2060.982656][T14109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.027393][T14109] usb 5-1: config 0 has no interface number 0 [ 2061.033639][T14109] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2061.300057][T14109] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 2061.314544][T14109] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2061.326589][T14109] usb 5-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2061.341081][T14109] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2061.350912][T14109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.374947][T14109] usb 5-1: config 0 descriptor?? [ 2062.123581][T28324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2062.142835][T14109] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2062.753590][T14109] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 2062.780413][T28368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.834550][T28368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.599179][T14109] usb 5-1: USB disconnect, device number 39 [ 2063.714867][ T5987] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2063.888228][ T5987] usb 4-1: device descriptor read/64, error -71 [ 2064.091923][T28390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6352'. [ 2064.136301][T28390] Bluetooth: MGMT ver 1.23 [ 2064.174525][ T5987] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2064.324958][ T5987] usb 4-1: device descriptor read/64, error -71 [ 2064.444981][ T5987] usb usb4-port1: attempt power cycle [ 2065.114609][ T5987] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2065.146161][ T5987] usb 4-1: device descriptor read/8, error -71 [ 2065.394569][ T5987] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2065.574006][ T5840] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2065.690020][ T5987] usb 4-1: device descriptor read/8, error -71 [ 2065.755077][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 2065.815904][ T5987] usb usb4-port1: unable to enumerate USB device [ 2065.932968][ T5840] usb 2-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2065.950086][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.973841][ T5840] usb 2-1: Product: syz [ 2065.978132][ T5840] usb 2-1: Manufacturer: syz [ 2065.982775][ T5840] usb 2-1: SerialNumber: syz [ 2065.997884][ T5840] usb 2-1: config 0 descriptor?? [ 2066.024357][ T5840] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2066.032817][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 2066.052943][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2066.071042][ T5840] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2066.098850][ T5840] usb 2-1: media controller created [ 2066.244766][T15640] Bluetooth: hci2: command 0x0406 tx timeout [ 2066.540949][T26090] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2066.822153][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2066.988091][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 2067.022684][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 2067.040209][ T5840] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2067.096635][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 2067.119451][ T5840] dvb-usb: schedule remote query interval to 150 msecs. [ 2067.136596][ T5840] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2067.219433][ T5915] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2067.584056][T18672] dvb-usb: bulk message failed: -22 (1/0) [ 2067.590350][T18672] dvb-usb: error while querying for an remote control event. [ 2067.745043][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 2067.806962][ T5915] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.877472][T18672] dvb-usb: bulk message failed: -22 (1/0) [ 2068.287938][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2068.374541][T18672] dvb-usb: error while querying for an remote control event. [ 2068.402812][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 2068.552689][ T5840] usb 2-1: USB disconnect, device number 16 [ 2068.584611][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.675112][ T5915] usb 5-1: config 0 descriptor?? [ 2069.848013][ T5915] usb 5-1: USB disconnect, device number 40 [ 2070.131790][ T5840] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2071.101796][T15640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2071.125861][T15640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2071.138514][T15640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2071.153103][T15640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2071.175142][T15640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2072.034518][ T5987] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2072.197086][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 2072.211975][ T5987] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2072.221325][T28491] chnl_net:caif_netlink_parms(): no params data found [ 2072.239128][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.284637][ T5987] usb 4-1: Product: syz [ 2072.298656][ T5987] usb 4-1: Manufacturer: syz [ 2072.308740][ T5987] usb 4-1: SerialNumber: syz [ 2072.335859][ T5987] usb 4-1: config 0 descriptor?? [ 2072.356058][ T5987] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2072.371712][ T5987] dvb-usb: bulk message failed: -22 (3/0) [ 2072.386919][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2072.398383][ T5987] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2072.428937][ T5987] usb 4-1: media controller created [ 2072.472779][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2072.498620][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2072.505793][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2072.511701][ T5987] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2072.576204][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 2073.112909][ T5987] dvb-usb: schedule remote query interval to 150 msecs. [ 2073.123247][ T5987] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2073.142090][T28533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 2073.274823][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2073.287486][T15640] Bluetooth: hci4: command tx timeout [ 2073.298082][ T5987] dvb-usb: error while querying for an remote control event. [ 2073.380709][T28491] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.426719][T28491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.462885][T28491] bridge_slave_0: entered allmulticast mode [ 2073.474717][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2073.487003][ T5987] dvb-usb: error while querying for an remote control event. [ 2073.514035][T28491] bridge_slave_0: entered promiscuous mode [ 2073.546442][T28491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.558073][T28491] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.577326][T28491] bridge_slave_1: entered allmulticast mode [ 2073.599415][T28491] bridge_slave_1: entered promiscuous mode [ 2073.685123][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2073.696735][ T5987] dvb-usb: error while querying for an remote control event. [ 2073.753700][T28491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.831182][T28491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2073.917020][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2073.931400][ T5987] dvb-usb: error while querying for an remote control event. [ 2074.115172][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2074.259469][ T5987] dvb-usb: error while querying for an remote control event. [ 2075.624661][T15640] Bluetooth: hci4: command tx timeout [ 2075.817729][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 2075.823556][ T5987] dvb-usb: error while querying for an remote control event. [ 2075.897649][T28472] usb 4-1: USB disconnect, device number 51 [ 2076.019425][T28491] team0: Port device team_slave_0 added [ 2076.072299][T28472] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2076.199913][T28491] team0: Port device team_slave_1 added [ 2076.474814][T28491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.482099][T28491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.514845][T28491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.537722][T28472] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2077.319073][T28491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2077.326727][T28491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2077.352761][ C1] vkms_vblank_simulate: vblank timer overrun [ 2077.361489][T28491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2077.432276][T28558] netlink: 'syz.1.6390': attribute type 10 has an invalid length. [ 2077.468439][T28491] hsr_slave_0: entered promiscuous mode [ 2077.476338][T28491] hsr_slave_1: entered promiscuous mode [ 2077.482818][T28472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.496366][T28491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2077.504101][T28491] Cannot create hsr debugfs directory [ 2077.510896][T28472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.521042][T28472] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2077.533256][T28472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.545449][T28472] usb 4-1: config 0 descriptor?? [ 2077.577041][T28558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2077.934410][T15640] Bluetooth: hci4: command tx timeout [ 2078.873849][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2080.005373][T15640] Bluetooth: hci4: command tx timeout [ 2081.008965][T28491] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2081.021772][T28491] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.487505][T24869] usb 4-1: USB disconnect, device number 52 [ 2081.489030][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 2081.538675][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 2081.551905][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 2081.572387][ T5915] usb 2-1: device descriptor read/all, error -71 [ 2081.669565][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6396'. [ 2081.802653][T28585] Invalid logical block size (535) [ 2082.141753][T28491] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.231292][T28491] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.506924][T28491] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.540298][T28491] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.946983][T28491] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2084.188284][T28491] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.523870][ T5840] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2085.865252][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 2085.963383][ T5840] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2085.981853][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.003689][ T5840] usb 5-1: Product: syz [ 2086.032921][ T5840] usb 5-1: Manufacturer: syz [ 2086.048048][ T5840] usb 5-1: SerialNumber: syz [ 2086.067983][ T5840] usb 5-1: config 0 descriptor?? [ 2086.082292][ T5840] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2086.090140][T28491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2086.106453][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 2086.117375][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.128514][ T5840] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2086.152129][ T5840] usb 5-1: media controller created [ 2086.159610][T28491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2086.196874][T28491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2086.232208][T28491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2086.238998][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.847041][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 2086.853646][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 2086.859738][ T5840] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2086.910357][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 2086.957453][T28638] netlink: 'syz.3.6414': attribute type 10 has an invalid length. [ 2086.976380][ T5840] dvb-usb: schedule remote query interval to 150 msecs. [ 2086.983411][ T5840] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2087.047428][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2087.047449][ T30] audit: type=1326 audit(1755613542.735:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.134657][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 2087.140729][ T5840] dvb-usb: error while querying for an remote control event. [ 2087.142719][T28638] veth0_vlan: left promiscuous mode [ 2087.158358][ T30] audit: type=1326 audit(1755613542.735:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.217411][ T30] audit: type=1326 audit(1755613542.735:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.260911][T28638] veth0_vlan: entered promiscuous mode [ 2087.314499][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 2087.320330][ T5840] dvb-usb: error while querying for an remote control event. [ 2087.334682][T28638] team0: Device veth0_vlan failed to register rx_handler [ 2087.342476][ T30] audit: type=1326 audit(1755613542.735:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.414588][ T30] audit: type=1326 audit(1755613542.735:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.501529][ T30] audit: type=1326 audit(1755613542.785:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84bcd8e7eb code=0x7ffc0000 [ 2087.540951][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 2087.569812][ T5915] dvb-usb: error while querying for an remote control event. [ 2087.609625][ T30] audit: type=1326 audit(1755613542.785:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.666393][ T30] audit: type=1326 audit(1755613542.785:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.702508][T28491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2087.716366][T24869] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2087.754245][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 2087.769098][ T5915] dvb-usb: error while querying for an remote control event. [ 2087.780080][ T30] audit: type=1326 audit(1755613542.785:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2087.811865][T28491] 8021q: adding VLAN 0 to HW filter on device team0 [ 2087.848201][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2087.855581][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2088.095756][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2088.109918][ T30] audit: type=1326 audit(1755613542.785:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28639 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8ebe9 code=0x7ffc0000 [ 2088.132124][ T24] dvb-usb: error while querying for an remote control event. [ 2088.710530][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2088.723167][ T24] dvb-usb: error while querying for an remote control event. [ 2088.752822][ T24] usb 5-1: USB disconnect, device number 41 [ 2088.779858][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.787139][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2089.457895][ T24] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2089.510589][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6420'. [ 2089.544542][T28663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6420'. [ 2090.928406][T28688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2091.120106][T28491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2091.144015][T28472] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2091.198593][T28693] netlink: 316 bytes leftover after parsing attributes in process `syz.1.6426'. [ 2091.924105][T28472] usb 5-1: Using ep0 maxpacket: 16 [ 2091.958510][T28472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2091.990657][T28472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.017625][T28472] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2092.046564][T28472] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2092.063060][T28699] netlink: 'syz.0.6429': attribute type 8 has an invalid length. [ 2092.101640][T28472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.165083][T28472] usb 5-1: config 0 descriptor?? [ 2092.225312][T24869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2092.607757][T24869] usb 2-1: Using ep0 maxpacket: 16 [ 2092.620416][T24869] usb 2-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2092.671375][T24869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.539359][T28472] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 2093.563510][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2093.563531][ T30] audit: type=1326 audit(1755613549.225:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2093.854008][ T30] audit: type=1326 audit(1755613549.225:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa59e18d550 code=0x7ffc0000 [ 2093.888709][ T30] audit: type=1326 audit(1755613549.235:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa59e190417 code=0x7ffc0000 [ 2093.907563][T24869] usb 2-1: Product: syz [ 2093.915553][T28472] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 2093.926567][ T30] audit: type=1326 audit(1755613549.235:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2093.948615][T24869] usb 2-1: Manufacturer: syz [ 2093.950770][T28472] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2093.994754][T24869] usb 2-1: SerialNumber: syz [ 2094.035665][T24869] usb 2-1: config 0 descriptor?? [ 2094.041758][ T30] audit: type=1326 audit(1755613549.235:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa59e190417 code=0x7ffc0000 [ 2094.069690][ T5840] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2094.111558][T28472] usb 5-1: USB disconnect, device number 42 [ 2094.124657][ T5840] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2094.126693][T24869] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2094.167962][ T30] audit: type=1326 audit(1755613549.235:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa59e18d84a code=0x7ffc0000 [ 2094.222671][ T5840] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2094.235492][T24869] dvb-usb: bulk message failed: -22 (3/0) [ 2094.257419][T24869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2094.268418][ T5840] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2094.290017][ T30] audit: type=1326 audit(1755613549.235:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2094.307572][T24869] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2094.322714][T24869] usb 2-1: media controller created [ 2094.936510][ T30] audit: type=1326 audit(1755613549.235:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2094.986088][T28713] delete_channel: no stack [ 2094.998189][ T30] audit: type=1326 audit(1755613549.235:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2095.031843][T24869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2095.073321][ T30] audit: type=1326 audit(1755613549.235:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2095.153218][T24869] dvb-usb: bulk message failed: -22 (6/0) [ 2095.171447][T24869] dvb-usb: bulk message failed: -22 (6/0) [ 2095.180525][T24869] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2095.198727][T24869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 2095.240351][T24869] dvb-usb: schedule remote query interval to 150 msecs. [ 2095.257396][T24869] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2095.352893][T28491] veth0_vlan: entered promiscuous mode [ 2095.396608][T28491] veth1_vlan: entered promiscuous mode [ 2095.414569][T24869] dvb-usb: bulk message failed: -22 (1/0) [ 2095.420570][T24869] dvb-usb: error while querying for an remote control event. [ 2095.565361][T28491] veth0_macvtap: entered promiscuous mode [ 2095.607445][T24869] dvb-usb: bulk message failed: -22 (1/0) [ 2095.641725][T24869] dvb-usb: error while querying for an remote control event. [ 2095.677313][T28491] veth1_macvtap: entered promiscuous mode [ 2096.087942][T24869] dvb-usb: bulk message failed: -22 (1/0) [ 2096.095018][T28730] No such timeout policy "syz0" [ 2096.123326][T24869] dvb-usb: error while querying for an remote control event. [ 2096.166841][T28472] usb 2-1: USB disconnect, device number 20 [ 2096.186908][T28491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2096.245665][T28491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2096.313077][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6439'. [ 2096.404881][T28491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.423655][T28491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.432518][T28491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.445499][T28472] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2096.461485][T28491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.087269][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.189357][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.934610][T14103] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2097.953294][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.964736][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.117004][T14103] usb 5-1: Using ep0 maxpacket: 8 [ 2098.301446][T14103] usb 5-1: unable to get BOS descriptor set [ 2098.320129][T14103] usb 5-1: config 31 has an invalid interface number: 134 but max is 0 [ 2098.332035][T14103] usb 5-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 2098.400540][T14103] usb 5-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 2098.430720][T14103] usb 5-1: config 31 has an invalid descriptor of length 236, skipping remainder of the config [ 2098.467941][T14103] usb 5-1: config 31 has no interface number 0 [ 2098.481433][T14103] usb 5-1: config 31 interface 134 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 2098.536808][T14103] usb 5-1: config 31 interface 134 has no altsetting 0 [ 2098.565708][T14103] usb 5-1: string descriptor 0 read error: -22 [ 2098.572199][T14103] usb 5-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0 [ 2098.613112][T14103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.665097][T14103] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2098.824711][ T5987] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2098.946860][T14103] snd-usb-audio 5-1:31.134: probe with driver snd-usb-audio failed with error -2 [ 2099.004335][ T5987] usb 2-1: Using ep0 maxpacket: 8 [ 2099.021656][T28643] udevd[28643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:31.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2099.118804][T14103] usb 5-1: USB disconnect, device number 43 [ 2099.263895][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2099.276534][ T5987] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2099.343402][ T5987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2099.391811][ T5987] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2099.434054][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 2099.445439][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2099.459014][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2099.487159][ T5987] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2099.502943][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.514457][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.543324][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2099.601849][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2099.614600][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.686060][ T24] usb 6-1: Product: syz [ 2099.719810][ T24] usb 6-1: Manufacturer: syz [ 2099.778317][ T24] usb 6-1: SerialNumber: syz [ 2100.055301][ T24] usb 6-1: config 0 descriptor?? [ 2100.247092][ T24] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 2100.276583][ T24] mcba_usb 6-1:0.0 can0: couldn't start device: -90 [ 2100.301813][T28769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.320130][T28769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.114690][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 2101.310065][ T24] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90 [ 2101.356529][ T24] usb 6-1: USB disconnect, device number 23 [ 2101.548156][ T5987] usb 2-1: string descriptor 0 read error: -71 [ 2101.557162][ T5987] hub 2-1:1.0: bad descriptor, ignoring hub [ 2101.563682][ T5987] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2101.599995][ T5987] usb 2-1: USB disconnect, device number 21 [ 2102.443658][T28793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6451'. [ 2102.459212][T28794] [U] [ 2103.177012][T28805] loop9: detected capacity change from 0 to 7 [ 2103.191286][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.201382][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.211166][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.220516][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.230135][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.239762][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.249199][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.258370][T28805] ldm_validate_partition_table(): Disk read failed. [ 2103.266346][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.276056][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.286167][T28805] Buffer I/O error on dev loop9, logical block 0, async page read [ 2103.295889][T28805] Dev loop9: unable to read RDB block 0 [ 2103.305894][T28805] loop9: unable to read partition table [ 2103.312962][T28805] loop9: partition table beyond EOD, truncated [ 2103.320035][T28805] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2103.320035][T28805] ) failed (rc=-5) [ 2104.285376][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.295005][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.569469][T28834] No such timeout policy "syz0" [ 2107.476504][T28836] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2107.571794][ T5987] kernel write not supported for file 377/task/377/uid_map (pid: 5987 comm: kworker/0:7) [ 2107.590960][T24869] kernel write not supported for file 377/task/377/uid_map (pid: 24869 comm: kworker/0:0) [ 2107.745213][T28847] Cannot find del_set index 1 as target [ 2109.222491][T28864] loop9: detected capacity change from 0 to 7 [ 2109.233162][T28864] buffer_io_error: 4 callbacks suppressed [ 2109.233204][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.250299][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.259656][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.268977][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.278452][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.287882][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.297215][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.306425][T28864] ldm_validate_partition_table(): Disk read failed. [ 2109.313457][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.322966][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.332272][T28864] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.342581][T28864] Dev loop9: unable to read RDB block 0 [ 2109.350907][T28864] loop9: unable to read partition table [ 2109.358490][T28864] loop9: partition table beyond EOD, truncated [ 2109.366400][T28864] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2109.366400][T28864] ) failed (rc=-5) [ 2110.297425][T28871] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6474'. [ 2110.478593][ T5987] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2110.787212][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 2110.799621][ T5987] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 2110.810967][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.912114][ T5987] usb 2-1: config 0 has no interface number 0 [ 2110.918725][ T5987] usb 2-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2110.931060][ T5987] usb 2-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2110.946180][ T5987] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2110.956540][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.985348][ T5987] usb 2-1: config 0 descriptor?? [ 2111.009264][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2111.975185][T28643] udevd[28643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2112.068476][ T5987] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 2112.089910][ T5987] usb 2-1: USB disconnect, device number 22 [ 2112.414783][T28880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6478'. [ 2112.520929][T28880] xt_ipcomp: unknown flags 12 [ 2114.084934][T28892] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 2115.742964][T28916] netlink: 'syz.4.6489': attribute type 23 has an invalid length. [ 2116.782915][T28926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6491'. [ 2117.372752][T28934] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6492'. [ 2118.974590][T26090] Bluetooth: hci2: command 0x0406 tx timeout [ 2119.035481][T15640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2119.097337][T28948] 9pnet_fd: Insufficient options for proto=fd [ 2119.291020][T28953] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2119.480803][T28955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6500'. [ 2119.503053][T28955] veth1_to_bond: entered allmulticast mode [ 2119.516564][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 2119.887633][T28943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2120.345105][T28955] bond0: (slave bond_slave_1): Releasing backup interface [ 2121.767817][T28990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6512'. [ 2122.167779][T28985] bridge1: entered allmulticast mode [ 2123.184142][T29006] No such timeout policy "syz0" [ 2124.874431][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2124.874456][ T30] audit: type=1326 audit(1755613580.545:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29013 comm="syz.4.6519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x0 [ 2124.901852][ C0] vkms_vblank_simulate: vblank timer overrun [ 2125.388182][T29025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6520'. [ 2125.398024][T29025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6520'. [ 2126.630050][ C0] Unknown status report in ack skb [ 2128.620255][T29062] No such timeout policy "syz0" [ 2131.316803][T29080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6536'. [ 2131.707498][T29083] xt_CT: No such helper "pptp" [ 2131.981527][T29088] Invalid logical block size (535) [ 2132.028028][T26064] Bluetooth: hci0: command 0x0406 tx timeout [ 2132.102091][T29093] netlink: 'syz.1.6542': attribute type 10 has an invalid length. [ 2132.114580][T29093] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 2132.288211][T29098] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 2132.383829][ T5840] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2132.557864][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.595078][ T5840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2132.767716][ T5840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2132.916807][ T5840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2133.373787][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.392755][ T5840] usb 6-1: Product: syz [ 2134.051226][ T5840] usb 6-1: Manufacturer: syz [ 2134.056331][ T5840] usb 6-1: SerialNumber: syz [ 2135.286995][ T5840] cdc_ncm 6-1:1.0: bind() failure [ 2135.387100][ T5840] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2135.422494][ T5840] cdc_ncm 6-1:1.1: bind() failure [ 2135.453431][ T5840] usb 6-1: USB disconnect, device number 24 [ 2135.535253][ T60] bridge_slave_1: left promiscuous mode [ 2135.550660][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.665730][ T60] bridge_slave_0: left allmulticast mode [ 2135.690817][ T60] bridge_slave_0: left promiscuous mode [ 2135.864945][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.961939][T29155] netlink: 316 bytes leftover after parsing attributes in process `syz.1.6555'. [ 2136.790192][T29159] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 2138.440725][T29191] netlink: 'syz.1.6568': attribute type 23 has an invalid length. [ 2141.025276][T29215] No such timeout policy "syz0" [ 2141.200120][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.342042][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.372160][ T60] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2141.486369][T29220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6576'. [ 2142.725798][ T60] bond0 (unregistering): Released all slaves [ 2142.756783][ T60] bond1 (unregistering): Released all slaves [ 2144.045112][ T60] bond2 (unregistering): Released all slaves [ 2144.070082][T29176] macsec1: entered allmulticast mode [ 2144.076608][T29176] macvlan1: entered allmulticast mode [ 2144.082139][T29176] veth1_vlan: entered allmulticast mode [ 2144.092759][T29176] macvlan1: left allmulticast mode [ 2144.108627][T29176] veth1_vlan: left allmulticast mode [ 2144.270062][T29225] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2144.281769][ T60] tipc: Disabling bearer [ 2144.295060][ T60] tipc: Left network mode [ 2144.299937][T29225] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2144.317043][T29225] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2145.154015][ T5840] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2146.401010][ T5840] usb 6-1: Using ep0 maxpacket: 16 [ 2146.416852][ T5840] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 2146.972369][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.578391][ T5840] usb 6-1: config 0 has no interface number 0 [ 2147.585129][ T5840] usb 6-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2147.606048][ T5840] usb 6-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2147.697132][ T5840] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2147.768852][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.819327][ T5840] usb 6-1: config 0 descriptor?? [ 2147.850850][ T5840] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2148.458014][ T5840] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 2148.553261][ T5840] usb 6-1: USB disconnect, device number 25 [ 2148.820174][T29282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2148.904645][ T5987] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2149.839483][ T5987] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 2149.855716][ T5987] usb 5-1: config 0 has no interface number 0 [ 2149.872154][ T5987] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 2149.919149][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.955862][ T5987] usb 5-1: config 0 descriptor?? [ 2150.351738][ T60] hsr_slave_0: left promiscuous mode [ 2150.358585][ T60] batman_adv: batadv0: Interface deactivated: dummy0 [ 2150.368605][ T60] batman_adv: batadv0: Removing interface: dummy0 [ 2151.344904][T29302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6603'. [ 2151.358313][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2151.373864][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.392393][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2151.970035][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2152.094438][T29308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6605'. [ 2152.148934][ T60] veth1_macvtap: left promiscuous mode [ 2152.171804][ T60] veth0_macvtap: left promiscuous mode [ 2152.286862][T29305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2152.429470][T29305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.243926][T15640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2154.250437][T15640] Bluetooth: hci2: command 0x0406 tx timeout [ 2155.460194][ T60] team0 (unregistering): Port device team_slave_1 removed [ 2155.649015][ T60] team0 (unregistering): Port device team_slave_0 removed [ 2156.111970][T29344] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 2156.119973][T29344] IPVS: set_ctl: invalid protocol: 136 172.30.1.1:20003 [ 2156.207275][T29346] xt_hashlimit: Unknown mode mask 40000, kernel too old? [ 2156.458638][T29350] netlink: 'syz.0.6616': attribute type 10 has an invalid length. [ 2156.540535][ T5987] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2156.574429][ T5987] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 2156.604811][ T5987] asix 5-1:0.102: probe with driver asix failed with error -71 [ 2156.642839][ T5987] usb 5-1: USB disconnect, device number 44 [ 2156.799521][T29350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.831601][T29350] team0: Port device bond0 added [ 2156.962385][T29357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6620'. [ 2157.626737][T29370] overlayfs: failed to clone upperpath [ 2157.771310][ T60] IPVS: stop unused estimator thread 0... [ 2158.024673][T15640] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2158.793132][T29391] autofs: Unknown parameter 'fd0x0000000000000000' [ 2160.044380][T29417] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.6636'. [ 2160.053846][T29417] netlink: 6332 bytes leftover after parsing attributes in process `syz.5.6636'. [ 2162.414458][ T5987] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2163.326326][ T5987] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2163.355294][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.379017][ T5987] usb 6-1: Product: syz [ 2163.383354][ T5987] usb 6-1: Manufacturer: syz [ 2163.391383][ T5987] usb 6-1: SerialNumber: syz [ 2163.492932][ T5987] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2163.556628][T14109] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2164.977040][ T5915] usb 6-1: USB disconnect, device number 26 [ 2164.987729][T14109] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2165.015678][T14109] ath9k_htc: Failed to initialize the device [ 2165.057656][ T5915] usb 6-1: ath9k_htc: USB layer deinitialized [ 2165.172164][T29461] netlink: 'syz.4.6651': attribute type 10 has an invalid length. [ 2165.254061][T29461] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2165.639418][T29461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6651'. [ 2165.770724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.780082][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.361746][ T5987] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2167.523529][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6657'. [ 2167.554646][ T5987] usb 6-1: Using ep0 maxpacket: 16 [ 2167.568678][ T5987] usb 6-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2167.597112][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.640232][ T5987] usb 6-1: Product: syz [ 2167.661265][ T5987] usb 6-1: Manufacturer: syz [ 2167.691690][ T5987] usb 6-1: SerialNumber: syz [ 2167.718395][ T5987] usb 6-1: config 0 descriptor?? [ 2167.742197][ T5987] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2167.764463][ T5987] dvb-usb: bulk message failed: -22 (3/0) [ 2167.783017][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2167.800542][T29483] hsr_slave_1 (unregistering): left promiscuous mode [ 2167.814872][ T5987] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2167.836928][ T5987] usb 6-1: media controller created [ 2167.909691][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2167.985367][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2167.991401][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 2168.617098][ T5987] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2168.694327][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 2168.758252][ T5987] dvb-usb: schedule remote query interval to 150 msecs. [ 2168.788598][ T5987] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2169.012416][T14109] dvb-usb: bulk message failed: -22 (1/0) [ 2169.027617][T14109] dvb-usb: error while querying for an remote control event. [ 2169.468088][T29497] No such timeout policy "syz0" [ 2169.477034][T14109] dvb-usb: bulk message failed: -22 (1/0) [ 2169.512829][T14109] dvb-usb: error while querying for an remote control event. [ 2169.927770][ T30] audit: type=1326 audit(1755613625.465:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29496 comm="syz.3.6661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ee0f8ebe9 code=0x0 [ 2170.065049][T14109] dvb-usb: bulk message failed: -22 (1/0) [ 2170.065483][T29505] netlink: 'syz.0.6662': attribute type 11 has an invalid length. [ 2170.108353][ T5840] usb 6-1: USB disconnect, device number 27 [ 2170.359930][T14109] dvb-usb: error while querying for an remote control event. [ 2170.758603][ T5840] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2170.790156][T29509] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:00f5:7d01 with DS=0xe [ 2172.003114][T29530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6671'. [ 2174.243920][T26064] Bluetooth: hci2: command 0x0406 tx timeout [ 2174.291466][T15640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2174.917206][T29553] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6676'. [ 2175.249493][T29562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6674'. [ 2175.903240][T29569] netlink: 83 bytes leftover after parsing attributes in process `syz.1.6681'. [ 2175.946555][T29569] netlink: 'syz.1.6681': attribute type 10 has an invalid length. [ 2176.121066][T29569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.774983][T29569] bridge_slave_1: left allmulticast mode [ 2176.881810][T29569] bridge_slave_1: left promiscuous mode [ 2176.914892][T29569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2177.108889][T29569] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2177.205167][T29578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6683'. [ 2179.115092][T29587] syz.3.6687: attempt to access beyond end of device [ 2179.115092][T29587] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2179.208502][T29587] SQUASHFS error: Failed to read block 0x0: -5 [ 2179.285111][T29587] unable to read squashfs_super_block [ 2180.028749][T29603] netlink: 'syz.0.6690': attribute type 10 has an invalid length. [ 2180.041020][T29600] ip6erspan0: entered promiscuous mode [ 2180.073601][T29603] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 2180.241929][T29607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6691'. [ 2182.466738][T29638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6702'. [ 2182.743362][ T5987] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2182.904595][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 2182.917913][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2182.931846][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2182.975247][ T5987] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2182.988894][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.011392][ T5987] usb 5-1: Product: syz [ 2183.022119][ T5987] usb 5-1: Manufacturer: syz [ 2183.033616][ T5987] usb 5-1: SerialNumber: syz [ 2183.058466][ T5987] usb 5-1: config 0 descriptor?? [ 2183.096090][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2183.122003][ T5987] usb 5-1: invalid MIDI out EP 0 [ 2183.280762][ T5987] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2183.335961][ T5987] usb 5-1: USB disconnect, device number 45 [ 2183.497037][T28613] udevd[28613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2184.484488][T15640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2184.494664][T15640] Bluetooth: hci2: command 0x0406 tx timeout [ 2185.646785][ T24] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2185.699347][T29676] netlink: 'syz.0.6716': attribute type 3 has an invalid length. [ 2185.809315][ T24] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 2186.030066][T29687] netlink: 'syz.4.6720': attribute type 10 has an invalid length. [ 2186.046613][ T24] usb 6-1: config 8 has no interface number 0 [ 2186.092945][ T24] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2186.156407][T29687] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 2186.229219][ T24] usb 6-1: config 8 interface 177 has no altsetting 0 [ 2186.353913][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2186.486482][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.652078][T29665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2186.880893][ T24] usb 6-1: string descriptor 0 read error: -71 [ 2186.912116][ C1] ir_toy 6-1:8.177: out urb status: -71 [ 2187.289063][T29697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6721'. [ 2187.454152][ T24] ir_toy 6-1:8.177: could not write reset command: -110 [ 2187.502881][ T24] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 2187.574958][ T24] usb 6-1: USB disconnect, device number 28 [ 2188.540641][T29708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6726'. [ 2188.634503][T29710] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2188.642982][T29710] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2188.652166][T29710] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2191.257257][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6732'. [ 2191.304808][T29723] xt_CT: No such helper "pptp" [ 2193.365740][T26064] Bluetooth: hci4: command 0x0406 tx timeout [ 2195.812119][T29742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2196.053817][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2196.915107][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2196.929866][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.665976][T28472] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2197.711789][ T24] usb 6-1: Product: syz [ 2197.719889][ T24] usb 6-1: Manufacturer: syz [ 2197.725484][ T24] usb 6-1: SerialNumber: syz [ 2197.731297][T29770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6746'. [ 2197.820448][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2197.852870][ T5840] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2197.869433][T28472] usb 4-1: Using ep0 maxpacket: 16 [ 2197.896345][T28472] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2197.930300][T28472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.971338][T28472] usb 4-1: Product: syz [ 2197.982940][T28472] usb 4-1: Manufacturer: syz [ 2197.991333][T28472] usb 4-1: SerialNumber: syz [ 2198.015693][T28472] usb 4-1: config 0 descriptor?? [ 2198.027826][T28472] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2198.053912][T28472] dvb-usb: bulk message failed: -22 (3/0) [ 2198.077274][T28472] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2198.094664][T28472] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2198.116740][T28472] usb 4-1: media controller created [ 2198.158576][T28472] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2198.230986][T28472] dvb-usb: bulk message failed: -22 (6/0) [ 2198.250450][T28472] dvb-usb: bulk message failed: -22 (6/0) [ 2198.264375][T28472] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2199.110878][ T5987] usb 6-1: USB disconnect, device number 29 [ 2199.273760][ T5840] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2199.280908][ T5840] ath9k_htc: Failed to initialize the device [ 2199.288441][T28472] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 2199.306534][ T5987] usb 6-1: ath9k_htc: USB layer deinitialized [ 2199.306624][T28472] dvb-usb: schedule remote query interval to 150 msecs. [ 2199.320280][T28472] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2199.474508][T28472] dvb-usb: bulk message failed: -22 (1/0) [ 2199.480467][T28472] dvb-usb: error while querying for an remote control event. [ 2199.522228][T29802] netlink: 'syz.0.6753': attribute type 3 has an invalid length. [ 2199.673834][T28472] dvb-usb: bulk message failed: -22 (1/0) [ 2199.679800][T28472] dvb-usb: error while querying for an remote control event. [ 2199.846683][ T5987] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2199.865438][T28472] dvb-usb: bulk message failed: -22 (1/0) [ 2199.871288][T28472] dvb-usb: error while querying for an remote control event. [ 2199.888592][T29816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2199.986983][ T24] usb 4-1: USB disconnect, device number 53 [ 2200.012814][ T5987] usb 6-1: device descriptor read/64, error -71 [ 2200.133090][ T30] audit: type=1326 audit(1755613655.815:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.184141][ T24] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2200.202737][ T30] audit: type=1326 audit(1755613655.815:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.308160][ T5987] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2200.331160][ T30] audit: type=1326 audit(1755613655.815:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.373529][T29829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6763'. [ 2200.388183][ T30] audit: type=1326 audit(1755613655.815:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.437074][ T30] audit: type=1326 audit(1755613655.815:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.444866][ T5987] usb 6-1: device descriptor read/64, error -71 [ 2200.465288][ T30] audit: type=1326 audit(1755613655.815:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.521339][ T30] audit: type=1326 audit(1755613655.815:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.550103][ T30] audit: type=1326 audit(1755613655.815:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.657514][ T30] audit: type=1326 audit(1755613655.815:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.683484][ T30] audit: type=1326 audit(1755613655.815:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29819 comm="syz.1.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f66b7f8ebe9 code=0x7ffc0000 [ 2200.705878][ T5987] usb usb6-port1: attempt power cycle [ 2200.722938][T29839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6765'. [ 2201.704669][ T5987] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2201.776489][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6766'. [ 2201.779974][ T5987] usb 6-1: device descriptor read/8, error -71 [ 2201.867597][T29839] hsr_slave_1 (unregistering): left promiscuous mode [ 2202.000793][T29857] Unknown status report in ack skb [ 2202.215880][ T5987] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2203.521270][T24871] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2203.530399][ T5987] usb 6-1: device descriptor read/8, error -71 [ 2203.579851][T29874] fuse: Unknown parameter '' [ 2203.600317][T29878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6779'. [ 2203.600677][T29874] overlay: Unknown parameter 'dont_measure' [ 2203.644513][ T5987] usb usb6-port1: unable to enumerate USB device [ 2203.684463][T24871] usb 4-1: Using ep0 maxpacket: 16 [ 2203.701574][T24871] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2203.734449][T24871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.742536][T24871] usb 4-1: Product: syz [ 2203.768757][T24871] usb 4-1: Manufacturer: syz [ 2203.778791][T24871] usb 4-1: SerialNumber: syz [ 2203.953851][T24871] usb 4-1: config 0 descriptor?? [ 2203.971276][T29885] 9pnet_fd: Insufficient options for proto=fd [ 2203.972478][T24871] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2203.987387][T24871] dvb-usb: bulk message failed: -22 (3/0) [ 2203.997908][T24871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2204.009711][T24871] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2204.741064][T24871] usb 4-1: media controller created [ 2204.782467][T24871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2204.874552][T24871] dvb-usb: bulk message failed: -22 (6/0) [ 2205.666154][T24871] dvb-usb: bulk message failed: -22 (6/0) [ 2205.672043][T24871] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2205.702372][T24871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 2205.753167][T24871] dvb-usb: schedule remote query interval to 150 msecs. [ 2205.778242][T24871] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2206.498757][T24871] dvb-usb: bulk message failed: -22 (1/0) [ 2206.522086][T24871] dvb-usb: error while querying for an remote control event. [ 2206.787466][T24871] dvb-usb: bulk message failed: -22 (1/0) [ 2206.793308][T24871] dvb-usb: error while querying for an remote control event. [ 2206.843581][T24871] usb 4-1: USB disconnect, device number 54 [ 2207.366048][T24871] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2207.470451][T29922] cramfs: Unknown parameter 'discard' [ 2208.724584][T29926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6792'. [ 2210.606035][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6796'. [ 2211.711061][T29956] bond0: entered promiscuous mode [ 2211.726567][T29956] bond_slave_0: entered promiscuous mode [ 2211.745734][T29956] bond_slave_1: entered promiscuous mode [ 2211.760933][T29956] mac80211_hwsim hwsim67 wlan1: entered promiscuous mode [ 2211.775991][T29956] bridge_slave_1: entered promiscuous mode [ 2211.801953][T29956] bond0: left promiscuous mode [ 2211.817721][T29956] bond_slave_0: left promiscuous mode [ 2211.831378][T29956] bond_slave_1: left promiscuous mode [ 2211.849204][T29956] mac80211_hwsim hwsim67 wlan1: left promiscuous mode [ 2211.904817][T29956] bridge_slave_1: left promiscuous mode [ 2212.253163][T23861] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2212.272447][T29944] overlayfs: failed to clone upperpath [ 2212.453965][T23861] usb 6-1: Using ep0 maxpacket: 16 [ 2213.112786][T23861] usb 6-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 2213.137718][T23861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.150723][T23861] usb 6-1: Product: syz [ 2213.170589][T23861] usb 6-1: Manufacturer: syz [ 2213.193852][T23861] usb 6-1: SerialNumber: syz [ 2213.366526][T23861] usb 6-1: config 0 descriptor?? [ 2213.406359][T23861] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 2213.470110][T23861] dvb-usb: bulk message failed: -22 (3/0) [ 2214.114693][T23861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2214.869930][T23861] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 2214.931101][T23861] usb 6-1: media controller created [ 2215.081589][T23861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2215.230020][T23861] dvb-usb: bulk message failed: -22 (6/0) [ 2215.402307][T29992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6809'. [ 2215.421890][T23861] dvb-usb: bulk message failed: -22 (6/0) [ 2215.442738][T23861] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 2215.558420][T23861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 2216.218917][T23861] dvb-usb: schedule remote query interval to 150 msecs. [ 2216.234415][T23861] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 2216.282633][T23861] usb 6-1: USB disconnect, device number 34 [ 2216.393795][T28472] dvb-usb: bulk message failed: -22 (1/0) [ 2216.422329][T28472] dvb-usb: error while querying for an remote control event. [ 2217.676381][T23861] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 2219.955639][T30028] netlink: 'syz.5.6820': attribute type 4 has an invalid length. [ 2220.742541][T30058] No such timeout policy "syz0" [ 2221.448084][T30062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2221.458799][T30062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2221.830474][T30065] comedi comedi4: comedi_config --init_data is deprecated [ 2223.384896][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 2223.642867][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6833'. [ 2223.660862][T30077] sctp: [Deprecated]: syz.3.6833 (pid 30077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2223.660862][T30077] Use struct sctp_sack_info instead [ 2223.800692][T30087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6835'. [ 2224.684455][T14109] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 2226.662301][T14109] usb 4-1: device descriptor read/all, error -71 [ 2226.725995][T30115] random: crng reseeded on system resumption [ 2227.090472][T30123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2227.173999][T30124] [U] [ 2227.438898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.445577][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.568383][T30126] xt_CT: No such helper "pptp" [ 2230.311674][T30144] Invalid logical block size (535) [ 2230.646273][T30150] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6852'. [ 2232.082626][T30165] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6856'. [ 2232.216873][T30165] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6856'. [ 2232.717726][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6862'. [ 2233.013308][T30189] netlink: 316 bytes leftover after parsing attributes in process `syz.0.6861'. [ 2234.289944][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2234.289965][ T30] audit: type=1326 audit(1755613689.975:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.389813][ T30] audit: type=1326 audit(1755613689.975:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.472429][ T30] audit: type=1326 audit(1755613690.015:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.539381][ T30] audit: type=1326 audit(1755613690.015:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.609730][ T30] audit: type=1326 audit(1755613690.015:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.682267][ T30] audit: type=1326 audit(1755613690.015:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.766861][T30208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6869'. [ 2234.797985][ T30] audit: type=1326 audit(1755613690.015:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.860627][ T30] audit: type=1326 audit(1755613690.015:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.960683][ T30] audit: type=1326 audit(1755613690.025:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2234.994418][ T30] audit: type=1326 audit(1755613690.025:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30198 comm="syz.4.6867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18ebe9 code=0x7ffc0000 [ 2235.045774][T30210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2236.594633][T30227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6873'. [ 2236.604442][T30227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6873'. [ 2237.382061][T30231] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6875'. [ 2237.399650][T30231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6875'. [ 2242.344890][T30290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6892'. [ 2242.354151][T30290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6892'. [ 2242.514479][T30291] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2242.521062][T30291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2242.529287][T30291] vhci_hcd vhci_hcd.0: Device attached [ 2242.597355][T30296] vhci_hcd: connection closed [ 2242.599261][T23641] vhci_hcd: stop threads [ 2242.611401][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6893'. [ 2242.628226][T23641] vhci_hcd: release socket [ 2242.632744][T23641] vhci_hcd: disconnect device [ 2244.393851][T30328] netlink: 316 bytes leftover after parsing attributes in process `syz.0.6902'. [ 2245.268505][T30332] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2245.966746][T30344] No such timeout policy "syz0" [ 2246.920762][T30351] netlink: 'syz.4.6909': attribute type 10 has an invalid length. [ 2247.097995][T30351] bond0: (slave bond_slave_0): Releasing backup interface [ 2248.618606][T30352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2253.069156][ T0] sched: DL replenish lagged too much [ 2379.453633][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2379.460769][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26740/1:b..l P30352/1:b..l [ 2379.470749][ C0] rcu: (detected by 0, t=10502 jiffies, g=142941, q=753 ncpus=2) [ 2379.478619][ C0] task:syz.5.6910 state:R running task stack:25080 pid:30352 tgid:30352 ppid:28491 task_flags:0x40004c flags:0x00004000 [ 2379.493881][ C0] Call Trace: [ 2379.497223][ C0] [ 2379.500212][ C0] __schedule+0x16aa/0x4c90 [ 2379.504797][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 2379.510172][ C0] ? __pfx___schedule+0x10/0x10 [ 2379.515077][ C0] ? __lock_acquire+0xab9/0xd20 [ 2379.520006][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 2379.525342][ C0] preempt_schedule_irq+0xb5/0x150 [ 2379.530500][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2379.536279][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2379.542186][ C0] irqentry_exit+0x6f/0x90 [ 2379.546652][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2379.552704][ C0] RIP: 0010:is_bpf_text_address+0x1a2/0x2b0 [ 2379.558648][ C0] Code: 24 4c 89 e7 4c 89 f6 e8 6c 17 f1 ff 4d 39 f4 73 47 e8 02 15 f1 ff b8 08 00 00 00 49 01 c7 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 24 fc 50 00 4d 8b 3f 4d 85 ff 74 0a e8 d7 14 f1 [ 2379.578317][ C0] RSP: 0018:ffffc9000e3171f0 EFLAGS: 00000246 [ 2379.584444][ C0] RAX: 1ffff1100bab2486 RBX: 0000000000000000 RCX: ffff88802ccb8000 [ 2379.592466][ C0] RDX: 0000000000000000 RSI: 00007fc6c078ebe9 RDI: ffffffffa0201818 [ 2379.600486][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf0f56 [ 2379.608509][ C0] R10: ffffc9000e3172d8 R11: ffffffff81acfd40 R12: ffffffffa0201818 [ 2379.616534][ C0] R13: dffffc0000000000 R14: 00007fc6c078ebe9 R15: ffff88805d592430 [ 2379.624558][ C0] ? 0xffffffffa0201818 [ 2379.628757][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2379.634986][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2379.640241][ C0] ? 0xffffffffa0201818 [ 2379.644450][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2379.649704][ C0] kernel_text_address+0xa5/0xe0 [ 2379.654710][ C0] __kernel_text_address+0xd/0x40 [ 2379.659794][ C0] unwind_get_return_address+0x4d/0x90 [ 2379.665305][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2379.671512][ C0] arch_stack_walk+0xfc/0x150 [ 2379.676311][ C0] stack_trace_save+0x9c/0xe0 [ 2379.681040][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2379.686476][ C0] save_stack+0xf7/0x1f0 [ 2379.690762][ C0] ? __pfx_save_stack+0x10/0x10 [ 2379.695656][ C0] ? free_unref_folios+0xcd2/0x1570 [ 2379.700897][ C0] ? folios_put_refs+0x559/0x640 [ 2379.705878][ C0] ? free_pages_and_swap_cache+0x277/0x520 [ 2379.711734][ C0] ? tlb_flush_mmu+0x3a0/0x680 [ 2379.716530][ C0] ? tlb_finish_mmu+0xc3/0x1d0 [ 2379.721427][ C0] ? exit_mmap+0x44c/0xb50 [ 2379.725883][ C0] ? __mmput+0x118/0x410 [ 2379.730172][ C0] ? exit_mm+0x1da/0x2c0 [ 2379.734458][ C0] ? do_exit+0x648/0x22e0 [ 2379.738831][ C0] ? do_group_exit+0x21c/0x2d0 [ 2379.743645][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 2379.748893][ C0] ? x64_sys_call+0x21ba/0x21c0 [ 2379.753796][ C0] ? do_syscall_64+0xfa/0x3b0 [ 2379.758516][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.764635][ C0] ? page_ext_put+0x97/0xc0 [ 2379.769198][ C0] __reset_page_owner+0x71/0x1f0 [ 2379.774195][ C0] free_unref_folios+0xcd2/0x1570 [ 2379.779291][ C0] folios_put_refs+0x559/0x640 [ 2379.784111][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 2379.789451][ C0] ? free_swap_cache+0x109/0x300 [ 2379.794447][ C0] free_pages_and_swap_cache+0x277/0x520 [ 2379.800141][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2379.806361][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 2379.811583][ C0] ? tlb_table_flush+0x36d/0x410 [ 2379.816594][ C0] tlb_flush_mmu+0x3a0/0x680 [ 2379.821236][ C0] ? __pfx_down_write+0x10/0x10 [ 2379.826142][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 2379.830797][ C0] exit_mmap+0x44c/0xb50 [ 2379.835089][ C0] ? uprobe_clear_state+0x20f/0x290 [ 2379.840344][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2379.845147][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2379.850848][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2379.855584][ C0] ? uprobe_clear_state+0x274/0x290 [ 2379.860821][ C0] ? mm_update_next_owner+0xa7/0x870 [ 2379.866147][ C0] __mmput+0x118/0x410 [ 2379.870275][ C0] exit_mm+0x1da/0x2c0 [ 2379.874409][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2379.879053][ C0] ? rcu_is_watching+0x15/0xb0 [ 2379.883872][ C0] do_exit+0x648/0x22e0 [ 2379.888092][ C0] ? try_to_wake_up+0x7e5/0x1290 [ 2379.893094][ C0] ? __pfx_do_exit+0x10/0x10 [ 2379.897759][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2379.903006][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2379.908254][ C0] do_group_exit+0x21c/0x2d0 [ 2379.912893][ C0] __x64_sys_exit_group+0x3f/0x40 [ 2379.917949][ C0] x64_sys_call+0x21ba/0x21c0 [ 2379.922675][ C0] do_syscall_64+0xfa/0x3b0 [ 2379.927238][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.933361][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2379.939559][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2379.944294][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.950232][ C0] RIP: 0033:0x7fc6c078ebe9 [ 2379.954685][ C0] RSP: 002b:00007ffce6d06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2379.963153][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6c078ebe9 [ 2379.971160][ C0] RDX: 00007fc6bf9f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2379.979186][ C0] RBP: 00007ffce6d0608c R08: 0000001ae6d0611f R09: 00000000000927c0 [ 2379.987207][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000056 [ 2379.995262][ C0] R13: 00000000000927c0 R14: 0000000000224384 R15: 00007ffce6d060e0 [ 2380.003301][ C0] [ 2380.006359][ C0] task:syz-executor state:R running task stack:20640 pid:26740 tgid:26740 ppid:26711 task_flags:0x400140 flags:0x00004002 [ 2380.019916][ C0] Call Trace: [ 2380.023235][ C0] [ 2380.026213][ C0] __schedule+0x16aa/0x4c90 [ 2380.030779][ C0] ? preempt_schedule_common+0x83/0xd0 [ 2380.036293][ C0] ? __pfx___schedule+0x10/0x10 [ 2380.041190][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2380.046284][ C0] ? preempt_schedule+0xae/0xc0 [ 2380.051189][ C0] preempt_schedule_common+0x83/0xd0 [ 2380.056524][ C0] preempt_schedule+0xae/0xc0 [ 2380.061241][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2380.066654][ C0] preempt_schedule_thunk+0x16/0x30 [ 2380.071915][ C0] _raw_spin_unlock+0x3f/0x50 [ 2380.076648][ C0] ? copy_pmd_range+0x66f1/0x7000 [ 2380.081719][ C0] copy_pmd_range+0x6727/0x7000 [ 2380.086615][ C0] ? arch_stack_walk+0xfc/0x150 [ 2380.091553][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 2380.096830][ C0] copy_page_range+0xc46/0x1270 [ 2380.101732][ C0] ? __lock_acquire+0xab9/0xd20 [ 2380.106661][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2380.112000][ C0] ? up_write+0x1c4/0x420 [ 2380.116362][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2380.123192][ C0] dup_mmap+0xf57/0x1ac0 [ 2380.127498][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2380.132230][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2380.138176][ C0] ? mm_init+0xc68/0xec0 [ 2380.142472][ C0] copy_mm+0x13c/0x4b0 [ 2380.146612][ C0] ? copy_process+0x978/0x3b80 [ 2380.151427][ C0] copy_process+0x16d3/0x3b80 [ 2380.156168][ C0] ? copy_process+0x978/0x3b80 [ 2380.160981][ C0] ? __pfx_copy_process+0x10/0x10 [ 2380.166046][ C0] ? __handle_mm_fault+0x1144/0x5620 [ 2380.171403][ C0] kernel_clone+0x224/0x7f0 [ 2380.175961][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2380.181061][ C0] __x64_sys_clone+0x18b/0x1e0 [ 2380.185881][ C0] ? count_memcg_event_mm+0x21/0x260 [ 2380.191226][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 2380.196586][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 2380.201939][ C0] ? do_syscall_64+0xbe/0x3b0 [ 2380.206672][ C0] do_syscall_64+0xfa/0x3b0 [ 2380.211226][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.216491][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.222605][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2380.227352][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.233313][ C0] RIP: 0033:0x7fa59e185453 [ 2380.237775][ C0] RSP: 002b:00007ffda2ce9738 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2380.246252][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa59e185453 [ 2380.254269][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2380.262287][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2380.270292][ C0] R10: 0000555588fd37d0 R11: 0000000000000246 R12: 0000000000000000 [ 2380.278305][ C0] R13: 00000000000927c0 R14: 00000000002252d4 R15: 00007ffda2ce98d0 [ 2380.286355][ C0] [ 2380.289432][ C0] rcu: rcu_preempt kthread starved for 9420 jiffies! g142941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2380.300679][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2380.310699][ C0] rcu: RCU grace-period kthread stack dump: [ 2380.316640][ C0] task:rcu_preempt state:R running task stack:25952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2380.330236][ C0] Call Trace: [ 2380.333567][ C0] [ 2380.336601][ C0] __schedule+0x16aa/0x4c90 [ 2380.341184][ C0] ? preempt_schedule_common+0x83/0xd0 [ 2380.346698][ C0] ? __pfx___schedule+0x10/0x10 [ 2380.351634][ C0] ? __lock_acquire+0xab9/0xd20 [ 2380.356572][ C0] ? preempt_schedule+0xae/0xc0 [ 2380.361485][ C0] preempt_schedule_common+0x83/0xd0 [ 2380.366834][ C0] preempt_schedule+0xae/0xc0 [ 2380.371557][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2380.376988][ C0] preempt_schedule_thunk+0x16/0x30 [ 2380.382268][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2380.388064][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2380.394472][ C0] ? __timer_delete_sync+0x218/0x2d0 [ 2380.399846][ C0] debug_object_free+0x29a/0x340 [ 2380.404908][ C0] schedule_timeout+0x13b/0x270 [ 2380.409821][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2380.415250][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2380.421215][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2380.426582][ C0] ? prepare_to_swait_event+0x341/0x380 [ 2380.432288][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 2380.437213][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.442459][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2380.448685][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2380.454040][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2380.459299][ C0] ? rcu_gp_fqs_loop+0x1521/0x1540 [ 2380.464464][ C0] rcu_gp_kthread+0x99/0x390 [ 2380.469106][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2380.474407][ C0] ? __kthread_parkme+0x7b/0x200 [ 2380.479421][ C0] ? __kthread_parkme+0x1a1/0x200 [ 2380.484526][ C0] kthread+0x70e/0x8a0 [ 2380.488665][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2380.493916][ C0] ? __pfx_kthread+0x10/0x10 [ 2380.498568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2380.503826][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.509071][ C0] ? __pfx_kthread+0x10/0x10 [ 2380.513744][ C0] ret_from_fork+0x3fc/0x770 [ 2380.518393][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2380.523566][ C0] ? __switch_to_asm+0x39/0x70 [ 2380.528416][ C0] ? __switch_to_asm+0x33/0x70 [ 2380.533229][ C0] ? __pfx_kthread+0x10/0x10 [ 2380.537874][ C0] ret_from_fork_asm+0x1a/0x30 [ 2380.542713][ C0] [ 2380.545776][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2380.552149][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2380.557411][ C1] NMI backtrace for cpu 1 [ 2380.557431][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2380.557452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2380.557464][ C1] RIP: 0010:unwind_get_return_address+0x60/0x90 [ 2380.557491][ C1] Code: 43 80 3c 37 00 74 08 48 89 df e8 cb 63 ad 00 48 8b 3b e8 83 a2 1a 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 b0 63 ad 00 <48> 8b 03 eb 02 31 c0 5b 41 5e 41 5f e9 bf b9 f6 09 cc 89 d9 80 e1 [ 2380.557507][ C1] RSP: 0018:ffffc90000a07d48 EFLAGS: 00000246 [ 2380.557525][ C1] RAX: 0000000000000001 RBX: ffffc90000a07db0 RCX: 0caeca7917636f00 [ 2380.557539][ C1] RDX: 0000000000000001 RSI: ffffffff8db6fcc6 RDI: ffffffff89d6ac1c [ 2380.557553][ C1] RBP: ffffc90000a07df0 R08: ffffc90000a088d0 R09: 0000000000000000 [ 2380.557566][ C1] R10: ffffc90000a07db8 R11: fffff52000140fb9 R12: ffff88801ced5a00 [ 2380.557581][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000140fb6 [ 2380.557595][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 2380.557610][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.557623][ C1] CR2: 00007fbf26bffe30 CR3: 000000007828c000 CR4: 00000000003526f0 [ 2380.557640][ C1] Call Trace: [ 2380.557647][ C1] [ 2380.557656][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2380.557683][ C1] arch_stack_walk+0xfc/0x150 [ 2380.557708][ C1] ? NF_HOOK+0x30c/0x3a0 [ 2380.557736][ C1] stack_trace_save+0x9c/0xe0 [ 2380.557758][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2380.557783][ C1] ? __lock_acquire+0xab9/0xd20 [ 2380.557803][ C1] ? __lock_acquire+0xab9/0xd20 [ 2380.557820][ C1] kasan_save_track+0x3e/0x80 [ 2380.557848][ C1] ? kasan_save_track+0x3e/0x80 [ 2380.557874][ C1] ? kasan_save_free_info+0x46/0x50 [ 2380.557896][ C1] ? __kasan_slab_free+0x62/0x70 [ 2380.557912][ C1] ? kmem_cache_free+0x18f/0x400 [ 2380.557930][ C1] ? skb_release_data+0x62d/0x7c0 [ 2380.557957][ C1] ? consume_skb+0x9e/0xf0 [ 2380.557982][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 2380.558000][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 2380.558017][ C1] ? nft_do_chain+0x409/0x1920 [ 2380.558033][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 2380.558049][ C1] ? nf_hook_slow+0xc5/0x220 [ 2380.558073][ C1] ? NF_HOOK+0x206/0x3a0 [ 2380.558122][ C1] ? skb_release_data+0x62d/0x7c0 [ 2380.558150][ C1] kasan_save_free_info+0x46/0x50 [ 2380.558174][ C1] __kasan_slab_free+0x62/0x70 [ 2380.558191][ C1] kmem_cache_free+0x18f/0x400 [ 2380.558213][ C1] skb_release_data+0x62d/0x7c0 [ 2380.558247][ C1] consume_skb+0x9e/0xf0 [ 2380.558274][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 2380.558296][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2380.558317][ C1] ? nf_ip_checksum+0x13c/0x510 [ 2380.558356][ C1] nft_synproxy_do_eval+0x345/0x570 [ 2380.558375][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2380.558396][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2380.558424][ C1] nft_do_chain+0x409/0x1920 [ 2380.558443][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 2380.558467][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2380.558503][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 2380.558524][ C1] nft_do_chain_inet+0x25d/0x340 [ 2380.558541][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2380.558559][ C1] ? ipt_do_table+0x2a3/0x1630 [ 2380.558586][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 2380.558612][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2380.558630][ C1] nf_hook_slow+0xc5/0x220 [ 2380.558657][ C1] NF_HOOK+0x206/0x3a0 [ 2380.558682][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2380.558707][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2380.558731][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2380.558753][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2380.558781][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2380.558807][ C1] ? skb_dst+0x4f/0xd0 [ 2380.558831][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2380.558858][ C1] NF_HOOK+0x30c/0x3a0 [ 2380.558880][ C1] ? skb_orphan+0xaf/0xd0 [ 2380.558899][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2380.558922][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2380.558954][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2380.558978][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 2380.559003][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2380.559034][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2380.559058][ C1] __netif_receive_skb+0x143/0x380 [ 2380.559084][ C1] ? process_backlog+0x2d5/0x14f0 [ 2380.559110][ C1] process_backlog+0x60e/0x14f0 [ 2380.559145][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2380.559175][ C1] __napi_poll+0xc4/0x480 [ 2380.559209][ C1] ? net_rx_action+0x46d/0xe30 [ 2380.559237][ C1] net_rx_action+0x707/0xe30 [ 2380.559273][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2380.559310][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 2380.559338][ C1] handle_softirqs+0x283/0x870 [ 2380.559368][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2380.559391][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2380.559415][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2380.559443][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2380.559463][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2380.559488][ C1] irq_exit_rcu+0x9/0x30 [ 2380.559507][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2380.559526][ C1] [ 2380.559533][ C1] [ 2380.559540][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2380.559561][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2380.559581][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2380.559597][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 2380.559614][ C1] RAX: 0caeca7917636f00 RBX: ffffffff81976918 RCX: 0caeca7917636f00 [ 2380.559628][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 2380.559642][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 2380.559657][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 2380.559672][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039dab40 [ 2380.559688][ C1] ? do_idle+0x1e8/0x510 [ 2380.559715][ C1] default_idle+0x13/0x20 [ 2380.559737][ C1] default_idle_call+0x74/0xb0 [ 2380.559760][ C1] do_idle+0x1e8/0x510 [ 2380.559784][ C1] ? __pfx_do_idle+0x10/0x10 [ 2380.559815][ C1] cpu_startup_entry+0x44/0x60 [ 2380.559836][ C1] start_secondary+0x101/0x110 [ 2380.559863][ C1] common_startup_64+0x13e/0x147 [ 2380.559899][ C1]