last executing test programs: 17m21.058377864s ago: executing program 1 (id=657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000040)}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1cd512406c7f000081004e7c8a4743198797b8000000001100008100", [0x4, 0xa]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x1]}}) bind$packet(r4, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) close(r0) 17m20.888437219s ago: executing program 1 (id=660): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x1000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[&(0x7f0000019400)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000019300)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000040)='^\x00', &(0x7f0000000180)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f00000000c0)='u\x11\\\x8co\fe\xb9\x94\xe6', &(0x7f00000002c0)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06<\x81\x00\x00\x00\xe6\x8d\x10Y-\xf9\xd1\x8a\x8e\xc8\x0f\x89\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x10\xd0VK\xe2$i\xd4\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde\x00\x00']}) 17m20.245018032s ago: executing program 1 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x280000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000005c0)) 17m19.698167453s ago: executing program 1 (id=665): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x10003) shutdown(r2, 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000100)=r0, 0x4) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 17m19.696993386s ago: executing program 1 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x50, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x80) r1 = fsopen(&(0x7f0000000040)='v7\x00', 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x48800) r3 = gettid() timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x48c0) listen(r4, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x20000000}) syz_open_procfs(r3, &(0x7f0000000000)='net\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400b, 0x3ff, &(0x7f0000006680)=0xfe) r7 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)=ANY=[]) munlockall() sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000fe7f030006000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e40dc84b513a8f7bf551a202de18ffb875c1934afa5cca058bd4665", 0x90}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}, {&(0x7f0000000180)="457f4440", 0x4}, {&(0x7f00000004c0)="7ce0e5b304000000b321ce6546ab11a43b5bb5a250fb30037c57f0b6115863f479d008cdffcd16894606301ca678c611acd2e2d20118508576d3f973bf652239c5a1aa17fb9d0246177e1cbdec402c0d594f40a485d769738d56f9de32755aadb383c45cd87d31dce8685fbbd5731c920fa6b6adde7b7af259256ec90a7934760e54258b233f55b6ef97f8f626a3a6d60f3f31c92b050d45333e6aecf3f26884b744f4cd230e68e9de61f58a0ed1a789e2b1e45887035b546a18e5e0649bb2c1b70cfa39e8e208460b65353cc1", 0xcd}], 0x4}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 17m19.627335413s ago: executing program 1 (id=669): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone3(&(0x7f0000000240)={0x200a00300, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x3f) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) syz_usbip_server_init(0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0x16, &(0x7f00000023c0)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc278bc51eddc4f4e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') read$FUSE(r8, &(0x7f00000066c0)={0x2020}, 0x2020) bind$unix(r8, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000001780)={@local, @empty}, 0x8) dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 17m19.490861867s ago: executing program 32 (id=669): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone3(&(0x7f0000000240)={0x200a00300, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x3f) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) syz_usbip_server_init(0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0x16, &(0x7f00000023c0)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc278bc51eddc4f4e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) mkdir(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') read$FUSE(r8, &(0x7f00000066c0)={0x2020}, 0x2020) bind$unix(r8, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000001780)={@local, @empty}, 0x8) dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 15m30.599625997s ago: executing program 0 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x110) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) mount$overlay(0x4080, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) 15m30.497823777s ago: executing program 0 (id=1103): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async, rerun: 64) listen(r0, 0x200) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) (async, rerun: 32) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) (rerun: 32) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2], 0x2b) (async) accept4$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x40000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000f80)={0x8, 0x120, 0xfa00, {0x0, {0x80000, 0x5f9b, "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", 0x2, 0x0, 0x7, 0x7, 0x6, 0x5, 0x3, 0x1}}}, 0x128) unshare(0x68040200) (async, rerun: 32) listen(r0, 0xfffffe01) (rerun: 32) 15m29.96619491s ago: executing program 0 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x27, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfeffeffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffff17, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (fail_nth: 5) 15m29.747483631s ago: executing program 0 (id=1109): r0 = fsopen(&(0x7f0000000300)='ceph\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240)='nfsd\x00', 0x311065, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r1, @ANYBLOB="76382ed20316aef2c3e67c1a22bcd6b796254440a7eb78e1e9b3d843e50880f823b547211b990f275ce8cf967fb592734cfe32818ff870bab00be559b7bfd044c5cec3d6127eb32261d166ae8b9e82e885fd8b9011f9a259a80f10cdfba62e6d64419bf68de50500ffceca000000002d58de71e051f3f1de49f20efa6a2209b13d941519dbff5f454451c59020a6433067109d236c4fd7b3ab4a7053c8c4a983e80c4a49ee79e04f7c5a6720c7b62f11774c6920b8590eb68d48f16c89d55388b3b8ff74d954eef395990035a080e2b4e37d194c70b0e8d439cb92b1cc4daa607578af7975c3ce5a469dd43aeb841b4b23739bf4c89a7e067154bb39152e8ec2d6c6d1d16b967264b7cff7185b9b96639e222e34c55b846e88133b72e55d56e21b939946263f0c550b6e50e8aeb5137591c12eca7ec43496995a27945aafdf6be6ab0e7157446233dc9ae1f8df0f9538f478852293544586c56482d8f13ef6c5cc68341bd77a80c7c3eaa8b619", @ANYRES32, @ANYBLOB="5c5cea44f71d73e06b1a7f99ed5c1d7b421f627b6b1d23fba906c611ddfffbf11209edcb6a39b5ee338b13547614deb7a197008e3ac64bb9b8dc85ed95d3fb030b77ec732366c144b06fd3b50ba26f4094554113901227544b29ddbd31475cddcffcb4bbd9e718cad6d5d0e538ccb1ac9af9f90bf3925bc3cd4fa2b1e196225a0c482f29281b424b1e44f5ca813c"]) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008aec1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x108) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x1cc942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) r6 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000640), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000500)={r2, r3, 0x2, 0x5c, &(0x7f0000000400)="87c5160a8f1d5ae091a8516cf771702f3b8f6193510b011f3e916f08b5b7ac365e2ceac154efd24df9c1d28edad36c91c6d4b9840326fdcc788bf9332179ee4d8b0137f6d9630dbdbaa8e2cd3d4bba6b1a1d93053bad19246f07fd1f", 0xc1, 0x9, 0xa0c, 0x2, 0x8, 0x1, 0x99, 'syz1\x00'}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) 15m28.806886155s ago: executing program 0 (id=1112): r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000f056d1a8dc3a46216164dc4494c20a397a568d0aae7d323f0b0f4e45ac1dd17fda4e8317c76a80b5abc7519957cf03ce2d4f72ff17289b3a417601d60778863fe4f92075ff3d6924334b69a5c06b17a7b7f0e6e22ba6227991ec040350a04381dae3db4c0f608d76f00140683635c0885debad4e0f435e85e4417f94d1b653da37f607a2849a3bcc6eb2c00c3355ebf9d5fe84051d75d6a5cbdbd120104117aec62bec2c742c03b645bcde8ebf60812d5932bc98e44ec6b21636d9288afb61949cd1ef1b", @ANYRES16=r0, @ANYBLOB="01002abd7000fcdbdf252500000008000200", @ANYRES32, @ANYBLOB="0500290000006a0c05002a000e"], 0x2c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r4, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000080)='i', 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xeb}) setreuid(0x0, 0xee01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 15m26.629831381s ago: executing program 0 (id=1123): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x8c66) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xdb000}, 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0x0, 0x20, 0x427}, 0x45) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x8, 0xfffffffd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c00)=""/102388, 0xfffffffffffffe9d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380008f70f00090800000004fcffffffae0cbbe20080a1ec830000cc00fa0abb10a0fdab0fffa9431bbbf0cce4144c8ceee00bc5afc3a50427e10574a7063d5c4ebb194fe96a6ae041aecba0955ae7be6cc3", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000200)={0x0, "1261b6136b4a91f56ebbeb7d6817f1b6552c35bb26bf1e80d540789178ad26ee", 0x1, 0x1}) 15m11.524829793s ago: executing program 33 (id=1123): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x8c66) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xdb000}, 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0x0, 0x20, 0x427}, 0x45) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x8, 0xfffffffd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c00)=""/102388, 0xfffffffffffffe9d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000004c0)) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380008f70f00090800000004fcffffffae0cbbe20080a1ec830000cc00fa0abb10a0fdab0fffa9431bbbf0cce4144c8ceee00bc5afc3a50427e10574a7063d5c4ebb194fe96a6ae041aecba0955ae7be6cc3", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000200)={0x0, "1261b6136b4a91f56ebbeb7d6817f1b6552c35bb26bf1e80d540789178ad26ee", 0x1, 0x1}) 12m14.221952199s ago: executing program 3 (id=1821): prctl$PR_SCHED_CORE(0x41, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) set_tid_address(&(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000500)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) 12m14.073383687s ago: executing program 3 (id=1823): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x80, &(0x7f0000000000)="5a89ae36634184f12beb02328617165f68e7626bce2ec4cdfa3a3aee9c9de397111b1a3934", 0x25, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="0493cb238626e0a2f6683a8c5a48ca61dd5f7d0c870c5f4c4b343ae15644947c9c39bd3c07bef3d4e61ddb855bfb403d14c7425fca108a58fde217cf83c8551793fa68dfe91e949e8476ae4951b32a75fdd67475f1c5cc18420d3a84ae4b6135d1ba3f2bd0e0bd701027c9441bdd4f1cd4118fd1b5780dca1d7636a03b4668561394c1952c989dcab23b5ba96504dae3700e460274") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x6, 0x30}, &(0x7f0000000280)=0xc) 12m13.993482081s ago: executing program 3 (id=1825): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f00000002c0)={0xa000, 0x4000}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x5, 0xe, 0x8) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000500)={{0x5, 0x4, 0x10001, 0x9, 'syz0\x00', 0x94f}, 0x6, 0x10000000, 0x9, r5, 0xb, 0x7, 'syz1\x00', &(0x7f0000000700)=['.^,\x00', '/dev/snd/midiC#D#\x00', '\xf6,&-,%\'\x00', '/dev/snd/midiC#D#\x00', '-%^!\\\x00', '', './binderfs/binder0\x00', '/dev/snd/midiC#D#\x00\x15\x06\x19\x96\xd3Y\xb7T\x93\xf6vy\xf7\x01\xbe\xd1\xd6\x92\x81\xc9\x19*\x1dSc\xa6\xc9\xf3i\x12\x1d\xd6\xb4[w\xca@\xb8\x1e\xbe\x9585\x9c\xa4@3\xe4\x9a\x00'/78, '/dev/snd/midiC#D#\x00', '*&-}^*\x00', '/dev/sequencer2\x00'], 0xc0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80) openat2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x791002, 0xf}, 0x18) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x108, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000380)=[&(0x7f00005e4000/0x3000)=nil, &(0x7f0000422000/0x3000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r6], 0x0) 12m12.653650218s ago: executing program 3 (id=1828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000280)='./control\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000000000", @ANYBLOB="0607abb32fe6649316af1d656032f04e1b6a57c8c6c0a063aff4af35f71a259073727fe826708f6a698f9f1c71ad718360dae127394b8a3b7d49918b6af180f1aa10ab90f2baeac43e88079c007b79ba2461323a22ec898c4ee1771a9531c41e8aaaa0c072e6806bb3fb6bafede2741c73c143c9f92c1ad451ad8c605922d456c40db2", @ANYBLOB="1000070b000000002000060000000000"], 0x2c, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x700) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, 0x0) 12m12.340274513s ago: executing program 3 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400300000000030400000000fedbdf2561e4aba2d15cf8f78ef26e6821a15eaf37f6c7635f82ebb1265b463de42a23f0f4499e57d097379bfd8847158a9d280a272e4343f1ae2273e97a5c6fd0b71f63fb40da0e85ff1eb6a4154f52946423f53b56ec015963b79ea82856ea8aa99cd4bbe17970d4fb", @ANYRES32=0x0, @ANYBLOB="00df000007500500200012800800010067747000140002800800030001000700080004"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000009c0)={0x0, 0x0, 0x4}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r6 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x25, r6}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 12m10.966271076s ago: executing program 3 (id=1843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 12m10.222913825s ago: executing program 34 (id=1843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17.302453047s ago: executing program 2 (id=4893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d8cc1dbb", @ANYBLOB="b4f97eccc4e41416618b2e3932684f792a721b6c0b56229c379f62be2c17373ab1fbd29e743e2c2b710447494458a89701b526644a1477949d889e7f1b7a29cea52deb4b3a5d085471eba31b"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r2, @ANYBLOB="0000000000f9ff000000ffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200"/28], 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1ffffffffffffdbe, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYRES32=r5, @ANYBLOB="840002804000"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998568dce}, 0x24000084) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x3, 0x9, 0x9}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') pread64(r7, 0x0, 0x0, 0x800000000000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'veth1\x00', 0x20}) 14.953632071s ago: executing program 2 (id=4903): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0x0, 0x0, {0x9f2}}, 0x18) mkdir(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(0x3) fanotify_init(0x200, 0x8000) 14.023598309s ago: executing program 2 (id=4905): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x94, &(0x7f00000000c0)={0x8000, 0x1000, 0xd}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 13.963661841s ago: executing program 2 (id=4906): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000100)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) 13.960142882s ago: executing program 2 (id=4907): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0xa710, &(0x7f0000032580)=""/102353, &(0x7f0000000040)=0x18fd1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="459f7e748d02184e27bd7000fbdbdf480811bcb602a4c2fa519b25ff010000000000000000000000000001fe8000000000000000000000a70a00004e2100f94d219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040010) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4) 13.543727106s ago: executing program 2 (id=4908): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) recvfrom(r1, &(0x7f0000000340)=""/229, 0xe5, 0x40010162, &(0x7f0000000440)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x200000003, 0xfdffffffffffb5b2, 0x3a8e5b7e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f00000007c0)="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", 0x204}, {&(0x7f0000000200)="f1e0bb4eb5a8daacaf47dccecf96a4a749f42643c96cc28e14d0abcb244414bce8cb7251234e6f89b08c6c456a87e8d83537cba0c238cb292f159d364b17c796ba", 0x41}, {&(0x7f0000000480)="494f2f806454d6155e144fd3a18aafdfcf39e15a48b7d68a85c731e70dad5dcb46e0d6a4682624b4c57887927f76332c069221db01397b6ebce89b6b406df178a5bd98227d320f538dd1940644d639659f9f24efcc82b97a487e662bc4314d79fd80d4202606e706f65c2cbcfe8e1aec03914baf54e69f68ed7d002ef2db019bf568a4b1b60606b2f95914b9daceb2204007ddc35c73a90c31009a7949fb6b801f9f295ee6cafb30fc3878d06cb87d3ed3ba62f529664173b1999e8f4e80310bbbe83736bd3065ac4ad3581baa808e37a31e91562f43b8ad673183e543f74b96a61a608a98b048a9dd2c1461feb834c0a25bae5fb6ad41b263e7221b5a6dfb3043a58c5b674858bd0e94950dd144a83c00e8d98da8c8ba6d0be7f1bd649d7d9f662f5d0a533739541a2db9814680fed6592d69e5f650bd21efa99376d7efdc67858d4982a80d595b8121b0a774025ba255e8b46d94936a", 0x157}, {&(0x7f00000018c0)="b2210d91b934957ed7ecedd97cdaf8d1d8264a9451466805e67b566b91a156c4cafde272cf6dd84149fdb1df35fdad261617f43a49d46837b252987cac0ff006d1d293b23b28f2e0bc1e00a482cb1dff446b67fc9a9b38a0febfeeea260495789f4cd5b05d86d93b84d85eaa0773bb47ec58e27d848721be92c68bed8893e7013af16b0bde975899fec5866331ea69b6b148408c68e9bbd4b2d32a1593bea83fa39119e715a0633ee967ae1f436191b6becdc5ccbfa38247832e8e40d85605e3b8388da279e1974c71214849d13f5a5221421b68d0f9fbb15ae6633ddac96fc71aeee079d15d11f47b77a715ad7df7739efc4677e281b12aaba9e301d21eaa3ad8cd6b8615e7bd0c0583e35748bd0bc9315d453e840a2091bfc8cda8283182d37d876d266321dd0cad306f7dae5b0e1953dfcd8d3ef4b2ecfe31c92330584b1db0c7a46180b35c5010e889641d6e47aec678aef9986224d9ecbc3001e831e8873fba777765e8a3cb1b4c7fa9bf3e11f8af87739f499dcaf53e76d2e803ac3be34e0b229186bc754d5391ec547f073249ffa951123cbf198f2609dc3b2ae77a9b7ff3053e3377dcd7a702d92e7a50e0f5ba50dbf6aa647b335ecd2ffc9841e166d6e5d3acd2b500af0382bda92cdce851920c1f2c0a675e987a63fd4ae4c6a8fe03d848221ac95310", 0x1e8}], 0x5, 0x0, 0x0, 0x2c}, 0x24044880) 13.496508422s ago: executing program 35 (id=4908): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) recvfrom(r1, &(0x7f0000000340)=""/229, 0xe5, 0x40010162, &(0x7f0000000440)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x200000003, 0xfdffffffffffb5b2, 0x3a8e5b7e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f00000007c0)="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", 0x204}, {&(0x7f0000000200)="f1e0bb4eb5a8daacaf47dccecf96a4a749f42643c96cc28e14d0abcb244414bce8cb7251234e6f89b08c6c456a87e8d83537cba0c238cb292f159d364b17c796ba", 0x41}, {&(0x7f0000000480)="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", 0x157}, {&(0x7f00000018c0)="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", 0x1e8}], 0x5, 0x0, 0x0, 0x2c}, 0x24044880) 10.212659649s ago: executing program 6 (id=4919): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) syz_usb_connect$uac2(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000ff82050c004000010203010902e30003010e7007080b0000010b200409040000000101200009240105000c2e008005240405fe10240201010405e707070000000e0a0108240a040301040208240a01010a43010904010000010220000904010101010220000c240201c802021c7ac6699d0e240201800301075a1cd9f224130924020110020f8f0909050109000206f20108250101035e00000904020000010220000904020101010220000a2402020c00050007a9092402017f00048509ff230202d62f07000a9909240201030201192a0624020103fb0624020102010905820990f9814e090825010100070600"], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x1, 0x2c, 0x40, 0x1}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "2dfaaa141e9f402cd140295fd92d6aa0"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4048}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3}}, {0xc6, &(0x7f0000000280)=ANY=[@ANYBLOB="c603b8efc3c56fd65de1da2a59fd271f9fd3ab73aa6aac0922fbd7a0c5ba63d6868af830b1d55ceebf5ad3188396dfcb8942d72be6ff35f2b3c9df9ec5d141678a9b6353b62f37092bd38abbb43ecec7e904e1f84aa28bc1fea4b28399f8f6f34b89d213754e2aae1f7159c756c744029457c03bed4df5f691e29de5543e9eaf0e87a222d9c12e9a008ca233767db6d78d518d79644321e4a5f7344ab56cc96cc1fc48ccfc7f62a0b8e4a228e065fd8876cc81856b241a7e72f06489ddb96fcd000000000000"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x5834, 0x80, 0x2, 0x76}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x568f, 0x4, 0x1, 0x2ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5286, 0x2000, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25db, 0x200, 0x2, 0x83}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7dc, 0x40, 0x0, 0x6a}}], 0x4, &(0x7f0000001f00)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4dc}, 0x0, 0x0, '\x00', {0x4, 0x7f1, 0x0, &(0x7f0000000f00)=@buf_4k="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"}}, &(0x7f0000001f80)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20004050, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x284, 0x0, 0x11, 0x148, 0x120, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xd8, 0x120, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@inet=@ecn={{0x24}, {0x0, 0x0, 0x2, 0xa1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_to_hsr\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2e0) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4107, 0x100b}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000008c0)=""/257, 0x101}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000140)=""/90, 0x5a}], 0xa}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0xfffd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90d2}, {{0x0, 0x0, 0x0}, 0xfffffffa}], 0x7, 0x2040, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) exit(0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r11, &(0x7f00000008c0)="1b0000001e005f0214fffffffffffff807000000a6000000000000", 0x1b) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9.973169996s ago: executing program 5 (id=4920): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4f24, @broadcast}, 0x10) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="62afbcf72be12f300800000000fbffff04cc886371faffffff6196ef1844", 0x1e}], 0x1}, 0x800) (async) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'netdevsim0\x00', 0x2000}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) (async) close(0x3) 9.523479759s ago: executing program 5 (id=4921): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0x0, 0x0, {0x9f2}}, 0x18) mkdir(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(0x3) fanotify_init(0x200, 0x8000) 7.94266433s ago: executing program 4 (id=4922): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x8}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x20, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x20000004}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.265474353s ago: executing program 5 (id=4923): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x200, 0x70bd26, 0x1000, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, {0x0, 0x5, 0x407ffffffffffe, 0x5}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2ee, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00\x00\t', 0x2b8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @dest_unreach={0x1, 0x6, 0x0, 0x1, '\x00', {0x4, 0x6, "e64859", 0x7, 0x11, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [@fragment={0x3a, 0x0, 0x7, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x32, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x5, [0x5f6, 0x5, 0x1]}}]}, @fragment={0x32, 0x0, 0x7, 0x0, 0x0, 0x1, 0x65}, @dstopts={0x2b, 0x13, '\x00', [@jumbo, @generic={0x5c, 0x92, "9d461f73bfe8a19d2ce7b738c4e6966a098e01396f89e1d90c39a74cf342958bac8ef4fc97ec7b4c0dd80081fe60946d93869b06a49d8521ef897e9de852a78fc81f1ef5834cf16193d1e0200f7738695bb2636d9db4cd379db7b4f42507b16daefda5b4b3e231899576591b33dcc407562660efe74abd7313692e5be814dc8da97712d7dd3e3f321ca9de78676b0c3eebc9"}, @pad1]}, @dstopts={0xc, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x28, {0x3, 0x8, 0x81, 0x9, [0xd, 0x4, 0x4000000, 0x81]}}]}, @hopopts={0x1, 0xd, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x40, 0xfff, [0xcd9, 0x527e, 0x2]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x53, 0x5, [0x7, 0x5, 0x3, 0x8, 0x3, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0xf}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x1, 0x60, 0x6, [@private0]}], "e72df6550c34cd68d2c192eecacf91a78c6b1b9526603ed1fb8d69b90571abbe1fda169dccd69ddb39284a9c0be44768332fb3a9e8e7bc2a5d6562d4c0e3558c04d9a326026799c926ed70b6179dc25d1c937226e52926596668643fe87874ac74e97a0f701a596dc496c36080767323792cd73e2f5350ecdce93f1144a72e64da3e3a96fc68b74daec483812e2b3e1b598cdafe43cd02fd12cfd705776bd73f222182ea2dbc8beb05d11f736dcd61579cc59003b0fa78d9e8120581c5cffbd558e5f80d79abda5bb5bdae3399dc7f7fe6a9e213a41b297a"}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 7.242407034s ago: executing program 4 (id=4924): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) r1 = socket(0x6, 0xa, 0xffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', r4, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7d, 0x4, 0x0, @empty, @empty}}}}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000140)={0x2, 0x0, [0x5, 0x9, 0x8000000, 0x10009, 0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) chdir(&(0x7f0000000100)='./file0\x00') r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xfe83) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x65) 7.120615382s ago: executing program 5 (id=4926): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000d0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 7.119110884s ago: executing program 6 (id=4927): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) 6.968056993s ago: executing program 6 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$6lowpan_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7ffdffdf}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffd, 0x10000, 0x5}}) ioctl$BLKPG(r4, 0xc00c4d03, 0x0) 6.758678187s ago: executing program 4 (id=4930): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001180)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) mq_notify(r0, &(0x7f0000000280)={0x0, 0xa, 0x2, @tid=r4}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0xffc0, 0x4, 0x2, 0xc, 0x11, 0x8000, 0x79, 0x3, 0x8, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xd, 0x0, 0x3, 0x7fffffff, 0x9, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0xc, 0x40, 0x0, 0xfffffff7]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fe7f000000a309c8fe9dfe188e110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0900000000000055090100000000009500000000000000dc77100001000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$COMEDI_RANGEINFO(r5, 0x80086408, &(0x7f0000000300)={0x32399cd, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) 6.718720173s ago: executing program 6 (id=4931): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x2, 0x3, 0x1, 0xfffe}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0xc800) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x81}}, {{0xa, 0x1, 0xc0000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}}}, 0x104) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote, 0x40000}}}, 0x104) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000006200)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000001c0)="178d61d5610099dbf49adbf99c2db6552a92d9d0e8f16d9fba62a3e2888d2b27163c5617b682ed62faa0d7a518a314d5c90ce3bedef2b476c79dca83a6f7", 0x3e}, {&(0x7f0000000380)="b0d61e095857de12c8168db27013daaca6f5e563244204cfa835b36d111d40ba0d4e25a0c7a3c6229bee3261fdef1071bf259b107be030cf9bc7f8304fb74db84e0d3def88491ad2eb12a848d7dd0a7d29b9ec0f90d3084ab6b9a9eaec696cee0dff0b576a0d", 0x66}, {&(0x7f0000000400)="829f61ce8867549ae474e1cf77384eec6f7a4b56b22c37f9bba63b463eb7b8608e4d2a6c26684034a1f3930f5b1fd3085b3fc021366c5b61a677929540f4e827c986afd32a1d00f3ff8efa1c57059cd81d4d33d647066d55dcade620763ff82b7e4399f17602a25801adc8d5a0f7", 0x6e}, {&(0x7f0000000480)="847b32be7f10ed3d6680477efc35dc3a5db06dec4459091243def96747622030defc2ab0e872294932dc9d9cfc8c12e4b618b28ae04bd16d3e9982", 0x3b}, {&(0x7f00000004c0)="32664c7c06e32daf556c9f3a905e0ec2989a12720185c78b2f26e65662", 0x1d}, {&(0x7f0000000500)="ade21396def8e1fe67859bb07fcaed8971ffe3b7848e1accfbe73409b15b38112791b553398137e4151179e77842b1e9b423b9e5b73a6cdd4eb2da9745eced6e53af0a8b5396860dee54a04fe317b4c834771f9ed851d0c8c6a0665c5bff8e68", 0x60}, {&(0x7f0000000580)="b56b73a1", 0x4}, {&(0x7f00000005c0)="be27ef39b98e44b37953708f736b2dc97b939c2f0d0928c3d944cf3b3477de665d421b4f31df31e2d28170105be4afe4d82e10811c8e72b35ca07477490162cbe18cd67f33282d9449e2c191ba6ba2022b72d0465244af41f5d054c8ae2d2efc4ba161379b00f1d3ce9017e4f6ee324359c2051b73f6d2cbe13c38f0a16eada7ce3e335e6bd8f82b0379325b0dbf88255590a82f1971657a239f9e289b04e147dd6844c4e74e3753fbb6abb3c1ede126638e65f5918a53f5a6db0f8cf4cba319f18c60906d0128b5432566142dddd9fa749e2a7c11591e6790cb03f8f5792b7352a23b0b0f895c8611087a630745338a651c3014e7508f2da76e5525091fd60390eea576d27a7a2f56dc9375f0ca726a7e4ffaf8837048ee9d65bddd7e806a3920e5a07a457c8bc824a8cd368fcf5b53482dba549e1d4eab2d28339c47549f561f1f6dc73a7d1cc0ddc9c7dcb87da2565ef0e8f5533b836d556b182eed1b111a94c0b3c52f7a0e36f0c8fb71c8a22cbcf667f966d3731d3f06a5d81d524ccbe02a793945139e741564d2b23b93f9705a70a4df2b99d4147ca73538b26bfbfdefa59c0ea465f5abc22b908ce382a5162426d6cf8b27087e165025679325ea361402012a6181a46f0a0d5965efd8c639e1b373029fad9f677431490894c3824a783405fd393faaf431da9250cb8325a012c9b490e86cbc6b6f1def005c616fcbce3be4e61d9d595073e42cfc70f204060b0d4249de88fa0b2f828f5dcb5a05dceb52f791abe1389301d355a029bacc3245d165d28ee8992b9553773e53437d24fca22b456f1cd3956e49067904650df505b27b1ffb30c18a2176493c699536eb607d4e2aa18497eefcc1c5fa8b991ae58dad31f0c0ce573de87bbf0330e8a7098aff11b72a460455efc177b534020130a30f3afa55d38551d1b6d94afb3cf5c551e647231253c6695e5e68c7f21d0dfd286176e361e91436a0937f583b10b0a161c6870e6a8b18db4da7670a5d82582e90d6081c9d57536f50464649075e856d0720e6d26e77a5cb6bee64a415534ca7a009dc3516aaa52417d179baeccf646d7d7a0e797836a4106626c8a2c24943962f5ca0d978a8f14ef74ef3b9f13c951ef7976ed2b7e0b1af4e54e9a48ba93300508a7d74a30500a023cdd74d95a3e64085e80c71e11745203c9ecedb469976088a18d3402cbfab003cdc9f2b83233c1186f458f2f175aaf0e1fd09bf2d3307a16aaf7846ae12cd858c627ea2790b045405724eac363c591f619048f6920044fb51b7ba66554895b08318f514fd88a25750c37c0235d3ef462e9a7db60279df4c2442cf3d774dd734bec97797b40e2f2892e9143b13dcf84b27688ff021dd3d6d98c9bfeee2dea958e2f27f855ca94d3859090f4d303bcc69d422f982dc01cedfdeacff126b428b2272a027161010513b4d3c17819a0c566850a75d5c3d92e68993544a99a080b5ba608c8d5bc7ad8058983186015b1c18fb5c50b4e391b77577d26b9a0d80564826e0975d7d670df3ac355587b6b34df9317bb51da2d0ba43f80a3978f4de9e83b43d2b9e2a3db66545436ffff1dd85101fe469d8101d872a471fc83d377beb81da73715bd419330ff3f461412328e6a5ce59e102a85d463e49256b44dc94d068ef73d9cf9c391024409e7dfd298228dd03fa8992f97a0b7ea80acce27833f65e11bc78d7e64b396440c9726d71c10e3cd3f584c40230cff3bcd5c3dad5096b19e1c6e76cbfd9c9e7c76daa80ea34e733991959a8b3875edaf04894046521b68c9e1fad6df4bfd2c620c625d0126632abea81db6819341e0e799dc320796baf43f6fccf00986ded33484f1a62b425b95c0362c796ebdd20db102fa04d2359ae8c6842a299bb4116257d97b93d08842622b315443c73d1b3b593b6118a9e6059721002f47009723527c07218b3f02b82aeeadb06ce6073814c94a1e349789acfd4076dd722ca4db3a621df8d9bf5182c9acf2f5d15e77d4d33607e71d5e5282986c99b312f974b4386c43131dc26f4daf0a48d41b41636b018ae5971bd29e92e281adf9ab5151cb61d049c63bed3eedee63f0fc537041a53dbcff041b91b838f94c83573273e0e3424f82f246f1011638a7b720fddffbf1dc4397f2710d532c997b7b10e6ea63c29b62ab4c496393911fcbb399c63706d9e1eea63956247603d666ab3f9731d276346a062b1ff345563fa6b5f8bc02276aa5acc120e094492ce113ff6e14df3952b59341a3fee7e5f2618608b3b2576bc10f6032a97cba94b104995543c5b4d8322ef03d0cd9324abb6c1c2b86051ad9b58beba14bcb15371e03d0e766961960df4d9e4c628e5a495b2cb305822bbb381c32a788d7a9b1c4c60527b678cda7cf571fa68b606278833215b017fb9d300518e3c90fea926bbc4778f2dd02c6bf2cc9bf55c1d58629baffa4d0c83b8abd39d46fe3ccdda9b39be6fb85ab06b9a51372a47cf303165e101285eeeaa381c85844d7e4963740004e17a52fe5441ac170fe45e62b67c5093fe10cd92414407e8b1bad1c0f6963dca309722b8331083afa9d2dee85dd00724559c115cef78fba3ed1b201c633c86089f6e44c152cc4b99ec5d71c77692f83e2bc6672b999e95d551701ca1c81fa40f34ebc4370df830e4498330bd28faa931dbf7fbca70bc558f6c919c8cc7f146fed3eeadbd92b9f8be9bcfa10dd57771d70dcee39fd60d553fb6e9050885134b3e53211a0dd3f2defccaa740c131cb8320426e1468bfa4ffac30ab05b07a40a488e2a5325ef6efc34535794eafa8b19a513d72616a339e8cdf731930963f66d0fc6a8401bbe4a582f8864368deca69cfb366593fe8b7c552189e6b8ac64005178d0b88f1f91fd9cf67c90a12af7b409af5ded11fdf3f0958e2c72893b8d473a53ac1262aac2df759249ecfbf6e24b5692ca817d6317e6b159d0385a1ce2a16eb8ab3ea6447d017b60ad811145040d34d986b2aeab6d030cb0bb7b196f0ee87682b08c37e19390745d2fe079ad0665f59dd2130a7fdd471699d83676d94538a41096e4262afc3e4d97df3b231fe3ec6259c62ce590d4952dc6f68f59cb31cdebb04a61f0dd9812300ea6a0f1e20477491ab656b81a548f8689a0cc0aa6a59fc74ce308b0368a41bf183cf20aed67e0e654f3ea368ebbe479d5f9ef333636c5a050c327b80d8d495349ad44cfef6be240b65ae35b55ade9f5804bbb0bcf65965851b14b9d4a6759242478999d440cc688e4aaf668a71b3f2d921f5059b1059a1fb5f6c6effef0babfb257ebc84b011360e55340f33ae64d8caf76b9d0b8d48c0ef289b6171879c18bc4cc84b54d1008ff8edb311d80f7fec9c3a58575a77c541d82e13be283ef87d47dbef16144d6c3f1a673cd556bf5e41eff68cd0c89166a32a897543e8db0e572013706150ca645aae97a67f9e5127bf87c69814cf953bc5cfc50aa68facd994ecc8cddabd1246151de7cb0d4aa67817f8525a86b0e640ec83c69729a28f9e78ddb21d3d7dd365022e50c62c567425f9aa5d156bad76c8c50c393eec61faa4b705382f3f0008dade3212da161b57e529d5eb84d954830a0a635e87c943884cbc9c22abfc72edc1dc85c8892821944b753e73f28f494f8171f070efe2c4816076370f9a44b444c1f4f339d1ced8338e988a6e3eaf53c417e23279d936cb1853e7d1503bd47cd6f617745582da49284def305ab8531195d7171d0376a50bf7e94f5365456a06d6b86036b7ff329e674850600f0382cee8c1127adb8d678183b6b7658ec64c3eed47d0cfd2a04c75664623f5239811307ae150e462820bc76f69deca60d8ac641069885e3beff55d60dca49fa47964caab99ae4125ab492784adbde9f75af556174699caa5f63e2776000716601a8bd1d15da60c9d9228db1a58fe779d10476aeb3cee616f0797f9aa4d80266e2ecbf21de796e2d831e8ef9d7ae61340faa2fa9cf79cb6c8c9086f8c81b556a9e35566cbea35abb6538d91c5af3df80e93a165c85de6c12f1457cd82c8fed5d602cea7219fc60025b552a6adc9c3335fbb3ca612e82348e1af8e90a9b8aceb8c01f7cad53b7c33880e5781bebb8f36baf38c94ddfd6662cc690116bee9c370486be17a6077b4bfa325ff21a9134375decc8833df1fd068afebc115e65c81afd12bd2d987ad36f96b3312d3127f0270bd6fede33109da3e98735a1a465b061822b733242a5141b771f9173455dd247f8fba8eb137ebb4157dfa020985c59cb476c82287bdbb70233fe9de1936ce201a87c26a56362b0c3eb31d317a02d9e0c510b2e0dca5b00cb36c159643d23e3949f348ebde3832047eade67c8e68b473386ec7ab893a887b624df26c970d055f6774e66128ccce198571e2aa02b6bf5a9b0e7940172e8d6a1fff1b75527239ce37051503d782ffd1d9da3bd0a98cd69eaeb73910c0b11d4c81cfaaf217dc6554cf968873e58bb1c144bdb12febcc33f90328493ddc154feed651af2e82773521d20b8c1f263c546aee9171fe32b0429eb2b48e204c4bc1524941e5b6d969cd2dd2eaa5a7a8d09f218b7b467d3b2001b05c28108082bb4926ddb43d7e510395af6b5e8dbe09dd8a87f8b7a3977f7ca63d3483128976724a6690a3e47c85bf3d2b2b7ac2070fce8d8a43c48b5e455f59c344b398f3e43787106ec0bee4a1e3e0a4419ebd17f0462e0e47a26173f72077dedec358139778e773292af70e003c269e6a92641ec3cfd45221598b1ae297151bbf8100b8328672dbb6189abdc45bb537f8ab55e42c531cefd92797141f9ff2603c65d00820be18e1aa0bc22b6d2472eadfa95a33acb84ed3144bd7197e9891bcfeb3ecef3ed0c15d77984a43f59b092c0897c9af0539fc111deba97cb04a750bf7d4d93441c5035490a3e318abfb7376fd6ef13532356e0933f8d076609116b8bad3e26f7de44cd2a99ad3c73bf6b0376a50b5a55e8021abf347b6533d3bc606f8d640071e81924a2b1eb6c54192c01c1c000b46699543b2157b64fa62e241edfc564c9c8ebc0587f676d65f70c461ca81b3a07c24ed11c5a8e21bd92afce9f9c6f9d1e2414187e68041b996c8d444f66e9951094b832cfdf1242c0093c6d9da1433b5ebdb7e40f7920a37a550b0b830a282eb56ef5d93b18ed34a14c09d3b7b47aa8c328add60cf5befbddbe75ed93b548450ae4153c3978f908751932297ab59a655e36e3534b12007b76f2783f8f931e51415bb0de946ce59424df9b5f5a43b82d8e1dd92a41c103860fceeea19ad100dd7b1b64097dc2fcb738da4829a222e367eb1e65081f0d9deeae753c5e6e64f4346c8fa2ea591905bcabe936ff0b360b48d91baad6ef8fda27538ca725d991285f6664473eb80db9d1ce875843073d0ab2058922be88cf4fb323e632f0f13d7a1fef56c2ede90023cf312807274bef3923423386d14ef7ae5606ddcc0ab555854b7dabfccc9809d23d838126f1278798122c87c95e9bca1d5a0b1bfd1f10455d73ac5ba690883bb1e687d05aa74fde33b75cf8e766e02724cb8ebf8a1417d1904c17c78b8eca771bd62b4fb5e3db7feac98e82728c6edc1869e888eb9c0023ebdc418b34288550aac2199073c9fb77a319d479c2ee8a05f691706a8afecee5090660435fa827d43a84d7f9be14b5512e015f86fcf2141e8f2f6e1b1176c79cb886a2b6a3523963bb1f76980e482e4993b338598bb8b1c2adb9ebf5a9d9cf84b2a6493cbb6be8ce3a61e2683407d556debb9372c47c87c23bfb5c8e4e9fa2de1c1e0538d0134", 0x1000}], 0x8, &(0x7f0000001600)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [r6, r7, r0, r2, r1, 0xffffffffffffffff, r2, r8]}}, @cred={{0x18}}], 0x8c}}, {{&(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001d40)}, {&(0x7f0000001d80)="3be270436e4175ef9e7eca5afab605913b41d970c612927e0544f42aff0412ba42c28a1c498e482b4ac34605fcba0d7c183789de68974458dc5f4256c8e7c8d6d75c52d62b45f90da603942b0c909b50b84e84d3955f4a7fd228c7a1ec474a98739f1a0e46cfb020dc9c081d026da411605191b4f44a4e9a25b3c4186249509fd7c0042bb0fa4927b8ea77c76fadc51f1089d4fa5ba0f6df0aff1a069248a5aaf41f31f197", 0xa5}, {&(0x7f0000001e40)="47b655ebf7bfe6895d7f898b1a693e2819d957e1bd4a549b87489dd1d114bdd453ad167d18dfaa18ed060418040b04c832ab91b446358913faf6d58be89d3dbf2f372672c010d39446199b40fc8509d103104ae75395126ec299097d9e72934a3124cf338fde71f897d9504eb3b05c98558bb700500854e5da76be50e3fe71", 0x7f}, {&(0x7f0000001ec0)="a60481602c58d1f29d96e321d5653c422fc29687cd1bcb935d93d852814630dc8089421b695be02f8db5a231fd80a06cd6d768892e633f92fb18e070b5e11d3232262a8c5a80357fb2550518f7a770f36bd54e2e423ee625f165150a67f8b1455147363b4ae129d5c3a050bff1ecec6493de3a2e72d273e9955f1119287c5dac1541e7ca3b02f531d3a9214776ba0c6801d23a7ff8a09e0377ce0fbd18079fe5a9345e61", 0xa4}], 0x4, &(0x7f0000001fc0)=[@cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r7, r6]}}], 0x88, 0x20004000}}], 0x2, 0x20040881) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc0008000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000080)={r9}) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 3.115713929s ago: executing program 7 (id=4935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000042000/0x1000)=nil, 0x1000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0x60) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1bc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "b489e76ac590e7a9054f977880075ba28c08ef15ae1d194692ddd87c5af116f1bdb7"}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "3f862345b29316604186bae2c2578401232f42eb0168d3aa1b1bf523b7871ba9200eeebccfd996ea4d32526594a0591552a151aea307d56ac9c0664ac40442003ce79155baa275a9b2ad7de3a04c73f954e39f6a30e12506b5cad44e14c8166722def252a026c5e6104e19635156328032b6a97ea753529601ae373b7d620764f1f1d6d8efc4fb9b0f1d6c3463f10a696a69eb1249a769be011b6dedc6bb40700109d0206374aea147110f998360314ee56e3f2a21ecd837ce28ad6cf3abe729fe91"}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "e0c2b3c4e56d6f083813ce3a2787"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x770}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "5c96f7e67f9ae023734612e903414e8df78b42a97ad4eb61ded7a0ae3391c1a0892481effd0f054772ffe78d7ae9f03714838cc78c7c7f73d0c86453ddbd973a9f77fc428a7d66f6dcb218090ab5fd361ff072acb9781dc173fbd4aebc83e2741a3f09a48566b4d2371cc24f11"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, &(0x7f00000005c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="00f0000000000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.115179065s ago: executing program 6 (id=4936): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) syz_usb_connect$uac2(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000ff82050c004000010203010902e30003010e7007080b0000010b200409040000000101200009240105000c2e008005240405fe10240201010405e707070000000e0a0108240a040301040208240a01010a43010904010000010220000904010101010220000c240201c802021c7ac6699d0e240201800301075a1cd9f224130924020110020f8f0909050109000206f20108250101035e00000904020000010220000904020101010220000a2402020c00050007a9092402017f00048509ff230202d62f07000a9909240201030201192a0624020103fb0624020102010905820990f9814e090825010100070600"], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x1, 0x2c, 0x40, 0x1}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "2dfaaa141e9f402cd140295fd92d6aa0"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4048}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3}}, {0xc6, &(0x7f0000000280)=ANY=[@ANYBLOB="c603b8efc3c56fd65de1da2a59fd271f9fd3ab73aa6aac0922fbd7a0c5ba63d6868af830b1d55ceebf5ad3188396dfcb8942d72be6ff35f2b3c9df9ec5d141678a9b6353b62f37092bd38abbb43ecec7e904e1f84aa28bc1fea4b28399f8f6f34b89d213754e2aae1f7159c756c744029457c03bed4df5f691e29de5543e9eaf0e87a222d9c12e9a008ca233767db6d78d518d79644321e4a5f7344ab56cc96cc1fc48ccfc7f62a0b8e4a228e065fd8876cc81856b241a7e72f06489ddb96fcd000000000000"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x5834, 0x80, 0x2, 0x76}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x568f, 0x4, 0x1, 0x2ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5286, 0x2000, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25db, 0x200, 0x2, 0x83}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7dc, 0x40, 0x0, 0x6a}}], 0x4, &(0x7f0000001f00)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4dc}, 0x0, 0x0, '\x00', {0x4, 0x7f1, 0x0, &(0x7f0000000f00)=@buf_4k="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"}}, &(0x7f0000001f80)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20004050, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x284, 0x0, 0x11, 0x148, 0x120, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xd8, 0x120, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@inet=@ecn={{0x24}, {0x0, 0x0, 0x2, 0xa1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_to_hsr\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2e0) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4107, 0x100b}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000008c0)=""/257, 0x101}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f0000000140)=""/90, 0x5a}], 0xa}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0xfffd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90d2}, {{0x0, 0x0, 0x0}, 0xfffffffa}], 0x7, 0x2040, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) exit(0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r11, &(0x7f00000008c0)="1b0000001e005f0214fffffffffffff807000000a6000000000000", 0x1b) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.023229939s ago: executing program 5 (id=4937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) fdatasync(r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x7, 0x7, 0x80, "fea6ff75951141b2ab4db69e013819ee2b2b00a2955c59b1ee1b06f96c008c766d9a283450b1fe539656af2ae79d56f24a71d8b8ec439812d54868e63ae3b3", 0x1f}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="dadfe7ecad087c4740f693fbabe629dac50431b74d9212753f7c01ff7a06e87f48bb4153bee3", 0x26}], 0x1, &(0x7f0000001700)=[{0xc4, 0x10a, 0x6, "177f115b84794aeea4d6b1ba5e6ee516a12dc67b8f8afd476c272c6d1e56a6cb665b40d67f6b52f6a959228d26cea32ea0bab43e4e821c4b50275c8aecba7fab357c8027db6ec4582a951b52e99537213e85a5a2b12d55d021afa6ad2d6d25fe97edcdc389a3b646aba3353d77118475531903ce86f40a591ab136a85d7e28e427fc9c92176da6d71861056135cf4f6da24b78c228f168c08488885e63b96eb07377aa55401be355c7a53f6cbf717f94eb8f72cf01043c3d"}, {0xd0, 0x88, 0x5cd5, "06195a1f8ad4171e98e764bc21f12e025a6aebcbfeda59c912cbbe204cec0ac9ac8cad92bb819c820d0065eba47a11c9d302ad12f54f3af9c6f376834f6092933cc414d4653a1de364f1f08db2ccb6bbd05ba7db4037d730aa043fe4aa83601783b9b647d35c8b5f0b7b870c38219f887d392cbb031f0e6c0c97734432c2ef3fdc5945184823f98ce19632a86f3d764e713bd2c737a855263a1608d63e048b184917fa47b6f0724d1ad1c932980b213825c078c0bc07dfb31d6f724b618b540717"}, {0x100c, 0x113, 0x1, "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"}, {0x14, 0xff, 0xff, "77ae6fc21d"}, {0x18, 0x0, 0x9, "70d0015c7676de2c3e02c4"}, {0xa0, 0x108, 0x6, "65d8cc5b6fc684add07bd40bd319d9b3cfa9343b6d166c940074ea44f8574ba8884b95cc4f50990062a951111817491af3cb8af087364fef28d175c2c2144b19f1b3ba33efdc63f059436cbbb6c4e0215581fc2a442496318ea59b2997f8af5fbd4e00f25a92be5d4cfaf85f1ca88d55c6dea0b5c401f65059b8af05eb6aac71f540c512cff66b82582f934f4cacbc4455"}], 0x126c}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)="82837dea8016eeedbd36b0d36c22033088124c286ef414cc9d92499a62d7ec1b7419393f5b8f52ec3f70f1100a8764b3e78a9c5dc591d603ffb66d203d5c8630e3da9d6e59bc8c70ea5c72e334960245f99893a9ca1608e13efb6561ef8346ead077221c11b994a628e0586016e5945708f3782030e3acbc9cdc5f5b2d754e3f6d9f069dfcb634b7553e3d4acb47c14bf37400d971bd07f3eb940a462d33265f7a311e2fe919dd0e24b7b90af28081babade45d310f88d86c5c24c8020617106881853200f94f245d62d0452c70fb87cb88c748fd50e92387af0", 0xda}], 0x1, &(0x7f0000002ac0)=[{0x100, 0x88, 0xffff7fff, "232d1070376e5d526226d263e2df6378c005ab735268333139cb8b45e99b25da2bb27e1b235ef3a82f2753f1ba70e78452a65f4abfe7a98ae0beadc589b80fd78b145b729dadcbdf70d048323db1b7203fb4ebaffcabeb714460d809d8ec6008bcfbec40d9a316c8a89eb75b9dd3b38fa41427dd2c18feb656999598ed8a403f0ddf0846d2326a6f3e27537ca144ade841d95c86dd4fe49ea7a8c798b8dd39c69def6f6e131d1177c52e70f1d3924ffd4790f870b77f2748b1e5337635b563aeb2c849beee37d81c3d8effea76538403e3f70db7313a79c3855c0fa5ac1fec9d8fa7f0e7e51fd703ec5ef3296da61580613fbfde"}, {0x48, 0x104, 0x2, "c0c686d9b2007e51eea5829e5d1af78dfb027f14b546bf27962ec724e8e6aefcd01733f3f487d642c2769df48150250af0a7d655f7a3b254ec98"}, {0x100, 0x114, 0xe, "091c34a4823fdb5552de7eee7741d95c68ee06848e76bbb3dfaea6f8e55184e21b7e031a0493ad84c51d42ae4cbb76981a5c2794b229b4a5495b0a646211362a0eb52b4bdfc48eaa658b1c89d96fb7f561464ca3af9ab7a568e0b59ef84c61c03ac4da81fc6d3a9e9cb894a7e7da4cf59ff6f8aee51feafd61bdeec1e07b27fab5b118bbf27cfc3b5773b0c80fa14c90a8bfaefb394e4894919e34dc63fadca10e392df2e4b540bc6248fb4bf9bd1c3e2753bedda1e91528e0c2e552ca2d87812a70c17d07e8768f2145cfca0db30dd85ff8820cd46cb83a281c45b50d719436017906db01d81c766d74bf1d975454668d"}, {0x44, 0x112, 0x9, "f5f99e65b01f6be16128196751841b0a3b993529517d044dc1e985ee4f5e89d3a21c87b111cac54068aa60d99e92432666fd90c4d64b4e"}, {0x7c, 0x0, 0x2, "60cbd799f70e0456bb051a6f1630e05c0bc25bf612b83f0b098d8917627562a89e34e254a22c25bc73f8cdf4562000f453e4fc5d6c25361ee1d476138bfcc050a2d31a2598b6bfa14d9c7a88d1154d93d607585313b4686e548715e9c598b3bda818e71ec2132fed228ccbe9d83e"}, {0xe4, 0x104, 0x5, "9bac4df9999b0f993b682b305c38ca840b11dbe8ba30c02ce2c39d3e0051b973623a5eab4484f381935671fc0f3815bf9bd4562e8eac1f29ac1a28c6707b3d8b38117dc99659114ec4873c3a85646247748ad7f61aaa7c9935b87de2fd9c98581ab047c18c45e290154b36a8a36caad06046a0e5dc598c52b6d1cd713860f4078d9346889b635a5a5af2179b190dc54e3166e0fea11092cdc3586e89ede4a748af7b52bb89446665a10cb46413465cc14be5e2dcf5e163d9e977914a42a9b0b4332fabaca2fd18e646d7c618dc70403bb28e593c30"}], 0x3ec}}, {{&(0x7f0000002ec0)=@nl=@kern={0x10, 0x0, 0x0, 0x7ca75f6c29bd6c9c}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f40)="0142c3e4db7ab0a40c3267083fff4832e2327a75e2218c2d5f0e48650eb6de87d93133ca8edc7fc21781bc7fcb73d442d64ae9b22d43f674875dcb2655e6b0a3f60e3da6a9f2a1a709be53f0180dabef5f76b61ff54d0322dfe61abbbd344e0ee368e7cdc289822389bb37009e6d224078cde01292a40a0be1c6638e4341033089b2b8b9fffc47c7bc39a752be1aa041904068065b10ef44222396a125797e3c1981c801220e99c34b07ceeb3e3cf6e0aa09b4fc5b80f1aeaf58a5fa73235cfbbbda76fad8068c6c2908", 0xca}, {&(0x7f0000003040)="45cf6216ccd7d79480009bcb5e32696008454739344066c8837f619b885b1083115a140cce3eefc96416760aae11668cad26cb8b257927273c0bd8e3b2634386160677e57059f4c43885720003451f474b09d5bcfa94efd78ac0c10fb4b0748bcb2ad654ce8853ca822f63be75ede1b6e955a9b8e9d6e5727ee6c98facf682e6f7334c1e7fe053f33cc8a9005dd2075887623304483b4ed2b2f51b0afea92deaab56dbd9cd412653383f42a544ac2ad97309ce8e72677c212bdf723711239c59c74d150c726de87a2bdf0b64fb3af9", 0xcf}, {&(0x7f0000003140)="daa03c85edfadda346b61f33cfb6e5145292480f75214bbbb4ec12784929ca74085d739f0d0ea94579eaeadd0a5cbb98e7d3b2f52077723b44e90b052b8c285f80a9d7581cb925964bd273019e1330698ce81f119af21a3a512f0cc1bc058b9fed5b956aa24a23be088ea6c71f2cdadf8dab89c68abaf50063466ca0", 0x7c}, {&(0x7f00000031c0)="c581c9a1fa9d5b2ada922664168b7b0996eeb898ef7653b17438525af75a253ffe5a820170866cb1c9072ad6515d22f19ce402f519a4907f8afe36c52eb5cd57c1358fe264bbcda4e1d5db67661106a1b944657fbe1e705fe055295263b8e4c832300d0d98cf02d2fa57c361c3779eadb5df19782495bf189f66d003387883096b4424491816da1bd3e9c9b7eb5306b621db51565b7a3bfe00832dd1daf10305f4f8bb7a15d1fea36f456f241316b74b0bedd63e8631b119b5273f4e78214c60ec22998b6bf41dbf39f77e905dc445", 0xcf}, {&(0x7f00000032c0)="c112deb42ca969b86f68142718926c820db02134a98cde8559fdf700f8fb6b49f70f92c5233cd26e6034a03b4389d69a6722849f904661296cd4606f8dba32db4ea0788e1e5bc5a5f059ce7694c151cf23f8ffb8f9d2120fc1ae6a7a6c80530b28c1f13aeb8328d3b53b3dde0a48bc27097b1c41e09b586db19909b5ccd3cfa6a6e8d628f45316e1d82086ad5c0f76763efa6e95a93121f009dac7ee840e9f87ff966163523236b9ccb1437a61f4576ec8ef5e9713a5e22f13c6851e6fb65689c4049c0c52a3c4d3479bbf44da68ea25248ca52e2d30190a81d6ffc59c5ae1cec6fca1690a3ee614891b4eec89c01a", 0xef}], 0x5, &(0x7f0000003400)=[{0x84, 0x10f, 0x9fd, "f8940674e620fdca9ef3b88a69f6c207092c4600d992d0f01fd8a237cb0d2de5ffcb1c26427f6540cb98d14720ca6d04c9bd971ca06f69b5bd583e3ffdf6db70a94c5c43fc11cc8a4b3572ffed98ec3bdbb3a7bd32b3b4a79819f2f7e2a7fd4d39ee3593f2d33324411c826b70050b6eafa093633b"}, {0x84, 0x10b, 0x9, "d568b1d006d736e0fe9eda51e1f48491559948a0863252cee53d46eeac02b7f2fe2e0f2e71c1471d69744a0034ed2d826821886f1cce141b3a60901e0e656bfdd85963e294ee179ea418f4427c527631ece56c28bf6ab13378a03aadadc5e594ad50a4e3ab168e0d86435de58fe38ece8aeedb5ecc"}, {0x1c, 0x112, 0x0, "693d7fb2b97d3f1482646c705565bf32"}, {0xa4, 0xd, 0xffff, "1d980a6a733ac16eafb76da439c02fa48e1873d696156541c409c222270ee76a945a2d2a23b57aa16d818e91e279aa07513ceff09bcefd19ae2725e2d58023748a6f0c55b2fdf7482645d893ce4351b3bdc71551c1c15b09d55c0aec4a13785447b0fe8f1e24d313f12d558a843cc11fd672be635bb9c7f4e1f1ad6823711be61fa32c0c22768f4b2530dea39ddeba6ff2c6c62e3015"}, {0xfc, 0x102, 0x2, "6cf19cd5f4f0772f94b2d0ec9d1c4af864cc0333cb3e9771c08670ba17c1ec27604512c958f6a24925d3da9211a99e715e85eab7c166fc2d07210b0843ee6beebacc3c45b938f9263d59144c771152e9a2bf7d524f87344dd1703913fddcd3c7f02ded702b2a18af7a6439d19acd318163a8e33fdc7328595bea92214bf7f2e25835b08cc88ef70c3f1243b157bb00ba9eb99c4aad8e257facdb312e2546b508b1ddf3696df638b6038390d6b2db575955880ee6a694f17cda7cde20345575a381a3055b3f6ec412fcd48a191abbd5c072b124488f531101965a4fdef9a10bd63a10d24e826a1f32f2ba4b114ab7"}, {0x24, 0x10a, 0xfffffff8, "4acc5d486ba36b6701dbdddb0a79a65ae2a6901c45fc"}, {0x58, 0x113, 0x8000, "69c086fdfa767a805e2b31b060b9833fe93bad2459a2033a34647c9d056c1c402ef8a06546194096ccf61c45a57a6b90042943800ee92df74d72cb2863f98f2d663638d84d6f6cfd3686a0"}, {0x8c, 0x109, 0x6, "23f9418bb67592786e6e8aeb2eedcc27b1bfd213b8425b38e781b3a7e1cfffc54cb1bae19f6b21c06d2dc1c1f87f6c5836dc5e2ff291f00240f0617dcd2d38c9cadf8427952c4688c11b0b217274f15ff381216803a033482018e063f903bcf57a9c70a4af881cbff6b1280226691a9fdc47fd0af47f8324ec3158a4a95c122a"}, {0x38, 0x112, 0x325, "eaa190196e1e46e6ef4b55a5e58d1d100633b9bc28c336e7b1668492a5f61ee563f5fa81531e8e96c53354aa"}], 0x404}}], 0x3, 0x4008001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "000000000000040400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d) dup2(r6, r0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80104132, &(0x7f0000000000)) 2.932673793s ago: executing program 4 (id=4938): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a0035da5fe0b3a3fedb4cd95f42f32863dfb511552ebee485aa451a51616fd31b2218b421c75fb48a4ca8a9e196ec10f10556539b9f55abbc8896d124cf3a777fd054fd80314748c77c443dc06dd7087a0442134a5b52ed23e44f3e3e811813a8e35bdd44d6b5d2bdcf7b3eb14115588e97", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a0035da5fe0b3a3fedb4cd95f42f32863dfb511552ebee485aa451a51616fd31b2218b421c75fb48a4ca8a9e196ec10f10556539b9f55abbc8896d124cf3a777fd054fd80314748c77c443dc06dd7087a0442134a5b52ed23e44f3e3e811813a8e35bdd44d6b5d2bdcf7b3eb14115588e97", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, r5, 0x25, 0x1, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x25, 0x2, 0x401) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 2.183191727s ago: executing program 7 (id=4939): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0xc, @void}, 0x10) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="02180000150000000000000000000000030005000000000002000000e00000010000000000000000080012006acfedcd0000000000000000170000000000000000000000000000007f000001000000000000000000000000dc010000000000000000000000000000030006000000000002000000ffffffff0000000000000000050019"], 0xa8}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.181748394s ago: executing program 7 (id=4940): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000700)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 2.106814849s ago: executing program 5 (id=4941): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000000480)=[{0x7, 0x2000, 0x0, 0x0}], 0x1}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0xec6, 0x6}) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x100, 0x1, 0x6}) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x10d00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x5, 0xed2, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x67, 0x2, 0x5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0xc, "c42f0933b38a5f66e7b5"}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x8b}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x24}]}]}}}}}) sendto$packet(r5, &(0x7f0000000100)="c4ca94ecbeb3f0b8b8def69d91c22a308594e459558c703320f0de0407a3d5e2d9d462a6aa3d13751a88b7d4433050b85b1fc92cab07ca9c5339bf0bb2411a941116fc11aaa0abfc1f2a62d6a99f65c6bf308830f9686a9b23292160cf510b4eaaede17d3d3e82b997", 0x69, 0x0, &(0x7f0000000380)={0x11, 0x16, r6, 0x1, 0x60, 0x6, @remote}, 0x14) 2.106229693s ago: executing program 7 (id=4942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = dup2(r2, r3) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="c25fd9f04a86911fc0982b0838dc297d5f8dcdce321c26e599b972242e5949a55364d04bd86ca06981e6da8ff3e6cf5f1fb042f35d001e49ae9fba268a35e3b54eb6676d0d5ac5307a918284bacecbadf8499c0ac395ca54d47eb5fd3361c70fdda588b1ccc8067d0447e3edd6284f1329c1176d3dc64f851082e67c7af994849a1b935a2bd3ea9e2b1ba02973f56ec2f3803d21f60ae7", 0x97}, {&(0x7f0000000540)="ad55b74c09711f99de0d9e683a37d225758f4ebfef235ad1c65b66667d2e04d0119f52d121b6be876d3330bb9bb166f98e5cac9cac057bd14e2be7bdafd503e678c3a947ce50d8be5b378e8daf8223e55e8f0d04beb97b438600fd82704f2da551839a09009d9f795ef61fb0d9d7ebb8b9aa9d51cc8541544e88e6850869155434222116948567c2fb68b5cd7743a5dad09f6233f99d7f5a2909d3013478bc0076d402ca791ef21782ace3fb7e41e186cf8c632635af6baaf1", 0xb9}, {&(0x7f0000000600)="5ed765ccedf9292f89ce3a7f0864ec", 0xf}, {&(0x7f0000000640)="d4969e070ba20d1fe7fff57b490140fdd1abc592052773ea51f64d0bfca1fca944a10c794b2f065be7c5d1d9c56a5d283553adc01a03be9a6f32b2359588383cfe66e6dcad085f6977370fa37a81e5c9", 0x50}, {&(0x7f00000006c0)="e5bbb7ed616a0e0bd415d10583dc34fadf636d8c0683c4024db2946782303485a01df8022ba24648d38ed40453b43da89164381983ab925693c0890f8495cc612cb3e59ed8f8e078712fa59d3e6f58b296a56a865720c576ba463fc43c99dfc81ce20e9013b77fc3affa121adc439f365447295c0839836d70dce500d2814bcf5c279562f0a22aa6be60eb22526381cbe671951e0d2b3b46896621d79085", 0x9e}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="101f5564fdc2568ad6000000", @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r4], 0x74, 0x8cd2}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e24, @loopback}}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) fsync(0xffffffffffffffff) writev(r6, &(0x7f00000000c0), 0x0) socket(0x18, 0x803, 0x0) r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r7, 0xc0245628, &(0x7f0000000100)={0x3, 0x0, 0x100, '\x00', &(0x7f0000000040)=0xff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000104000500"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001800128008000100677470000c00028008000300ffff0000"], 0x38}}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.05303389s ago: executing program 4 (id=4943): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3c6, 0x10, 0x2, 0x200004, 0x14000000, 0x3d000, 0xfffffffc, 0x100, 0x9, 0xd, 0x3, 0xfffffffe, 0x400, 0xfa, 0x13, 0x100, 0xffffffa7, 0x9, 0x34b, 0x1, 0x3ff, 0x9, 0x8f, 0x10000bf, 0xaa18, 0xfffffffe, 0x8, 0x1ff, 0x7, 0xf58, 0xb13]}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x40}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x100d000, 0x1000, 0x996a, 0x1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e05411, &(0x7f0000000300)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000f000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b703000000000000620900000600000018210000", @ANYRES32, @ANYBLOB="000001f3cb00000018270000", @ANYRES32, @ANYBLOB="00000000ff0f00009500000000000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004600002c0003e00000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c652fe40df8d8b763f5c0000009078dadf3ee6a72813325b5c30df478113ee495e81a3e578a7e5c9ed2e6a032a5e4aca778c13601d3a1843"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a84350014060120010000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6202000090780000"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r9, 0xb}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x10, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfffffffffffffffc], 0xa000, 0x1144}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.970802043s ago: executing program 7 (id=4944): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x8, 0x0, 0xfffffffd}, 0x10) write(r0, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x80441) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000014, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x6]}}) 1.890573881s ago: executing program 7 (id=4945): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000d0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 1.753957075s ago: executing program 4 (id=4946): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r2, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000, 0x5, 0x0, 0x3, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0x2, 0x9, 0x96, 0xb, 0x7ffffffe}, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848110000004e140602000000000e000a000f00000002800000121f1e753475fdf08f585bda67439d77ba13c33667c653ebe90fbdd861284dbe8afa5e6dcbc08b050d16d55d30a0918f091e854c12ef7a36a763ef5a6baee15a2541f64bbb010000000000008052a6daaafa0c12a7dc3e83e9d941e914b9daed65960652e634c770a98029ab28d8", 0x9a}, {&(0x7f0000000540)="be5b94c50ca49cb1b4a7458f86762fbf27c101d6aae58e56800fff97484fa6619d1f529460b5c3315f35bdf719722158f7f54c42ae9a0e258d913a8fb5101a25114ef298913998fb5451cc82ff159b90be19a3ac0017293e36dd77127c49c52568963276f3539e4dbff3d957339ce587a929f8ab2d122d1c0930f7beb5f7ac9d6202e045c347f1a9c937ed8cd58dea51aa463959f0b5981395b2b84afb0587204fef4a1b9dd65e001921f2aed3a3774d21f9c9355b88c93ff0a54a82ca", 0xbd}, {&(0x7f0000000640)="5a843a5e9f2c76f6137e37781e71355179cb4f7371f10335668f1193e39c767fa0a2d2a6240b0da9faa22c0bfb570f9ed199628d32dcff2934dd438492c3af0b900b8576b8da987abc19cfd4a49758e2b5449ce9036d929fc14fe8e7d66a4ac5679a39a30c957c72cbd7eee63cec99cce5cfe36a2c02e2b98e04951485d473c132c2e63bd2afce4c1e9fd79053712b0a8a2fe0a81550f4c97c7b5a4dfaded4277375a50afe98c19432672fbcaa72e12791f3174707414bbd371ea458d75cac8bdfa7ef335e2f65d98a83c276aa5a02f844a781960f8e7a4cf259c9334bd1c92559d5a76a4bd1c70000000000000000", 0xef}, {&(0x7f0000000740)="78d2b8f05d879fd2921dc8272761bf9e1ee79b1012e301e76796753d87b52899438291fdbe8e71075e9d83bdc3f882ebbf20571b0f2eff3292182c267d4177fc3e78deebb967577d65aa7bfcbfe60832ad5bfdeee5327f92dc333c85d479120d8724269969ae16f0aa11e598f375e50ee55ee4b274325ee408b8794d0f9c58", 0x7f}, {&(0x7f0000000880)="b7c56f6ad762de38cc71b30a7566f98e930453f64309f96000ff355d7056801cd0258e834705343a5be02ee9651ef4ed4db102a871c20ae0c3299efbe9744b4ff08cee41a332ff780b51d47e47e48778fccb72aaf3f415becaf9b4a4812b18a9db9bed82", 0x64}, {&(0x7f0000000ac0)="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", 0x271}], 0x6}, 0x8084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "12000000f7ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x1, 0xfffffffffffffd5b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendfile(r4, r5, 0x0, 0xffffffff004) 0s ago: executing program 6 (id=4947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x84880) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$ndctl0(0xffffff9c, &(0x7f0000000200), 0x400080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) mknod$loop(0x0, 0xfff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8410) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x80000000000001, 0x0, 0x52f, 0xb}, {0x1ff, 0xffffffffe, 0x9, 0x3}, 0x6, 0x80001, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) kernel console output (not intermixed with test programs): ][ T40] audit: type=1326 audit(1781549546.129:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1075.846829][ T40] audit: type=1326 audit(1781549546.129:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1075.876426][ T40] audit: type=1326 audit(1781549546.129:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1075.885456][ T40] audit: type=1326 audit(1781549546.129:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1075.901834][ T40] audit: type=1326 audit(1781549546.129:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1075.907263][ T8878] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4445'. [ 1075.912723][ T8878] netlink: 'syz.5.4445': attribute type 2 has an invalid length. [ 1075.923167][ T40] audit: type=1326 audit(1781549546.129:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.5.4445" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704ef7c code=0x7ffc0000 [ 1076.054766][ T7255] usb 9-1: USB disconnect, device number 88 [ 1078.307887][ T8906] binder: 8905:8906 unknown command 0 [ 1078.309572][ T8906] binder: 8905:8906 ioctl c0306201 800001c0 returned -22 [ 1078.881604][ T8876] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1079.036326][ T8934] syzkaller1: entered promiscuous mode [ 1079.041283][ T8934] syzkaller1: entered allmulticast mode [ 1079.196144][ T8923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1079.490368][ T8976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1079.667417][ T5823] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 1079.927360][ T5823] usb 11-1: Using ep0 maxpacket: 16 [ 1080.597216][ T5823] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1080.601514][ T5823] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.604836][ T5823] usb 11-1: Product: syz [ 1080.606934][ T5823] usb 11-1: Manufacturer: syz [ 1080.608610][ T5823] usb 11-1: SerialNumber: syz [ 1080.825092][ T5823] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1080.831617][ T5823] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1080.834897][ T5823] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1080.838963][ T5823] usb 11-1: media controller created [ 1080.846883][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1080.855677][ T5823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1080.873018][ T5823] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1080.877057][ T5823] usb 11-1: USB disconnect, device number 59 [ 1081.537784][ T9017] ALSA: mixer_oss: invalid OSS volume 'u' [ 1081.879536][ T9048] veth0_macvtap: left promiscuous mode [ 1082.083497][ T9048] veth0_macvtap: entered promiscuous mode [ 1082.729109][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4472'. [ 1082.891808][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1082.895444][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1083.017302][ T5823] usb 11-1: new high-speed USB device number 60 using dummy_hcd [ 1083.167384][ T5823] usb 11-1: Using ep0 maxpacket: 8 [ 1083.171078][ T5823] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1083.173662][ T5823] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1083.176638][ T5823] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1083.179957][ T5823] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1083.182987][ T5823] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.186954][ T5823] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1083.190265][ T5823] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.402925][ T5823] usb 11-1: GET_CAPABILITIES returned 0 [ 1083.405232][ T5823] usbtmc 11-1:16.0: can't read capabilities [ 1083.739088][ T50] usb 11-1: USB disconnect, device number 60 [ 1085.831166][ T9147] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1085.833343][ T9147] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1085.837799][ T9147] vhci_hcd vhci_hcd.0: Device attached [ 1085.842072][ T9149] vhci_hcd: connection closed [ 1085.842901][ T8323] vhci_hcd vhci_hcd.4: stop threads [ 1085.849163][ T8323] vhci_hcd vhci_hcd.4: release socket [ 1085.862002][ T8323] vhci_hcd vhci_hcd.4: disconnect device [ 1085.903818][ T9162] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4482'. [ 1085.993175][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1086.013482][ T9162] 8021q: VLANs not supported on syzkaller0 [ 1086.209661][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1087.142736][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1087.392897][ T9235] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.4493'. [ 1087.424642][ T9235] 8021q: VLANs not supported on syzkaller0 [ 1087.512194][ T9240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1087.878916][ T9242] autofs4:pid:9242:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1088.649195][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4497'. [ 1089.123564][ T9279] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1089.407406][ T5893] usb 9-1: new full-speed USB device number 89 using dummy_hcd [ 1089.559884][ T5893] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.567504][ T5893] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.577264][ T5893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.584888][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.850527][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.855190][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.872066][ T5893] usb 9-1: usb_control_msg returned -32 [ 1089.873875][ T5893] usbtmc 9-1:16.0: can't read capabilities [ 1090.011672][ T9317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1090.147333][ T5893] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1090.230047][ T9318] Cannot find del_set index 3 as target [ 1090.299301][ T5893] usb 7-1: config 6 has an invalid interface number: 7 but max is 0 [ 1090.302759][ T5893] usb 7-1: config 6 has no interface number 0 [ 1090.305370][ T5893] usb 7-1: config 6 interface 7 has no altsetting 0 [ 1090.312154][ T5893] usb 7-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 1090.317014][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.321957][ T5893] usb 7-1: Product: syz [ 1090.324459][ T5893] usb 7-1: Manufacturer: syz [ 1090.327057][ T5893] usb 7-1: SerialNumber: syz [ 1091.217655][ T9325] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.4508'. [ 1091.284209][ T9329] 8021q: VLANs not supported on syzkaller0 [ 1091.338197][ T9330] input: syz1 as /devices/virtual/input/input28 [ 1092.174341][ T3980] usb 9-1: USB disconnect, device number 89 [ 1092.377417][ T9369] netlink: 'syz.6.4512': attribute type 4 has an invalid length. [ 1092.674376][ T9374] netlink: 'syz.4.4513': attribute type 4 has an invalid length. [ 1093.334191][ T5893] usb 7-1: USB disconnect, device number 96 [ 1093.520158][ T9395] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4517'. [ 1093.610990][ T9402] 8021q: VLANs not supported on syzkaller0 [ 1093.719542][ T9405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1097.161495][ T5747] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 1097.449483][ T9471] netlink: 'syz.4.4526': attribute type 4 has an invalid length. [ 1098.106960][ T9475] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1098.109030][ T9475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1098.147076][ T9475] vhci_hcd vhci_hcd.0: Device attached [ 1098.148486][ T9479] FAULT_INJECTION: forcing a failure. [ 1098.148486][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.153303][ T9479] CPU: 1 UID: 0 PID: 9479 Comm: syz.6.4527 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.153321][ T9479] Tainted: [L]=SOFTLOCKUP [ 1098.153325][ T9479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1098.153332][ T9479] Call Trace: [ 1098.153336][ T9479] [ 1098.153341][ T9479] dump_stack_lvl+0x100/0x190 [ 1098.153364][ T9479] should_fail_ex.cold+0x5/0xa [ 1098.153378][ T9479] _copy_from_user+0x2e/0xd0 [ 1098.153397][ T9479] copy_from_buffer+0x7f/0xc0 [ 1098.153415][ T9479] copy_uabi_to_xstate+0x266/0x650 [ 1098.153433][ T9479] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 1098.153453][ T9479] ? __fpu_restore_sig+0xc1b/0x13c0 [ 1098.153468][ T9479] ? rcu_is_watching+0x12/0xc0 [ 1098.153481][ T9479] ? __fpu_restore_sig+0xc1b/0x13c0 [ 1098.153496][ T9479] ? x86_task_fpu+0x5f/0x90 [ 1098.153511][ T9479] __fpu_restore_sig+0x1000/0x13c0 [ 1098.153530][ T9479] ? __lock_acquire+0x4a5/0x2630 [ 1098.153540][ T9479] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1098.153557][ T9479] ? rcu_is_watching+0x12/0xc0 [ 1098.153573][ T9479] ? __might_fault+0xc5/0x140 [ 1098.153587][ T9479] fpu__restore_sig+0x151/0x190 [ 1098.153604][ T9479] ia32_restore_sigcontext+0x456/0x620 [ 1098.153619][ T9479] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1098.153641][ T9479] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.153666][ T9479] ? lockdep_hardirqs_on+0x78/0x100 [ 1098.153686][ T9479] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 1098.153708][ T9479] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 1098.153729][ T9479] ? rcu_is_watching+0x12/0xc0 [ 1098.153745][ T9479] do_int80_emulation+0x14b/0x720 [ 1098.153758][ T9479] asm_int80_emulation+0x1a/0x20 [ 1098.153770][ T9479] RIP: 0023:0xf6fdef7a [ 1098.153779][ T9479] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1098.153790][ T9479] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 [ 1098.153799][ T9479] RAX: 00000000000001c1 RBX: 0000000080001080 RCX: 0000000000000001 [ 1098.153805][ T9479] RDX: 0000000000000000 RSI: 0000000080001100 RDI: 0000000000000001 [ 1098.153811][ T9479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1098.153818][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.153824][ T9479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1098.153837][ T9479] [ 1098.231714][ T9477] vhci_hcd: connection closed [ 1098.268685][T15517] vhci_hcd vhci_hcd.6: stop threads [ 1098.272146][T15517] vhci_hcd vhci_hcd.6: release socket [ 1098.284638][T15517] vhci_hcd vhci_hcd.6: disconnect device [ 1099.015500][ T9503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1100.061417][ T9521] netlink: 'syz.6.4536': attribute type 4 has an invalid length. [ 1100.489308][ T3980] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1100.641401][ T3980] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.657255][ T3980] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.662623][ T3980] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1100.666331][ T3980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.803663][ T9533] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1100.900615][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.904344][ T9539] 8021q: VLANs not supported on syzkaller0 [ 1100.910768][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.921560][ T3980] usb 7-1: usb_control_msg returned -32 [ 1100.923362][ T3980] usbtmc 7-1:16.0: can't read capabilities [ 1101.231480][ T5747] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1101.236676][ T5747] Bluetooth: hci4: Injecting HCI hardware error event [ 1101.247027][T17622] Bluetooth: hci4: hardware error 0x00 [ 1101.274914][ T9555] Cannot find del_set index 3 as target [ 1101.293014][ T9556] netlink: 'syz.4.4539': attribute type 4 has an invalid length. [ 1102.047593][ T50] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 1102.487255][ T50] usb 11-1: device descriptor read/64, error -71 [ 1102.747220][ T50] usb 11-1: new high-speed USB device number 62 using dummy_hcd [ 1102.887246][ T50] usb 11-1: device descriptor read/64, error -71 [ 1102.996665][ T9580] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1102.997490][ T50] usb usb11-port1: attempt power cycle [ 1103.235838][T25924] usb 7-1: USB disconnect, device number 97 [ 1103.312669][T17622] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1103.347264][ T50] usb 11-1: new high-speed USB device number 63 using dummy_hcd [ 1103.381297][ T50] usb 11-1: device descriptor read/8, error -71 [ 1103.627690][ T50] usb 11-1: new high-speed USB device number 64 using dummy_hcd [ 1103.656055][ T50] usb 11-1: device descriptor read/8, error -71 [ 1103.767644][ T50] usb usb11-port1: unable to enumerate USB device [ 1104.112090][ T9620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1105.477346][ T3980] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1105.687419][ T3980] usb 7-1: Using ep0 maxpacket: 8 [ 1105.695198][ T3980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1105.702778][ T3980] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1105.719651][ T3980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.734211][ T3980] usb 7-1: config 0 descriptor?? [ 1105.962703][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.977635][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.993940][ T3980] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1106.020382][ T9659] netlink: 'syz.4.4552': attribute type 1 has an invalid length. [ 1106.211208][ T3980] IPVS: starting estimator thread 0... [ 1106.270803][ T3980] usb 7-1: USB disconnect, device number 98 [ 1106.297278][ T9692] IPVS: using max 43 ests per chain, 103200 per kthread [ 1106.529389][ T9663] bond1: (slave geneve3): making interface the new active one [ 1106.545221][ T9663] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1106.556790][T32697] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1106.561487][T32697] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1106.564707][T32697] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1106.568250][T32697] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1106.719980][ T9651] ptrace attach of ""[9710] was attempted by "/syz-executor exec"[9651] [ 1106.724350][ T40] audit: type=1800 audit(1781549577.009:2928): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4552" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1107.631599][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1108.028814][ T9740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1108.132565][ T9742] 9p: Bad value for 'rfdno' [ 1108.780689][ T9812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1109.342607][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4570'. [ 1109.697268][ T6730] usb 11-1: new high-speed USB device number 65 using dummy_hcd [ 1109.918091][ T6730] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 1109.920632][ T6730] usb 11-1: config 1 has no interface number 0 [ 1109.922586][ T6730] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1109.926511][ T6730] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1109.937673][ T6730] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.999099][ T6730] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1110.001990][ T6730] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.004520][ T6730] usb 11-1: Product: syz [ 1110.005889][ T6730] usb 11-1: Manufacturer: syz [ 1110.012001][ T6730] usb 11-1: SerialNumber: syz [ 1110.018418][ T9843] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1110.515149][ T6730] usb 11-1: Error in usbnet_get_endpoints (-71) [ 1110.531638][ T6730] usb 11-1: USB disconnect, device number 65 [ 1110.692361][ T9952] 0x0000fffffffd-0x00010000fffd : "" [ 1110.694111][ T9952] mtd: partition "" is out of reach -- disabled [ 1110.707838][ T9952] ftl_cs: FTL header not found. [ 1111.104082][ T9978] qnx6: unable to read the first superblock [ 1111.108049][ T9978] qnx6: unable to read the first superblock [ 1111.109951][ T9978] qnx6: unable to read the first superblock [ 1111.228640][ T9980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1113.563976][T10026] tipc: Started in network mode [ 1113.565585][T10026] tipc: Node identity 52d8ee78a962, cluster identity 4711 [ 1113.568130][T10026] tipc: Enabled bearer , priority 0 [ 1113.570897][T10026] syzkaller0: entered promiscuous mode [ 1113.572614][T10026] syzkaller0: entered allmulticast mode [ 1113.653054][T10026] syzkaller0: mtu less than device minimum [ 1113.656100][T10025] tipc: Resetting bearer [ 1113.674549][T10025] tipc: Disabling bearer [ 1115.322011][T10056] syzkaller0: entered promiscuous mode [ 1115.324435][T10056] syzkaller0: entered allmulticast mode [ 1117.166086][T10106] Set syz1 is full, maxelem 14 reached [ 1117.344561][T10110] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4600'. [ 1117.409786][T10110] 8021q: VLANs not supported on syzkaller0 [ 1117.595057][T10118] 0x0000fffffffd-0x00010000fffd : "" [ 1117.599186][T10118] mtd: partition "" is out of reach -- disabled [ 1117.620109][T10118] ftl_cs: FTL header not found. [ 1118.366481][T10160] 0x0000fffffffd-0x00010000fffd : "" [ 1118.371810][T10160] mtd: partition "" is out of reach -- disabled [ 1118.380014][T10160] ftl_cs: FTL header not found. [ 1118.646951][T10157] wg2 speed is unknown, defaulting to 1000 [ 1118.886496][T10180] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.4610'. [ 1119.054837][T10186] comedi comedi4: bad chanlist[0]=0x00000200 chan=512 range length=2 [ 1119.054903][T10157] warn_alloc: 1 callbacks suppressed [ 1119.054914][T10157] syz.6.4607: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1119.066102][T10157] CPU: 2 UID: 0 PID: 10157 Comm: syz.6.4607 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.066120][T10157] Tainted: [L]=SOFTLOCKUP [ 1119.066124][T10157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1119.066130][T10157] Call Trace: [ 1119.066135][T10157] [ 1119.066139][T10157] dump_stack_lvl+0x100/0x190 [ 1119.066164][T10157] warn_alloc.cold+0x95/0x1c1 [ 1119.066176][T10157] ? __pfx_warn_alloc+0x10/0x10 [ 1119.066187][T10157] ? find_held_lock+0x2b/0x80 [ 1119.066201][T10157] ? psi_memstall_leave+0x19c/0x360 [ 1119.066222][T10157] ? psi_memstall_leave+0x1eb/0x360 [ 1119.066237][T10157] ? lockdep_hardirqs_on+0x78/0x100 [ 1119.066251][T10157] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1119.066269][T10157] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 1119.066283][T10157] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1119.066294][T10157] ? kernfs_put+0x3f/0x60 [ 1119.066307][T10157] ? internal_create_group+0x915/0xfb0 [ 1119.066330][T10157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1119.066347][T10157] ? policy_nodemask+0xed/0x4f0 [ 1119.066361][T10157] alloc_pages_mpol+0x1fb/0x540 [ 1119.066376][T10157] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1119.066393][T10157] ? ib_setup_port_attrs+0x2b4/0x600 [ 1119.066406][T10157] ___kmalloc_large_node+0xe5/0x120 [ 1119.066422][T10157] __kmalloc_large_node_noprof+0x1c/0x70 [ 1119.066437][T10157] __kmalloc_noprof+0x5be/0x850 [ 1119.066448][T10157] ? rdma_port_get_link_layer+0x57/0xe0 [ 1119.066463][T10157] ib_setup_port_attrs+0x2b4/0x600 [ 1119.066476][T10157] ? kobject_put+0xb9/0x640 [ 1119.066490][T10157] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1119.066506][T10157] ? __init_waitqueue_head+0xca/0x150 [ 1119.066522][T10157] add_one_compat_dev+0x5b3/0x820 [ 1119.066540][T10157] rdma_dev_init_net+0x30a/0x590 [ 1119.066555][T10157] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1119.066570][T10157] ? __kmalloc_noprof+0x320/0x850 [ 1119.066583][T10157] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1119.066602][T10157] ops_init+0x1e2/0x5f0 [ 1119.066618][T10157] setup_net+0x118/0x3a0 [ 1119.066632][T10157] ? __pfx_setup_net+0x10/0x10 [ 1119.066646][T10157] ? mutex_init_lockdep+0xf1/0x120 [ 1119.066665][T10157] copy_net_ns+0x46f/0x7c0 [ 1119.066681][T10157] create_new_namespaces+0x3ea/0xac0 [ 1119.066699][T10157] unshare_nsproxy_namespaces+0xf2/0x220 [ 1119.066714][T10157] ksys_unshare+0x438/0xab0 [ 1119.066730][T10157] ? __pfx_ksys_unshare+0x10/0x10 [ 1119.066750][T10157] __ia32_sys_unshare+0x30/0x40 [ 1119.066765][T10157] __do_fast_syscall_32+0xe7/0x970 [ 1119.066777][T10157] ? lockdep_hardirqs_on+0x78/0x100 [ 1119.066788][T10157] do_fast_syscall_32+0x32/0x70 [ 1119.066800][T10157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1119.066814][T10157] RIP: 0023:0xf6fdef7c [ 1119.066824][T10157] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1119.066835][T10157] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1119.066846][T10157] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1119.066852][T10157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.066859][T10157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.066865][T10157] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1119.066871][T10157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.066884][T10157] [ 1119.066888][T10157] Mem-Info: [ 1119.100583][T10189] 8021q: VLANs not supported on syzkaller0 [ 1119.183205][T17622] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1119.213144][T10157] active_anon:957 inactive_anon:3603 isolated_anon:0 [ 1119.213144][T10157] active_file:672 inactive_file:13629 isolated_file:0 [ 1119.213144][T10157] unevictable:3793 dirty:227 writeback:0 [ 1119.213144][T10157] slab_reclaimable:7715 slab_unreclaimable:79146 [ 1119.213144][T10157] mapped:26843 shmem:4650 pagetables:1869 [ 1119.213144][T10157] sec_pagetables:410 bounce:0 [ 1119.213144][T10157] kernel_misc_reclaimable:0 [ 1119.213144][T10157] free:35313 free_pcp:412 free_cma:0 [ 1119.231146][T10157] Node 0 active_anon:0kB inactive_anon:9696kB active_file:68kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9676kB dirty:0kB writeback:0kB shmem:13188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8012kB pagetables:1240kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1119.242400][T10157] Node 1 active_anon:3868kB inactive_anon:4644kB active_file:3320kB inactive_file:54384kB unevictable:11716kB isolated(anon):0kB isolated(file):0kB mapped:97816kB dirty:972kB writeback:0kB shmem:5328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9320kB pagetables:6204kB sec_pagetables:524kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1119.254676][T10157] Node 0 DMA free:1972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.270380][T10157] lowmem_reserve[]: 0 285 285 285 285 [ 1119.272109][T10157] Node 0 DMA32 free:30688kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:9696kB active_file:68kB inactive_file:72kB unevictable:3536kB writepending:0kB zspages:1688kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.284265][T10157] lowmem_reserve[]: 0 0 0 0 0 [ 1119.285831][T10157] Node 1 DMA32 free:105772kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3868kB inactive_anon:4644kB active_file:4220kB inactive_file:54384kB unevictable:11716kB writepending:972kB zspages:7636kB present:1048432kB managed:948212kB mlocked:8188kB bounce:0kB free_pcp:1824kB local_pcp:504kB free_cma:0kB [ 1119.298288][T10157] lowmem_reserve[]: 0 0 0 0 0 [ 1119.300025][T10157] Node 0 DMA: 15*4kB (U) 9*8kB (U) 7*16kB (U) 8*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1972kB [ 1119.304523][T10157] Node 0 DMA32: 1349*4kB (UME) 625*8kB (UME) 274*16kB (UM) 188*32kB (UME) 50*64kB (UME) 26*128kB (UM) 7*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 30652kB [ 1119.310248][T10157] Node 1 DMA32: 18*4kB (E) 1860*8kB (UME) 5410*16kB (UME) 47*32kB (M) 5*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 103464kB [ 1119.315340][T10157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.318549][T10157] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1119.322397][T10157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.324449][T17622] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1119.328615][T10157] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1119.332193][T10157] 20748 total pagecache pages [ 1119.333695][T10157] 1192 pages in swap cache [ 1119.335429][T10157] Free swap = 88952kB [ 1119.336831][T10157] Total swap = 124996kB [ 1119.338588][T10157] 524155 pages RAM [ 1119.339877][T10157] 0 pages HighMem/MovableOnly [ 1119.341399][T10157] 210104 pages reserved [ 1119.342716][T10157] 0 pages cma reserved [ 1120.399616][T10200] 0x0000fffffffd-0x00010000fffd : "" [ 1120.401341][T10200] mtd: partition "" is out of reach -- disabled [ 1120.404798][T10200] ftl_cs: FTL header not found. [ 1120.428327][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.430714][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.744212][T10225] x_tables: duplicate underflow at hook 1 [ 1125.209770][T10249] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4621'. [ 1125.253951][T10249] 8021q: VLANs not supported on syzkaller0 [ 1125.360988][T10255] 0x0000fffffffd-0x00010000fffd : "" [ 1125.367213][T10255] mtd: partition "" is out of reach -- disabled [ 1125.382773][T10255] ftl_cs: FTL header not found. [ 1125.510568][T10277] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1125.731413][T10277] 8021q: VLANs not supported on syzkaller0 [ 1126.064009][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4628'. [ 1126.352593][T10283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1128.458673][T10359] 0x0000fffffffd-0x00010000fffd : "" [ 1128.460405][T10359] mtd: partition "" is out of reach -- disabled [ 1128.464854][T10359] ftl_cs: FTL header not found. [ 1129.618096][T10373] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1130.658924][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.662252][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.671792][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.674653][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.681014][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.689136][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.700510][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.705067][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.714180][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.723687][T10384] netlink: 'syz.5.4636': attribute type 3 has an invalid length. [ 1130.890585][T10384] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4636'. [ 1132.687405][ T40] audit: type=1800 audit(1781549602.969:2929): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4638" name="bus" dev="ramfs" ino=132045 res=0 errno=0 [ 1133.997844][ T3263] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1135.534893][T10457] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4647'. [ 1135.823788][T10470] syzkaller0: entered promiscuous mode [ 1135.834620][T10470] syzkaller0: entered allmulticast mode [ 1135.869414][T10477] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4650'. [ 1136.051839][T10472] validate_nla: 42 callbacks suppressed [ 1136.057041][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.063150][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.125226][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.129866][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.303098][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.488714][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.768944][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.773600][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.851724][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1136.880029][T10472] netlink: 'syz.4.4650': attribute type 3 has an invalid length. [ 1138.976281][ T7255] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1139.146492][ T7255] usb 7-1: Using ep0 maxpacket: 8 [ 1139.162555][ T7255] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1139.165598][ T7255] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.169176][ T7255] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1139.173183][ T7255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.318416][T10520] comedi comedi3: adq12b: I/O base address or length out of range [ 1141.422278][T10530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1141.742521][T25924] usb 7-1: USB disconnect, device number 99 [ 1142.419177][T10538] syzkaller0: entered promiscuous mode [ 1142.421030][T10538] syzkaller0: entered allmulticast mode [ 1142.482459][T10538] CUSE: unknown device info "" [ 1142.484035][T10538] CUSE: unknown device info "" [ 1142.485954][T10538] CUSE: unknown device info "" [ 1142.487753][T10538] CUSE: unknown device info "" [ 1142.489330][T10538] CUSE: unknown device info "" [ 1142.490887][T10538] CUSE: unknown device info "" [ 1142.492385][T10538] CUSE: unknown device info "" [ 1142.493986][T10538] CUSE: unknown device info "" [ 1142.495482][T10538] CUSE: unknown device info "" [ 1142.497076][T10538] CUSE: unknown device info "" [ 1142.500131][T10538] CUSE: unknown device info "" [ 1142.501667][T10538] CUSE: unknown device info "r" [ 1142.503232][T10538] CUSE: unknown device info "#" [ 1142.505081][T10538] CUSE: unknown device info "" [ 1142.506886][T10538] CUSE: unknown device info "" [ 1142.510283][T10538] CUSE: unknown device info "" [ 1142.511841][T10538] CUSE: DEVNAME unspecified [ 1142.888982][T10538] syz.6.4658 (10538): drop_caches: 3 [ 1143.100715][T10574] validate_nla: 40 callbacks suppressed [ 1143.100749][T10574] netlink: 'syz.4.4664': attribute type 4 has an invalid length. [ 1145.499080][ T40] audit: type=1326 audit(1781549615.789:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.5.4662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7fc00000 [ 1145.852554][T10582] dlm: non-version read from control device 4096 [ 1146.497335][ T6730] usb 9-1: new full-speed USB device number 90 using dummy_hcd [ 1146.538858][T10597] syzkaller0: entered promiscuous mode [ 1146.540574][T10597] syzkaller0: entered allmulticast mode [ 1146.581497][T10597] tipc: Enabled bearer , priority 0 [ 1146.589332][T10597] tipc: Resetting bearer [ 1146.594705][T10593] tipc: Resetting bearer [ 1146.610567][T10593] tipc: Disabling bearer [ 1146.648574][ T6730] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.651631][ T6730] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.655622][ T6730] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1146.660139][ T6730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.880696][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.886458][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.116697][ T6730] usb 9-1: usb_control_msg returned -32 [ 1147.118554][ T6730] usbtmc 9-1:16.0: can't read capabilities [ 1147.260314][T10622] Cannot find del_set index 3 as target [ 1147.769626][T10630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1148.357243][ T3980] usb 11-1: new high-speed USB device number 66 using dummy_hcd [ 1148.507271][ T3980] usb 11-1: Using ep0 maxpacket: 8 [ 1148.510542][ T3980] usb 11-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.514307][ T3980] usb 11-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1148.518844][ T3980] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1148.521065][ T3980] usb 11-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1148.523981][ T3980] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.531746][ T3980] usb 11-1: config 0 descriptor?? [ 1148.743465][ T40] audit: type=1326 audit(1781549619.029:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.750379][ T40] audit: type=1326 audit(1781549619.029:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.757335][ T40] audit: type=1326 audit(1781549619.029:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.764292][ T40] audit: type=1326 audit(1781549619.029:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.771083][ T40] audit: type=1326 audit(1781549619.029:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.778644][ T40] audit: type=1326 audit(1781549619.029:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1148.785469][ T40] audit: type=1326 audit(1781549619.029:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1149.275847][T20924] usb 9-1: USB disconnect, device number 90 [ 1149.340300][ T40] audit: type=1326 audit(1781549619.029:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1149.353272][T10635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.396504][ T40] audit: type=1326 audit(1781549619.039:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.6.4676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1149.690053][ T3980] usbhid 11-1:0.0: can't add hid device: -71 [ 1149.692046][ T3980] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1149.702612][ T3980] usb 11-1: USB disconnect, device number 66 [ 1149.836510][T10676] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.4679'. [ 1149.874829][T10676] 8021q: VLANs not supported on syzkaller0 [ 1150.297348][ T6730] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1150.457379][ T6730] usb 10-1: Using ep0 maxpacket: 8 [ 1150.460626][ T6730] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1150.463258][ T6730] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.466461][ T6730] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1150.469531][ T6730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.479552][T10697] syzkaller0: entered promiscuous mode [ 1150.481313][T10697] syzkaller0: entered allmulticast mode [ 1151.088153][T25924] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1151.315415][T10727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1151.320463][T10724] comedi comedi3: adq12b: I/O base address or length out of range [ 1151.537284][T25924] usb 9-1: Using ep0 maxpacket: 8 [ 1151.562031][T25924] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1151.585906][T25924] usb 9-1: config 179 has no interface number 0 [ 1151.594480][T25924] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1151.598841][T25924] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1151.603656][T25924] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1151.613301][T25924] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1151.621844][T25924] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1151.632839][T25924] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1151.636228][T25924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.669518][T10713] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1151.745336][T10734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4687'. [ 1153.064497][ T6730] usb 10-1: USB disconnect, device number 88 [ 1153.379076][T10756] syz.5.4689: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1153.385167][T10756] CPU: 3 UID: 0 PID: 10756 Comm: syz.5.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.385197][T10756] Tainted: [L]=SOFTLOCKUP [ 1153.385202][T10756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1153.385210][T10756] Call Trace: [ 1153.385214][T10756] [ 1153.385219][T10756] dump_stack_lvl+0x100/0x190 [ 1153.385242][T10756] warn_alloc.cold+0x95/0x1c1 [ 1153.385254][T10756] ? __pfx_warn_alloc+0x10/0x10 [ 1153.385272][T10756] ? __pfx___might_resched+0x10/0x10 [ 1153.385288][T10756] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1153.385308][T10756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1153.385322][T10756] ? __lock_acquire+0x4a5/0x2630 [ 1153.385332][T10756] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1153.385352][T10756] ? lock_acquire+0x1b1/0x370 [ 1153.385368][T10756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1153.385393][T10756] ? policy_nodemask+0xed/0x4f0 [ 1153.385419][T10756] alloc_pages_mpol+0x1fb/0x540 [ 1153.385444][T10756] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1153.385467][T10756] ? stack_depot_save_flags+0x27/0x9d0 [ 1153.385488][T10756] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1153.385506][T10756] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1153.385520][T10756] ___kmalloc_large_node+0xe5/0x120 [ 1153.385534][T10756] ? __vb2_perform_fileio+0x91e/0x1380 [ 1153.385549][T10756] __kmalloc_large_node_noprof+0x1c/0x70 [ 1153.385565][T10756] __kmalloc_noprof+0x5be/0x850 [ 1153.385580][T10756] vb2_core_allocated_buffers_storage+0x184/0x220 [ 1153.385595][T10756] vb2_core_reqbufs+0x382/0xf30 [ 1153.385612][T10756] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1153.385634][T10756] __vb2_init_fileio+0x32d/0x1000 [ 1153.385648][T10756] ? aa_file_perm+0x7f3/0x14d0 [ 1153.385665][T10756] __vb2_perform_fileio+0x91e/0x1380 [ 1153.385683][T10756] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1153.385697][T10756] ? __pfx___might_resched+0x10/0x10 [ 1153.385709][T10756] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1153.385727][T10756] ? import_ubuf+0x1b6/0x220 [ 1153.385745][T10756] vb2_fop_read+0x211/0x520 [ 1153.385760][T10756] v4l2_read+0x229/0x2c0 [ 1153.385773][T10756] ? __pfx_v4l2_read+0x10/0x10 [ 1153.385784][T10756] vfs_readv+0x5d8/0x8d0 [ 1153.385801][T10756] ? __pfx_vfs_readv+0x10/0x10 [ 1153.385823][T10756] ? __fget_files+0x21f/0x3d0 [ 1153.385840][T10756] ? do_preadv+0x1ac/0x270 [ 1153.385851][T10756] do_preadv+0x1ac/0x270 [ 1153.385863][T10756] ? __pfx_do_preadv+0x10/0x10 [ 1153.385876][T10756] ? rcu_is_watching+0x12/0xc0 [ 1153.385892][T10756] __do_fast_syscall_32+0xe7/0x970 [ 1153.385904][T10756] ? lockdep_hardirqs_on+0x78/0x100 [ 1153.385915][T10756] do_fast_syscall_32+0x32/0x70 [ 1153.385927][T10756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1153.385940][T10756] RIP: 0023:0xf704ef7c [ 1153.385950][T10756] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1153.385960][T10756] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 1153.385971][T10756] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000680 [ 1153.385978][T10756] RDX: 0000000000000001 RSI: 000000007ffffffe RDI: 0000000000000003 [ 1153.385984][T10756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1153.385991][T10756] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1153.385997][T10756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1153.386010][T10756] [ 1153.386888][T10756] Mem-Info: [ 1153.424224][T10753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.426209][T10756] active_anon:3448 inactive_anon:2404 isolated_anon:0 [ 1153.426209][T10756] active_file:4026 inactive_file:11298 isolated_file:0 [ 1153.426209][T10756] unevictable:1768 dirty:164 writeback:0 [ 1153.426209][T10756] slab_reclaimable:7754 slab_unreclaimable:79658 [ 1153.426209][T10756] mapped:27268 shmem:4642 pagetables:1902 [ 1153.426209][T10756] sec_pagetables:406 bounce:0 [ 1153.426209][T10756] kernel_misc_reclaimable:0 [ 1153.426209][T10756] free:33677 free_pcp:561 free_cma:0 [ 1153.522162][T10756] Node 0 active_anon:16kB inactive_anon:12kB active_file:0kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:1240kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1153.532606][T10756] Node 1 active_anon:14108kB inactive_anon:9004kB active_file:16384kB inactive_file:45008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:109184kB dirty:708kB writeback:0kB shmem:15112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8560kB pagetables:6324kB sec_pagetables:508kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1153.544429][T10756] Node 0 DMA free:1972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.559015][T10756] lowmem_reserve[]: 0 285 285 285 285 [ 1153.560817][T10756] Node 0 DMA32 free:38356kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:12kB active_file:0kB inactive_file:140kB unevictable:3536kB writepending:4kB zspages:1624kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:0kB free_cma:0kB [ 1153.571347][T10756] lowmem_reserve[]: 0 0 0 0 0 [ 1153.572928][T10756] Node 1 DMA32 free:95080kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14108kB inactive_anon:9004kB active_file:16384kB inactive_file:44908kB unevictable:3536kB writepending:708kB zspages:7628kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1676kB local_pcp:800kB free_cma:0kB [ 1153.583094][ T6730] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1153.586065][T10756] lowmem_reserve[]: 0 0 0 0 0 [ 1153.588104][T10756] Node 0 DMA: 15*4kB (U) 9*8kB (U) 7*16kB (U) 8*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1972kB [ 1153.592960][T10756] Node 0 DMA32: 1423*4kB (UME) 667*8kB (UME) 294*16kB (UM) 204*32kB (UME) 86*64kB (UME) 41*128kB (UM) 15*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 38388kB [ 1153.598597][T10756] Node 1 DMA32: 371*4kB (UME) 1301*8kB (UME) 5099*16kB (UM) 54*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 95204kB [ 1153.603875][T10756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.606850][T10756] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.614485][T10756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.638217][T10756] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1153.641242][T10756] 21409 total pagecache pages [ 1153.642785][T10756] 1392 pages in swap cache [ 1153.644238][T10756] Free swap = 88476kB [ 1153.645552][T10756] Total swap = 124996kB [ 1153.646884][T10756] 524155 pages RAM [ 1153.648693][T10756] 0 pages HighMem/MovableOnly [ 1153.650256][T10756] 210104 pages reserved [ 1153.651691][T10756] 0 pages cma reserved [ 1155.803657][T10787] tipc: Enabling of bearer rejected, failed to enable media [ 1155.821928][ T3980] usb 9-1: USB disconnect, device number 91 [ 1155.821933][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1155.822081][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1155.865186][T10814] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4694'. [ 1155.992815][T10813] sd 0:0:0:0: PR command failed: 1026 [ 1155.994723][T10813] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1155.996841][T10813] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1156.038481][T10813] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1156.054215][T10813] kvm: pic: non byte read [ 1156.056526][T10813] kvm: pic: level sensitive irq not supported [ 1156.056780][T10813] kvm: pic: non byte read [ 1156.197515][ T6730] usb 11-1: new high-speed USB device number 67 using dummy_hcd [ 1156.233212][T10834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1156.357319][ T6730] usb 11-1: Using ep0 maxpacket: 8 [ 1156.360368][ T6730] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1156.363053][ T6730] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.366309][ T6730] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.370442][ T6730] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1156.373351][ T6730] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.379282][ T6730] usbtmc 11-1:16.0: bulk endpoints not found [ 1156.712755][T10845] /dev/loop5: Can't open blockdev [ 1156.977330][T20924] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1157.097221][ T2285] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 1157.127663][T20924] usb 10-1: Using ep0 maxpacket: 32 [ 1157.262651][ T2285] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1157.266119][ T2285] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.270326][ T2285] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1157.273378][ T2285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.508591][T20924] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1157.513169][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.519497][T20924] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1157.521919][T10854] comedi comedi3: adq12b: I/O base address or length out of range [ 1157.526246][T20924] usb 10-1: can't read configurations, error -71 [ 1157.529218][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.568730][ T2285] usb 7-1: usb_control_msg returned -32 [ 1157.573368][ T2285] usbtmc 7-1:16.0: can't read capabilities [ 1157.603348][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 1157.603365][ T40] audit: type=1326 audit(1781549627.889:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.642723][ T40] audit: type=1326 audit(1781549627.909:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.668601][ T40] audit: type=1326 audit(1781549627.909:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.697412][ T40] audit: type=1326 audit(1781549627.909:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.709262][ T40] audit: type=1326 audit(1781549627.909:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.722690][ T40] audit: type=1326 audit(1781549627.909:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.812439][ T40] audit: type=1326 audit(1781549627.909:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.831861][ T40] audit: type=1326 audit(1781549627.909:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.838864][ T40] audit: type=1326 audit(1781549627.909:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.851027][ T40] audit: type=1326 audit(1781549627.909:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.4.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 1157.921351][T10877] Cannot find del_set index 3 as target [ 1159.079688][ T6730] usb 7-1: USB disconnect, device number 100 [ 1159.863586][ T6596] usb 11-1: USB disconnect, device number 67 [ 1160.296932][T10944] syzkaller0: entered promiscuous mode [ 1160.298846][T10944] syzkaller0: entered allmulticast mode [ 1160.488555][T10965] syz_tun: entered allmulticast mode [ 1161.000841][ T7255] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 1161.168496][ T7255] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1161.177131][ T7255] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.189348][ T7255] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1161.195451][ T7255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.457431][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.463083][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.477008][ T7255] usb 10-1: usb_control_msg returned -32 [ 1161.483468][ T7255] usbtmc 10-1:16.0: can't read capabilities [ 1161.899342][T10987] Cannot find del_set index 3 as target [ 1161.958309][T10989] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -32 [ 1163.529688][T10959] syz_tun: left allmulticast mode [ 1163.847478][T25924] usb 11-1: new full-speed USB device number 68 using dummy_hcd [ 1163.917269][ T7255] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 1163.937341][ T5893] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1164.009164][T25924] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.012914][T25924] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.018043][T25924] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.021565][T25924] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.069477][ T7255] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.072799][ T7255] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.078649][ T7255] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.082270][ T7255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.087277][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 1164.090491][ T5893] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1164.093248][ T5893] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.096709][ T5893] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.100862][ T5893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1164.103744][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.114465][ T5893] usbtmc 9-1:16.0: bulk endpoints not found [ 1164.238454][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.242289][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.250695][T25924] usb 11-1: usb_control_msg returned -32 [ 1164.253067][T25924] usbtmc 11-1:16.0: can't read capabilities [ 1164.303140][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.311357][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.320172][ T7255] usb 7-1: usb_control_msg returned -32 [ 1164.322662][ T7255] usbtmc 7-1:16.0: can't read capabilities [ 1164.605313][T18882] usb 10-1: USB disconnect, device number 92 [ 1164.613963][T11030] Cannot find del_set index 3 as target [ 1164.621241][T11030] usbtmc: can not find device for minor 0 [ 1164.673458][T11043] Cannot find del_set index 3 as target [ 1165.048660][T11046] comedi comedi3: adq12b: I/O base address or length out of range [ 1165.518034][T11051] program syz.5.4727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1166.608279][ T6596] usb 11-1: USB disconnect, device number 68 [ 1166.683028][ T5893] usb 7-1: USB disconnect, device number 101 [ 1166.944708][T11094] 0x0000fffffffd-0x00010000fffd : "" [ 1166.946429][T11094] mtd: partition "" is out of reach -- disabled [ 1166.957873][T11094] ftl_cs: FTL header not found. [ 1167.312784][T18882] usb 9-1: USB disconnect, device number 92 [ 1170.023009][T11152] syzkaller0: entered promiscuous mode [ 1170.024805][T11152] syzkaller0: entered allmulticast mode [ 1170.231700][T11162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1170.514451][T18882] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1170.530576][T11139] wg2 speed is unknown, defaulting to 1000 [ 1170.667433][T18882] usb 9-1: Using ep0 maxpacket: 8 [ 1170.670503][T18882] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.673784][T18882] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.677871][T18882] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.683057][T18882] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1170.686768][T18882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.696433][T18882] usbtmc 9-1:16.0: bulk endpoints not found [ 1170.805574][T11139] syz.2.4740: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1170.810212][T11139] CPU: 2 UID: 0 PID: 11139 Comm: syz.2.4740 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.810229][T11139] Tainted: [L]=SOFTLOCKUP [ 1170.810233][T11139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1170.810240][T11139] Call Trace: [ 1170.810244][T11139] [ 1170.810248][T11139] dump_stack_lvl+0x100/0x190 [ 1170.810270][T11139] warn_alloc.cold+0x95/0x1c1 [ 1170.810283][T11139] ? __pfx_warn_alloc+0x10/0x10 [ 1170.810294][T11139] ? find_held_lock+0x2b/0x80 [ 1170.810307][T11139] ? psi_memstall_leave+0x19c/0x360 [ 1170.810327][T11139] ? psi_memstall_leave+0x1eb/0x360 [ 1170.810342][T11139] ? lockdep_hardirqs_on+0x78/0x100 [ 1170.810355][T11139] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1170.810374][T11139] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 1170.810387][T11139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1170.810399][T11139] ? kernfs_put+0x3f/0x60 [ 1170.810413][T11139] ? internal_create_group+0x915/0xfb0 [ 1170.810435][T11139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1170.810452][T11139] ? policy_nodemask+0xed/0x4f0 [ 1170.810467][T11139] alloc_pages_mpol+0x1fb/0x540 [ 1170.810481][T11139] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1170.810498][T11139] ? ib_setup_port_attrs+0x2b4/0x600 [ 1170.810511][T11139] ___kmalloc_large_node+0xe5/0x120 [ 1170.810527][T11139] __kmalloc_large_node_noprof+0x1c/0x70 [ 1170.810543][T11139] __kmalloc_noprof+0x5be/0x850 [ 1170.810553][T11139] ? rdma_port_get_link_layer+0x57/0xe0 [ 1170.810569][T11139] ib_setup_port_attrs+0x2b4/0x600 [ 1170.810581][T11139] ? kobject_put+0xb9/0x640 [ 1170.810594][T11139] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1170.810610][T11139] ? __init_waitqueue_head+0xca/0x150 [ 1170.810626][T11139] add_one_compat_dev+0x5b3/0x820 [ 1170.810643][T11139] rdma_dev_init_net+0x30a/0x590 [ 1170.810658][T11139] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1170.810673][T11139] ? __kmalloc_noprof+0x320/0x850 [ 1170.810685][T11139] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1170.810700][T11139] ops_init+0x1e2/0x5f0 [ 1170.810716][T11139] setup_net+0x118/0x3a0 [ 1170.810730][T11139] ? __pfx_setup_net+0x10/0x10 [ 1170.810744][T11139] ? mutex_init_lockdep+0xf1/0x120 [ 1170.810757][T11139] copy_net_ns+0x46f/0x7c0 [ 1170.810773][T11139] create_new_namespaces+0x3ea/0xac0 [ 1170.810791][T11139] unshare_nsproxy_namespaces+0xf2/0x220 [ 1170.810806][T11139] ksys_unshare+0x438/0xab0 [ 1170.810822][T11139] ? __pfx_ksys_unshare+0x10/0x10 [ 1170.810842][T11139] __ia32_sys_unshare+0x30/0x40 [ 1170.810857][T11139] __do_fast_syscall_32+0xe7/0x970 [ 1170.810870][T11139] do_fast_syscall_32+0x32/0x70 [ 1170.810882][T11139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1170.810896][T11139] RIP: 0023:0xf70aef7c [ 1170.810905][T11139] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1170.810916][T11139] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1170.810927][T11139] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1170.810933][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.810939][T11139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.810950][T11139] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1170.810957][T11139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.810970][T11139] [ 1170.810974][T11139] Mem-Info: [ 1170.914843][T11139] active_anon:3834 inactive_anon:514 isolated_anon:0 [ 1170.914843][T11139] active_file:2745 inactive_file:6455 isolated_file:0 [ 1170.914843][T11139] unevictable:3815 dirty:81 writeback:0 [ 1170.914843][T11139] slab_reclaimable:7794 slab_unreclaimable:78621 [ 1170.914843][T11139] mapped:26989 shmem:4640 pagetables:1855 [ 1170.914843][T11139] sec_pagetables:406 bounce:0 [ 1170.914843][T11139] kernel_misc_reclaimable:0 [ 1170.914843][T11139] free:41451 free_pcp:428 free_cma:0 [ 1170.928779][T11139] Node 0 active_anon:16kB inactive_anon:12kB active_file:36kB inactive_file:104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8012kB pagetables:1240kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1170.938430][T11139] Node 1 active_anon:15420kB inactive_anon:2044kB active_file:10944kB inactive_file:25716kB unevictable:11724kB isolated(anon):0kB isolated(file):0kB mapped:107932kB dirty:324kB writeback:0kB shmem:15024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8368kB pagetables:6180kB sec_pagetables:508kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1170.949162][T11139] Node 0 DMA free:1972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.958192][T11139] lowmem_reserve[]: 0 285 285 285 285 [ 1170.959875][T11139] Node 0 DMA32 free:34992kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:12kB active_file:36kB inactive_file:104kB unevictable:3536kB writepending:0kB zspages:1648kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1170.970179][T11139] lowmem_reserve[]: 0 0 0 0 0 [ 1170.971621][T11139] Node 1 DMA32 free:128532kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15480kB inactive_anon:2044kB active_file:10960kB inactive_file:25716kB unevictable:11724kB writepending:324kB zspages:8060kB present:1048432kB managed:948212kB mlocked:8188kB bounce:0kB free_pcp:2416kB local_pcp:0kB free_cma:0kB [ 1170.981253][T11139] lowmem_reserve[]: 0 0 0 0 0 [ 1170.983060][T11139] Node 0 DMA: 15*4kB (U) 9*8kB (U) 7*16kB (U) 8*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1972kB [ 1170.987505][T11139] Node 0 DMA32: 1413*4kB (UME) 667*8kB (UME) 295*16kB (UM) 104*32kB (UME) 86*64kB (UME) 40*128kB (UM) 15*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35036kB [ 1170.992864][T11139] Node 1 DMA32: 526*4kB (UME) 4250*8kB (UME) 5373*16kB (UM) 181*32kB (UM) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 128312kB [ 1170.997420][T11139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1171.000261][T11139] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1171.003089][T11139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1171.005891][T11139] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1171.008708][T11139] 14978 total pagecache pages [ 1171.010210][T11139] 1123 pages in swap cache [ 1171.011586][T11139] Free swap = 88112kB [ 1171.012858][T11139] Total swap = 124996kB [ 1171.014143][T11139] 524155 pages RAM [ 1171.015314][T11139] 0 pages HighMem/MovableOnly [ 1171.016772][T11139] 210104 pages reserved [ 1171.018164][T11139] 0 pages cma reserved [ 1171.271399][T11187] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1171.562110][T11193] syzkaller0: entered promiscuous mode [ 1171.564194][T11193] syzkaller0: entered allmulticast mode [ 1171.708542][T11189] comedi comedi3: adq12b: I/O base address or length out of range [ 1172.127351][T20924] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1172.254115][T11220] pim6reg: entered allmulticast mode [ 1172.328669][T20924] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1172.332728][T20924] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.345838][T20924] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1172.349818][T20924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.561960][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.565681][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.574485][T20924] usb 7-1: usb_control_msg returned -32 [ 1172.576957][T20924] usbtmc 7-1:16.0: can't read capabilities [ 1172.931189][T11243] Cannot find del_set index 3 as target [ 1173.301488][T25924] usb 9-1: USB disconnect, device number 93 [ 1173.416282][T11261] netlink: 'syz.6.4758': attribute type 4 has an invalid length. [ 1174.149644][T11266] netlink: 'syz.5.4760': attribute type 4 has an invalid length. [ 1174.867396][T11269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1174.990943][T20924] usb 7-1: USB disconnect, device number 102 [ 1175.026693][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1175.030992][T11278] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1175.838486][T17622] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1176.779922][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1176.813479][T11315] IPv6: sit1: Disabled Multicast RS [ 1176.913501][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4770'. [ 1177.221005][T11334] netlink: 'syz.4.4771': attribute type 4 has an invalid length. [ 1177.700842][T11347] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4775'. [ 1177.834388][T11353] 0x0000fffffffd-0x00010000fffd : "" [ 1177.836022][T11353] mtd: partition "" is out of reach -- disabled [ 1177.842752][T11353] ftl_cs: FTL header not found. [ 1177.973765][T11366] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1178.862497][T11396] 0x0000fffffffd-0x00010000fffd : "" [ 1178.864250][T11396] mtd: partition "" is out of reach -- disabled [ 1178.871282][T11396] ftl_cs: FTL header not found. [ 1179.004536][T11419] 9p: Bad value for 'wfdno' [ 1179.058854][T11422] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1179.111003][T11422] bond2: entered promiscuous mode [ 1179.118000][T11422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1179.316950][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4789'. [ 1179.477837][T11464] dlm: no locking on control device [ 1179.506636][T11470] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1180.678750][ T3263] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1180.759467][T11505] 0x0000fffffffd-0x00010000fffd : "" [ 1180.761705][T11505] mtd: partition "" is out of reach -- disabled [ 1180.776496][T11505] ftl_cs: FTL header not found. [ 1180.847231][ T3263] usb 10-1: Using ep0 maxpacket: 8 [ 1180.856051][ T3263] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1180.864949][ T3263] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.874225][ T3263] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1180.882776][ T3263] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1180.886940][ T3263] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1180.892610][ T3263] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1180.896607][ T3263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.906543][ T3263] usbtmc 10-1:16.0: bulk endpoints not found qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1e4000) [ 1181.158205][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1181.161090][ T1129] ata1: failed to read log page 10h (errno=-5) [ 1181.163750][ T1129] ata1.00: NCQ disabled due to excessive errors [ 1181.168852][ T1129] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 1181.174417][ T1129] ata1.00: irq_stat 0x41000000 [ 1181.176244][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 1181.179067][ T1129] ata1.00: cmd 60/20:58:6e:1b:01/0f:00:00:00:00/40 tag 11 ncq dma 1982464 in [ 1181.179067][ T1129] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1181.185810][ T1129] ata1.00: status: { DRDY } [ 1181.188263][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 1181.189670][T11524] 0x0000fffffffd-0x00010000fffd : "" [ 1181.190858][ T1129] ata1.00: cmd 60/f0:60:8e:2a:01/09:00:00:00:00/40 tag 12 ncq dma 1302528 in [ 1181.190858][ T1129] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1181.197263][T11524] mtd: partition "" is out of reach -- disabled [ 1181.201412][ T1129] ata1.00: status: { DRDY } [ 1181.212273][ T1129] ata1.00: configured for UDMA/100 [ 1181.216758][T11524] ftl_cs: FTL header not found. [ 1181.218889][ T1129] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1181.218932][ T1129] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 1181.218963][ T1129] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 1181.218997][ T1129] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 1b 6e 00 0f 20 00 [ 1181.219018][ T1129] I/O error, dev sda, sector 72558 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1181.219243][ T1129] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1181.243299][ T1129] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 1181.245406][T11530] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.4801'. [ 1181.246335][ T1129] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 1181.253632][ T1129] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 01 2a 8e 00 09 f0 00 [ 1181.257109][ T1129] I/O error, dev sda, sector 76430 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 1181.261521][ T1129] ata1: EH complete [ 1181.318270][T11538] 8021q: VLANs not supported on syzkaller0 [ 1181.436383][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1181.802533][T11553] syzkaller0: entered promiscuous mode [ 1181.804809][T11553] syzkaller0: entered allmulticast mode [ 1182.225735][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.236792][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.323361][T11547] comedi comedi3: adq12b: I/O base address or length out of range [ 1183.422217][ T3263] usb 10-1: USB disconnect, device number 93 [ 1183.989287][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4806'. [ 1186.802446][T11575] macvlan0: entered promiscuous mode [ 1186.970274][T11597] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4811'. [ 1187.032413][T11600] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.4812'. [ 1187.044419][T11600] 8021q: VLANs not supported on syzkaller0 [ 1187.104406][T11592] 8021q: VLANs not supported on syzkaller0 [ 1187.438910][T11610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1190.317246][ T2285] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1190.488439][ T2285] usb 10-1: Using ep0 maxpacket: 8 [ 1190.508116][ T2285] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1190.511623][ T2285] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1190.515648][ T2285] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1190.536247][ T2285] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1190.540714][ T2285] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.546169][ T2285] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1190.550124][ T2285] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.855715][ T2285] usb 10-1: usb_control_msg returned -71 [ 1190.858221][ T2285] usbtmc 10-1:16.0: can't read capabilities [ 1190.878481][ T2285] usb 10-1: USB disconnect, device number 94 [ 1192.084685][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.670089][T11678] syz.4.4821: page allocation failure: order:5, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1195.675376][T11678] CPU: 3 UID: 0 PID: 11678 Comm: syz.4.4821 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.675409][T11678] Tainted: [L]=SOFTLOCKUP [ 1195.675417][T11678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1195.675429][T11678] Call Trace: [ 1195.675438][T11678] [ 1195.675446][T11678] dump_stack_lvl+0x100/0x190 [ 1195.675488][T11678] warn_alloc.cold+0x95/0x1c1 [ 1195.675517][T11678] ? __pfx_warn_alloc+0x10/0x10 [ 1195.675550][T11678] ? __pfx___might_resched+0x10/0x10 [ 1195.675577][T11678] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1195.675606][T11678] ? __lock_acquire+0x4a5/0x2630 [ 1195.675626][T11678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1195.675646][T11678] ? __lock_acquire+0x4a5/0x2630 [ 1195.675672][T11678] ? find_held_lock+0x2b/0x80 [ 1195.675695][T11678] ? is_bpf_text_address+0x8a/0x1a0 [ 1195.675720][T11678] ? is_bpf_text_address+0x8a/0x1a0 [ 1195.675744][T11678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1195.675771][T11678] ? policy_nodemask+0xed/0x4f0 [ 1195.675797][T11678] alloc_pages_mpol+0x1fb/0x540 [ 1195.675822][T11678] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1195.675844][T11678] ? arch_stack_walk+0xa6/0xf0 [ 1195.675873][T11678] ? ata_cmd_ioctl+0x394/0x6b0 [ 1195.675900][T11678] ___kmalloc_large_node+0xe5/0x120 [ 1195.675927][T11678] __kmalloc_large_node_noprof+0x1c/0x70 [ 1195.675954][T11678] __kmalloc_noprof+0x5be/0x850 [ 1195.675979][T11678] ata_cmd_ioctl+0x394/0x6b0 [ 1195.676007][T11678] ? __pfx_ata_cmd_ioctl+0x10/0x10 [ 1195.676051][T11678] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1195.676070][T11678] ? do_fast_syscall_32+0x32/0x70 [ 1195.676089][T11678] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.676131][T11678] ? bpf_lsm_capable+0x9/0x10 [ 1195.676151][T11678] ? security_capable+0x80/0x260 [ 1195.676177][T11678] ata_sas_scsi_ioctl+0x398/0x6c0 [ 1195.676197][T11678] ? __pfx_ata_sas_scsi_ioctl+0x10/0x10 [ 1195.676213][T11678] ? lock_acquire+0x1b1/0x370 [ 1195.676227][T11678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1195.676254][T11678] ? cdrom_ioctl+0x840/0x3880 [ 1195.676279][T11678] ? __pfx_ata_scsi_ioctl+0x10/0x10 [ 1195.676297][T11678] scsi_ioctl+0x637/0x17b0 [ 1195.676315][T11678] ? rpm_resume+0x7eb/0x1330 [ 1195.676338][T11678] ? __pfx_scsi_ioctl+0x10/0x10 [ 1195.676358][T11678] ? __pfx_rpm_resume+0x10/0x10 [ 1195.676379][T11678] ? do_raw_spin_lock+0x128/0x260 [ 1195.676402][T11678] ? find_held_lock+0x2b/0x80 [ 1195.676430][T11678] ? lockdep_hardirqs_on+0x78/0x100 [ 1195.676449][T11678] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1195.676511][T11678] ? __pm_runtime_resume+0xc3/0x170 [ 1195.676539][T11678] sr_block_ioctl+0x1fc/0x250 [ 1195.676569][T11678] ? __pfx_sr_block_ioctl+0x10/0x10 [ 1195.676595][T11678] blkdev_compat_ptr_ioctl+0x9f/0xe0 [ 1195.676618][T11678] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 1195.676639][T11678] compat_blkdev_ioctl+0x682/0x7b0 [ 1195.676662][T11678] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1195.676689][T11678] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1195.676711][T11678] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1195.676737][T11678] __do_fast_syscall_32+0xe7/0x970 [ 1195.676761][T11678] do_fast_syscall_32+0x32/0x70 [ 1195.676782][T11678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.676807][T11678] RIP: 0023:0xf6fdef7c [ 1195.676824][T11678] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1195.676842][T11678] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1195.676861][T11678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000031f [ 1195.676873][T11678] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1195.676884][T11678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1195.676895][T11678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1195.676906][T11678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.676931][T11678] [ 1195.676991][T11678] Mem-Info: [ 1195.822301][T11678] active_anon:483 inactive_anon:1580 isolated_anon:0 [ 1195.822301][T11678] active_file:4644 inactive_file:10289 isolated_file:0 [ 1195.822301][T11678] unevictable:1754 dirty:85 writeback:0 [ 1195.822301][T11678] slab_reclaimable:7815 slab_unreclaimable:79786 [ 1195.822301][T11678] mapped:23129 shmem:1802 pagetables:1795 [ 1195.822301][T11678] sec_pagetables:406 bounce:0 [ 1195.822301][T11678] kernel_misc_reclaimable:0 [ 1195.822301][T11678] free:35827 free_pcp:2345 free_cma:0 [ 1195.842479][T11678] Node 0 active_anon:92kB inactive_anon:12kB active_file:36kB inactive_file:1820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:3604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8008kB pagetables:1240kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1195.855931][T11678] Node 1 active_anon:1840kB inactive_anon:6308kB active_file:18640kB inactive_file:38736kB unevictable:3480kB isolated(anon):0kB isolated(file):0kB mapped:92472kB dirty:340kB writeback:0kB shmem:3604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:6040kB sec_pagetables:504kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1195.867981][T11678] Node 0 DMA free:2004kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.877093][T11678] lowmem_reserve[]: 0 285 285 285 285 [ 1195.879114][T11678] Node 0 DMA32 free:35752kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92kB inactive_anon:12kB active_file:36kB inactive_file:1820kB unevictable:3536kB writepending:0kB zspages:1736kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1195.891211][T11678] lowmem_reserve[]: 0 0 0 0 0 [ 1195.893205][T11678] Node 1 DMA32 free:113364kB boost:2048kB min:49188kB low:60972kB high:72756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1840kB inactive_anon:6308kB active_file:18640kB inactive_file:38036kB unevictable:3480kB writepending:340kB zspages:7580kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2628kB local_pcp:0kB free_cma:0kB [ 1195.903857][T11678] lowmem_reserve[]: 0 0 0 0 0 [ 1195.905355][T11678] Node 0 DMA: 15*4kB (U) 9*8kB (U) 7*16kB (U) 9*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2004kB [ 1195.910009][T11678] Node 0 DMA32: 1415*4kB (UME) 654*8kB (UME) 283*16kB (UM) 193*32kB (UME) 75*64kB (UME) 36*128kB (UM) 13*256kB (UME) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35868kB [ 1195.915171][T11678] Node 1 DMA32: 563*4kB (U) 3525*8kB (UE) 4959*16kB (UE) 77*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 112324kB [ 1195.919791][T11678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1195.922736][T11678] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1195.925742][T11678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1195.928882][T11678] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1195.932951][T11678] 18494 total pagecache pages [ 1195.934831][T11678] 1538 pages in swap cache [ 1195.936638][T11678] Free swap = 88672kB [ 1195.938135][T11678] Total swap = 124996kB [ 1195.939423][T11678] 524155 pages RAM [ 1195.940616][T11678] 0 pages HighMem/MovableOnly [ 1195.942095][T11678] 210104 pages reserved [ 1195.943388][T11678] 0 pages cma reserved [ 1196.148432][ T5893] usb 11-1: new high-speed USB device number 69 using dummy_hcd [ 1196.207312][T20924] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 1196.276360][T11715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1196.277364][ T5893] usb 11-1: device descriptor read/64, error -71 [ 1196.358492][T20924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1196.363836][T20924] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.373027][T20924] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1196.380311][T20924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.529061][ T5893] usb 11-1: new high-speed USB device number 70 using dummy_hcd [ 1196.611222][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.615020][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.666202][T20924] usb 10-1: usb_control_msg returned -32 [ 1196.668764][T20924] usbtmc 10-1:16.0: can't read capabilities [ 1196.677299][ T5893] usb 11-1: device descriptor read/64, error -71 [ 1196.788935][ T5893] usb usb11-port1: attempt power cycle [ 1197.023360][T11747] Cannot find del_set index 3 as target [ 1197.127335][ T5893] usb 11-1: new high-speed USB device number 71 using dummy_hcd [ 1197.147897][ T5893] usb 11-1: device descriptor read/8, error -71 [ 1197.387331][ T5893] usb 11-1: new high-speed USB device number 72 using dummy_hcd [ 1197.408121][ T5893] usb 11-1: device descriptor read/8, error -71 [ 1197.517710][ T5893] usb usb11-port1: unable to enumerate USB device [ 1197.783162][T11758] netlink: 'syz.4.4827': attribute type 4 has an invalid length. [ 1198.987987][ T7255] usb 10-1: USB disconnect, device number 95 [ 1199.758213][T11809] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.764122][T11809] binder: 11807:11809 ioctl 4018620d 80001000 returned -16 [ 1200.356590][T11828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1201.935535][T11851] sg_write: process 799 (syz.5.4842) changed security contexts after opening file descriptor, this is not allowed. [ 1201.997105][T11855] netlink: 'syz.5.4843': attribute type 2 has an invalid length. [ 1202.733555][T11874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1203.506921][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4849'. [ 1203.547583][ T6730] usb 11-1: new high-speed USB device number 73 using dummy_hcd [ 1203.707422][ T6730] usb 11-1: Using ep0 maxpacket: 8 [ 1203.711633][ T6730] usb 11-1: config 0 has no interfaces? [ 1203.716260][ T6730] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1203.722251][ T6730] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.725740][ T6730] usb 11-1: Product: syz [ 1203.727992][ T6730] usb 11-1: Manufacturer: syz [ 1203.730215][ T6730] usb 11-1: SerialNumber: syz [ 1203.735422][ T6730] usb 11-1: config 0 descriptor?? [ 1204.021028][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4847'. [ 1204.092479][T11904] libceph: resolve ' [ 1204.092479][T11904] -&fYǝa2i [ 1204.092479][T11904] .?&*&' (ret=-3): failed [ 1204.664725][T11926] netlink: 'syz.4.4853': attribute type 4 has an invalid length. [ 1204.847287][ T6730] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1204.998141][ T6730] usb 7-1: Using ep0 maxpacket: 8 [ 1205.006345][ T6730] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1205.022328][ T6730] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.031701][ T6730] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1205.041255][ T6730] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1205.048189][ T6730] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.061310][ T6730] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1205.068981][ T6730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.087605][ T6730] usbtmc 7-1:16.0: bulk endpoints not found [ 1205.369319][ T3980] usb 11-1: USB disconnect, device number 73 [ 1205.531190][T11943] 0x0000fffffffd-0x00010000fffd : "" [ 1205.533586][T11943] mtd: partition "" is out of reach -- disabled [ 1205.541946][T11943] ftl_cs: FTL header not found. [ 1206.508790][T11964] comedi comedi3: adq12b: I/O base address or length out of range [ 1207.336358][T17622] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1207.523740][T20924] usb 7-1: USB disconnect, device number 103 [ 1207.580522][T12019] netlink: 'syz.4.4866': attribute type 12 has an invalid length. [ 1207.583767][T12019] netlink: 'syz.4.4866': attribute type 29 has an invalid length. [ 1207.586892][T12019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1207.590683][T12019] netlink: 'syz.4.4866': attribute type 1 has an invalid length. [ 1207.593986][T12019] netlink: 47 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1207.600087][T12019] netlink: 'syz.4.4866': attribute type 12 has an invalid length. [ 1207.602880][T12019] netlink: 'syz.4.4866': attribute type 29 has an invalid length. [ 1207.605432][T12019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1207.610704][T12019] netlink: 'syz.4.4866': attribute type 1 has an invalid length. [ 1207.616086][T12019] netlink: 47 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1208.087350][T25924] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1208.314581][T12049] wg2 speed is unknown, defaulting to 1000 [ 1208.374922][T12049] syz.5.4872: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1208.379865][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.5.4872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.379883][T12049] Tainted: [L]=SOFTLOCKUP [ 1208.379888][T12049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1208.379894][T12049] Call Trace: [ 1208.379898][T12049] [ 1208.379903][T12049] dump_stack_lvl+0x100/0x190 [ 1208.379926][T12049] warn_alloc.cold+0x95/0x1c1 [ 1208.379938][T12049] ? __pfx_warn_alloc+0x10/0x10 [ 1208.379956][T12049] ? __pfx___might_resched+0x10/0x10 [ 1208.379972][T12049] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1208.379991][T12049] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 1208.380005][T12049] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1208.380016][T12049] ? kernfs_put+0x3f/0x60 [ 1208.380030][T12049] ? internal_create_group+0x915/0xfb0 [ 1208.380053][T12049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1208.380070][T12049] ? policy_nodemask+0xed/0x4f0 [ 1208.380085][T12049] alloc_pages_mpol+0x1fb/0x540 [ 1208.380100][T12049] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1208.380117][T12049] ? ib_setup_port_attrs+0x2b4/0x600 [ 1208.380130][T12049] ___kmalloc_large_node+0xe5/0x120 [ 1208.380146][T12049] __kmalloc_large_node_noprof+0x1c/0x70 [ 1208.380161][T12049] __kmalloc_noprof+0x5be/0x850 [ 1208.380172][T12049] ? rdma_port_get_link_layer+0x57/0xe0 [ 1208.380188][T12049] ib_setup_port_attrs+0x2b4/0x600 [ 1208.380200][T12049] ? kobject_put+0xb9/0x640 [ 1208.380214][T12049] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1208.380230][T12049] ? __init_waitqueue_head+0xca/0x150 [ 1208.380247][T12049] add_one_compat_dev+0x5b3/0x820 [ 1208.380264][T12049] rdma_dev_init_net+0x30a/0x590 [ 1208.380279][T12049] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1208.380327][T12049] ? __kmalloc_noprof+0x320/0x850 [ 1208.380340][T12049] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1208.380355][T12049] ops_init+0x1e2/0x5f0 [ 1208.380371][T12049] setup_net+0x118/0x3a0 [ 1208.380385][T12049] ? __pfx_setup_net+0x10/0x10 [ 1208.380399][T12049] ? mutex_init_lockdep+0xf1/0x120 [ 1208.380413][T12049] copy_net_ns+0x46f/0x7c0 [ 1208.380429][T12049] create_new_namespaces+0x3ea/0xac0 [ 1208.380450][T12049] copy_namespaces+0x468/0x5e0 [ 1208.380471][T12049] copy_process+0x3833/0x8050 [ 1208.380490][T12049] ? __futex_wait+0x256/0x300 [ 1208.380526][T12049] ? __pfx_copy_process+0x10/0x10 [ 1208.380550][T12049] ? futex_hash+0x141/0x370 [ 1208.380576][T12049] kernel_clone+0x176/0x9e0 [ 1208.380598][T12049] ? __pfx_futex_wait+0x10/0x10 [ 1208.380615][T12049] ? __pfx_kernel_clone+0x10/0x10 [ 1208.380637][T12049] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1208.380655][T12049] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1208.380672][T12049] ? __fget_files+0x21f/0x3d0 [ 1208.380694][T12049] ? rcu_is_watching+0x12/0xc0 [ 1208.380708][T12049] __do_fast_syscall_32+0xe7/0x970 [ 1208.380722][T12049] do_fast_syscall_32+0x32/0x70 [ 1208.380734][T12049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1208.380748][T12049] RIP: 0023:0xf704ef7c [ 1208.380758][T12049] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1208.380768][T12049] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1208.380780][T12049] RAX: ffffffffffffffda RBX: 0000000040800000 RCX: 00000000800002d0 [ 1208.380792][T12049] RDX: 0000000080000340 RSI: 0000000080000380 RDI: 00000000800003c0 [ 1208.380799][T12049] RBP: 00000000f543d5ec R08: 0000000000000000 R09: 0000000000000000 [ 1208.380805][T12049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1208.380812][T12049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.380825][T12049] [ 1208.380830][T12049] Mem-Info: [ 1208.498283][T12049] active_anon:7215 inactive_anon:5384 isolated_anon:0 [ 1208.498283][T12049] active_file:3613 inactive_file:12760 isolated_file:0 [ 1208.498283][T12049] unevictable:1768 dirty:102 writeback:0 [ 1208.498283][T12049] slab_reclaimable:7945 slab_unreclaimable:78998 [ 1208.498283][T12049] mapped:32023 shmem:12592 pagetables:1890 [ 1208.498283][T12049] sec_pagetables:407 bounce:0 [ 1208.498283][T12049] kernel_misc_reclaimable:0 [ 1208.498283][T12049] free:23834 free_pcp:3007 free_cma:0 [ 1208.512605][T12049] Node 0 active_anon:64kB inactive_anon:12kB active_file:36kB inactive_file:104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8064kB pagetables:1240kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.523134][T12049] Node 1 active_anon:29596kB inactive_anon:21224kB active_file:17716kB inactive_file:50936kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128868kB dirty:408kB writeback:0kB shmem:47632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9144kB pagetables:6320kB sec_pagetables:508kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.534333][T12049] Node 0 DMA free:2036kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.546270][T12049] lowmem_reserve[]: 0 285 285 285 285 [ 1208.548542][T12049] Node 0 DMA32 free:37148kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:12kB active_file:36kB inactive_file:104kB unevictable:3536kB writepending:0kB zspages:1732kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.561970][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 1208.566538][T12049] Node 1 DMA32 free:54908kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33696kB inactive_anon:20724kB active_file:17716kB inactive_file:50936kB unevictable:3536kB writepending:408kB zspages:7628kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6444kB local_pcp:948kB free_cma:0kB [ 1208.580255][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 1208.582430][T12049] Node 0 DMA: 21*4kB (U) 10*8kB (U) 7*16kB (U) 9*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2036kB [ 1208.588479][T12049] Node 0 DMA32: 1409*4kB (UME) 673*8kB (UME) 305*16kB (UM) 187*32kB (UME) 85*64kB (UME) 40*128kB (UM) 14*256kB (UME) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 37052kB [ 1208.595533][T12049] Node 1 DMA32: 0*4kB 1*8kB (U) 3185*16kB (U) 28*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51864kB [ 1208.601383][T12049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.605368][T12049] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1208.610027][T12049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.613227][T12049] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1208.616016][T12049] 33263 total pagecache pages [ 1208.617817][T12049] 1181 pages in swap cache [ 1208.619288][T12049] Free swap = 88620kB [ 1208.621232][T12049] Total swap = 124996kB [ 1208.622922][T12049] 524155 pages RAM [ 1208.624476][T12049] 0 pages HighMem/MovableOnly [ 1208.626324][T12049] 210104 pages reserved [ 1208.628863][T12049] 0 pages cma reserved [ 1209.177700][T25924] usb 9-1: Using ep0 maxpacket: 8 [ 1209.186232][T25924] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1209.190128][T25924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.193474][T25924] usb 9-1: Product: syz [ 1209.195202][T25924] usb 9-1: Manufacturer: syz [ 1209.197021][T25924] usb 9-1: SerialNumber: syz [ 1209.389868][T12072] binder: 12071:12072 ioctl c00c620f 80000000 returned -22 [ 1209.828073][T12088] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1209.833532][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1210.150093][T12104] tipc: Enabled bearer , priority 0 [ 1210.160475][T12104] syzkaller0: entered promiscuous mode [ 1210.170669][T12104] syzkaller0: entered allmulticast mode [ 1210.220374][T12104] tipc: Resetting bearer [ 1210.250095][T12075] netlink: del zone limit has 8 unknown bytes [ 1210.264646][T12102] tipc: Resetting bearer [ 1210.393883][T12102] tipc: Disabling bearer [ 1212.250013][T25924] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1212.302254][ T3980] usb 10-1: new full-speed USB device number 96 using dummy_hcd [ 1212.367910][T25924] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1212.378446][T25924] usb 9-1: USB disconnect, device number 94 [ 1212.477567][ T3980] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.483854][ T3980] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.496686][ T3980] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1212.503910][ T3980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.687085][T21795] udevd[21795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.751245][T12175] syzkaller0: entered promiscuous mode [ 1212.754136][T12175] syzkaller0: entered allmulticast mode [ 1212.809256][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.813617][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.855468][T12171] atomic_op ffff88805e9f9198 conn xmit_atomic 0000000000000000 [ 1212.877855][ T3980] usb 10-1: usb_control_msg returned -32 [ 1212.879836][ T3980] usbtmc 10-1:16.0: can't read capabilities [ 1213.350995][T12180] Cannot find del_set index 3 as target [ 1215.430342][T12203] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.4890'. [ 1216.561623][T25924] usb 10-1: USB disconnect, device number 96 [ 1217.015787][T17622] Bluetooth: hci2: unexpected event for opcode 0x0c66 [ 1217.431293][T12251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1217.769034][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1217.844500][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4899'. [ 1217.926200][T12269] 8021q: VLANs not supported on syzkaller0 [ 1218.117490][ T3980] usb 11-1: new full-speed USB device number 74 using dummy_hcd [ 1218.137818][ T6730] usb 9-1: new full-speed USB device number 95 using dummy_hcd [ 1218.272685][ T3980] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.275797][ T3980] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1218.280961][ T3980] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1218.284645][ T3980] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.529472][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.545360][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.565779][ T3980] usb 11-1: usb_control_msg returned -32 [ 1218.577737][ T3980] usbtmc 11-1:16.0: can't read capabilities [ 1218.925221][T12307] Cannot find del_set index 3 as target [ 1219.201022][ T6730] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1219.364830][T12311] netlink: 'syz.2.4903': attribute type 4 has an invalid length. [ 1219.652202][ T6730] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.656221][ T6730] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1219.667332][ T6730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.898196][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.905247][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.911964][ T6730] usb 9-1: usb_control_msg returned -32 [ 1219.914715][ T6730] usbtmc 9-1:16.0: can't read capabilities [ 1219.977328][T18882] usb 10-1: new low-speed USB device number 97 using dummy_hcd [ 1220.057328][T21795] udevd[21795]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 1220.145508][T18882] usb 10-1: no configurations [ 1220.149990][T18882] usb 10-1: can't read configurations, error -22 [ 1220.206040][ C2] hpet_rtc_timer_reinit: 253 callbacks suppressed [ 1220.206053][ C2] hpet: Lost 1 RTC interrupts [ 1220.271544][T12337] Cannot find del_set index 3 as target [ 1220.297408][T18882] usb 10-1: new low-speed USB device number 98 using dummy_hcd [ 1220.468136][T18882] usb 10-1: no configurations [ 1220.469841][T18882] usb 10-1: can't read configurations, error -22 [ 1220.477475][T18882] usb usb10-port1: attempt power cycle [ 1220.590965][T11786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.702801][T11786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.731189][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1220.735240][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1220.741930][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1220.749095][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1220.752674][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1220.800078][T11786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.867676][T18882] usb 10-1: new low-speed USB device number 99 using dummy_hcd [ 1220.901830][T11786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.916514][T18882] usb 10-1: no configurations [ 1220.920597][T18882] usb 10-1: can't read configurations, error -22 [ 1221.047037][T11786] bridge_slave_1: left allmulticast mode [ 1221.051782][T11786] bridge_slave_1: left promiscuous mode [ 1221.055908][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.059409][T18882] usb 10-1: new low-speed USB device number 100 using dummy_hcd [ 1221.067916][T11786] bridge_slave_0: left allmulticast mode [ 1221.070361][T11786] bridge_slave_0: left promiscuous mode [ 1221.072846][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.078801][T18882] usb 10-1: no configurations [ 1221.080878][T18882] usb 10-1: can't read configurations, error -22 [ 1221.084001][T18882] usb usb10-port1: unable to enumerate USB device [ 1221.092131][T11786] bond_slave_0: left promiscuous mode [ 1221.095862][T11786] bond_slave_1: left promiscuous mode [ 1221.355303][T11786] bond0 (unregistering): left allmulticast mode [ 1221.357580][T11786] bond_slave_0: left allmulticast mode [ 1221.359385][T11786] bond_slave_1: left allmulticast mode [ 1221.363547][T11786] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1221.366190][T11786] macvlan2 (unregistering): left allmulticast mode [ 1221.372927][T11786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.377272][T11786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.380936][T11786] bond0 (unregistering): Released all slaves [ 1221.385732][T11786] bond1 (unregistering): Released all slaves [ 1221.395874][T11786] bond2 (unregistering): Released all slaves [ 1221.407515][ T5893] usb 9-1: USB disconnect, device number 95 [ 1221.451688][T12340] wg2 speed is unknown, defaulting to 1000 [ 1221.462217][T12379] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1221.540629][T11786] tipc: Left network mode [ 1221.543264][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4911'. [ 1221.593937][T20924] usb 11-1: USB disconnect, device number 74 [ 1221.736383][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4912'. [ 1221.857607][T12414] bridge_slave_1: left allmulticast mode [ 1221.860017][T12414] bridge_slave_1: left promiscuous mode [ 1221.862438][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.867220][T12414] bridge_slave_0: left allmulticast mode [ 1221.869411][T12414] bridge_slave_0: left promiscuous mode [ 1221.871862][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.006017][ T5457] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1222.415960][ T5457] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1222.455561][T12472] 8021q: VLANs not supported on syzkaller0 [ 1222.837839][T17622] Bluetooth: hci1: command tx timeout [ 1222.891827][T11786] hsr_slave_0: left promiscuous mode [ 1222.894145][T11786] hsr_slave_1: left promiscuous mode [ 1222.896140][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.903962][T11786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.906831][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.912535][T11786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.923209][T11786] veth1_macvtap: left promiscuous mode [ 1222.925052][T11786] veth0_macvtap: left promiscuous mode [ 1222.930469][T11786] veth1_vlan: left promiscuous mode [ 1222.932251][T11786] veth0_vlan: left promiscuous mode [ 1223.287353][T20924] usb 9-1: new full-speed USB device number 96 using dummy_hcd [ 1223.439239][T20924] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1223.442639][T20924] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.447871][T20924] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1223.451618][T20924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.721843][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.725290][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.729968][T20924] usb 9-1: usb_control_msg returned -32 [ 1223.731902][T20924] usbtmc 9-1:16.0: can't read capabilities [ 1223.937349][T11786] team0 (unregistering): Port device team_slave_1 removed [ 1223.945050][T11786] team0 (unregistering): Port device team_slave_0 removed [ 1224.012643][ T5457] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1224.050635][T12340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.055659][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.059433][T12340] bridge_slave_0: entered allmulticast mode [ 1224.063281][T12340] bridge_slave_0: entered promiscuous mode [ 1224.069346][T12340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.072398][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.075480][T12340] bridge_slave_1: entered allmulticast mode [ 1224.081667][T12340] bridge_slave_1: entered promiscuous mode [ 1224.090024][T12567] Cannot find del_set index 3 as target [ 1224.127340][T20924] usb 11-1: new full-speed USB device number 75 using dummy_hcd [ 1224.172911][T12340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.191171][T12340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.266951][T12340] team0: Port device team_slave_0 added [ 1224.274519][T12340] team0: Port device team_slave_1 added [ 1224.279179][T20924] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1224.286593][T20924] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.300892][T20924] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1224.327332][T20924] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.436297][ T5457] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1224.438991][T12635] aD: renamed from lo [ 1224.497644][T12340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.505348][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.517773][T12340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.523769][T12340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.526710][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.537731][T12340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.567028][T12591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.571194][T12591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.574947][T20924] usb 11-1: usb_control_msg returned -32 [ 1224.576865][T20924] usbtmc 11-1:16.0: can't read capabilities [ 1224.669756][T12340] hsr_slave_0: entered promiscuous mode [ 1224.672903][T12340] hsr_slave_1: entered promiscuous mode [ 1224.676397][T12340] debugfs: 'hsr0' already exists in 'hsr' [ 1224.679552][T12340] Cannot create hsr debugfs directory [ 1224.693105][T11786] IPVS: stop unused estimator thread 0... [ 1224.889324][T12753] netlink: 'syz.5.4921': attribute type 4 has an invalid length. [ 1224.918185][T17622] Bluetooth: hci1: command tx timeout [ 1224.969493][T12340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1224.972898][T12793] Cannot find del_set index 3 as target [ 1224.977827][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.981747][T12340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1224.994393][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.998041][T12340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1225.004093][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1225.011632][T12340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1225.019147][T12340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.064426][T12340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.067935][T12340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.073367][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.139339][T12340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.150745][T12340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.179244][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.182397][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.208844][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.211904][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.246977][T12340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1225.250681][T12340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1225.801034][T12340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.010847][T12340] veth0_vlan: entered promiscuous mode [ 1226.022792][T12340] veth1_vlan: entered promiscuous mode [ 1226.044250][T12340] veth0_macvtap: entered promiscuous mode [ 1226.050604][T12340] veth1_macvtap: entered promiscuous mode [ 1226.079577][T12340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.084216][ T6596] usb 9-1: USB disconnect, device number 96 [ 1226.108891][T12340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.133410][T32706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.136798][T32706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.143125][T32706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.148136][T32706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.242981][ T8323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.245955][ T8323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.279276][ T8323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.282601][ T8323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.935184][ T3980] usb 11-1: USB disconnect, device number 75 [ 1226.987434][T17622] Bluetooth: hci1: command tx timeout [ 1227.068374][T12925] syzkaller0: entered promiscuous mode [ 1227.072799][T12925] syzkaller0: entered allmulticast mode [ 1227.190374][T12934] 0x0000fffffffd-0x00010000fffd : "" [ 1227.192133][T12934] mtd: partition "" is out of reach -- disabled [ 1227.200534][T12934] ftl_cs: FTL header not found. [ 1227.767312][ T6730] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1227.917330][ T6730] usb 9-1: Using ep0 maxpacket: 8 [ 1227.922513][ T6730] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.926044][ T6730] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.930453][ T6730] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.935705][ T6730] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1227.939974][ T6730] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1227.944350][ T6730] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.949875][ T6730] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.953752][ T6730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.963965][ T6730] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 1228.325255][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1228.497533][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 1228.501810][ T10] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 1228.505297][ T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1228.511138][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1228.515060][ T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.519517][ T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.524988][ T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1228.528803][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.736584][ T10] usb 12-1: GET_CAPABILITIES returned 0 [ 1228.739444][ T10] usbtmc 12-1:16.0: can't read capabilities [ 1228.849711][T12982] comedi comedi3: adq12b: I/O base address or length out of range [ 1228.856769][ T10] usb 12-1: USB disconnect, device number 2 [ 1228.983326][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4934'. [ 1229.067368][T17622] Bluetooth: hci1: command tx timeout [ 1231.106461][ T6730] usb 9-1: USB disconnect, device number 97 [ 1231.194520][T13030] netlink: 'syz.4.4938': attribute type 1 has an invalid length. [ 1231.220996][T13030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1231.227304][ T10] usb 11-1: new full-speed USB device number 76 using dummy_hcd [ 1231.380136][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.383911][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.388871][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1231.392090][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.670600][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.680666][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.688383][ T10] usb 11-1: usb_control_msg returned -32 [ 1231.691014][ T10] usbtmc 11-1:16.0: can't read capabilities [ 1232.042495][T13010] Cannot find del_set index 3 as target [ 1232.248651][ T2285] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1232.281877][T13124] syzkaller0: entered promiscuous mode [ 1232.284236][T13124] syzkaller0: entered allmulticast mode [ 1232.397246][ T2285] usb 10-1: Using ep0 maxpacket: 16 [ 1232.401588][ T2285] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1232.408021][ T2285] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1232.412612][ T2285] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.415997][ T2285] usb 10-1: Product: syz [ 1232.417865][ T2285] usb 10-1: Manufacturer: syz [ 1232.419843][ T2285] usb 10-1: SerialNumber: syz [ 1232.426078][ T2285] usb 10-1: config 0 descriptor?? [ 1232.433684][ T2285] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1232.437587][ T2285] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1232.466462][T13133] netlink: 'syz.4.4946': attribute type 10 has an invalid length. [ 1233.145329][ T2285] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1233.687222][ T2285] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1233.708600][ T2285] em28xx 10-1:0.0: board has no eeprom [ 1234.013280][ T3263] usb 11-1: USB disconnect, device number 76 [ 1235.083731][T13106] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1235.147263][ T2285] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1235.150382][ T2285] em28xx 10-1:0.0: dvb set to bulk mode. [ 1235.195886][ T3263] em28xx 10-1:0.0: Binding DVB extension [ 1235.222270][ C2] hpet: Lost 1 RTC interrupts [ 1235.250597][ T2285] usb 10-1: USB disconnect, device number 101 [ 1235.254418][ T2285] em28xx 10-1:0.0: Disconnecting em28xx [ 1235.268621][ T3263] kworker/2:2: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1235.275958][ T3263] CPU: 2 UID: 0 PID: 3263 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.275985][ T3263] Tainted: [L]=SOFTLOCKUP [ 1235.275989][ T3263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1235.275997][ T3263] Workqueue: events request_module_async [ 1235.276016][ T3263] Call Trace: [ 1235.276021][ T3263] [ 1235.276027][ T3263] dump_stack_lvl+0x100/0x190 [ 1235.276048][ T3263] warn_alloc.cold+0x95/0x1c1 [ 1235.276059][ T3263] ? __pfx_warn_alloc+0x10/0x10 [ 1235.276077][ T3263] ? __pfx___might_resched+0x10/0x10 [ 1235.276092][ T3263] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1235.276108][ T3263] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1235.276128][ T3263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1235.276140][ T3263] ? usb_alloc_urb+0x66/0xa0 [ 1235.276150][ T3263] ? kasan_save_stack+0x30/0x50 [ 1235.276161][ T3263] ? __kasan_kmalloc+0xaa/0xb0 [ 1235.276172][ T3263] ? usb_alloc_urb+0x66/0xa0 [ 1235.276181][ T3263] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 1235.276193][ T3263] ? em28xx_dvb_init.cold+0x1f2/0x7391 [ 1235.276211][ T3263] ? request_module_async+0x61/0x80 [ 1235.276224][ T3263] ? process_one_work+0xa0e/0x1980 [ 1235.276234][ T3263] ? worker_thread+0x5ef/0xe50 [ 1235.276249][ T3263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1235.276265][ T3263] ? policy_nodemask+0xed/0x4f0 [ 1235.276280][ T3263] alloc_pages_mpol+0x1fb/0x540 [ 1235.276295][ T3263] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1235.276312][ T3263] ? em28xx_alloc_urbs+0x655/0xf60 [ 1235.276324][ T3263] ___kmalloc_large_node+0xe5/0x120 [ 1235.276339][ T3263] __kmalloc_large_node_noprof+0x1c/0x70 [ 1235.276355][ T3263] __kmalloc_noprof+0x5be/0x850 [ 1235.276365][ T3263] ? __asan_memset+0x23/0x50 [ 1235.276377][ T3263] em28xx_alloc_urbs+0x655/0xf60 [ 1235.276394][ T3263] ? kasan_save_track+0x14/0x30 [ 1235.276406][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.276417][ T3263] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1235.276436][ T3263] ? lock_acquire+0x1b1/0x370 [ 1235.276447][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.276459][ T3263] ? rcu_is_watching+0x12/0xc0 [ 1235.276477][ T3263] ? trace_contention_end+0x122/0x170 [ 1235.276489][ T3263] ? __mutex_lock+0x26d/0x1b10 [ 1235.276500][ T3263] ? em28xx_init_extension+0x2f/0x200 [ 1235.276514][ T3263] ? irqentry_exit+0x24d/0x970 [ 1235.276525][ T3263] ? em28xx_audio_init+0x132/0x1a0 [ 1235.276535][ T3263] ? __pfx___mutex_lock+0x10/0x10 [ 1235.276547][ T3263] ? em28xx_v4l2_init+0x89/0xb0 [ 1235.276564][ T3263] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1235.276580][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.276591][ T3263] em28xx_init_extension+0x13a/0x200 [ 1235.276606][ T3263] request_module_async+0x61/0x80 [ 1235.276620][ T3263] process_one_work+0xa0e/0x1980 [ 1235.276636][ T3263] ? __pfx_process_one_work+0x10/0x10 [ 1235.276651][ T3263] ? __pfx_request_module_async+0x10/0x10 [ 1235.276667][ T3263] worker_thread+0x5ef/0xe50 [ 1235.276681][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.276692][ T3263] ? kthread+0x13a/0x450 [ 1235.276700][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.276710][ T3263] kthread+0x370/0x450 [ 1235.276719][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.276729][ T3263] ret_from_fork+0x72b/0xd50 [ 1235.276741][ T3263] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.276753][ T3263] ? __switch_to+0x800/0x1100 [ 1235.276767][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.276777][ T3263] ret_from_fork_asm+0x1a/0x30 [ 1235.276797][ T3263] [ 1235.276801][ T3263] Mem-Info: [ 1235.393899][ T3263] active_anon:658 inactive_anon:10109 isolated_anon:0 [ 1235.393899][ T3263] active_file:6822 inactive_file:6217 isolated_file:0 [ 1235.393899][ T3263] unevictable:1768 dirty:58 writeback:0 [ 1235.393899][ T3263] slab_reclaimable:8053 slab_unreclaimable:81851 [ 1235.393899][ T3263] mapped:26397 shmem:9965 pagetables:1841 [ 1235.393899][ T3263] sec_pagetables:408 bounce:0 [ 1235.393899][ T3263] kernel_misc_reclaimable:0 [ 1235.393899][ T3263] free:24511 free_pcp:99 free_cma:0 [ 1235.410982][ T3263] Node 0 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7980kB pagetables:1240kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1235.423080][ T3263] Node 1 active_anon:1700kB inactive_anon:41348kB active_file:14400kB inactive_file:36616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105464kB dirty:232kB writeback:0kB shmem:36324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8880kB pagetables:6124kB sec_pagetables:512kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1235.436783][ T3263] Node 0 DMA free:2036kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.447194][ T3263] lowmem_reserve[]: 0 285 285 285 285 [ 1235.448871][ T3263] Node 0 DMA32 free:31836kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:2048KB free_highatomic:732KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:3536kB writepending:0kB zspages:1520kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1235.460169][ T3263] lowmem_reserve[]: 0 0 0 0 0 [ 1235.461721][ T3263] Node 1 DMA32 free:64048kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1700kB inactive_anon:41148kB active_file:14400kB inactive_file:36616kB unevictable:3536kB writepending:232kB zspages:7280kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1084kB local_pcp:224kB free_cma:0kB [ 1235.475262][ T3263] lowmem_reserve[]: 0 0 0 0 0 [ 1235.477021][ T3263] Node 0 DMA: 21*4kB (U) 10*8kB (U) 7*16kB (U) 9*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2036kB [ 1235.482359][ T3263] Node 0 DMA32: 1326*4kB (UMEH) 662*8kB (UMEH) 294*16kB (UMH) 82*32kB (UMEH) 58*64kB (UMEH) 38*128kB (UMH) 14*256kB (UMEH) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 31624kB [ 1235.489649][ T3263] Node 1 DMA32: 134*4kB (M) 1063*8kB (UM) 3382*16kB (UM) 29*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64080kB [ 1235.495062][ T3263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.498925][ T3263] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1235.502999][ T3263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.506509][ T3263] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1235.510290][ T3263] 24114 total pagecache pages [ 1235.512062][ T3263] 1514 pages in swap cache [ 1235.513785][ T3263] Free swap = 88580kB [ 1235.515285][ T3263] Total swap = 124996kB [ 1235.516718][ T3263] 524155 pages RAM [ 1235.519231][ T3263] 0 pages HighMem/MovableOnly [ 1235.521108][ T3263] 210104 pages reserved [ 1235.522596][ T3263] 0 pages cma reserved [ 1235.525059][ T3263] ------------[ cut here ]------------ [ 1235.526743][ T3263] !PageLargeKmalloc(page) [ 1235.526750][ T3263] WARNING: mm/slub.c:6476 at free_large_kmalloc+0xbf/0x100, CPU#2: kworker/2:2/3263 [ 1235.531055][ T3263] Modules linked in: [ 1235.534303][ T3263] CPU: 2 UID: 0 PID: 3263 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.538870][ T3263] Tainted: [L]=SOFTLOCKUP [ 1235.540547][ T3263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1235.544688][ T3263] Workqueue: events request_module_async [ 1235.546708][ T3263] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1235.549668][ T3263] Code: 28 90 0f 0b 90 80 3d 9e 3c 57 0e 00 0f 84 57 74 bb fe 48 8b 74 24 28 48 89 ef e8 4c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e4 96 f0 8d 5b 5d 41 5c 41 [ 1235.556304][ T3263] RSP: 0018:ffffc900264df810 EFLAGS: 00010293 [ 1235.558230][ T3263] RAX: 00000000000000f0 RBX: ffffea00014b4c00 RCX: 000000000000002e [ 1235.560668][ T3263] RDX: 0000000000000000 RSI: ffff888052d30000 RDI: ffffea00014b4c00 [ 1235.563088][ T3263] RBP: ffff888052d30000 R08: 0000000000000005 R09: 0000000000000000 [ 1235.565849][ T3263] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff8880549a5e98 [ 1235.568462][ T3263] R13: ffff888055c27900 R14: dffffc0000000000 R15: ffffed100a934bd5 [ 1235.570927][ T3263] FS: 0000000000000000(0000) GS:ffff888097383000(0000) knlGS:0000000000000000 [ 1235.573482][ T3263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1235.575441][ T3263] CR2: 00000000f50d1d04 CR3: 0000000023370000 CR4: 0000000000352ef0 [ 1235.578036][ T3263] Call Trace: [ 1235.579098][ T3263] [ 1235.580051][ T3263] usb_free_urb.part.0+0xf8/0x110 [ 1235.582113][ T3263] usb_free_urb+0x1f/0x30 [ 1235.583472][ T3263] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1235.585125][ T3263] em28xx_alloc_urbs+0xb43/0xf60 [ 1235.586664][ T3263] ? kasan_save_track+0x14/0x30 [ 1235.588326][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.589977][ T3263] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1235.591616][ T3263] ? lock_acquire+0x1b1/0x370 [ 1235.593556][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.595295][ T3263] ? rcu_is_watching+0x12/0xc0 SYZFAIL: failed to recv rpc [ 1235.597393][ T3263] ? trace_contention_end+0x122/0x170 [ 1235.599618][ T3263] ? __mutex_lock+0x26d/0x1b10 [ 1235.601152][ T3263] ? em28xx_init_extension+0x2f/0x200 [ 1235.602810][ T3263] ? irqentry_exit+0x24d/0x970 [ 1235.604305][ T3263] ? em28xx_audio_init+0x132/0x1a0 [ 1235.605907][ T3263] ? __pfx___mutex_lock+0x10/0x10 [ 1235.607659][ T3263] ? em28xx_v4l2_init+0x89/0xb0 [ 1235.609209][ T3263] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1235.610882][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.612919][ T3263] em28xx_init_extension+0x13a/0x200 [ 1235.614901][ T3263] request_module_async+0x61/0x80 [ 1235.616790][ T3263] process_one_work+0xa0e/0x1980 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1235.618516][ T3263] ? __pfx_process_one_work+0x10/0x10 [ 1235.620607][ T3263] ? __pfx_request_module_async+0x10/0x10 [ 1235.622422][ T3263] worker_thread+0x5ef/0xe50 [ 1235.623991][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.625730][ T3263] ? kthread+0x13a/0x450 [ 1235.628155][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.630264][ T3263] kthread+0x370/0x450 [ 1235.631983][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.633614][ T3263] ret_from_fork+0x72b/0xd50 [ 1235.635185][ T3263] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.636796][ T3263] ? __switch_to+0x800/0x1100 [ 1235.638409][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.640197][ T3263] ret_from_fork_asm+0x1a/0x30 [ 1235.641695][ T3263] [ 1235.643687][ T3263] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1235.646082][ T3263] CPU: 2 UID: 0 PID: 3263 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.650036][ T3263] Tainted: [L]=SOFTLOCKUP [ 1235.651727][ T3263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1235.655299][ T3263] Workqueue: events request_module_async [ 1235.657039][ T3263] Call Trace: [ 1235.658053][ T3263] [ 1235.658988][ T3263] dump_stack_lvl+0x100/0x190 [ 1235.660596][ T3263] vpanic+0x552/0x970 [ 1235.661823][ T3263] ? __pfx_vpanic+0x10/0x10 [ 1235.663268][ T3263] panic+0xd1/0xe0 [ 1235.664428][ T3263] ? __pfx_panic+0x10/0x10 [ 1235.666016][ T3263] ? check_panic_on_warn+0x1f/0x90 [ 1235.668079][ T3263] check_panic_on_warn.cold+0x19/0x34 [ 1235.670160][ T3263] ? free_large_kmalloc+0xbf/0x100 [ 1235.672168][ T3263] __warn.cold+0x191/0x328 [ 1235.673968][ T3263] __report_bug+0x296/0x3d0 [ 1235.675606][ T3263] ? free_large_kmalloc+0xbf/0x100 [ 1235.677450][ T3263] ? __pfx___report_bug+0x10/0x10 [ 1235.679438][ T3263] ? lock_acquire+0x1b1/0x370 [ 1235.681319][ T3263] ? find_held_lock+0x2b/0x80 [ 1235.683262][ T3263] ? __free_one_page+0x109/0x1090 [ 1235.685325][ T3263] ? __free_one_page+0x109/0x1090 [ 1235.687378][ T3263] ? free_large_kmalloc+0xbf/0x100 [ 1235.689377][ T3263] report_bug+0xb2/0x220 [ 1235.691082][ T3263] ? free_large_kmalloc+0xbf/0x100 [ 1235.693134][ T3263] handle_bug+0x16a/0x2a0 [ 1235.694711][ T3263] exc_invalid_op+0x17/0x50 [ 1235.696551][ T3263] asm_exc_invalid_op+0x1a/0x20 [ 1235.698433][ T3263] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1235.700488][ T3263] Code: 28 90 0f 0b 90 80 3d 9e 3c 57 0e 00 0f 84 57 74 bb fe 48 8b 74 24 28 48 89 ef e8 4c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e4 96 f0 8d 5b 5d 41 5c 41 [ 1235.707603][ T3263] RSP: 0018:ffffc900264df810 EFLAGS: 00010293 [ 1235.710027][ T3263] RAX: 00000000000000f0 RBX: ffffea00014b4c00 RCX: 000000000000002e [ 1235.712698][ T3263] RDX: 0000000000000000 RSI: ffff888052d30000 RDI: ffffea00014b4c00 [ 1235.715690][ T3263] RBP: ffff888052d30000 R08: 0000000000000005 R09: 0000000000000000 [ 1235.718718][ T3263] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff8880549a5e98 [ 1235.721823][ T3263] R13: ffff888055c27900 R14: dffffc0000000000 R15: ffffed100a934bd5 [ 1235.724360][ T3263] usb_free_urb.part.0+0xf8/0x110 [ 1235.725992][ T3263] usb_free_urb+0x1f/0x30 [ 1235.727323][ T3263] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1235.728989][ T3263] em28xx_alloc_urbs+0xb43/0xf60 [ 1235.730625][ T3263] ? kasan_save_track+0x14/0x30 [ 1235.732143][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.733727][ T3263] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1235.735338][ T3263] ? lock_acquire+0x1b1/0x370 [ 1235.736766][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.738372][ T3263] ? rcu_is_watching+0x12/0xc0 [ 1235.739947][ T3263] ? trace_contention_end+0x122/0x170 [ 1235.741785][ T3263] ? __mutex_lock+0x26d/0x1b10 [ 1235.743373][ T3263] ? em28xx_init_extension+0x2f/0x200 [ 1235.745229][ T3263] ? irqentry_exit+0x24d/0x970 [ 1235.747187][ T3263] ? em28xx_audio_init+0x132/0x1a0 [ 1235.749080][ T3263] ? __pfx___mutex_lock+0x10/0x10 [ 1235.750635][ T3263] ? em28xx_v4l2_init+0x89/0xb0 [ 1235.752639][ T3263] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1235.754503][ T3263] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1235.756291][ T3263] em28xx_init_extension+0x13a/0x200 [ 1235.758236][ T3263] request_module_async+0x61/0x80 [ 1235.759864][ T3263] process_one_work+0xa0e/0x1980 [ 1235.761381][ T3263] ? __pfx_process_one_work+0x10/0x10 [ 1235.763355][ T3263] ? __pfx_request_module_async+0x10/0x10 [ 1235.765407][ T3263] worker_thread+0x5ef/0xe50 [ 1235.766891][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.768604][ T3263] ? kthread+0x13a/0x450 [ 1235.769909][ T3263] ? __pfx_worker_thread+0x10/0x10 [ 1235.771464][ T3263] kthread+0x370/0x450 [ 1235.772753][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.774171][ T3263] ret_from_fork+0x72b/0xd50 [ 1235.775923][ T3263] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.777901][ T3263] ? __switch_to+0x800/0x1100 [ 1235.779770][ T3263] ? __pfx_kthread+0x10/0x10 [ 1235.781723][ T3263] ret_from_fork_asm+0x1a/0x30 [ 1235.783637][ T3263] [ 1235.785597][ T3263] Kernel Offset: disabled [ 1235.787346][ T3263] Rebooting in 86400 seconds..