last executing test programs: 10m29.924669762s ago: executing program 0 (id=76): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m29.632062249s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0x0, 0x1, 0x0, 0xf}) (async) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) (async) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) r7 = epoll_create1(0x0) r8 = dup3(r7, r6, 0x0) epoll_pwait2(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x1c, &(0x7f0000000fc0)="c0f924ae269dee0f527d3115ef01345cf65abc228835d2830a53beb6", 0x9, 0x52, 0xb57, 0x8002, 0x9, 0x0, 0xd, 'syz0\x00'}) 10m29.237052248s ago: executing program 0 (id=82): accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000300)=0x80) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, r0, 0x81000000) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) (rerun: 64) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.numa_stat\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x92, 0x14, &(0x7f0000000240)="003e85ed8d65fa78e3b637be275d1b0057ae953616cfee6462967d8e3c0afed633f8bf423f04ab0ce4ce331130dd3b225bab1664ddaed9220faeeefbe2fa09b4879c3d4f12fc0ca1bdbd446fd61de318ba31d48b49492bce37eae09fc3430b6b79f3660915b764349fdf8295ae9aa01533597e7f1fbd32b23e02655afcc0c887559c67618cc88e00ee2c3d0f0fbd12a62a01", &(0x7f0000000200)="d8aeeed36d33bc020ba00cc6fc21a22f19a4c0f1", 0x5, 0x0, 0x2}, 0x50) close(r2) (async, rerun: 64) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) syz_clone3(&(0x7f00000003c0)={0x11ca979091dd7a5f, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x2e) 10m29.023114388s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905f8"], 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x2d68, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2d38, 0x2, [@TCA_CGROUP_ACT={0x3f4, 0x1, [@m_ctinfo={0x124, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x8, 0xe, 0xa2fa}}]}, {0xdf, 0x6, "645e2ed176724bc489146f81bcefb261bfcffb9f6afe966fdbe4d10b04212e3611b014eaff6cbfa34e9438904494dd7027eda553276a10f111ac9af6aae8de1fd7ca2536018cd2af444b15ddd59c1dcd79caea0b35e1025927ddd278dc57189c7e243869ec83e5aef62e489f907106017515cc49fa64911b6615b4c4d2cc71247b06caced8516aa295be476d486b25670255c011612a482e8bc3b21cd534d0d1f10c0b5f973eac7c5104da475fb9c33b7884c144b011f17d33f57e0376a1801033568fad8f97c65cf7218dbfa438fce08539cfb3f4c1d37fef2104"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ife={0xa8, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x80000000, 0x7, 0x7, 0x10000}}}]}, {0x64, 0x6, "e6f79bbea91926ffa92c09befd8d28bd42e5daeb52134a887fbf4032c0a2cb39878ca251564480b0e6324d4814546d3ea89bb33cc4b0fbc9fd670cfa70916e59f887f6a713fdc6f4732bcfdc757e3ff1390dae8d86caa365bb9c25a59c22e91e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x84, 0x15, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff, 'raw\x00', 0xc, 0x1}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x1a0, 0x10, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5e, 0x10000001, 0x80000000, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x50, 0x3, 0x100, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x146f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xda0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x100, 0x8, 0xf1, 0x7f93}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x49, 0x1, 0x7ff, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x7, 0x7, 0x6}}]}, {0xe2, 0x6, "bf978377cb9b6158afb00c83aca7b07dad19d5004086c29f801677781d08a2e120b4b54ca0d31611ee94b7ff5349645ba191e846ee5e02c429e65bbc31258715dbd93d6064f781cc0eb990464a104d159b10c55c495a209a7f5db97b66d9135efa5975496d5b20f1ad0881cba5426b5017c8a7a1a444a1764e789dacdacfe68e5711e8909dfef4f5d84777f71abe8e58535616843dc7214ed2d608dbf349a77ecfe06da8191096c1e8f1d98cc11b7f44a84784a5434e86cdd99cf4374593dd56bae035ff82afb7a69b3d9100be00bcc1e927283adaa883f0c9e66245cb8f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x1848, 0x1, [@m_mpls={0x68, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x39, 0x6, "9ae97c2a19ff4da6ab0775faacf666d61ce10d751436356ae449f5c15dfbfe593875caf10b453b8e0805170092e0ae16b77c7eac64"}, {0xc}, {0xc}}}, @m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xc3, 0x6, "fc330ce072104c2ee6a1c9ede2e322d0d542658ae3aaccc3836b8c941634ed0eedf231803a6692d8cb0b0a3b6ddfce4b504c30b6446b2c01357c330367d89c61da9983ccd1693d1fa8d824daab3aa2bd8f7631df9b4f8ab3ac431e558b82a61653bfbcc8adab024c2e9d4ad53126897903e606b2da02ec4e9234588b5194c54fbc3fe197772a3e47b3f9610440c21ce471c57afff584e2ef172000bd963297a93e68c3d1aeebef0316d5da9790bda92352a2a326f98e6c0760c255e4aa08bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x101, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2493}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1863}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d8f, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x44c2, 0x4, 0x4, 0x1, 0x4}}]}, {0x6a, 0x6, "a6f6eb9c256cf04f2f63557db09f848e0e4a1c8e7e79aa2ebc516dd48c76f624942511af4531c9c5d16cf68733b4bb3e06b4b622ee68eb57bf1a486ac9dce727baa78a1349ba320289f80fe85b83888cc884f13c1e91ac91e8ce310820823caa3b7e7cc9ffe4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb3f, 0x1, 0x5, 0x6726d3b9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x23aa, 0x10000000}}]}, {0xbf, 0x6, "01dba93e1976aecec4a24a222b13de84157fdcd604afdd38bd5f0cb90089f247c7d603534a5f50d2276a60e07b2a7f35dcd1338b01d1127add4160e490e443774f9919858a6e4dc5fa7bec08b140b8782ca0c7287987e192a45e5439c8f070d364172a8e615c90257acdf0f9e3ba548f946bd9fc1595f0d186c146c0bd935dd0b729125a2362a80aaf78ee810b0a0dd1cfde9309cd5dc533112afb2b6622c105d163f98700ea8b821826d89ba83d111e44d99f2232e8c2c03c017f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_vlan={0x108, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x7f, 0x5, 0x0, 0x42}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x14}]}, {0xb5, 0x6, "14e4a72c2a86bfbdc5e3dc3d08cfec57cd60eabd8ec75e39501e1a717b48f626548213d3cca1f45d0f75d7bff5bcb58f68930e6e49915430038982f2470e927debcedfe0d1a50dcb7fa6bc63adb820d16571ac5513ba368a56762282863f00ea17c3715c17ebdf0145a1d99c0cd7c601e6c30d81013165f4f0424fff278a057e20825f1ade000c85191c7569d5e341326f4364842439d9eb63b26bed1bc549351167f5c6f32426718cccd02dd277f0a43c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_mirred={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4f, 0xa, 0x0, 0x7, 0x6}, 0x6, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x20, 0x1, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4bdde14f, 0x2, 0x5, 0x1, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x5, 0xc2, 0x8b6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xbd95, 0x10000006, 0x5, 0x7ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x8, 0x7f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x0, 0x48000, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xfffffffa, 0x1, 0x80, 0x71}, 0x4}}]}, {0xa, 0x6, "0fdc232cf0e1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x1084, 0x1f, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x91298}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffff, 0xfffffffa, 0x20000000, 0x7, 0x3}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6830f}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x1004, 0x6, "8c50e3357838ec2f84522cc94a807b7044398e681d387322b12f7154c62e03add2fd4e2d8ed90ab9c8220d3e3656f9f0b57838ead3c028744e7db7d91b24dbf4709de6c39c8939e08db1ad3865919610e55fa1c45aa89bd6d3d2058a85d391227ce847f24ac2752bf4d1216b64816ec9681116afd21abb64e95de73983851c0c36d5834cdf20a50a42d3665fbe5ae41ebf4217494eed06f7ac687f65dcf0008717adc27fbf7f69f1def20d2d60e4dd16fbe12fd4f83f033200feb559536f3ef8321d205a45fb1cfe79c4703263e9cbae43a2b18e6da6fac3d254fef4b79b69dcfc2cc1156a261fdc0a588c7a66ea83d950a457be2b45df7c5a13a8a656b09a126032174dc34102b39845c0dfc2150213897c30097d1b8a5911e3e11514533add4fa56a7e3b0678bc0282857936f13ee60c3c0110110a0f278d42d6dfa4d93c36139957f13fcd948816d5986f884f3a3b33697cdb14b88e902cd8503985099f9bdae1b55bf36eeb6dc74659af2eec62644a6e37fbfd75ea8288fe4e54e76f5585e240559bd7927bae15b06cdabd0f076a22c22bdceed3659a20760d360d35c0bc02d97980d5327068675425a3f162052210cd30455dd801c1d93533012867f3b93928d11072976af51b29da3e891d33bcebbbf3053dc17072c73d5ade91f3eeafc6da5df8a773f352113129b59413ada9004500e9ad346c95d818ef694b4611428872bbfb97d35752c89e0ed0b1517e36d2ecd06bb4ee54422a44d89a850f5152110d52d33e47c00d2be831b24d5f837e44ad271dcd29cdb812686ef7f681f0320b9e15483779ac7f1e4b1f3d1df898e8bd6b8d9ea05bbb8b0f2ae97ef86456c68b169ff51400e713e359a19ab9017ae3d4694ad29366909d9d389a20dd32993462989bc5d4072fb2a5963c85abe0600bfe1a2b285cff07c92bcc8a88fe990478080986c76628b3f34bcdae72c7a345a61ba49dd4297008443a6cdeaa778284820b57bf7b08d304f592fba0978296305cca4fd7a32b2dfb535303635dc4a6296a916f08d225e3ccb2462e9d18387511adf1de23ace5ad6ba0ba909706a5949ac456c3c5c06916264a87e5454f4d285c0d23b847b43b9b0557507df76240ef49b154f2471667d0edcd079b773b8451bd94f5c39bc079390a93622adce94eb73c80aa05c29144ec06d8109ee3d4e27a5b41d7625d408e16f60792c6f275edb70bf81ad5b951e0a30f54d0cf0aac94fa77df43bc201c109e5af9f6c46eb6edf3dec9883ee786d90b23932022b1d0111c18a67163a9acd0e42ebcf47b75e05fe81674a4560b6af6f0881e9fc33c12d838d437e184e49a7ff4b9e0cc9c07347b673f2087d1ff914314decf8a941c0c97d9e6cff04253bcf0f3568df3e1508807d81c129d20ebae36a6db1104bfdd206dcc104b2dbc4cf7a58b7ded295364aa4df93213876b5ff8de5516d2f4e0348868abb7ab92870923996ad7007fbae76eb641e29535f4c9b94ca59121812bbc807f74ab356d47f884d8d743b50b6179082e7200846e53bb43336d8b1cc58bdf70fcfc603dc5abee70c6b081def0ff082e1bf3bce3b4935ef513e568bea5a197a3c76ceddde5eb406e4034e53a99a96a8fbbe54c89ec968f5e64d1ab85e12777bb1671722376af5cb4b0a6c436fb8e19a752024e234586ace1267c634d0813b992d9f7d0d4df32f4acc6b17c9848894234762eff604e8179f89b67079c396e36c036f54a1389d1a493f8d4b17b0725b4fa3f300e49688b0827c420a5fb233067fc6867e41b2dc84847ae3d7007de8e47dcba72441954b383b21f597fc9bbd7c52c4e939f4eb725408869e69a513fd38bab0aed2dc302520211f69d606afc20526905e69eace50d98f4e648f9e424e4898026a8de3da475191e67a48a89e3a979b27e3f20f26292ffa1f19e0d46ac5c92850597c1b7008b6c5786ecfa08c4364e56567701df9cfb489990193db93c9d03d893101d41d02c01a73f2e02edd510e5eee0797a424c885709976e650db0be10c57252f11c283941a0a0b67ed5d5df63fb21ad432586a2c73af71d84f614fb89a649e5f0eba99984d550d6064d685235d72eee0d431c6e9e8a96f560fd61a72424b415bfd35271577d9f1b67d29db9f6c61657d77fac1138d80cf3dd9a769910c7e47fdb897139333e38375b10ca1aa01f148eaa269d394d03a6d9394b65c20c41938db4271fb7b6839d47b624e55cdf2284f1bc1d06550ff2044c2a544c4da8594222f93bccd1bcce9bc259fda40204f64c37f40bf9f06dbfa9e591b3dd4854c7abb053a85dc18bddf707710227e0e5fa31bd42533e0aae05c25eed7ac3aba50598380c36d465b4943f213bbee4f81e824c3f468a89c8b1da7f82e30d4e4f191361e0fde89508cb8a76238a2a998f2f0dc2d390b7c817aa085022956fd5de0d7eefde90f7b9e498db2060db2997ab9f501337c3d5d6ea08c40a36119ff6d2e1f0bc7b77fadaaccd025c427a4225d9633a9626383683af25072464526360b76148c8657b1c0659f35e556f40e6ae2f2beabeb553bbbc66e5faf0b5d0a4990d4e174e14eff8a71731e86aae7673ba9b824236dea13ef9c34bae574fc3be4a9a561f53933b24a80e7dd313aa474e84b44910c0273d270415186b0c0bc9378cecdebf69905049be7da38c1829ae4c8ba275a25b4bfe0bcd9d49f4c49159b1d5b38cefe85e8044a5401ba4a323c9e99a1515aaec36e5f2446c5a9bdd38065fa26e79452b2b7ceb00a2e7197e090cc7b7c701985382d35f7b94a9bd29846a37872b1534a4838a9043346f31f44b2b59a5243563f5f0bd2df3017d28f45d1918c79a84336130799402d89247f20d23e6b0dbc1c26936bdc48331b56570c14f2a00369fd68d8843616fc54fc6bea3392742c3b383f50c8a01bfcd94ea7bd96554e238d675d0aea0fd55403b36d0f60238f6cee47c055c570c6745a2c8decbacd71bdec03757f5b1f4af5141eacabe21617740606c762a13e736e0e689c6f045bde7957b2e909cb0ae60375351a3681c94512c0bf34e13b6ee820c814a665275130e97e3093010721ec38320e73c7bb63f0db5d511e1a57c869ab53320f1ce781536426e58cce672b2c3013bf55d3736aa61a764c67c1f3676dc6d6290fe10bce9100b8fac48a72a30210672a0c59a8692186c2647f2e6d7c99af23a328fe1c5ee054a29cd9c02279292a795bd4a2f1bfe11e51dd172a7ba025db3b211cad61b7135caef22a3671f52cc4ebb2b89fbece9ba2f4361a91d3f0c781acda0e953120e054f42a361850443e557a8b44b5703fd008188e9ad938477e75d05466ce196f90bd8bfa0f77c5631b83547fe0a580ed1b07e19565e8f2b35a3d559664e1d228118d88829d1f1471941293f3bf906d6f4ed127f3ae3e3576c1446314406730cb5a1a0435a073d0c5e06b4f5ecf8dcc62faf91da1ae7d24e6be20e327836ff3900da63d429a41cca2595188846cb381cfcca7f532f7f0a0d76c7dc6c4701276fc2964066cd57cd68f5f47ffa7bbaac5d478c85aeebf747b2f7ce6bfa37321e4b5b45a45c0fa5722b7d09b697dd5559cb60041af5150482f56cfeec4373f6508fbe6c8a2a48fcef92bba544cd311ad69dd239366243a576c69ae6760ce5b0f3327314d064e7e434ae8340e74bc2eb14adb8323bb337941fb3f74563809d116570ca9884b5ea192628864f79a4f7538fc846d5cd9a29d7b540da636e9ab8c05a830e074f54a6dea2f09bfaf39b170988446445cb5c7d365cf206e7d514bb155f5bb82cc38850e984e1acad507c023a08ac0284851c49b65f4a73a3a97cd3b7a4b4e10e70c9311099c7febc23f9fd375760b1403ad04a54b80401067ba14e3710f6039245aee3cb2fb86dad1b2d10b01dbbc1efa233b4e10dbceb0275c960ce30c06cdf708fdefb6a65757bef5237b2e85e59101bb63db422f9c5323dd788abcd6e01a37372c2fb7634b86d3ae2a1aa2cfbf165d150a76833666f2808d5cc41d7c0adddc9e3abeacfa6e7a05917d17f36864bdf3b1756cdbbfd49757a1adaa4b103b3035c084f3abbb1459fda20cacd2c6381b0b5562891d429853a018b6ece6e01fe10c5ef3d90f7070d291e9a23b3ac433e3e4ab0fdc41eae69b5c793846b1c964ab4876fbd033aa0d85e90895f12185c5b3ab5ac35e36dfbc909b297e9e4d002b7db432614c60d9103a8eba8872cc576645f27c628c13cce6bd31589471a59d9798ac964a13c9bd2462b45b79b550d05e316127f91c7239ccdb3df5f3483bcd35c6133fc3bf2ed6cc39ff761c13c945f70fdb98b77b14ad54884ae678836ece838bce4445a5a7f478eddba83a2c0c7ca3981f6a2f1cc09ecfc95da82e3c819ef9131cc9fa775d1285aee228390799e1e4c338bb4dbf29dc775529b9049efcb92cbef3b4abdc9f93807000c586f336f1108cdf8710cd22f28b032e34d161a5cebd00bdafe5217248fceca0732a5456c403b35730894b35792ee8335034a17e620580fa232953172a2ef5100897f9919d5c98567bf03dcb632e53bde2e9ac582e3f4e0ef9fc65b0cf34a43aeaaea79ac17d784756cfec907e7f47143a368e2b0d47db4b4cea5cab2d8c95e6e2d93d05fbe1e45e6469afe2fa2b91b3f00cdfab1c631a79e626916a8d04a1e30e19a3c2fbf57e27e7cb39a3d600f6c1ccb1966f0756de0c7eb9b117948926c7dab9ee0979e29728c2f98135f804d0a7f09bab2b7cb5c7e2fda6e2185769a18c2ea320184dade34658180b531bc2ad0b78351c0390afebdc36ab04558134364a5d243314d24a3e6a579ffdfc3be6a44d794033da270b47b40bb6d8306e896ea1484f843164e51a25c8266857e93b8d69fd4747c051a1d04181ef2645a3e33479a0683819d31ff9327f900512fbc17696bdb2d319cccd8258eb7fabf8efcd2c05ca8fbc7280393a93617319b84912e4cce1c78587aab289c74b3fcf6d11410120b66571525ee13c865b292c4791b8e90f2f398b066a972a6b4a449d59e07004aa49f13e5560c01e753d346d61172dafcb519c56a3fe79a9a099342c12b4009fa14a4f7dfdc55d595a6efacd8dfe41ca7f5c5c5f8b91129f2d72e6b34e5a5ab92c21a5fc8b89ae16efec1a292be522a7978f76eeed4e13b1131a0736e21f45c223279bfe61fa908b7483a1cfa1ba097f1cc2e09301a85e0872b00d47e27529c25c87955cb08dbf2ab1e3287766f037d706cf84c1132a77f1d4104f737aed882da5a2f4d129b524da9b8f410902bd091ced8e3f64e1368213adee4c3f98a36bc24c1db0f9d43a49ad1979b892ae73e2eb50e73c358b2f90f6ea8892f562b535c367f7362e499b5e09ba509675388bf984516567d3e357dfdb6fafbe40566686d8f1a728cb2852f2fda66b78000088443de783f6496c94bedf0861a2f52ca5cb588a79f927282166b1007085c49a81fb24c9e7d86a7b45a0a8a644cba5fb0a9428ad5899524b7d8560f38722c9ad69fc1eb938f15108fe9417fd167d74b6208715a5a12349dae2bc3ba8ee43ab1cf316179ed4be0b05c8d89d0a3e34b9543ad0c149c6b0ea1cf43f86db7c41333ff745c1b2e832c0c96645a21868d540ced091c405b9ff9d1eb11dbe59ec2b929f4d9a83a5dacef861d990f1113693a69a36f3437a11c154373b64fc7b4dec486b7f47a93b8c518b20ef820db8c051e90127d28433a06b7d9a6039b6cf00e0fadeae32afb0af3f067feb7baf9b9976ec292bb07324c9ad71b6f351124affa4c13c17dd1d86b48a3297e5d55bd9260760efcda44"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x6c, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x39, 0x6, "7e6d39fcce2a7f0ab48247caa2d6e9658ba6756b1d90d19553173ee9bd3d052673207d738549c6cd4dd0a566f1d82c761de42bbd06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x108, 0x17, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x400, 0x10000000, 0xd7, 0x10000}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x5, 0xffffffffffffffff, 0x7, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x0, 0xe, 0x80}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x66, 0x6, "a5f03d3eb60a8057af8369084672c6adc60592ff89f059ced5aa1a4e86a425caf3a38ce01710bc877c7aae6cd4bcea2a8c6f861aa008086e42c7bdce989a959aae4b9edbcee9f7a4c1bb73821bd072dda66b673cf976e2b1f1c0c3000d7fc9e82794"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xb4, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1571, 0xa, 0x0, 0xd69, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x46, 0x6, "f4284be3ec4ca3fe3bb82d17b734bef46dc1399c4c349f1c81bb97463843802a93853cd6ac7dd79bab2e891065384d01f0f56bcdbf12b0aa3dd11dd2d3d87807b862"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x1b4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x170, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xda, 0x5, "121dc29e58420551eb7480811a450814c3030a2b1f6a91d3d1062e8b910a5a39c32b0e49771fa9a3407d3d0569c8c0d84a5a4fb0df4f20ac2abad2ffe5071e69e9edbaf4822d02d06d05412dc90cab5170b5a599df0086a2f3796b6582b7679123732850a8efe4c918f18110ccd43f8dcdd7d0346e2bc2a00b8d7d3c960175b4823302b84c6d14b3d19691abbbe59987a26605816649dbc01e46408d3019ec73d250d5adef95bb492b5ac66e07027709f35079b72557ea197b0449127a629973b88497534906d5f174dae1455ae4a5107d636dc6ecf7"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "6730f36397f9f082a598e6eadc081d16d624d6066d2f9b0103f174edecac95fd03c0c46e9051f3f8eb747cfffd800dd05c5296d213ae557a31ee07b1c8c93f6c5a4067e77f5454"}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0x0, 0x3, 0x0, "1341e1"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x84c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80, 0x35400000, 0x6, 0x1, 0x7, 0xff, 0x9, 0x3, 0x5, 0x401, 0x7, 0x0, 0x400, 0x5, 0x6, 0x2, 0x2, 0x9, 0x8000, 0xd94, 0xfffffffc, 0x3ff, 0x10000, 0xfffffffb, 0x200, 0xa4e1, 0xb, 0xe9c, 0x7, 0x3, 0x822, 0x1ff, 0x3, 0x7bd0, 0x5, 0x6, 0xffffffc7, 0x4, 0x3, 0x7, 0x9, 0xfff, 0x4, 0x9, 0x0, 0x0, 0x1, 0x9, 0x7, 0x1, 0x200, 0x0, 0x0, 0x1, 0x6, 0x61, 0x3, 0x401, 0x4, 0xf9e, 0x80000000, 0x8, 0x4, 0x7, 0x8, 0x4, 0x0, 0xd2f2, 0x7fffffff, 0xffffff8f, 0xfffffffa, 0xa65d, 0x3, 0x7, 0x5f35, 0x6, 0x7, 0x73, 0x200, 0x2, 0xfffff047, 0x9, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0xff, 0x7, 0x0, 0x7ff, 0x3, 0x7213, 0xc981, 0x0, 0x400, 0x8, 0x9, 0x0, 0x1, 0xf, 0xcb, 0x8, 0xff, 0x81, 0x1000, 0x10001, 0x2, 0x0, 0x4, 0xfff, 0x7, 0x800, 0x4, 0x200, 0x6, 0x7f, 0x62, 0x33, 0x4, 0x1, 0x6, 0x8, 0x8, 0x1000, 0x101, 0x4, 0x8, 0x7, 0x40, 0x80000001, 0xd59e, 0x2, 0x3, 0xfff, 0x6, 0x0, 0x9, 0x4, 0x0, 0xd32, 0xdd, 0x7, 0x0, 0x6, 0x6, 0x5, 0xa622, 0x80, 0xff, 0x9, 0x8, 0x4, 0x9, 0x2, 0x5, 0x0, 0x3, 0x7, 0xc, 0x2, 0x1, 0x800, 0x8, 0x8, 0x3, 0x9, 0xffff8001, 0x578, 0x8, 0x1, 0x3, 0x2, 0xc7, 0x84, 0x80000000, 0xe, 0x5, 0x80000001, 0xfffffffb, 0x7fe, 0xe51, 0x1, 0x5, 0xd10, 0x9, 0x10001, 0x2, 0x6, 0x46d5, 0x5, 0x3, 0x8, 0x8001, 0xffff, 0xa6a, 0x9, 0x3, 0x4, 0x9, 0x4, 0x1, 0x4, 0x2b6, 0x9, 0x10000, 0x7ff, 0x1d, 0x40, 0x5, 0x1d, 0x80, 0x1000, 0x1, 0x0, 0x2, 0xcd, 0xd, 0xd82, 0x1f, 0x6, 0x0, 0xfff, 0x1, 0xffffff80, 0x6, 0x12000000, 0x9, 0xfffffff9, 0x7f, 0x5c7, 0xd85, 0x28000000, 0x8, 0x0, 0xd, 0x4, 0xfffffff5, 0x9, 0x5, 0x9, 0xfffffffc, 0x9, 0xffff6685, 0x5, 0x3fc00000, 0x39ee800, 0x40, 0x1, 0x0, 0x2, 0x1, 0x8, 0xfffffff1]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xea6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4930, 0x5517eb92, 0x4, 0x601, 0x8, 0x401, 0x6, 0x8, 0x1, 0x2, 0x91c6, 0x99f3, 0x4, 0xfffff001, 0x1, 0x0, 0x537, 0x8, 0x7ff, 0x7, 0x7f, 0x6, 0x4, 0xb, 0x7, 0x4, 0x9, 0x5, 0xd9d, 0x1, 0x8000, 0x8, 0xf, 0x4, 0x10000, 0x7, 0x6, 0x75, 0x7, 0x4, 0x4, 0x5, 0x0, 0x5f, 0x0, 0x7, 0x4, 0x1, 0x8, 0x0, 0x4, 0x0, 0x80, 0x9, 0x8, 0xa, 0x8, 0x40, 0x2, 0x8, 0x5, 0x8, 0xcf7, 0x0, 0x9, 0x3, 0xb3e, 0x7, 0x7f, 0xfffffffd, 0x1, 0xff, 0x6, 0xff, 0x6, 0x3, 0x7cf0, 0xe, 0x1, 0x8000, 0x3, 0x1225, 0x7, 0xd, 0x3, 0x5, 0x7fff, 0x1, 0x4, 0x8, 0x80000000, 0x6, 0xffff, 0x7, 0x7, 0x6, 0x8, 0x0, 0x2, 0x7, 0x5, 0x87, 0xfe9c, 0xa, 0x2, 0x6, 0x64, 0x400, 0x77, 0x4, 0xb1, 0x2, 0x1, 0x91, 0x10000, 0x4, 0x6, 0x5, 0x5, 0x80000001, 0x1, 0x1, 0x0, 0x5, 0x1, 0x5, 0x8, 0x9, 0x7fff, 0x7fff, 0x1, 0x1, 0xb, 0x1, 0x916, 0x80000001, 0x4, 0x101, 0x3, 0xffffff7f, 0x80, 0x6, 0x5, 0x4f7b, 0x7ff, 0x0, 0x4, 0x7fffffff, 0x5, 0xffffffff, 0x2, 0x7, 0x5, 0x7, 0x7, 0xffff7fff, 0x100, 0x7, 0x4, 0x7, 0x7ff, 0x1, 0x6, 0x1ff, 0xffff, 0x50be, 0xb, 0x10001, 0x773, 0x4, 0x0, 0x8, 0x7fff, 0xfff, 0x0, 0x7fff, 0x1, 0xfffffff7, 0x1, 0x100, 0x1ff, 0x800, 0xffffffb7, 0x5, 0xdf3, 0xfffffc00, 0x9, 0x1c, 0x5, 0xfffffffa, 0x8a6, 0x1ff, 0x1, 0x4, 0x5, 0x7537, 0x8000, 0x7ff, 0x7, 0x0, 0x7, 0x4, 0x8, 0x90f, 0xec, 0x1, 0xfffffffe, 0x101, 0x6, 0x52c, 0x2, 0x9, 0x8, 0x9, 0x7, 0x10001, 0x3, 0x9, 0xfffffff0, 0x5, 0x0, 0x3, 0x1, 0x6, 0x3, 0x0, 0x65d, 0x3, 0x8281, 0x7fffffff, 0x9, 0x4, 0x18d2, 0x20be, 0x10001, 0x0, 0x1ff, 0x6, 0x100, 0x0, 0x7, 0x3, 0x8001, 0x6, 0xfffeffff, 0x9, 0x4, 0xffe0000, 0x4, 0x3, 0xfffffff7, 0x1, 0x3, 0x4, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_CGROUP_POLICE={0x458, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffbff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7fff, 0x2, 0x9, 0x8, 0xb, 0x1, 0x2, 0x10001, 0x6, 0x3, 0xffff, 0x3, 0x8000, 0xff, 0x2, 0x3, 0x0, 0x5, 0x1, 0x7, 0x0, 0x3, 0x8, 0x7ff, 0x7ff, 0x9, 0x5, 0x2, 0x2e, 0x6, 0x9, 0x9d1b, 0x0, 0x2, 0x10000, 0x4, 0x787, 0x4, 0x6, 0x7, 0xa8c, 0x0, 0xf872, 0xf, 0x0, 0x3, 0x101, 0x80000000, 0x9, 0xfff, 0x2d, 0x7fff, 0x1, 0x3, 0xdd, 0x3, 0x6, 0x7, 0x8, 0x6, 0x2, 0x80000000, 0x262, 0x5, 0x101, 0x0, 0x8, 0x3, 0x10001, 0x2, 0xd1d, 0x80000001, 0xb0, 0xff, 0x3, 0x8, 0x7f, 0x0, 0x868, 0x8, 0xfff, 0x1, 0xff, 0x401, 0x5ff, 0x8, 0x6, 0xffffffff, 0x3, 0x3, 0x2, 0x2, 0x8, 0x80000001, 0x3ff, 0xd98a, 0x2, 0x3, 0xbec0, 0x6, 0x0, 0x1, 0xc5c, 0x9, 0x80000000, 0x9, 0xb9, 0x0, 0x6, 0x6, 0xcc, 0x401, 0x401, 0x9, 0x46f, 0x429, 0x0, 0x0, 0x8, 0xdc, 0x1, 0x9, 0x7, 0x9, 0xe7, 0x2a, 0x7, 0x1000, 0x0, 0x6, 0x5a, 0x6, 0x1, 0xd03e, 0xbf, 0xb3f, 0xffffffff, 0x3, 0xd, 0x1, 0x240, 0xb1d9, 0x4, 0xcc, 0x400, 0xcd38, 0xfffffffc, 0x1, 0x6, 0x1, 0xe, 0x0, 0x6, 0x4, 0x8, 0x33a, 0x94, 0x49cb, 0x1ba, 0x2f3f, 0x4, 0x8, 0xce2, 0x9, 0xa, 0x18, 0x7fdceebf, 0x10000, 0x2, 0x9, 0x2, 0x0, 0x401, 0x2, 0x4, 0x7, 0xc, 0x7fff, 0x2, 0x5, 0x7f, 0xfffffffa, 0x120, 0x3ff, 0x2, 0x200, 0x81, 0xc, 0xf, 0x2, 0x5, 0x5, 0x2, 0x1, 0x5ad8f711, 0x4, 0x9, 0x3, 0x5, 0x7, 0x8, 0x1ff, 0x7f, 0xfff, 0x0, 0x7, 0x3d65e7e0, 0x2, 0x800, 0x80, 0x9, 0xe8f4, 0x3, 0x3, 0x7, 0x1, 0x75, 0x9, 0x6, 0x0, 0x4, 0x6, 0x3d4, 0x0, 0x8, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5, 0x1, 0xf9b, 0xa4, 0x8, 0x2, 0x1, 0x6719acb4, 0x74, 0x80000001, 0x9, 0x8, 0xd, 0x0, 0xa1c, 0x5, 0x5, 0x81, 0x1, 0x6, 0x4, 0x3, 0x0, 0x8001, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x4, 0x1, 0x8, {0xae, 0x2, 0x7, 0x3, 0x6, 0xb909}, {0x6, 0x1, 0x6, 0x7, 0xfff8, 0x3}, 0xc6, 0x40, 0xda7c}}]}, @TCA_CGROUP_ACT={0x2a0, 0x1, [@m_sample={0x5c, 0x1c, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x300}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3c}]}, {0x17, 0x6, "2e5b50d4d38c083818c30635de0fe85e046cca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xac, 0x10, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x6c, 0x6, "0ca0a6e67ec09e2b24eb4180076022dc1d12e4e7cbc450e7ee690c1941492a56f42f51442dc3407385e587beae375da449adb01def1d51aa2af9fc5de396e41d36a5ab854fe9e8372ae00ba8df732bcbefa3df1fc81799476143d2f1fef2d649900eb4fa793d5c51"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x194, 0x5, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa, 0x6, 0x1, 0x4}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x20000000, 0x81, 0x1509}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x7, 0xa, 0x7}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x6, 0x2, 0x1ed}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x4, 0xffffffffffffffff, 0x8}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x20000, 0x0, 0x6, 0x8}, 0x3f}}]}, {0xbd, 0x6, "e0e2980de653471724c5ce2e992167909a78200889b6047d14c648ab20ee867c505749b499952c31685050a4b2907e4c2a74794d3cc4e6f4fb78766946b6c1249fd4cdfab1ca3fb0892de02511f6c221ec076c52d108c520824d6bdb35cc63d80ff0d66f3bdc3e86f2e550dccac44befeafaee46ae6bbef11cdc3756871b4aa1e14696a51d9a5a717d376ba883de8e52e087f707f8f965bbd1809c5b53440ab758904434286ee28820d11bb85096b7eb3eaf2ea2e1bfcd5457"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2d68}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 10m26.49058111s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) (async) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6491457ddc25c5f8}, 0x880) mkdir(&(0x7f0000000040)='./file0/../file0\x00', 0x1) (async) mkdir(&(0x7f0000000040)='./file0/../file0\x00', 0x1) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x80000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/41, 0x29) 10m25.034735249s ago: executing program 0 (id=103): socket$inet6(0xa, 0x80002, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x101182, 0x0) pipe2(0x0, 0x0) io_uring_setup(0x2a5d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0d98b010200000002120001000000000904000000102db000d26c9c76afdc37cd4c1a3d324997eae4d68bc0c3b07b4fc274324dad13fe4833b3b2299ea1ac236f560e585647fa53206eac6ab22223939073681faee40e13106af92d7bac5e2b26a7e55cede025461d1110c2f08b24aa000000000100000022efceb803748099"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001"], 0x140}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000580)=""/247, &(0x7f00000003c0)=""/101, &(0x7f0000000340)=""/83}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) 10m24.735062293s ago: executing program 32 (id=103): socket$inet6(0xa, 0x80002, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x101182, 0x0) pipe2(0x0, 0x0) io_uring_setup(0x2a5d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0d98b010200000002120001000000000904000000102db000d26c9c76afdc37cd4c1a3d324997eae4d68bc0c3b07b4fc274324dad13fe4833b3b2299ea1ac236f560e585647fa53206eac6ab22223939073681faee40e13106af92d7bac5e2b26a7e55cede025461d1110c2f08b24aa000000000100000022efceb803748099"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001"], 0x140}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000580)=""/247, &(0x7f00000003c0)=""/101, &(0x7f0000000340)=""/83}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) 6m7.154220388s ago: executing program 4 (id=1148): r0 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x3, 0xffffffffffffff79, '\x00\x00\x00\x00'}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000004000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m6.368919471s ago: executing program 4 (id=1151): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0x59, 0x10, 0x400, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in=@rand_addr=0x64010100, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x3503, 0x2, 0x1, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = inotify_init1(0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xea) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095", @ANYRES64=r3, @ANYRESDEC=r2, @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r9, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x10800000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x0, 0x1000, &(0x7f0000001e00)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r7], &(0x7f0000000540)=[{0x3, 0x4, 0xc, 0x5}, {0x0, 0x4, 0x10, 0x7}, {0x4, 0x5, 0x9, 0x6}, {0x1, 0x1, 0x1}, {0x5, 0x2, 0xb, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x0, 0x4}, {0x1, 0x3, 0x4, 0xa}, {0x2, 0x3, 0x1, 0x5}], 0x10, 0xe748, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x62, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x2, 0x7, {0x7, 0x2, "11bf175248"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x13a8, 0x11e0, 0x43, 0xa0, 0x11e0, 0x98, 0x1310, 0x178, 0x178, 0x1310, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1198, 0x11e0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz1\x00', 0x7f, {0x7f}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x0, 0x8005, 'syz1\x00', {0x8000}}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'ip6_vti0\x00', {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1408) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 6m0.816819718s ago: executing program 4 (id=1171): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = creat(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041c0500c80001015c2899025116bee1", @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0xd0) semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='smaps_rollup\x00') 5m59.670185733s ago: executing program 4 (id=1182): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000001c0)={'vlan0\x00', 0xb21}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffd, 0x100000000, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc, 0x7785, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x4, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffffd, 0x4000000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x8000000000000001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5c]}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000300)={0x6, 0x0, 0x44, 0x8, 0x4000, 0x1ffc}) r5 = getpgrp(0xffffffffffffffff) prlimit64(r5, 0x1, 0x0, &(0x7f0000000200)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500"], 0x44}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r7, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000000b01030000000000000000000100bbe371cd0100282a270009000100292b5d400000000005000100000000000000000100000001"], 0x38}, 0x1, 0x0, 0x0, 0x40042}, 0x10048800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3d, 0x7, 0x200, 0x80000001, 0x260, r6, 0x73d, '\x00', 0x0, r6, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 5m57.937538024s ago: executing program 4 (id=1187): mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0x7ffd) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x0, &(0x7f0000000980)='norecovery') (fail_nth: 5) 5m55.777154452s ago: executing program 4 (id=1199): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_batadv\x00', {0x2000001}, 0x7}) set_mempolicy(0x10003, &(0x7f0000000080)=0x51e1, 0x3ff) 5m54.248624139s ago: executing program 33 (id=1199): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_batadv\x00', {0x2000001}, 0x7}) set_mempolicy(0x10003, &(0x7f0000000080)=0x51e1, 0x3ff) 5m41.236557558s ago: executing program 5 (id=1241): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m41.12982352s ago: executing program 5 (id=1243): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8800090503020000000000dc959a9660badb38d2a5a44edf19dd7392ed0e85016ec830a8334004dea005b529052c371e8f2dfe59bd89628092380a3fadd78838f3df1b8fcc3c1383174897d0944799e7145cd42e1c59087f999cbea02d459d12f77fabb49e0e3fede2e86079a13e89ccf0d1037c9b2b770d804c853d849640bd20c556e2f5e67a44d69b7961f0e43110efcf12b459"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, &(0x7f0000695ffc)=0x76) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x20}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c09, r5) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f000df06712e90009118db0049d", 0x1d}, {&(0x7f0000000280)="cdf579", 0x3}], 0x103) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) accept$packet(r7, 0x0, 0x0) 5m37.577551892s ago: executing program 5 (id=1251): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m37.403558273s ago: executing program 5 (id=1252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac14143200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffdfffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000010000000000000000000029000000000000000c0015"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) syz_emit_vhci(&(0x7f0000004200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x56, 0xc9, 0x3, 0xac, "1463376f5c77d95c"}}}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='gfs2meta\x00', 0xc04, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0x0, 0x0, 0x5}}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x1f8c) ioctl$USBDEVFS_DISCARDURB(r8, 0x550b, &(0x7f0000000000)=0x7fff) 5m34.677357644s ago: executing program 5 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x54583}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) 5m31.617240589s ago: executing program 34 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000400), 0x2, 0x6800) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) (async) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000100)) (async) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x54583}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) 13.016369505s ago: executing program 7 (id=2332): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 11.885045095s ago: executing program 7 (id=2336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004a890}, 0x20008850) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_mtu=0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x99}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000, 0x12) 11.319056005s ago: executing program 7 (id=2337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000010, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="003c3200d51d7d0319a00d4591405fe4a9fc6fe6e891cbc8089207000004"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00038e0000008e03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00e953aad2ea92d68430af1ef3a656e1bfe90e29b307317890b58e26ec7bc508043721f4b616564e641cd99dbc19d0274e01f0fc8e6eb9b8f60ece919210720c041b3ada81ee84277c872277619a1ac4749de62c6a3284e29c7213d8696e036eed3ea7792e121f90ee25717de586bfe9965976234afedf6ac9445668105acaafa48ecc0553dca73a5ca739cd319a55773465698f9cd38b80da5d62fc0622f752872be46d19ac635e3a3f9fcd1cebf24aab743e730831de7c8222a9ee5e9977e453333f129723729f9c9e6fdeabe138f6506b7b79"], &(0x7f0000000000)={0x0, 0x3, 0xd, @string={0xd, 0x3, "a40c3ae50a4bf212ebc784"}}, 0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x400000008000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) getpid() 8.173435127s ago: executing program 1 (id=2351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004a890}, 0x20008850) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_mtu=0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x99}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000, 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read(r6, &(0x7f0000000280)=""/187, 0xbb) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18) 7.477195216s ago: executing program 6 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000008140000", @ANYRES32, @ANYBLOB], 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(0x0, 0xd931d3864d39dcca) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="d3", 0x1, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6000000fffff00000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.939105912s ago: executing program 1 (id=2355): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x1ac0, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1a90, 0x2, [@TCA_CGROUP_ACT={0x3f4, 0x1, [@m_ctinfo={0x124, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x8, 0xe, 0xa2fa}}]}, {0xdf, 0x6, "645e2ed176724bc489146f81bcefb261bfcffb9f6afe966fdbe4d10b04212e3611b014eaff6cbfa34e9438904494dd7027eda553276a10f111ac9af6aae8de1fd7ca2536018cd2af444b15ddd59c1dcd79caea0b35e1025927ddd278dc57189c7e243869ec83e5aef62e489f907106017515cc49fa64911b6615b4c4d2cc71247b06caced8516aa295be476d486b25670255c011612a482e8bc3b21cd534d0d1f10c0b5f973eac7c5104da475fb9c33b7884c144b011f17d33f57e0376a1801033568fad8f97c65cf7218dbfa438fce08539cfb3f4c1d37fef2104"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ife={0xa8, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x80000000, 0x7, 0x7, 0x10000}}}]}, {0x64, 0x6, "e6f79bbea91926ffa92c09befd8d28bd42e5daeb52134a887fbf4032c0a2cb39878ca251564480b0e6324d4814546d3ea89bb33cc4b0fbc9fd670cfa70916e59f887f6a713fdc6f4732bcfdc757e3ff1390dae8d86caa365bb9c25a59c22e91e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x84, 0x15, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff, 'raw\x00', 0xc, 0x1}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x1a0, 0x10, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5e, 0x10000001, 0x80000000, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x50, 0x3, 0x100, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x146f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xda0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x100, 0x8, 0xf1, 0x7f93}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x49, 0x1, 0x7ff, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x7, 0x7, 0x6}}]}, {0xe2, 0x6, "bf978377cb9b6158afb00c83aca7b07dad19d5004086c29f801677781d08a2e120b4b54ca0d31611ee94b7ff5349645ba191e846ee5e02c429e65bbc31258715dbd93d6064f781cc0eb990464a104d159b10c55c495a209a7f5db97b66d9135efa5975496d5b20f1ad0881cba5426b5017c8a7a1a444a1764e789dacdacfe68e5711e8909dfef4f5d84777f71abe8e58535616843dc7214ed2d608dbf349a77ecfe06da8191096c1e8f1d98cc11b7f44a84784a5434e86cdd99cf4374593dd56bae035ff82afb7a69b3d9100be00bcc1e927283adaa883f0c9e66245cb8f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x165c, 0x1, [@m_mpls={0x68, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x39, 0x6, "9ae97c2a19ff4da6ab0775faacf666d61ce10d751436356ae449f5c15dfbfe593875caf10b453b8e0805170092e0ae16b77c7eac64"}, {0xc}, {0xc}}}, @m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xc3, 0x6, "fc330ce072104c2ee6a1c9ede2e322d0d542658ae3aaccc3836b8c941634ed0eedf231803a6692d8cb0b0a3b6ddfce4b504c30b6446b2c01357c330367d89c61da9983ccd1693d1fa8d824daab3aa2bd8f7631df9b4f8ab3ac431e558b82a61653bfbcc8adab024c2e9d4ad53126897903e606b2da02ec4e9234588b5194c54fbc3fe197772a3e47b3f9610440c21ce471c57afff584e2ef172000bd963297a93e68c3d1aeebef0316d5da9790bda92352a2a326f98e6c0760c255e4aa08bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x101, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2493}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1863}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d8f, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x44c2, 0x4, 0x4, 0x1, 0x4}}]}, {0x6a, 0x6, "a6f6eb9c256cf04f2f63557db09f848e0e4a1c8e7e79aa2ebc516dd48c76f624942511af4531c9c5d16cf68733b4bb3e06b4b622ee68eb57bf1a486ac9dce727baa78a1349ba320289f80fe85b83888cc884f13c1e91ac91e8ce310820823caa3b7e7cc9ffe4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb3f, 0x1, 0x5, 0x6726d3b9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x23aa, 0x10000000}}]}, {0xbf, 0x6, "01dba93e1976aecec4a24a222b13de84157fdcd604afdd38bd5f0cb90089f247c7d603534a5f50d2276a60e07b2a7f35dcd1338b01d1127add4160e490e443774f9919858a6e4dc5fa7bec08b140b8782ca0c7287987e192a45e5439c8f070d364172a8e615c90257acdf0f9e3ba548f946bd9fc1595f0d186c146c0bd935dd0b729125a2362a80aaf78ee810b0a0dd1cfde9309cd5dc533112afb2b6622c105d163f98700ea8b821826d89ba83d111e44d99f2232e8c2c03c017f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_vlan={0x108, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x7f, 0x5, 0x0, 0x42}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x14}]}, {0xb5, 0x6, "14e4a72c2a86bfbdc5e3dc3d08cfec57cd60eabd8ec75e39501e1a717b48f626548213d3cca1f45d0f75d7bff5bcb58f68930e6e49915430038982f2470e927debcedfe0d1a50dcb7fa6bc63adb820d16571ac5513ba368a56762282863f00ea17c3715c17ebdf0145a1d99c0cd7c601e6c30d81013165f4f0424fff278a057e20825f1ade000c85191c7569d5e341326f4364842439d9eb63b26bed1bc549351167f5c6f32426718cccd02dd277f0a43c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_mirred={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4f, 0xa, 0x0, 0x7, 0x6}, 0x6, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x20, 0x1, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4bdde14f, 0x2, 0x5, 0x1, 0x4}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x5, 0xc2, 0x8b6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xbd95, 0x10000006, 0x5, 0x7ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x8, 0x7f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x0, 0x48000, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xfffffffa, 0x1, 0x80, 0x71}, 0x4}}]}, {0xa, 0x6, "0fdc232cf0e1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x1014, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0xfe7, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x6c, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x39, 0x6, "7e6d39fcce2a7f0ab48247caa2d6e9658ba6756b1d90d19553173ee9bd3d052673207d738549c6cd4dd0a566f1d82c761de42bbd06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x40, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}]}]}}]}, 0x1ac0}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) 6.885698246s ago: executing program 7 (id=2356): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ed000000ed03"], 0x0, 0x0, 0x0}, 0x0) 6.830318895s ago: executing program 1 (id=2357): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x100c000, 0x0, 0x8000, 0x2}, 0x20) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x3, 0x1, 0x3, 0x3}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009500000004000000b30d99ba1a9066d1d0b0380b1e96e6596ea20e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000ae092b77fe9a901dab1b03bd1115361f2f9c033fbdd697000000000000000000", @ANYRES16=r5, @ANYBLOB="01002ebd7000000000101400000018000180140002006e657464657673696d30000000000000080008003a0000000500180001000000"], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c3341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x100}) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES8=r3, @ANYRES32=0x41424344, @ANYRESDEC=r6], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = socket(0x9, 0x6, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r8, @ANYRESHEX], 0xa4}, 0x1, 0x0, 0x0, 0x34004400}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000005df64edb9513866fcbb28cfec353a7f1856f4c0ddd125cb1a422a641fa1910ef077d000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10, 0x0, 0x4}, 0xfffffffffffffef5) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0xffbf) 6.497314661s ago: executing program 2 (id=2359): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = creat(0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041c0500c80001015c2899025116bee1", @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0xd0) semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 6.228657552s ago: executing program 6 (id=2360): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 5.766630453s ago: executing program 2 (id=2361): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004a890}, 0x20008850) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_mtu=0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x99}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000, 0x12) 5.69478338s ago: executing program 3 (id=2362): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 5.274251724s ago: executing program 6 (id=2363): syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') keyctl$read(0x2, 0x0, 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0xe, {"e101df28da5096ea0f801e3f74dd90d3"}, 0x4, 0xfc31, 0x5817}}}, 0xa0) add_key$user(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xf9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x5, {0x5, 0xc, "fbeb47"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7d}, &(0x7f00000004c0)={0x20, 0x1, 0x29, "1d1fedf92e1a606fc971cbadd8da7afe8d3e127e2214922d45118c329c4fc0b84f17fbc08d15337b81"}, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r6, 0x1, 0x70bd26, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.210603952s ago: executing program 2 (id=2364): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x60600) setreuid(0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00', @random="0100002010ff"}) r7 = accept(r0, 0x0, &(0x7f00000003c0)) sendmsg$netlink(r0, &(0x7f0000000bc0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x63c}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r7]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x88, 0x4008850}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x737, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000400)) getsockname$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) prlimit64(0x0, 0x2, &(0x7f0000000080)={0x3ff, 0x5}, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x294}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000000040)='wg1\x00') 4.800019581s ago: executing program 2 (id=2365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004a890}, 0x20008850) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f00000000c0)={'vlan1\x00', @ifru_mtu=0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x99}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000, 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read(r6, &(0x7f0000000280)=""/187, 0xbb) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18) 4.376860979s ago: executing program 3 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getgroups(0x1, &(0x7f0000000040)=[0x0]) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, &(0x7f0000000040)) 3.617023119s ago: executing program 3 (id=2367): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x1ac0, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1a90, 0x2, [@TCA_CGROUP_ACT={0x3f4, 0x1, [@m_ctinfo={0x124, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x8, 0xe, 0xa2fa}}]}, {0xdf, 0x6, "645e2ed176724bc489146f81bcefb261bfcffb9f6afe966fdbe4d10b04212e3611b014eaff6cbfa34e9438904494dd7027eda553276a10f111ac9af6aae8de1fd7ca2536018cd2af444b15ddd59c1dcd79caea0b35e1025927ddd278dc57189c7e243869ec83e5aef62e489f907106017515cc49fa64911b6615b4c4d2cc71247b06caced8516aa295be476d486b25670255c011612a482e8bc3b21cd534d0d1f10c0b5f973eac7c5104da475fb9c33b7884c144b011f17d33f57e0376a1801033568fad8f97c65cf7218dbfa438fce08539cfb3f4c1d37fef2104"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ife={0xa8, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x80000000, 0x7, 0x7, 0x10000}}}]}, {0x64, 0x6, "e6f79bbea91926ffa92c09befd8d28bd42e5daeb52134a887fbf4032c0a2cb39878ca251564480b0e6324d4814546d3ea89bb33cc4b0fbc9fd670cfa70916e59f887f6a713fdc6f4732bcfdc757e3ff1390dae8d86caa365bb9c25a59c22e91e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x84, 0x15, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff, 'raw\x00', 0xc, 0x1}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x1a0, 0x10, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5e, 0x10000001, 0x80000000, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x50, 0x3, 0x100, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x146f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xda0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x100, 0x8, 0xf1, 0x7f93}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x49, 0x1, 0x7ff, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x7, 0x7, 0x6}}]}, {0xe2, 0x6, "bf978377cb9b6158afb00c83aca7b07dad19d5004086c29f801677781d08a2e120b4b54ca0d31611ee94b7ff5349645ba191e846ee5e02c429e65bbc31258715dbd93d6064f781cc0eb990464a104d159b10c55c495a209a7f5db97b66d9135efa5975496d5b20f1ad0881cba5426b5017c8a7a1a444a1764e789dacdacfe68e5711e8909dfef4f5d84777f71abe8e58535616843dc7214ed2d608dbf349a77ecfe06da8191096c1e8f1d98cc11b7f44a84784a5434e86cdd99cf4374593dd56bae035ff82afb7a69b3d9100be00bcc1e927283adaa883f0c9e66245cb8f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x165c, 0x1, [@m_mpls={0x68, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x39, 0x6, "9ae97c2a19ff4da6ab0775faacf666d61ce10d751436356ae449f5c15dfbfe593875caf10b453b8e0805170092e0ae16b77c7eac64"}, {0xc}, {0xc}}}, @m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xc3, 0x6, "fc330ce072104c2ee6a1c9ede2e322d0d542658ae3aaccc3836b8c941634ed0eedf231803a6692d8cb0b0a3b6ddfce4b504c30b6446b2c01357c330367d89c61da9983ccd1693d1fa8d824daab3aa2bd8f7631df9b4f8ab3ac431e558b82a61653bfbcc8adab024c2e9d4ad53126897903e606b2da02ec4e9234588b5194c54fbc3fe197772a3e47b3f9610440c21ce471c57afff584e2ef172000bd963297a93e68c3d1aeebef0316d5da9790bda92352a2a326f98e6c0760c255e4aa08bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xec, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x101, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2493}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1863}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d8f, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x44c2, 0x4, 0x4, 0x1, 0x4}}]}, {0x6a, 0x6, "a6f6eb9c256cf04f2f63557db09f848e0e4a1c8e7e79aa2ebc516dd48c76f624942511af4531c9c5d16cf68733b4bb3e06b4b622ee68eb57bf1a486ac9dce727baa78a1349ba320289f80fe85b83888cc884f13c1e91ac91e8ce310820823caa3b7e7cc9ffe4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb3f, 0x1, 0x5, 0x6726d3b9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x23aa, 0x10000000}}]}, {0xbf, 0x6, "01dba93e1976aecec4a24a222b13de84157fdcd604afdd38bd5f0cb90089f247c7d603534a5f50d2276a60e07b2a7f35dcd1338b01d1127add4160e490e443774f9919858a6e4dc5fa7bec08b140b8782ca0c7287987e192a45e5439c8f070d364172a8e615c90257acdf0f9e3ba548f946bd9fc1595f0d186c146c0bd935dd0b729125a2362a80aaf78ee810b0a0dd1cfde9309cd5dc533112afb2b6622c105d163f98700ea8b821826d89ba83d111e44d99f2232e8c2c03c017f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_vlan={0x108, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x7f, 0x5, 0x0, 0x42}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x14}]}, {0xb5, 0x6, "14e4a72c2a86bfbdc5e3dc3d08cfec57cd60eabd8ec75e39501e1a717b48f626548213d3cca1f45d0f75d7bff5bcb58f68930e6e49915430038982f2470e927debcedfe0d1a50dcb7fa6bc63adb820d16571ac5513ba368a56762282863f00ea17c3715c17ebdf0145a1d99c0cd7c601e6c30d81013165f4f0424fff278a057e20825f1ade000c85191c7569d5e341326f4364842439d9eb63b26bed1bc549351167f5c6f32426718cccd02dd277f0a43c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_mirred={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4f, 0xa, 0x0, 0x7, 0x6}, 0x6, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x20, 0x1, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4bdde14f, 0x2, 0x5, 0x1, 0x4}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x5, 0xc2, 0x8b6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xbd95, 0x10000006, 0x5, 0x7ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x8, 0x7f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x0, 0x48000, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xfffffffa, 0x1, 0x80, 0x71}, 0x4}}]}, {0xa, 0x6, "0fdc232cf0e1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x1014, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0xfe7, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x6c, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x39, 0x6, "7e6d39fcce2a7f0ab48247caa2d6e9658ba6756b1d90d19553173ee9bd3d052673207d738549c6cd4dd0a566f1d82c761de42bbd06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x40, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}]}]}}]}, 0x1ac0}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) 3.586269569s ago: executing program 7 (id=2368): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000001c0), 0x200000, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000024e0000000000000000000105000000100200"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'hsr0\x00', {0x2, 0x4e23, @empty}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000001880)) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='ufshcd_exception_event\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000340)='affs\x00', 0x0, &(0x7f00000001c0)='grpquota') 3.578614653s ago: executing program 1 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r0, 0x0, 0x100000200000000}, 0x18) socket(0xa, 0x3, 0x3a) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_GET(r3, 0x0, 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f000080d000/0x4000)=nil, 0x4000, 0x0) 3.578190559s ago: executing program 2 (id=2370): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x4, 0x0, @ioapic={0x5000, 0x2, 0xa, 0x1, 0x0, [{0x1, 0x0, 0x9, '\x00', 0x34}, {0x2e, 0x6, 0x2, '\x00', 0x8}, {0xd, 0x0, 0x3, '\x00', 0x34}, {0x9, 0x0, 0x0, '\x00', 0x19}, {0x0, 0x7e, 0x1, '\x00', 0x8}, {0x4, 0x5c, 0x1, '\x00', 0x3}, {0x2, 0x0, 0x6b, '\x00', 0x9}, {0x8, 0x80, 0x9, '\x00', 0xf2}, {0x9, 0xf, 0x3, '\x00', 0xf2}, {0xf7, 0x4, 0x9, '\x00', 0x8}, {0x4, 0x2, 0x5}, {0x6, 0x1, 0x1, '\x00', 0xec}, {0x1, 0xa6, 0x1, '\x00', 0x5}, {0x1, 0x7, 0xc, '\x00', 0x30}, {0x23, 0x9, 0xfe, '\x00', 0x8}, {0x1, 0x4, 0x79, '\x00', 0x4}, {0x1, 0x1, 0x1, '\x00', 0xfb}, {0x7, 0x4, 0x1d, '\x00', 0x9}, {0x8, 0x2, 0xae, '\x00', 0x10}, {0x3, 0x7, 0x1, '\x00', 0x9}, {0xf8, 0x0, 0xf, '\x00', 0x7}, {0x8, 0x5, 0x0, '\x00', 0xfb}, {0xd, 0x5, 0x0, '\x00', 0x40}, {0x1, 0x8e, 0x9, '\x00', 0x2}]}}) 3.357553259s ago: executing program 3 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000900fe880000000000000000000000000101140035007767310000"], 0x50}}, 0x0) 2.186930372s ago: executing program 2 (id=2372): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0xd, 0x96, {0x96, 0x23, "c54f9e4eb11fb1d27306e2d485c90a4468bacc58be8e15b42f6e69e60fa86b28f3e0aa7bff94f90e7258776f852fd595bc98028d3cbea011c5884facd754f5bf08c935116aadc74350ab882df42041a5f39b40515289cfb2ef612969da3eb429b3d2fc348c07fcd30c1121554a8bc6382f5f906cefa7d623c81a9074f0d04df0ee2d99c5f7f0d4697656ad19bfe05095b61a34f0"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000080)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x2, 0x1, 0xb, "20e6"}, @main=@item_4={0x3, 0x0, 0x8, "99706a54"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x54, 0x1, {0x22, 0xe23}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x26, "8b6950431f0524b2ffbd65fbb70ba2b8e977d93738435db2cf777cf406e49dd9bef542542f49"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0xdd, "9c1b33bb684ef0aada7e1914bd0e4fc5500f7b2bb112aa39c6d0d5ad975e35b34b1c21fac0a46921e7043e8884c99819078009bfc0fcbace3e5c0ac3c30c23908c6aae8521b644b4b97fa9048d92260a324f6453c4e079d2d536a7eefeadd65e5e81a7c287f53c83309b4364a659d3eacdde1b39ec1e28e0d310330d4b419f6c2ebbb331874afb4f94b0b26a378527857b4d7c4f9ad07a5468681419126e3ff4794faa8161b0ee5620433b2ca3a7c60096dba83dd480cca4ee1950bfbb9b9b3fa4c44289a2ceafb19aa3eba34ce07e285b3046bb8e9a3a129a7d47c536"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x80}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xf8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="403005000000050edced887a6cfd495e243c8984a603481b27f527ab0fb2fec2aa6e2277e6aa29737ddb779b9852fae24a5585462678bdf79a7f4b3ba7cb5c5e5b867a48b106a5abecc0fdb99ff875ae9007a1e48d6519d30a4108edcfca2cde06fcc0c72c6d006c77f9dd11f8f2af473f97a5a25306c398bb9e02de1d8f8db22c15b48f93f4d7443a1b35b7313d4f5dfc0ee05082c85eb80680e5d4976f2735efe4963f2c1d8931b98c00bed0c8de9c90"], 0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="90e7b9aacea8ccc3d84d96337659c19e6026babbbd2779d7955b993cea6660a750e3c15e392d6e72a8624ae9277b80a8ac69c8259723c5a4c150e86d996a49dce70fad4552b8b5d2885cc2de3d89605794bd27883f49b449f54df363f1de7a08f34fe3b9e5df1317f18d81da5d16a0d0fa4eb3f3b5ca18fa62f1d578099dbc4bb1a7778cab6428cc540ad57d98687a74d7f5837c89d1f3102a2068d6cdd64c028a32a4be43a6c843c6403c280556a6546ec10fac6acf0265d207576c85837e619c9b5d19dee99eb0aac935059bb416f319245cca59843c3902fbb2183f5ab9413bb4c358f84fe33ae19870a220e48bc202c43e48b517", 0xf6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.170364081s ago: executing program 3 (id=2373): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.61566461s ago: executing program 1 (id=2374): mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/oops_count', 0x0, 0x85f34f8010bdc4b0) syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x47043ef9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001e0007010000000000000000017c00000400fc800c00018008000600ffff00000c000280080072800400b60008000900", @ANYBLOB="27073ede56141d1dc1102b46bdb4b8309ed4b4c05f5988c00300ee3bb10d3703e6f0cf080ee8d411919724da1f"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='signal_deliver\x00', r3, 0x0, 0x1000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.615019054s ago: executing program 6 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x301, 0x6c, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) 1.36797163s ago: executing program 6 (id=2376): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 414.665855ms ago: executing program 3 (id=2377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r0, 0x0, 0x100000200000000}, 0x18) socket(0xa, 0x3, 0x3a) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_GET(r3, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f000080d000/0x4000)=nil, 0x4000, 0x0) 351.389253ms ago: executing program 7 (id=2378): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x28, r11, 0x10b, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x880) 297.224983ms ago: executing program 1 (id=2379): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ed000000ed03"], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getgroups(0x1, &(0x7f0000000040)=[0x0]) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): dummy_hcd [ 557.287906][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.307678][ T970] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 557.337082][ T970] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.411726][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 557.498817][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.625952][ T970] usb 3-1: config 0 descriptor?? [ 557.633586][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 557.695636][ T970] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 557.703145][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.735857][ T9] usb 7-1: config 0 descriptor?? [ 557.816100][ T30] audit: type=1400 audit(2000000007.380:811): avc: denied { write } for pid=13227 comm="syz.7.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.867046][T13231] FAULT_INJECTION: forcing a failure. [ 557.867046][T13231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.880743][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.3.1886 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 557.880764][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.880773][T13231] Call Trace: [ 557.880782][T13231] [ 557.880788][T13231] dump_stack_lvl+0x16c/0x1f0 [ 557.880817][T13231] should_fail_ex+0x512/0x640 [ 557.880843][T13231] should_fail_alloc_page+0xe7/0x130 [ 557.880863][T13231] prepare_alloc_pages+0x3c2/0x610 [ 557.880890][T13231] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 557.880917][T13231] ? kasan_save_stack+0x42/0x60 [ 557.880941][T13231] ? kasan_save_track+0x14/0x30 [ 557.880964][T13231] ? __kasan_slab_alloc+0x89/0x90 [ 557.880984][T13231] ? __lock_acquire+0xaa4/0x1ba0 [ 557.881013][T13231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.881048][T13231] ? __lock_acquire+0xaa4/0x1ba0 [ 557.881078][T13231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.881107][T13231] ? policy_nodemask+0xea/0x4e0 [ 557.881125][T13231] alloc_pages_mpol+0x1fb/0x550 [ 557.881143][T13231] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 557.881162][T13231] ? __anon_vma_prepare+0x2db/0x5e0 [ 557.881191][T13231] folio_alloc_mpol_noprof+0x36/0x2f0 [ 557.881212][T13231] vma_alloc_folio_noprof+0xed/0x1e0 [ 557.881232][T13231] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 557.881251][T13231] ? __anon_vma_prepare+0x2e2/0x5e0 [ 557.881283][T13231] do_pte_missing+0x223d/0x3fb0 [ 557.881312][T13231] ? __pmd_alloc+0x3c2/0x870 [ 557.881336][T13231] __handle_mm_fault+0x103d/0x2a40 [ 557.881373][T13231] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.881411][T13231] ? find_vma+0xbf/0x140 [ 557.881430][T13231] ? __pfx_find_vma+0x10/0x10 [ 557.881452][T13231] handle_mm_fault+0x3fe/0xad0 [ 557.881481][T13231] do_user_addr_fault+0x7a6/0x1370 [ 557.881502][T13231] ? rcu_is_watching+0x12/0xc0 [ 557.881523][T13231] exc_page_fault+0x5c/0xc0 [ 557.881545][T13231] asm_exc_page_fault+0x26/0x30 [ 557.881560][T13231] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 557.881579][T13231] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 557.881595][T13231] RSP: 0018:ffffc900052b7cd8 EFLAGS: 00050202 [ 557.881610][T13231] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 557.881620][T13231] RDX: fffff52000a56fb6 RSI: ffffc900052b7d38 RDI: 0000200000000080 [ 557.881630][T13231] RBP: 0000200000000080 R08: 0000000000000000 R09: fffff52000a56fb5 [ 557.881640][T13231] R10: ffffc900052b7daf R11: 0000000000000000 R12: ffffc900052b7d38 [ 557.881649][T13231] R13: 00002000000000f8 R14: 00007ffffffff000 R15: 0000000000000000 [ 557.881673][T13231] _copy_to_user+0xbb/0xd0 [ 557.881699][T13231] do_statfs_native+0x9e/0x100 [ 557.881721][T13231] ? __pfx_do_statfs_native+0x10/0x10 [ 557.881752][T13231] ? fput+0x70/0xf0 [ 557.881773][T13231] __do_sys_fstatfs+0xee/0x100 [ 557.881795][T13231] ? __pfx___do_sys_fstatfs+0x10/0x10 [ 557.881815][T13231] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 557.881846][T13231] ? rcu_is_watching+0x12/0xc0 [ 557.881867][T13231] do_syscall_64+0xcd/0x260 [ 557.881892][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.881908][T13231] RIP: 0033:0x7f9aa8b8e969 [ 557.881921][T13231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.881935][T13231] RSP: 002b:00007f9aa9abe038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 557.881949][T13231] RAX: ffffffffffffffda RBX: 00007f9aa8db5fa0 RCX: 00007f9aa8b8e969 [ 557.881959][T13231] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 557.881968][T13231] RBP: 00007f9aa9abe090 R08: 0000000000000000 R09: 0000000000000000 [ 557.881977][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.881986][T13231] R13: 0000000000000000 R14: 00007f9aa8db5fa0 R15: 00007ffdf974e5f8 [ 557.882009][T13231] [ 558.472392][ T5861] usb 3-1: USB disconnect, device number 43 [ 558.523626][T13239] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 558.575415][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 558.626819][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.634336][ T30] audit: type=1400 audit(2000000008.035:812): avc: denied { read write } for pid=13238 comm="syz.7.1888" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 558.645019][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 558.668399][ T9] usb 7-1: media controller created [ 558.696506][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.715939][ T30] audit: type=1400 audit(2000000008.053:813): avc: denied { open } for pid=13238 comm="syz.7.1888" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 558.897847][ T9] az6027: usb out operation failed. (-71) [ 558.904393][ T9] az6027: usb out operation failed. (-71) [ 558.910470][ T9] stb0899_attach: Driver disabled by Kconfig [ 558.917543][ T9] az6027: no front-end attached [ 558.917543][ T9] [ 558.926451][ T30] audit: type=1400 audit(2000000008.418:814): avc: denied { setopt } for pid=13240 comm="syz.3.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 558.948004][ T9] az6027: usb out operation failed. (-71) [ 558.954141][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 558.972976][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 558.986342][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 559.004741][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 559.021375][ T9] usb 7-1: USB disconnect, device number 21 [ 559.035918][T12978] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 559.061446][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 559.228016][T12978] usb 8-1: Using ep0 maxpacket: 16 [ 559.236310][T12978] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 559.245612][T12978] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.258771][T12978] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.270460][T12978] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.270657][ T5861] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 559.282270][T12978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.296124][T12978] usb 8-1: Product: syz [ 559.300288][T12978] usb 8-1: Manufacturer: syz [ 559.304976][T12978] usb 8-1: SerialNumber: syz [ 559.431160][ T970] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 559.441820][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 559.455043][ T5861] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 559.464216][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.474699][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.493242][ T5861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.503215][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.511785][ T5861] usb 2-1: Product: syz [ 559.516050][ T5861] usb 2-1: Manufacturer: syz [ 559.520698][ T5861] usb 2-1: SerialNumber: syz [ 559.593416][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.613563][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.632300][ T970] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 559.641840][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.653450][ T970] usb 3-1: config 0 descriptor?? [ 559.750969][T12978] usb 8-1: 0:2 : does not exist [ 559.756021][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 559.776058][T12978] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 559.806270][T12978] usb 8-1: USB disconnect, device number 12 [ 559.933613][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 559.948613][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.961316][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 559.961340][T13258] vivid-001: ================= START STATUS ================= [ 559.980573][T13258] vivid-001: Radio HW Seek Mode: Bounded [ 559.980626][T13258] vivid-001: Radio Programmable HW Seek: false [ 559.980644][T13258] vivid-001: RDS Rx I/O Mode: Block I/O [ 559.980663][T13258] vivid-001: Generate RBDS Instead of RDS: false [ 559.994718][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.000204][T13258] vivid-001: RDS Reception: [ 560.018911][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 560.021442][T13258] true [ 560.023546][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.040640][ T5861] usb 2-1: 0:2 : does not exist [ 560.050394][T13258] [ 560.054361][T13258] vivid-001: RDS Program Type: 0 inactive [ 560.056629][ T9] usb 7-1: config 0 descriptor?? [ 560.065958][T13258] vivid-001: RDS PS Name: inactive [ 560.066040][T13254] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 560.074099][T13258] vivid-001: RDS Radio Text: inactive [ 560.084643][T13258] vivid-001: RDS Traffic Announcement: false inactive [ 560.086895][ T9] hub 7-1:0.0: USB hub found [ 560.097840][T13258] vivid-001: RDS Traffic Program: false inactive [ 560.104237][T13258] vivid-001: RDS Music: false inactive [ 560.116551][T13258] vivid-001: ================== END STATUS ================== [ 560.308315][ T9] hub 7-1:0.0: 2 ports detected [ 560.500405][ T5861] usb 2-1: USB disconnect, device number 38 [ 560.603377][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 561.397644][T13280] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 561.891280][ T5861] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 562.071580][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 562.084025][ T5861] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 562.096318][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.120211][ T5861] usb 4-1: config 0 descriptor?? [ 562.728827][ T5861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 562.811822][ T970] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 562.816146][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.822331][ T970] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 562.853070][ T970] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 562.853798][ T5861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 562.861253][ T970] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 562.871634][ T5861] usb 4-1: media controller created [ 562.892548][ T970] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 562.928445][ T970] usb 3-1: USB disconnect, device number 44 [ 562.946015][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.067545][ T5861] az6027: usb out operation failed. (-71) [ 563.073644][ T5861] az6027: usb out operation failed. (-71) [ 563.080777][ T5861] stb0899_attach: Driver disabled by Kconfig [ 563.086784][ T5861] az6027: no front-end attached [ 563.086784][ T5861] [ 563.098518][ T5861] az6027: usb out operation failed. (-71) [ 563.104399][ T5861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 563.125922][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 563.154340][ T5861] dvb-usb: schedule remote query interval to 400 msecs. [ 563.164367][ T5861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 563.189328][ T5861] usb 4-1: USB disconnect, device number 45 [ 563.837678][ T5861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 564.172460][T13317] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1915'. [ 565.393645][T13335] bridge0: port 2(gretap0) entered blocking state [ 565.401348][T13335] bridge0: port 2(gretap0) entered disabled state [ 565.409077][T13335] gretap0: entered allmulticast mode [ 565.431453][T13335] gretap0: entered promiscuous mode [ 565.857439][ T47] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 565.907486][T13343] Invalid source name [ 565.925012][T13343] UBIFS error (pid: 13343): cannot open "./file0", error -22 [ 566.048481][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 566.076282][ T47] usb 8-1: config 6 has an invalid interface number: 225 but max is 0 [ 566.099016][ T47] usb 8-1: config 6 has no interface number 0 [ 566.108457][T13341] affs: No valid root block on device nbd6 [ 566.134783][ T47] usb 8-1: config 6 interface 225 has no altsetting 0 [ 566.438027][ T47] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=61.ac [ 566.457452][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.468247][ T47] usb 8-1: Product: syz [ 566.472524][ T47] usb 8-1: Manufacturer: syz [ 566.479131][ T47] usb 8-1: SerialNumber: syz [ 566.750701][T13331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.754253][ T5861] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 566.772887][T13331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.796057][ T47] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 566.867457][T13362] lo speed is unknown, defaulting to 1000 [ 566.884981][ T47] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 566.904207][ T47] dib0700: firmware download failed at 7 with -22 [ 566.935777][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 566.976909][ T47] usb 8-1: USB disconnect, device number 13 [ 566.986105][ T5861] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 567.021378][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.061741][ T5861] usb 2-1: config 0 descriptor?? [ 567.353696][ T5861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 567.377520][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 567.381099][T13378] delete_channel: no stack [ 567.427910][ T5861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 567.459624][ T5861] usb 2-1: media controller created [ 567.513722][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.578918][ T5861] az6027: usb out operation failed. (-71) [ 567.596409][ T5861] az6027: usb out operation failed. (-71) [ 567.604124][ T24] usb 7-1: USB disconnect, device number 22 [ 567.685406][ T5861] stb0899_attach: Driver disabled by Kconfig [ 567.709965][ T5861] az6027: no front-end attached [ 567.709965][ T5861] [ 567.722342][ T5861] az6027: usb out operation failed. (-71) [ 567.734468][ T5861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 567.788137][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 567.835797][ T5861] dvb-usb: schedule remote query interval to 400 msecs. [ 567.842929][ T5861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 567.882309][ T5861] usb 2-1: USB disconnect, device number 39 [ 568.083430][ T5861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 569.134187][ T30] audit: type=1400 audit(2000000006.884:815): avc: denied { create } for pid=13401 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 569.651587][ T30] audit: type=1400 audit(2000000007.268:816): avc: denied { setopt } for pid=13401 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 570.142966][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 570.298821][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 570.412019][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.441703][T13417] sg_write: data in/out 1876711487/120 bytes for SCSI command 0x0-- guessing data in; [ 570.441703][T13417] program syz.6.1943 not setting count and/or reply_len properly [ 570.476003][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.509846][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.522346][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.531133][ T24] usb 4-1: Product: syz [ 570.541666][ T24] usb 4-1: Manufacturer: syz [ 570.546632][ T24] usb 4-1: SerialNumber: syz [ 570.598523][T13419] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 570.792786][ T30] audit: type=1400 audit(2000000008.427:817): avc: denied { read } for pid=13420 comm="syz.7.1945" path="socket:[39320]" dev="sockfs" ino=39320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 570.796064][T13425] ucma_write: process 420 (syz.7.1945) changed security contexts after opening file descriptor, this is not allowed. [ 571.246562][T13429] vcan0: tx address claim with different name [ 571.554728][ T47] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 571.761855][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 571.768918][ T5892] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 571.833356][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.903571][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 571.962552][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 571.965667][ T47] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 572.024753][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.033083][ T47] usb 3-1: Product: syz [ 572.072903][ T5892] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 572.075802][ T47] usb 3-1: Manufacturer: syz [ 572.123231][ T47] usb 3-1: SerialNumber: syz [ 572.142600][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.187824][ T47] usb 3-1: config 0 descriptor?? [ 572.242218][ T5892] usb 8-1: config 0 descriptor?? [ 572.411584][ T24] usb 4-1: 0:2 : does not exist [ 572.484828][ T24] usb 4-1: unit 6 not found! [ 572.534922][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.608655][T13446] loop6: detected capacity change from 0 to 524287999 [ 572.612569][ T24] usb 4-1: USB disconnect, device number 46 [ 572.633589][T13446] buffer_io_error: 7 callbacks suppressed [ 572.633604][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.648690][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.658329][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.668469][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.678053][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.686669][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.695487][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.705423][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.714007][T13446] ldm_validate_partition_table(): Disk read failed. [ 572.721993][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.731163][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.740395][T13446] Dev loop6: unable to read RDB block 0 [ 572.750236][T13446] loop6: unable to read partition table [ 572.754645][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.775097][T13446] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 573.086915][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.159169][T13451] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1952'. [ 573.169958][T13447] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1952'. [ 573.252504][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 573.254181][T13448] Invalid logical block size (10) [ 573.335407][T13452] x_tables: unsorted underflow at hook 3 [ 573.377922][ T5892] usb 8-1: media controller created [ 573.661466][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.700358][ T47] usb 3-1: USB disconnect, device number 45 [ 573.772999][ T5892] az6027: usb out operation failed. (-71) [ 573.801127][ T5892] az6027: usb out operation failed. (-71) [ 573.815714][ T5892] stb0899_attach: Driver disabled by Kconfig [ 573.920234][ T5892] az6027: no front-end attached [ 573.920234][ T5892] [ 573.943240][ T5892] az6027: usb out operation failed. (-71) [ 573.954011][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 573.963337][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input35 [ 574.004249][ T5892] dvb-usb: schedule remote query interval to 400 msecs. [ 574.024455][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 574.050449][ T5892] usb 8-1: USB disconnect, device number 14 [ 574.129187][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 574.203495][ T970] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 574.359536][T13470] netlink: 'syz.3.1958': attribute type 8 has an invalid length. [ 574.844631][ T30] audit: type=1400 audit(2000000001.814:818): avc: denied { accept } for pid=13465 comm="syz.3.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.934379][ T970] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 574.944770][T12978] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 574.963251][ T970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 574.984569][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.114160][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 575.121901][T12978] usb 7-1: Using ep0 maxpacket: 16 [ 575.138507][T12978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.163244][T12978] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 575.180222][T12978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.190805][T12978] usb 7-1: config 0 descriptor?? [ 575.663264][ T970] ath6kl: Failed to submit usb control message: -71 [ 575.671877][ T970] ath6kl: unable to send the bmi data to the device: -71 [ 575.677274][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.678944][ T970] ath6kl: Unable to send get target info: -71 [ 575.691617][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.703602][ T970] ath6kl: Failed to init ath6kl core: -71 [ 575.709836][ T970] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 575.712219][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.722536][ T970] usb 2-1: USB disconnect, device number 40 [ 575.734522][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.751525][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.760775][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.768256][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 575.777206][ T9] usb 4-1: config 0 has no interface number 0 [ 575.783355][ T9] usb 4-1: config 0 interface 29 has no altsetting 0 [ 575.791630][ T9] usb 4-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 575.800768][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.808987][ T5892] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 575.820206][ T9] usb 4-1: config 0 descriptor?? [ 575.969546][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 575.987153][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.989969][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 575.998318][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.018065][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.049056][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 576.070719][ T5892] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 576.080808][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.089520][ T5892] usb 3-1: Product: syz [ 576.093738][ T5892] usb 3-1: Manufacturer: syz [ 576.098633][ T5892] usb 3-1: SerialNumber: syz [ 576.104974][ T5892] usb 3-1: config 0 descriptor?? [ 576.263665][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.272452][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.311779][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 576.319487][ T47] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 576.493474][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 576.538663][ T24] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 576.545265][T13489] loop6: detected capacity change from 0 to 524287999 [ 576.564718][ T47] usb 2-1: device descriptor read/64, error -71 [ 576.566674][T13489] ldm_validate_partition_table(): Disk read failed. [ 576.582415][T13489] Dev loop6: unable to read RDB block 0 [ 576.586424][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.593317][T13489] loop6: unable to read partition table [ 576.603023][T13489] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 576.641258][T12978] usbhid 7-1:0.0: can't add hid device: -71 [ 576.664440][T12978] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 576.666880][ T24] usb 8-1: config 0 descriptor?? [ 576.751297][T12978] usb 7-1: USB disconnect, device number 23 [ 576.857081][ T47] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 576.878185][T13479] Invalid logical block size (10) [ 576.902323][ T5892] usb 3-1: USB disconnect, device number 46 [ 576.975124][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 576.986693][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.998066][ T47] usb 2-1: device descriptor read/64, error -71 [ 577.008968][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 577.033020][ T24] usb 8-1: media controller created [ 577.048581][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.134914][ T47] usb usb2-port1: attempt power cycle [ 577.194481][ T24] az6027: usb out operation failed. (-71) [ 577.202224][ T24] az6027: usb out operation failed. (-71) [ 577.208106][ T24] stb0899_attach: Driver disabled by Kconfig [ 577.327813][ T9] usb 4-1: string descriptor 0 read error: -71 [ 577.334812][ T9] usb-storage 4-1:0.29: USB Mass Storage device detected [ 577.356342][ T24] az6027: no front-end attached [ 577.356342][ T24] [ 577.380897][ T24] az6027: usb out operation failed. (-71) [ 577.386677][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 577.392096][ T9] usb-storage 4-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 577.413725][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input36 [ 577.486077][T13495] netlink: 'syz.6.1965': attribute type 10 has an invalid length. [ 577.561184][T13496] netlink: 'syz.6.1965': attribute type 10 has an invalid length. [ 577.569691][T13496] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1965'. [ 577.637138][ T47] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 577.840033][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 577.848074][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 577.860243][ T9] usb 4-1: USB disconnect, device number 47 [ 577.860724][T13495] bridge0: port 2(team0) entered disabled state [ 577.873056][T13495] team0: left allmulticast mode [ 577.877929][T13495] team0: left promiscuous mode [ 577.882912][T13495] bridge0: port 2(team0) entered disabled state [ 577.895567][ T47] usb 2-1: device descriptor read/8, error -71 [ 577.908188][ T24] usb 8-1: USB disconnect, device number 15 [ 577.915520][T13495] batman_adv: batadv0: Adding interface: team0 [ 577.922069][T13495] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.947696][T13495] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 577.958234][T13496] team0: entered promiscuous mode [ 577.963981][T13496] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.970900][T13496] batman_adv: batadv0: Interface activated: team0 [ 577.977406][T13496] batman_adv: batadv0: Interface deactivated: team0 [ 577.984110][T13496] batman_adv: batadv0: Removing interface: team0 [ 578.002344][T13496] bridge0: port 2(team0) entered blocking state [ 578.008726][T13496] bridge0: port 2(team0) entered disabled state [ 578.015183][T13496] team0: entered allmulticast mode [ 578.161055][ T47] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 578.431088][ T47] usb 2-1: device descriptor read/8, error -71 [ 578.469489][ T30] audit: type=1400 audit(2000000000.084:819): avc: denied { create } for pid=13503 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 578.479139][T13504] FAULT_INJECTION: forcing a failure. [ 578.479139][T13504] name failslab, interval 1, probability 0, space 0, times 0 [ 578.518918][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 578.531526][T13504] CPU: 1 UID: 0 PID: 13504 Comm: syz.7.1969 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 578.531550][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.531559][T13504] Call Trace: [ 578.531564][T13504] [ 578.531571][T13504] dump_stack_lvl+0x16c/0x1f0 [ 578.531598][T13504] should_fail_ex+0x512/0x640 [ 578.531618][T13504] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 578.531644][T13504] should_failslab+0xc2/0x120 [ 578.531661][T13504] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 578.531684][T13504] ? __alloc_skb+0x2b2/0x380 [ 578.531702][T13504] __alloc_skb+0x2b2/0x380 [ 578.531718][T13504] ? __pfx___alloc_skb+0x10/0x10 [ 578.531735][T13504] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 578.531759][T13504] netlink_alloc_large_skb+0x69/0x130 [ 578.531777][T13504] netlink_sendmsg+0x6a1/0xdd0 [ 578.531800][T13504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.531828][T13504] ____sys_sendmsg+0xa95/0xc70 [ 578.531855][T13504] ? copy_msghdr_from_user+0x10a/0x160 [ 578.531871][T13504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.531900][T13504] ___sys_sendmsg+0x134/0x1d0 [ 578.531916][T13504] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.531968][T13504] __sys_sendmsg+0x16d/0x220 [ 578.531986][T13504] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.532009][T13504] ? rcu_is_watching+0x12/0xc0 [ 578.532033][T13504] do_syscall_64+0xcd/0x260 [ 578.532057][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.532073][T13504] RIP: 0033:0x7fc81ad8e969 [ 578.532086][T13504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.532102][T13504] RSP: 002b:00007fc81bc79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.532117][T13504] RAX: ffffffffffffffda RBX: 00007fc81afb5fa0 RCX: 00007fc81ad8e969 [ 578.532126][T13504] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000008 [ 578.532136][T13504] RBP: 00007fc81bc79090 R08: 0000000000000000 R09: 0000000000000000 [ 578.532144][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.532153][T13504] R13: 0000000000000000 R14: 00007fc81afb5fa0 R15: 00007ffe34d61a08 [ 578.532175][T13504] [ 578.558521][ T47] usb usb2-port1: unable to enumerate USB device [ 579.893356][T13528] Invalid source name [ 579.893371][T13528] UBIFS error (pid: 13528): cannot open "./file0", error -22 [ 579.957402][T13524] affs: No valid root block on device nbd1 [ 580.245752][ T9] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 580.367266][ T30] audit: type=1400 audit(2000000000.888:820): avc: denied { setopt } for pid=13531 comm="syz.7.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.367315][ T30] audit: type=1400 audit(2000000000.888:821): avc: denied { bind } for pid=13531 comm="syz.7.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.367351][ T30] audit: type=1400 audit(2000000000.888:822): avc: denied { name_bind } for pid=13531 comm="syz.7.1978" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 580.367386][ T30] audit: type=1400 audit(2000000000.888:823): avc: denied { write } for pid=13531 comm="syz.7.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.384625][ T9] usb 7-1: device descriptor read/64, error -71 [ 580.488610][ T30] audit: type=1400 audit(2000000001.000:824): avc: denied { setattr } for pid=13534 comm="syz.1.1979" name="NETLINK" dev="sockfs" ino=38715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.523910][T13540] fuse: Bad value for 'rootmode' [ 580.963586][T13545] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1982'. [ 580.977516][ T9] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 581.112340][ T9] usb 7-1: device descriptor read/64, error -71 [ 581.245348][ T9] usb usb7-port1: attempt power cycle [ 581.878350][ T9] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 581.978369][ T9] usb 7-1: device descriptor read/8, error -71 [ 582.204928][T13563] syz.3.1987: attempt to access beyond end of device [ 582.204928][T13563] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 582.230774][T13563] SQUASHFS error: Failed to read block 0x0: -5 [ 582.250189][T13563] unable to read squashfs_super_block [ 582.390388][T13563] syz.3.1987 (13563): drop_caches: 2 [ 582.394527][ T5906] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 582.404801][ T9] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 582.620739][T13563] syz.3.1987 (13563): drop_caches: 2 [ 582.924770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.175236][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.233778][ T9] usb 7-1: device descriptor read/8, error -71 [ 583.281870][ T5906] usb 8-1: Using ep0 maxpacket: 16 [ 583.325847][ T5906] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 583.424710][ T5906] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.456340][ T5906] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.486458][ T9] usb usb7-port1: unable to enumerate USB device [ 583.506703][ T5906] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.516674][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.527351][ T5906] usb 8-1: Product: syz [ 583.535058][ T5906] usb 8-1: Manufacturer: syz [ 583.545829][ T5906] usb 8-1: SerialNumber: syz [ 583.613228][ T5861] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 583.633686][T13583] fuse: Bad value for 'rootmode' [ 583.918357][ T5861] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 583.930966][ T5861] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 583.941536][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.407012][ T5906] usb 8-1: 0:2 : does not exist [ 584.458762][ T5861] ath6kl: Failed to submit usb control message: -71 [ 584.467614][ T5861] ath6kl: unable to send the bmi data to the device: -71 [ 584.479245][ T5861] ath6kl: Unable to send get target info: -71 [ 584.487679][ T5861] ath6kl: Failed to init ath6kl core: -71 [ 584.503316][ T5861] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 584.515721][ T5861] usb 2-1: USB disconnect, device number 45 [ 585.064429][ T5906] usb 8-1: USB disconnect, device number 16 [ 585.107616][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.472834][ T30] audit: type=1400 audit(2000000000.608:825): avc: denied { mounton } for pid=13599 comm="syz.3.1998" path="/bus" dev="ramfs" ino=38900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 585.473100][T13600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 585.494613][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.562409][T13600] overlayfs: missing 'lowerdir' [ 585.600437][ T30] audit: type=1400 audit(2000000000.729:826): avc: denied { remount } for pid=13599 comm="syz.3.1998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 585.651693][ T5824] Bluetooth: hci0: Malformed Event: 0x02 [ 585.847652][ T5861] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 586.379960][ T47] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 586.478220][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 586.554775][ T5861] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 586.656141][ T5861] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 586.708958][ T5861] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 586.728620][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.739019][ T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.766278][ T30] audit: type=1400 audit(2000000001.814:827): avc: denied { listen } for pid=13617 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 586.781902][ T5861] usb 4-1: Product: syz [ 586.796179][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 586.817625][ T5861] usb 4-1: Manufacturer: syz [ 586.828686][ T5861] usb 4-1: SerialNumber: syz [ 586.833419][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 586.853161][ T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.878259][ T5861] usb 4-1: config 0 descriptor?? [ 586.880147][T13620] fuse: Bad value for 'rootmode' [ 586.894098][ T47] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 586.903824][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.950730][ T47] usb 7-1: config 0 descriptor?? [ 587.055261][ T47] gspca_main: spca561-2.14.0 probing abcd:cdee [ 587.105581][T13623] bridge0: port 1(gretap0) entered blocking state [ 587.114466][T13623] bridge0: port 1(gretap0) entered disabled state [ 587.122922][T13623] gretap0: entered allmulticast mode [ 587.140147][T13623] gretap0: entered promiscuous mode [ 587.151123][T13623] bridge0: port 1(gretap0) entered blocking state [ 587.157773][T13623] bridge0: port 1(gretap0) entered forwarding state [ 587.193358][ T47] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 587.210390][ T5906] usb 4-1: USB disconnect, device number 48 [ 587.290075][ T47] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.355281][ T47] usb 7-1: MIDIStreaming interface descriptor not found [ 587.444361][ T30] audit: type=1400 audit(2000000002.450:828): avc: denied { getopt } for pid=13624 comm="syz.2.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.446070][ T47] usb 7-1: USB disconnect, device number 28 [ 587.795881][ T5906] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 588.472444][ T5906] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 588.512838][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.521782][ T5906] usb 3-1: Product: syz [ 588.525982][ T5906] usb 3-1: Manufacturer: syz [ 588.530590][ T5906] usb 3-1: SerialNumber: syz [ 588.540236][ T5906] usb 3-1: config 0 descriptor?? [ 588.554602][ T5906] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 047 [ 588.780157][ T30] audit: type=1326 audit(2000000003.704:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13639 comm="syz.1.2010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d67d8e969 code=0x0 [ 588.801265][ T5906] (null): failure setting delay to 10us [ 588.808842][ T5906] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 588.824494][ T5906] usb 3-1: USB disconnect, device number 47 [ 589.732668][ T30] audit: type=1400 audit(2000000000.121:830): avc: denied { accept } for pid=13651 comm="syz.6.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 590.501775][ T30] audit: type=1400 audit(2000000000.823:831): avc: denied { ioctl } for pid=13657 comm="syz.3.2014" path="socket:[40098]" dev="sockfs" ino=40098 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 590.588679][T13673] usb usb8: usbfs: process 13673 (syz.3.2014) did not claim interface 0 before use [ 590.931123][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 591.477498][ T30] audit: type=1326 audit(2000000001.730:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dcf8e969 code=0x7ffc0000 [ 591.680970][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 591.718847][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.748047][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.755725][ T30] audit: type=1326 audit(2000000001.730:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe5dcf8e969 code=0x7ffc0000 [ 591.769287][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.793048][ T9] usb 7-1: Product: syz [ 591.797246][ T9] usb 7-1: Manufacturer: syz [ 591.801940][ T9] usb 7-1: SerialNumber: syz [ 591.821496][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821522][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821540][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821557][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821575][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821592][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821609][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821626][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821643][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821661][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821678][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821696][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821719][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821737][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821754][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821771][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821788][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821806][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821823][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821840][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821857][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821875][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821892][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821909][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821927][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821944][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821961][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821979][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.821996][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.822013][ T5864] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 591.863724][ T5864] hid-generic 0001:0000:0000.0014: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 591.867341][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 591.885538][ T30] audit: type=1326 audit(2000000001.730:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dcf8e969 code=0x7ffc0000 [ 591.885578][ T30] audit: type=1326 audit(2000000001.730:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe5dcf8e969 code=0x7ffc0000 [ 591.885606][ T30] audit: type=1326 audit(2000000001.730:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dcf8e969 code=0x7ffc0000 [ 592.063514][ T5892] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 592.121748][T13699] fido_id[13699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 592.201355][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2025'. [ 592.777573][T13672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13672 comm=syz.6.2018 [ 592.780695][T13692] tty tty1: ldisc open failed (-12), clearing slot 0 [ 592.829985][ T5864] usb 7-1: USB disconnect, device number 29 [ 592.867542][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.910769][ T5906] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 592.980561][T13718] fuse: Unknown parameter 'use00000000000000000000' [ 592.986856][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 593.063151][T13721] 9pnet_fd: Insufficient options for proto=fd [ 593.083671][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 593.083685][ T30] audit: type=1400 audit(2000000003.255:843): avc: denied { connect } for pid=13719 comm="syz.3.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 593.150983][T13725] netlink: 'syz.3.2028': attribute type 4 has an invalid length. [ 593.183306][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 593.192495][ T5906] usb 8-1: device descriptor read/64, error -71 [ 593.332361][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.350108][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.360845][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 593.442989][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 593.497943][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.532976][ T9] usb 2-1: config 0 descriptor?? [ 593.631119][ T5906] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 593.795498][ T5906] usb 8-1: device descriptor read/64, error -71 [ 593.809170][ T5892] usb 7-1: Service connection timeout for: 256 [ 593.837733][T13739] Invalid source name [ 593.841834][T13739] UBIFS error (pid: 13739): cannot open "./file0", error -22 [ 593.857760][ T5892] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 593.959914][ T5892] ath9k_htc: Failed to initialize the device [ 594.099462][ T5906] usb usb8-port1: attempt power cycle [ 594.105785][ T9] hid (null): global environment stack underflow [ 594.126730][ T5864] usb 7-1: ath9k_htc: USB layer deinitialized [ 594.194791][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0015/input/input38 [ 594.789601][T13737] affs: No valid root block on device nbd6 [ 595.363222][ T5906] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 595.406898][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0015/input/input39 [ 596.318867][ T5906] usb 8-1: device not accepting address 19, error -71 [ 596.348906][ T9] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 596.377729][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 596.539199][ T9] usb 2-1: USB disconnect, device number 46 [ 596.612891][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 596.625182][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.655658][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.848212][ T5864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 596.885335][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 596.934809][T13776] fuse: Unknown parameter 'use00000000000000000000' [ 596.948605][T13759] fido_id[13759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 596.970415][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 597.019150][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 597.083000][ T5864] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 597.084622][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.134555][ T5864] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 597.220405][ T30] audit: type=1400 audit(2000000000.346:844): avc: denied { create } for pid=13778 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.241941][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 597.250823][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 597.258069][ T5864] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 597.258093][ T5864] usb 4-1: config 220 has no interface number 2 [ 597.258138][ T5864] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 597.456558][T13787] nfs: Unknown parameter 'TIPC' [ 597.527953][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 597.587504][ T30] audit: type=1400 audit(2000000000.346:845): avc: denied { setopt } for pid=13778 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.637500][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 597.653113][T13786] lo speed is unknown, defaulting to 1000 [ 597.675218][ T5892] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 597.697837][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 597.728230][ T5892] usb 3-1: USB disconnect, device number 48 [ 597.738963][ T5864] usb 4-1: config 220 interface 0 has no altsetting 0 [ 597.757107][ T5864] usb 4-1: config 220 interface 76 has no altsetting 0 [ 597.764019][ T5864] usb 4-1: config 220 interface 1 has no altsetting 0 [ 597.827710][ T5864] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 597.916528][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.949181][ T5864] usb 4-1: Product: syz [ 597.965817][ T5864] usb 4-1: Manufacturer: syz [ 597.984287][ T5864] usb 4-1: SerialNumber: syz [ 598.232520][T13798] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 598.240507][T13798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2042'. [ 598.250265][T13798] team0: entered promiscuous mode [ 598.257593][T13798] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.265045][T13798] bridge0: port 2(team0) entered blocking state [ 598.271603][T13798] bridge0: port 2(team0) entered disabled state [ 598.278587][T13798] team0: entered allmulticast mode [ 598.300720][ T5892] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 598.479807][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 598.551912][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.671135][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.710209][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 598.733800][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 598.745653][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 598.770553][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.803504][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 598.818726][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 598.844684][ T5864] usb 4-1: selecting invalid altsetting 0 [ 598.847382][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 598.859172][ T5864] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 598.865563][ T5864] usb 4-1: No valid video chain found. [ 598.871326][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 598.876290][ T5864] usb 4-1: selecting invalid altsetting 0 [ 598.882611][ T5864] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 598.898337][ T5864] usb 4-1: USB disconnect, device number 49 [ 599.637707][ T5861] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 599.640920][ T5892] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 599.675036][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 599.829651][ T5861] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 179, using maximum allowed: 30 [ 599.853981][ T5861] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.931202][ T5861] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8192, setting to 64 [ 599.950758][ T5892] usb 3-1: USB disconnect, device number 49 [ 599.971363][ T5861] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 179 [ 600.132114][ T5861] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.151161][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 600.159471][ T5861] usb 8-1: SerialNumber: syz [ 600.994225][ T5861] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 601.037990][ T5861] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 601.295271][T13826] fuse: Unknown parameter 'user_i00000000000000000000' [ 601.331344][ T5861] usb 8-1: USB disconnect, device number 21 [ 601.833001][ T5892] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 602.054566][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 602.064239][ T5892] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 602.074512][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.090461][ T5892] usb 3-1: config 0 descriptor?? [ 602.128055][T13840] TCP: out of memory -- consider tuning tcp_mem [ 602.802475][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 602.818789][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.848582][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 602.856042][ T5892] usb 3-1: media controller created [ 602.881422][T13851] netlink: 'syz.7.2059': attribute type 10 has an invalid length. [ 602.914643][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.950452][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.596078][T13851] bond0: entered promiscuous mode [ 605.601184][T13851] bond_slave_0: entered promiscuous mode [ 605.622492][T13851] bond_slave_1: entered promiscuous mode [ 605.772103][T13851] bond0: entered allmulticast mode [ 605.781736][ T5892] az6027: usb out operation failed. (-71) [ 605.782290][T13851] bond_slave_0: entered allmulticast mode [ 606.150399][T13851] bond_slave_1: entered allmulticast mode [ 606.168485][ T5892] az6027: usb out operation failed. (-71) [ 606.184977][T13851] team0: Port device bond0 added [ 606.221288][ T5892] stb0899_attach: Driver disabled by Kconfig [ 606.827940][ T5892] az6027: no front-end attached [ 606.827940][ T5892] [ 606.861049][ T5892] az6027: usb out operation failed. (-71) [ 606.905469][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 607.012725][ T30] audit: type=1400 audit(2000000000.093:846): avc: denied { audit_write } for pid=13864 comm="syz.1.2063" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 607.225820][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 607.246087][T13875] fuse: Unknown parameter 'user_i00000000000000000000' [ 607.302752][ T5892] dvb-usb: schedule remote query interval to 400 msecs. [ 607.313435][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 607.368740][ T5892] usb 3-1: USB disconnect, device number 50 [ 607.412632][T13881] 9pnet_fd: Insufficient options for proto=fd [ 607.564309][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.593847][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 607.652118][T13877] bond0: (slave rose0): Enslaving as an active interface with an up link [ 607.946539][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 608.148127][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 608.174722][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 608.219244][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.252616][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.682827][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.692060][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.700181][ T9] usb 2-1: Product: syz [ 608.709651][ T9] usb 2-1: Manufacturer: syz [ 608.714313][ T9] usb 2-1: SerialNumber: syz [ 610.169747][T13938] Invalid source name [ 610.173837][T13938] UBIFS error (pid: 13938): cannot open "./file0", error -22 [ 610.408997][ T9] usb 2-1: 0:2 : does not exist [ 611.045166][T13938] affs: No valid root block on device nbd3 [ 611.259794][ T9] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 611.283332][ T30] audit: type=1326 audit(2000000004.714:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.7.2077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x0 [ 611.314558][ T9] usb 2-1: USB disconnect, device number 47 [ 611.388409][T13948] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2077'. [ 611.863972][T13952] vlan3: entered allmulticast mode [ 611.871818][T13952] bridge_slave_0: entered allmulticast mode [ 613.588215][ T5864] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 613.659732][T13993] random: crng reseeded on system resumption [ 614.285086][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 614.345253][ T5864] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 614.411738][ T5864] usb 4-1: config 0 has no interface number 0 [ 614.459844][ T5864] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.477346][T14000] netlink: 'syz.6.2091': attribute type 1 has an invalid length. [ 614.495952][ T5864] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 614.520122][T14000] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2091'. [ 614.538736][ T5864] usb 4-1: config 0 interface 12 has no altsetting 0 [ 614.557611][ T5864] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 614.583817][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.614564][ T5864] usb 4-1: Product: syz [ 614.624514][ T5864] usb 4-1: Manufacturer: syz [ 614.634793][ T5864] usb 4-1: SerialNumber: syz [ 614.654211][ T5864] usb 4-1: config 0 descriptor?? [ 614.694506][ T5864] f81534 4-1:0.12: unsupported endpoint max packet size [ 614.863577][T14014] Invalid source name [ 614.867642][T14014] UBIFS error (pid: 14014): cannot open "./file0", error -22 [ 614.962554][ T9] usb 4-1: USB disconnect, device number 50 [ 615.097175][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 615.471259][T14018] affs: No valid root block on device nbd1 [ 615.697278][ T30] audit: type=1400 audit(2000000003.872:848): avc: denied { ioctl } for pid=13992 comm="syz.7.2089" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 615.697657][T13993] Restarting kernel threads ... done. [ 615.909874][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 616.004916][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.039816][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 616.286141][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 616.295564][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.303571][ T24] usb 3-1: Product: syz [ 616.326365][ T24] usb 3-1: Manufacturer: syz [ 616.331004][ T24] usb 3-1: SerialNumber: syz [ 616.926635][ T24] usb 3-1: config 0 descriptor?? [ 617.533421][T14034] loop6: detected capacity change from 0 to 524287999 [ 617.543343][T14034] buffer_io_error: 24 callbacks suppressed [ 617.543378][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.560753][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.569309][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.577388][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.585549][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.593801][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.602571][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.942011][T14035] Invalid logical block size (10) [ 617.957167][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.995343][T14034] ldm_validate_partition_table(): Disk read failed. [ 618.015454][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.418744][T12978] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 618.428091][T14034] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.447950][T14034] Dev loop6: unable to read RDB block 0 [ 618.493890][T14034] loop6: unable to read partition table [ 618.522310][T14034] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 618.603529][T12978] usb 2-1: Using ep0 maxpacket: 16 [ 618.624539][T12978] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 618.636213][T12978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.680828][T12978] usb 2-1: Product: syz [ 618.689280][T12978] usb 2-1: Manufacturer: syz [ 618.700179][T12978] usb 2-1: SerialNumber: syz [ 618.712367][ T5185] ldm_validate_partition_table(): Disk read failed. [ 618.722182][T12978] usb 2-1: config 0 descriptor?? [ 618.728719][ T5185] Dev loop6: unable to read RDB block 0 [ 618.747426][ T5185] loop6: unable to read partition table [ 618.773434][ T24] usb 3-1: USB disconnect, device number 51 [ 618.925827][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.971040][ T30] audit: type=1400 audit(2000000006.940:849): avc: denied { ioctl } for pid=14037 comm="syz.1.2098" path="socket:[41726]" dev="sockfs" ino=41726 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 619.068380][ T24] usb 2-1: USB disconnect, device number 48 [ 619.084812][ T5864] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 619.267018][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 619.275824][ T5864] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 619.285095][ T5864] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.295861][ T5864] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.307379][ T5864] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.316530][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.324968][ T5864] usb 7-1: Product: syz [ 619.329151][ T5864] usb 7-1: Manufacturer: syz [ 619.334079][ T5864] usb 7-1: SerialNumber: syz [ 619.459028][ T5862] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 619.620274][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 619.633648][ T5862] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 619.643815][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.655273][ T5862] usb 4-1: config 0 descriptor?? [ 619.672994][T14069] FAULT_INJECTION: forcing a failure. [ 619.672994][T14069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.692893][T14069] CPU: 0 UID: 0 PID: 14069 Comm: syz.2.2104 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 619.692917][T14069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.692925][T14069] Call Trace: [ 619.692931][T14069] [ 619.692937][T14069] dump_stack_lvl+0x16c/0x1f0 [ 619.692964][T14069] should_fail_ex+0x512/0x640 [ 619.692990][T14069] _copy_to_user+0x32/0xd0 [ 619.693023][T14069] simple_read_from_buffer+0xcb/0x170 [ 619.693049][T14069] proc_fail_nth_read+0x197/0x270 [ 619.693072][T14069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.693096][T14069] ? rw_verify_area+0xcf/0x680 [ 619.693114][T14069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.693137][T14069] vfs_read+0x1de/0xc70 [ 619.693162][T14069] ? __pfx___mutex_lock+0x10/0x10 [ 619.693184][T14069] ? __pfx_vfs_read+0x10/0x10 [ 619.693211][T14069] ? __fget_files+0x20e/0x3c0 [ 619.693241][T14069] ksys_read+0x12a/0x240 [ 619.693261][T14069] ? __pfx_ksys_read+0x10/0x10 [ 619.693281][T14069] ? rcu_is_watching+0x12/0xc0 [ 619.693305][T14069] do_syscall_64+0xcd/0x260 [ 619.693328][T14069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.693343][T14069] RIP: 0033:0x7fe5dcf8d37c [ 619.693352][T14069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 619.693363][T14069] RSP: 002b:00007fe5ddd80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.693373][T14069] RAX: ffffffffffffffda RBX: 00007fe5dd1b5fa0 RCX: 00007fe5dcf8d37c [ 619.693379][T14069] RDX: 000000000000000f RSI: 00007fe5ddd800a0 RDI: 0000000000000003 [ 619.693385][T14069] RBP: 00007fe5ddd80090 R08: 0000000000000000 R09: 0000000000000000 [ 619.693393][T14069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.693401][T14069] R13: 0000000000000000 R14: 00007fe5dd1b5fa0 R15: 00007fff600b5a28 [ 619.693423][T14069] [ 619.902709][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 619.911320][ T5864] usb 7-1: 0:2 : does not exist [ 620.112489][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.447364][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 620.455419][ T5862] usb 4-1: media controller created [ 620.484860][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.509361][ T5862] az6027: usb out operation failed. (-71) [ 620.531069][ T5862] az6027: usb out operation failed. (-71) [ 620.561197][ T5862] stb0899_attach: Driver disabled by Kconfig [ 620.749277][ T5862] az6027: no front-end attached [ 620.749277][ T5862] [ 620.862833][ T5862] az6027: usb out operation failed. (-71) [ 620.868626][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 620.964058][T14084] Invalid source name [ 620.968703][T14084] UBIFS error (pid: 14084): cannot open "./file0", error -22 [ 621.023694][ T5864] usb 7-1: USB disconnect, device number 30 [ 621.097858][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 621.167640][ T5862] dvb-usb: schedule remote query interval to 400 msecs. [ 621.220323][ T5862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 621.249940][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.605417][ T5862] usb 4-1: USB disconnect, device number 51 [ 622.253875][T14082] affs: No valid root block on device nbd7 [ 622.643905][ T5862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 623.082869][ T5862] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 623.172239][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2113'. [ 623.261668][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.387908][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 623.585363][ T5892] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 623.599439][ T5862] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 623.619557][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.632437][ T5862] usb 4-1: Product: syz [ 623.642310][ T5862] usb 4-1: Manufacturer: syz [ 623.647444][ T5862] usb 4-1: SerialNumber: syz [ 623.711209][ T5862] usb 4-1: config 0 descriptor?? [ 623.740826][ T5862] usb-storage 4-1:0.0: USB Mass Storage device detected [ 623.776821][ T5892] usb 7-1: unable to get BOS descriptor or descriptor too short [ 623.787801][ T5892] usb 7-1: not running at top speed; connect to a high speed hub [ 623.891184][ T5892] usb 7-1: config 2 has an invalid interface number: 221 but max is 0 [ 623.906581][ T30] audit: type=1400 audit(2000000011.496:850): avc: denied { mount } for pid=14112 comm="syz.7.2117" name="/" dev="hugetlbfs" ino=41836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 624.043142][ T5892] usb 7-1: config 2 has no interface number 0 [ 624.137952][ T5892] usb 7-1: config 2 interface 221 has no altsetting 0 [ 624.279077][ T5892] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 624.384717][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.455695][ T5892] usb 7-1: Product: syz [ 624.469695][ T5892] usb 7-1: Manufacturer: syz [ 624.483456][ T5892] usb 7-1: SerialNumber: syz [ 624.831104][ T30] audit: type=1326 audit(2000000012.356:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 624.855949][ T30] audit: type=1326 audit(2000000012.356:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 624.880380][ T30] audit: type=1326 audit(2000000012.356:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 625.119172][ T30] audit: type=1326 audit(2000000012.356:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 625.243032][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 625.659365][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 625.683402][ T5862] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 625.899422][ T30] audit: type=1326 audit(2000000012.356:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 627.020985][ T30] audit: type=1326 audit(2000000012.356:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 627.270830][ T30] audit: type=1326 audit(2000000012.356:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 627.294535][ T30] audit: type=1326 audit(2000000012.365:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 627.369240][ T30] audit: type=1326 audit(2000000012.365:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81ad8e969 code=0x7fc00000 [ 627.399390][ T5862] usb 4-1: USB disconnect, device number 52 [ 627.434048][T14134] syzkaller0: entered promiscuous mode [ 627.439546][T14134] syzkaller0: entered allmulticast mode [ 627.920515][T14142] Invalid source name [ 627.924632][T14142] UBIFS error (pid: 14142): cannot open "./file0", error -22 [ 628.439938][T14132] affs: No valid root block on device nbd1 [ 629.700714][T14137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 629.717816][T14137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.724448][T14137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.731940][T14137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.768688][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 629.768704][ T30] audit: type=1400 audit(2000000017.033:917): avc: denied { unmount } for pid=10600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 630.491526][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 631.937830][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 631.944478][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 631.952264][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 633.040349][ T5862] usb 7-1: USB disconnect, device number 31 [ 633.551221][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 633.777959][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 633.865068][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 634.016428][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.062308][T12978] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 634.082962][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.184292][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.270047][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.307810][ T24] usb 4-1: Product: syz [ 634.382087][ T24] usb 4-1: Manufacturer: syz [ 634.390356][ T24] usb 4-1: SerialNumber: syz [ 634.501459][T12978] usb 3-1: Using ep0 maxpacket: 32 [ 634.593090][T12978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.604364][T12978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.613702][ T30] audit: type=1400 audit(2000000021.514:918): avc: denied { write } for pid=14195 comm="syz.7.2133" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 634.637720][T12978] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 635.291686][ T5862] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 635.597754][ T24] usb 4-1: 0:2 : does not exist [ 635.623007][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 635.658458][T14193] affs: No valid root block on device nbd1 [ 635.698935][ T5862] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.804450][ T24] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 635.842543][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.852813][T12978] usb 3-1: config 0 descriptor?? [ 635.864642][ T5862] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 635.969185][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 636.382440][ T24] usb 4-1: USB disconnect, device number 53 [ 636.884975][ T5862] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 636.899727][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.921100][ T5862] usb 7-1: Product: syz [ 636.925629][ T5862] usb 7-1: Manufacturer: syz [ 636.931752][ T5862] usb 7-1: SerialNumber: syz [ 636.957330][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.960097][ T5862] usb 7-1: config 0 descriptor?? [ 637.691234][ T5862] gs_usb 7-1:0.0: Configuring for 118 interfaces [ 637.895562][ T5862] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 637.993373][ T5862] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 638.124827][ T5862] usb 7-1: USB disconnect, device number 32 [ 638.601458][T12978] usbhid 3-1:0.0: can't add hid device: -71 [ 638.609658][T12978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 638.651006][T12978] usb 3-1: USB disconnect, device number 52 [ 639.065719][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 639.269577][ T5892] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 639.279191][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 639.297384][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.322748][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.333660][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 639.342735][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.304918][ T9] usb 2-1: config 0 descriptor?? [ 640.346445][ T5892] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 640.676715][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 640.692170][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.947635][ T5892] ath6kl: Failed to submit usb control message: -71 [ 640.954293][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 640.961656][ T5892] ath6kl: Unable to send get target info: -71 [ 640.970077][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 640.984432][ T5892] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 640.995385][ T5892] usb 4-1: USB disconnect, device number 54 [ 641.627579][T14271] affs: No valid root block on device nbd7 [ 642.178262][ T9] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 643.566283][ T5862] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 643.845619][ T5892] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 643.888140][T14090] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 644.093960][T14090] usb 8-1: device descriptor read/64, error -71 [ 644.398428][ T24] usb 2-1: USB disconnect, device number 49 [ 644.421779][T14090] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 644.582175][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 644.589330][ T5892] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 644.598715][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.726023][ T5892] usb 7-1: config 0 descriptor?? [ 644.764224][T14090] usb 8-1: device descriptor read/64, error -71 [ 645.102722][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 645.193878][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.238467][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 645.267974][ T5892] usb 7-1: media controller created [ 645.318141][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.453955][ T5892] az6027: usb out operation failed. (-71) [ 645.495063][ T5892] az6027: usb out operation failed. (-71) [ 645.500834][ T5892] stb0899_attach: Driver disabled by Kconfig [ 645.527937][T14090] usb usb8-port1: attempt power cycle [ 645.556754][ T5892] az6027: no front-end attached [ 645.556754][ T5892] [ 645.574882][ T5892] az6027: usb out operation failed. (-71) [ 645.994426][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 646.014450][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input42 [ 646.036395][ T5892] dvb-usb: schedule remote query interval to 400 msecs. [ 646.055669][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 646.078369][T14090] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 646.091774][ T5892] usb 7-1: USB disconnect, device number 33 [ 646.114460][T14090] usb 8-1: device descriptor read/8, error -71 [ 646.184261][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 646.375990][T14317] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 646.966107][T14090] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 647.190704][T14090] usb 8-1: device descriptor read/8, error -71 [ 647.311391][T14090] usb usb8-port1: unable to enumerate USB device [ 647.575888][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 647.599212][ T5862] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 647.751804][T14331] affs: No valid root block on device nbd3 [ 647.804803][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 647.853326][ T24] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 647.887974][ T24] usb 7-1: config 0 has no interface number 1 [ 647.895113][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.203402][ T24] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 648.235923][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.271408][ T24] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 648.296493][ T5862] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 648.331755][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.345660][ T24] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 648.611898][ T24] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 648.715462][ T24] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.223292][ T5862] usb 2-1: config 0 descriptor?? [ 649.232383][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 649.246183][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.252685][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.263517][ T30] audit: type=1400 audit(2000000035.273:919): avc: denied { getopt } for pid=14340 comm="syz.7.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 649.850422][ T30] audit: type=1400 audit(2000000035.273:920): avc: denied { bind } for pid=14340 comm="syz.7.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 649.998994][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 169 [ 650.057355][ T24] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 650.071849][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.087696][ T24] usb 7-1: Product: syz [ 650.091915][ T24] usb 7-1: Manufacturer: syz [ 650.096527][ T24] usb 7-1: SerialNumber: syz [ 650.131671][ T24] usb 7-1: config 0 descriptor?? [ 650.140498][T14326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.197426][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.232190][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.603381][T14354] netlink: 'syz.7.2168': attribute type 10 has an invalid length. [ 650.611537][T14354] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2168'. [ 651.103694][ T24] usb 7-1: USB disconnect, device number 34 [ 651.778729][T14362] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2161'. [ 651.875946][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.390738][ T5862] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 652.399879][ T5862] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 652.419755][ T5862] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 652.450765][ T5862] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 652.469522][ T5862] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 652.495952][ T5862] usb 2-1: USB disconnect, device number 50 [ 652.778818][ T5892] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 652.859624][T14376] hugetlbfs: syz.7.2175 (14376): Using mlock ulimits for SHM_HUGETLB is obsolete [ 653.722350][ T5862] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 653.844014][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.857614][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.870721][ T5892] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 653.888738][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.893444][ T5862] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 653.909430][ T5862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 653.919634][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.940593][ T5892] usb 7-1: config 0 descriptor?? [ 654.001014][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 654.207191][ T5862] ath6kl: Failed to submit usb control message: -71 [ 654.215898][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.224812][ T5862] ath6kl: unable to send the bmi data to the device: -71 [ 654.725386][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.735260][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 654.744441][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.754648][ T9] usb 8-1: config 0 descriptor?? [ 654.809119][ T5862] ath6kl: Unable to send get target info: -71 [ 654.824653][ T5862] ath6kl: Failed to init ath6kl core: -71 [ 654.851807][ T5862] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 655.094783][ T5862] usb 2-1: USB disconnect, device number 51 [ 655.544314][ T30] audit: type=1400 audit(2000000041.148:921): avc: denied { override_creds } for pid=14399 comm="syz.2.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 655.683352][T14403] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2172'. [ 655.696576][ T5892] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 655.710867][ T5892] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 655.727933][ T5892] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 655.755475][ T5892] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 655.766454][ T5892] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 655.803162][ T5892] usb 7-1: USB disconnect, device number 35 [ 656.021795][ T30] audit: type=1400 audit(2000000041.597:922): avc: denied { mounton } for pid=14405 comm="syz.1.2183" path="/447/file0/bus" dev="hugetlbfs" ino=42583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 656.026771][T14406] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 656.070697][T14406] overlayfs: failed to set xattr on upper [ 656.080329][T14406] overlayfs: ...falling back to redirect_dir=nofollow. [ 656.089154][T14406] overlayfs: ...falling back to index=off. [ 656.107755][T14406] overlayfs: ...falling back to uuid=null. [ 656.114354][T14406] overlayfs: maximum fs stacking depth exceeded [ 656.124392][T14410] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2179'. [ 656.459355][ T9] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 656.479104][ T9] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 656.496594][ T9] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 656.790205][ T9] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 656.811254][ T9] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 656.871604][ T9] usb 8-1: USB disconnect, device number 26 [ 657.970820][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 658.203395][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 658.554338][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 658.576414][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.368909][ T9] ath6kl: Failed to submit usb control message: -71 [ 659.431127][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 659.439240][ T9] ath6kl: Unable to send get target info: -71 [ 659.685840][ T9] ath6kl: Failed to init ath6kl core: -71 [ 659.786146][ T9] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 659.814156][ T9] usb 4-1: USB disconnect, device number 55 [ 660.429285][T14467] lo speed is unknown, defaulting to 1000 [ 661.135927][T14479] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 661.144044][T14479] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2200'. [ 661.156546][ T30] audit: type=1400 audit(2000000001.767:923): avc: denied { map } for pid=14471 comm="syz.3.2200" path="socket:[42772]" dev="sockfs" ino=42772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 661.672322][T14491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2205'. [ 661.782113][T14478] rdma_rxe: rxe_newlink: failed to add lo [ 662.056636][T14497] netlink: 'syz.3.2206': attribute type 10 has an invalid length. [ 662.064543][T14497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2206'. [ 662.071472][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 662.282816][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 662.499616][ T9] usb 2-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 662.512053][ T5906] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 662.673812][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 662.684457][ T9] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 662.696787][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.705293][ T9] usb 2-1: Product: syz [ 662.720518][ T9] usb 2-1: Manufacturer: 䐊 [ 662.725356][ T9] usb 2-1: SerialNumber: syz [ 662.841952][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 663.045323][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 663.070562][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 663.133787][ T5906] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 663.145471][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.175231][ T5906] usb 4-1: Product: syz [ 663.179738][ T5906] usb 4-1: Manufacturer: syz [ 663.193383][ T5906] usb 4-1: SerialNumber: syz [ 663.247193][ T5906] usb 4-1: config 0 descriptor?? [ 663.462031][ T30] audit: type=1400 audit(2000000004.293:924): avc: denied { accept } for pid=14490 comm="syz.1.2205" lport=54542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.469850][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 663.535973][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 663.629013][T14520] loop6: detected capacity change from 0 to 524287999 [ 663.638102][T14520] buffer_io_error: 23 callbacks suppressed [ 663.638159][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.655425][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.664667][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.676209][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.705640][ T9] usb 2-1: USB disconnect, device number 52 [ 663.739504][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.771552][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.792751][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.841492][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.875210][T14520] ldm_validate_partition_table(): Disk read failed. [ 663.899572][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.937750][T14520] Buffer I/O error on dev loop6, logical block 0, async page read [ 663.961308][T14520] Dev loop6: unable to read RDB block 0 [ 664.110326][T14520] loop6: unable to read partition table [ 664.146099][T14520] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 664.188798][T14526] Invalid logical block size (10) [ 664.242013][T12978] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 664.339725][ T5185] ldm_validate_partition_table(): Disk read failed. [ 664.349779][ T5185] Dev loop6: unable to read RDB block 0 [ 664.355572][ T5185] loop6: unable to read partition table [ 664.391137][ T5906] usb 4-1: USB disconnect, device number 56 [ 664.404973][T12978] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 664.434136][T12978] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 664.451235][T12978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.550777][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 664.564235][T14531] vlan0: entered promiscuous mode [ 664.728103][T12978] ath6kl: Failed to submit usb control message: -71 [ 664.774784][T12978] ath6kl: unable to send the bmi data to the device: -71 [ 664.783582][T12978] ath6kl: Unable to send get target info: -71 [ 665.294675][T14545] netlink: 'syz.1.2217': attribute type 10 has an invalid length. [ 665.302547][T14545] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2217'. [ 665.319872][T12978] ath6kl: Failed to init ath6kl core: -71 [ 665.352882][T12978] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 665.369511][T12978] usb 7-1: USB disconnect, device number 36 [ 666.337537][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 666.551680][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 666.584187][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 666.600991][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.657831][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.679798][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.692695][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.706960][ T24] usb 3-1: Product: syz [ 666.717999][ T24] usb 3-1: Manufacturer: syz [ 666.799237][ T24] usb 3-1: SerialNumber: syz [ 666.838094][T14576] Invalid source name [ 666.842705][T14576] UBIFS error (pid: 14576): cannot open "./file0", error -22 [ 666.979411][T14576] affs: No valid root block on device nbd3 [ 667.727645][ T24] usb 3-1: 0:2 : does not exist [ 668.238603][T14586] overlayfs: upper fs does not support file handles, falling back to index=off. [ 669.579639][ T24] usb 3-1: USB disconnect, device number 53 [ 672.195560][T12978] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 673.174130][T14629] netlink: 'syz.2.2244': attribute type 2 has an invalid length. [ 673.183882][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 673.193322][T14629] nbd: must specify an index to disconnect [ 673.214758][T12978] usb 4-1: Using ep0 maxpacket: 32 [ 673.226665][T12978] usb 4-1: config 6 has an invalid interface number: 225 but max is 0 [ 673.247214][T12978] usb 4-1: config 6 has no interface number 0 [ 673.253347][T12978] usb 4-1: config 6 interface 225 has no altsetting 0 [ 673.277796][T12978] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 673.292733][T12978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.339422][T12978] usb 4-1: Product: syz [ 673.343635][T12978] usb 4-1: Manufacturer: syz [ 673.359076][T12978] usb 4-1: SerialNumber: syz [ 674.123575][T12978] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 674.366566][T12978] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 674.441190][T12978] dib0700: firmware download failed at 7 with -22 [ 674.470769][T12978] usb 4-1: USB disconnect, device number 57 [ 677.261561][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2253'. [ 677.916110][T12978] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 678.342795][T12978] usb 2-1: Using ep0 maxpacket: 32 [ 678.356457][T12978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 678.368809][T12978] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 678.419188][T12978] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 678.427401][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 678.433390][T12978] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 678.453669][T12978] usb 2-1: config 128 has no interface number 0 [ 678.462109][T12978] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 678.480585][T12978] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 678.803021][T12978] usb 2-1: config 128 interface 127 has no altsetting 0 [ 679.083160][T12978] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 679.131457][T12978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.180715][T12978] usb 2-1: Product: syz [ 679.184974][T12978] usb 2-1: Manufacturer: syz [ 679.218490][T12978] usb 2-1: SerialNumber: syz [ 679.614802][T14090] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 679.686874][T12978] usb 2-1: USB disconnect, device number 53 [ 679.732203][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.095946][T14090] usb 7-1: Using ep0 maxpacket: 8 [ 680.111716][T14090] usb 7-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 680.124484][T14090] usb 7-1: config 0 interface 0 has no altsetting 0 [ 680.134359][T14090] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 680.151002][T14090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.179360][T14090] usb 7-1: config 0 descriptor?? [ 680.408882][T14090] petalynx 0003:18B1:0037.001A: item fetching failed at offset 6/7 [ 680.421485][T14090] petalynx 0003:18B1:0037.001A: parse failed [ 680.427873][T14090] petalynx 0003:18B1:0037.001A: probe with driver petalynx failed with error -22 [ 680.623499][T14090] usb 7-1: USB disconnect, device number 37 [ 681.204792][T12978] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 681.284331][T14723] sg_write: data in/out 1876711487/120 bytes for SCSI command 0x0-- guessing data in; [ 681.284331][T14723] program syz.1.2269 not setting count and/or reply_len properly [ 681.368108][T12978] usb 3-1: Using ep0 maxpacket: 16 [ 681.387173][T12978] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 681.397943][T12978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.415621][T12978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.596848][T12978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.710866][T12978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.753284][T12978] usb 3-1: Product: syz [ 681.793728][T12978] usb 3-1: Manufacturer: syz [ 681.798492][T12978] usb 3-1: SerialNumber: syz [ 682.472727][T12978] usb 3-1: 0:2 : does not exist [ 684.151074][T12978] usb 3-1: USB disconnect, device number 54 [ 684.209386][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.651388][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 687.141256][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 687.166089][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 687.186449][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 687.208274][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 687.222344][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.230892][ T24] usb 7-1: Product: syz [ 687.235137][ T24] usb 7-1: Manufacturer: syz [ 687.240354][ T24] usb 7-1: SerialNumber: syz [ 687.247438][ T24] usb 7-1: config 0 descriptor?? [ 687.442660][ T5906] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 687.801065][T14773] loop6: detected capacity change from 0 to 524287999 [ 687.809366][T14773] buffer_io_error: 23 callbacks suppressed [ 687.809394][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.823924][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.832941][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.845037][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.854256][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.862571][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.870945][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.879112][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.887126][T14773] ldm_validate_partition_table(): Disk read failed. [ 687.893969][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.902111][T14773] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.910433][T14773] Dev loop6: unable to read RDB block 0 [ 687.917163][T14773] loop6: unable to read partition table [ 687.923497][T14773] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 688.150618][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 688.171344][ T5906] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 688.184386][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.200775][T14793] Invalid logical block size (10) [ 688.224398][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.248704][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.258132][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.259681][ T24] usb 7-1: USB disconnect, device number 38 [ 688.372703][ T5906] usb 2-1: Product: syz [ 688.379377][T14798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2293'. [ 688.388608][ T5906] usb 2-1: Manufacturer: syz [ 688.395704][ T5906] usb 2-1: SerialNumber: syz [ 689.364685][T14090] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 689.690872][ T5906] usb 2-1: 0:2 : does not exist [ 689.946588][T14090] usb 8-1: Using ep0 maxpacket: 16 [ 690.027489][T14090] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.105602][T14090] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.190605][T14090] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.259467][T14090] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.269279][T14090] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.278477][T14090] usb 8-1: Product: syz [ 690.283176][T14090] usb 8-1: Manufacturer: syz [ 690.289990][T14090] usb 8-1: SerialNumber: syz [ 690.654199][ T5906] usb 2-1: USB disconnect, device number 54 [ 691.114523][T14825] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 691.122562][T14825] team0: left allmulticast mode [ 691.127414][T14825] team0: left promiscuous mode [ 691.132418][T14825] bridge0: port 1(team0) entered disabled state [ 691.161324][T14824] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 691.169195][T14824] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2297'. [ 691.501875][T14825] batman_adv: batadv0: Adding interface: team0 [ 691.502861][T14090] usb 8-1: 0:2 : does not exist [ 691.508343][T14825] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.538170][T14825] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 691.548693][T14824] team0: entered promiscuous mode [ 691.554348][T14824] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.563128][T14824] batman_adv: batadv0: Interface activated: team0 [ 691.571013][T14824] batman_adv: batadv0: Interface deactivated: team0 [ 691.577958][T14824] batman_adv: batadv0: Removing interface: team0 [ 691.587021][T14824] bridge0: port 1(team0) entered blocking state [ 691.594371][T14824] bridge0: port 1(team0) entered disabled state [ 691.600918][T14824] team0: entered allmulticast mode [ 691.748899][ T30] audit: type=1400 audit(2000000001.122:925): avc: denied { name_connect } for pid=14828 comm="syz.3.2301" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 691.836040][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2302'. [ 692.190114][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 692.247054][T14090] usb 8-1: USB disconnect, device number 27 [ 692.929307][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 693.276197][T14853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59152 sclass=netlink_route_socket pid=14853 comm=syz.1.2309 [ 693.347705][T14853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14853 comm=syz.1.2309 [ 693.372325][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2309'. [ 693.410923][T14864] No source specified [ 693.478435][T14866] netlink: 'syz.3.2307': attribute type 10 has an invalid length. [ 694.057154][T14871] netlink: 'syz.3.2307': attribute type 10 has an invalid length. [ 694.421260][T14866] bridge0: port 2(team0) entered disabled state [ 694.439786][T14866] team0: left allmulticast mode [ 694.511399][T14871] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2307'. [ 694.854492][T14866] team0: left promiscuous mode [ 694.879377][T14866] bridge0: port 2(team0) entered disabled state [ 695.308589][T14866] batman_adv: batadv0: Adding interface: team0 [ 695.434037][T14866] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.460991][T14866] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 695.515311][T14871] team0: entered promiscuous mode [ 695.526775][T14871] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.541635][T14871] batman_adv: batadv0: Interface activated: team0 [ 695.556323][T14871] batman_adv: batadv0: Interface deactivated: team0 [ 695.579772][T14871] batman_adv: batadv0: Removing interface: team0 [ 695.621824][T14871] bridge0: port 2(team0) entered blocking state [ 695.673507][T14871] bridge0: port 2(team0) entered disabled state [ 695.684139][T14871] team0: entered allmulticast mode [ 695.697452][T14888] : entered promiscuous mode [ 695.907438][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 696.173477][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 696.324363][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 696.348197][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.386581][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.438311][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.469396][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.490962][ T9] usb 3-1: Product: syz [ 696.505838][ T9] usb 3-1: Manufacturer: syz [ 696.517603][ T9] usb 3-1: SerialNumber: syz [ 696.762527][ T5906] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 696.856235][T14907] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 696.987129][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 697.041466][ T5906] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 697.092076][ T5906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.096824][T14907] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 697.123625][T14907] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 697.133502][ T5906] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.135143][T14907] team0: Port device wlan1 added [ 697.170422][ T9] usb 3-1: 0:2 : does not exist [ 697.177338][ T5906] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.187251][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.207763][ T5906] usb 7-1: Product: syz [ 697.228045][ T5906] usb 7-1: Manufacturer: syz [ 697.232698][ T5906] usb 7-1: SerialNumber: syz [ 697.532583][T14090] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 697.721056][T14090] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 697.778460][T14090] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 697.789056][T14090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.985292][ T5906] usb 7-1: 0:2 : does not exist [ 697.999246][ T9] usb 3-1: USB disconnect, device number 55 [ 698.411703][T14090] ath6kl: Failed to submit usb control message: -71 [ 698.426434][T14090] ath6kl: unable to send the bmi data to the device: -71 [ 698.451488][T14090] ath6kl: Unable to send get target info: -71 [ 698.464509][T14090] ath6kl: Failed to init ath6kl core: -71 [ 698.470810][T14090] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 698.497129][T14090] usb 4-1: USB disconnect, device number 58 [ 698.771562][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 698.801225][ T5906] usb 7-1: USB disconnect, device number 39 [ 699.251577][T12978] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 699.313882][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 699.424549][T12978] usb 2-1: Using ep0 maxpacket: 8 [ 699.459589][T12978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 699.505133][T12978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 699.517839][T12978] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 699.764231][T12978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.793961][T12978] usb 2-1: Product: syz [ 699.798166][T12978] usb 2-1: Manufacturer: syz [ 699.808446][T12978] usb 2-1: SerialNumber: syz [ 699.827072][T12978] usb 2-1: config 0 descriptor?? [ 699.949239][T14945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.032722][T14945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.269462][T14090] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 700.280554][T14945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.363100][T14954] loop6: detected capacity change from 0 to 524287999 [ 700.373990][T14954] buffer_io_error: 7 callbacks suppressed [ 700.374018][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.388461][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.397382][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.406188][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.414971][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.428429][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.438625][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.447572][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.456109][T14954] ldm_validate_partition_table(): Disk read failed. [ 700.463265][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.471710][T14954] Buffer I/O error on dev loop6, logical block 0, async page read [ 700.481839][T14954] Dev loop6: unable to read RDB block 0 [ 700.489992][T14954] loop6: unable to read partition table [ 700.497147][T14954] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 700.632565][T14090] usb 7-1: device descriptor read/64, error -71 [ 700.644103][T14945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.750406][T14929] Invalid logical block size (10) [ 700.784381][T12978] usb 2-1: USB disconnect, device number 55 [ 700.895046][T14945] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.911068][T14090] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 701.113727][T14090] usb 7-1: device descriptor read/64, error -71 [ 701.227531][T14945] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.252932][T14090] usb usb7-port1: attempt power cycle [ 701.267774][T14945] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.290209][T14945] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.772680][T14090] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 701.812370][T14090] usb 7-1: device descriptor read/8, error -71 [ 701.830083][ T5862] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 701.985057][T14976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 701.995733][T14976] batadv_slave_0: entered allmulticast mode [ 702.005876][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.021701][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.036078][ T5862] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 702.047048][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.069520][ T5862] usb 8-1: config 0 descriptor?? [ 702.076129][T14090] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 702.110385][T14090] usb 7-1: device descriptor read/8, error -71 [ 702.200416][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'. [ 702.212758][T14985] netlink: 'syz.1.2340': attribute type 10 has an invalid length. [ 702.241188][T14090] usb usb7-port1: unable to enumerate USB device [ 702.270249][T14985] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2340'. [ 703.284556][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2344'. [ 703.460455][T14986] Invalid source name [ 703.464460][T14986] UBIFS error (pid: 14986): cannot open "./file0", error -22 [ 703.630645][T14986] affs: No valid root block on device nbd2 [ 704.319672][T15004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.333677][T15004] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 704.347454][T15004] bond0: (slave vcan1): Error -95 calling set_mac_address [ 704.605734][T15010] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2337'. [ 704.979056][T15015] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2352'. [ 704.994028][ T5862] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 705.008731][ T5862] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 705.101311][ T5862] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 705.139729][ T5862] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 705.151460][ T5862] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 705.622686][ T5862] usb 8-1: USB disconnect, device number 28 [ 706.149232][ T5862] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 706.309509][ T5862] usb 8-1: device descriptor read/64, error -71 [ 706.779629][ T5862] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 706.930371][ T5862] usb 8-1: device descriptor read/64, error -71 [ 707.059561][ T5862] usb usb8-port1: attempt power cycle [ 707.453393][ T5862] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 707.477201][ T5862] usb 8-1: device descriptor read/8, error -71 [ 707.656681][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 707.733501][ T5862] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 707.787156][ T5862] usb 8-1: device descriptor read/8, error -71 [ 707.827370][ T9] usb 7-1: device descriptor read/64, error -71 [ 707.927006][ T5862] usb usb8-port1: unable to enumerate USB device [ 708.169444][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 709.082702][ T9] usb 7-1: device descriptor read/64, error -71 [ 709.235759][ T9] usb usb7-port1: attempt power cycle [ 709.534680][T15074] Invalid source name [ 709.539181][T15074] UBIFS error (pid: 15074): cannot open "./file0", error -22 [ 709.783692][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 710.243338][T15074] affs: No valid root block on device nbd7 [ 710.455601][ T9] usb 7-1: device descriptor read/8, error -71 [ 711.195285][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 711.249457][T15089] syz.1.2374: attempt to access beyond end of device [ 711.249457][T15089] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 711.262787][T15089] SQUASHFS error: Failed to read block 0x0: -5 [ 711.268963][T15089] unable to read squashfs_super_block [ 711.280742][T14090] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 711.462669][T14090] usb 3-1: Using ep0 maxpacket: 16 [ 711.477221][ T9] usb 7-1: device not accepting address 47, error -71 [ 711.485092][T15089] syz.1.2374 (15089): drop_caches: 2 [ 711.585234][T15089] syz.1.2374 (15089): drop_caches: 2 [ 712.165814][T14090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.189070][T14090] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 712.198139][T14090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.213188][T14090] usb 3-1: config 0 descriptor?? [ 712.261269][ T9] usb usb7-port1: unable to enumerate USB device [ 712.792431][T14090] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 712.912700][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2378'. [ 712.921871][T15103] netlink: 'syz.7.2378': attribute type 5 has an invalid length. [ 712.929975][T15103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2378'. [ 712.963113][T15103] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 712.982223][T15103] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 712.991374][T15103] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 713.000358][T15103] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 713.010139][T15103] geneve2: entered promiscuous mode [ 713.015444][T15103] geneve2: entered allmulticast mode [ 713.104714][ C1] ================================================================== [ 713.112814][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 713.120715][ C1] Read of size 1 at addr ffff88804165bfff by task syz.7.2378/15098 [ 713.128628][ C1] [ 713.130964][ C1] CPU: 1 UID: 0 PID: 15098 Comm: syz.7.2378 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 713.130991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.131004][ C1] Call Trace: [ 713.131011][ C1] [ 713.131018][ C1] dump_stack_lvl+0x116/0x1f0 [ 713.131048][ C1] print_report+0xc3/0x670 [ 713.131067][ C1] ? __virt_addr_valid+0x5e/0x590 [ 713.131093][ C1] ? __phys_addr+0xc6/0x150 [ 713.131120][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 713.131142][ C1] kasan_report+0xe0/0x110 [ 713.131160][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 713.131184][ C1] mcp2221_raw_event+0xf94/0x1030 [ 713.131204][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.131226][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 713.131254][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 713.131275][ C1] hid_irq_in+0x35e/0x870 [ 713.131298][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 713.131324][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 713.131346][ C1] dummy_timer+0x180e/0x3a20 [ 713.131375][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 713.131396][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 713.131420][ C1] ? rcu_is_watching+0x12/0xc0 [ 713.131440][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 713.131463][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 713.131486][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 713.131508][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 713.131526][ C1] ? read_tsc+0x9/0x20 [ 713.131553][ C1] hrtimer_run_softirq+0x17d/0x350 [ 713.131571][ C1] handle_softirqs+0x216/0x8e0 [ 713.131595][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 713.131619][ C1] __irq_exit_rcu+0x109/0x170 [ 713.131649][ C1] irq_exit_rcu+0x9/0x30 [ 713.131669][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 713.131692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 713.131713][ C1] RIP: 0033:0x7fc81ac4d9f0 [ 713.131730][ C1] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 713.131750][ C1] RSP: 002b:00007ffe34d61a38 EFLAGS: 00000246 [ 713.131765][ C1] RAX: 0000000084cfb020 RBX: 00007fc81bae5720 RCX: ffffffff84cfb020 [ 713.131776][ C1] RDX: 0000000000001020 RSI: ffffffff84cfb020 RDI: 000000000000000b [ 713.131787][ C1] RBP: ffffffff84cfb020 R08: 00007fc81afa0000 R09: 00007fc81afa2000 [ 713.131799][ C1] R10: 0000000084cfb024 R11: 000000000000000b R12: 000000000000000b [ 713.131809][ C1] R13: 0000000000000000 R14: ffffffff84cfbded R15: 000000000003c3a4 [ 713.131821][ C1] ? iovec_from_user+0x2d/0x140 [ 713.131846][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 713.131876][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 713.131900][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 713.131926][ C1] [ 713.131932][ C1] [ 713.236755][T12978] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 713.238511][ C1] Allocated by task 5816: [ 713.238524][ C1] kasan_save_stack+0x33/0x60 [ 713.423472][ C1] kasan_save_track+0x14/0x30 [ 713.428133][ C1] __kasan_slab_alloc+0x89/0x90 [ 713.432959][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 713.438398][ C1] vm_area_dup+0x25/0x760 [ 713.442703][ C1] copy_process+0x7f67/0x91a0 [ 713.447355][ C1] kernel_clone+0xfc/0x960 [ 713.451759][ C1] __do_sys_clone+0xce/0x120 [ 713.456321][ C1] do_syscall_64+0xcd/0x260 [ 713.460803][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.466671][ C1] [ 713.468968][ C1] Freed by task 15060: [ 713.473012][ C1] kasan_save_stack+0x33/0x60 [ 713.477666][ C1] kasan_save_track+0x14/0x30 [ 713.482319][ C1] kasan_save_free_info+0x3b/0x60 [ 713.487321][ C1] __kasan_slab_free+0x51/0x70 [ 713.492055][ C1] slab_free_after_rcu_debug+0x116/0x350 [ 713.497677][ C1] rcu_core+0x799/0x14e0 [ 713.501900][ C1] handle_softirqs+0x216/0x8e0 [ 713.506639][ C1] __irq_exit_rcu+0x109/0x170 [ 713.511287][ C1] irq_exit_rcu+0x9/0x30 [ 713.515502][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 713.521110][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 713.527062][ C1] [ 713.529367][ C1] Last potentially related work creation: [ 713.535054][ C1] kasan_save_stack+0x33/0x60 [ 713.539714][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 713.544889][ C1] kmem_cache_free+0x160/0x4d0 [ 713.549631][ C1] exit_mmap+0x511/0xb90 [ 713.553848][ C1] __mmput+0x12a/0x410 [ 713.557893][ C1] mmput+0x62/0x70 [ 713.561595][ C1] do_exit+0x9d1/0x2c30 [ 713.565731][ C1] do_group_exit+0xd3/0x2a0 [ 713.570225][ C1] get_signal+0x2673/0x26d0 [ 713.574702][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 713.580232][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 713.585838][ C1] do_syscall_64+0xda/0x260 [ 713.590316][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.596177][ C1] [ 713.598474][ C1] The buggy address belongs to the object at ffff88804165bdc0 [ 713.598474][ C1] which belongs to the cache vm_area_struct of size 256 [ 713.612770][ C1] The buggy address is located 319 bytes to the right of [ 713.612770][ C1] allocated 256-byte region [ffff88804165bdc0, ffff88804165bec0) [ 713.627407][ C1] [ 713.629704][ C1] The buggy address belongs to the physical page: [ 713.636083][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4165b [ 713.644822][ C1] memcg:ffff88807d372781 [ 713.649041][ C1] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 713.656556][ C1] page_type: f5(slab) [ 713.660510][ C1] raw: 00fff00000000000 ffff88801c691b40 ffffea0001f91640 dead000000000005 [ 713.669067][ C1] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88807d372781 [ 713.677621][ C1] page dumped because: kasan: bad access detected [ 713.684003][ C1] page_owner tracks the page as allocated [ 713.689689][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14030, tgid 14030 (dhcpcd-run-hook), ts 618712951402, free_ts 618712057004 [ 713.694862][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.709544][ C1] post_alloc_hook+0x181/0x1b0 [ 713.709576][ C1] get_page_from_freelist+0x135c/0x3920 [ 713.709599][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 713.709623][ C1] alloc_pages_mpol+0x1fb/0x550 [ 713.709638][ C1] new_slab+0x244/0x340 [ 713.709657][ C1] ___slab_alloc+0xd9c/0x1940 [ 713.709679][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 713.709701][ C1] kmem_cache_alloc_noprof+0xef/0x3b0 [ 713.758389][ C1] vm_area_dup+0x25/0x760 [ 713.762700][ C1] copy_process+0x7f67/0x91a0 [ 713.767353][ C1] kernel_clone+0xfc/0x960 [ 713.771745][ C1] __do_sys_clone+0xce/0x120 [ 713.776314][ C1] do_syscall_64+0xcd/0x260 [ 713.780795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.786661][ C1] page last free pid 14030 tgid 14030 stack trace: [ 713.793139][ C1] __free_frozen_pages+0x69d/0xff0 [ 713.798260][ C1] __mmdrop+0xd5/0x4f0 [ 713.802309][ C1] finish_task_switch.isra.0+0x7a4/0xc10 [ 713.807919][ C1] __schedule+0x1177/0x5de0 [ 713.812401][ C1] schedule+0xe7/0x3a0 [ 713.816442][ C1] anon_pipe_read+0xbd6/0x1210 [ 713.821193][ C1] vfs_read+0xaa3/0xc70 [ 713.825325][ C1] ksys_read+0x205/0x240 [ 713.829543][ C1] do_syscall_64+0xcd/0x260 [ 713.834021][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.839888][ C1] [ 713.842183][ C1] Memory state around the buggy address: [ 713.847784][ C1] ffff88804165be80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 713.855818][ C1] ffff88804165bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 713.863868][ C1] >ffff88804165bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 713.871909][ C1] ^ [ 713.879864][ C1] ffff88804165c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 713.887901][ C1] ffff88804165c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 713.895932][ C1] ================================================================== [ 713.903965][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 713.911131][ C1] CPU: 1 UID: 0 PID: 15098 Comm: syz.7.2378 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 713.921427][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.931456][ C1] Call Trace: [ 713.934714][ C1] [ 713.937620][ C1] dump_stack_lvl+0x3d/0x1f0 [ 713.942190][ C1] panic+0x71c/0x800 [ 713.946069][ C1] ? __pfx_panic+0x10/0x10 [ 713.950463][ C1] ? __pfx__printk+0x10/0x10 [ 713.955032][ C1] ? end_report+0x4c/0x170 [ 713.959422][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 713.964595][ C1] check_panic_on_warn+0xab/0xb0 [ 713.969511][ C1] end_report+0x107/0x170 [ 713.973814][ C1] kasan_report+0xee/0x110 [ 713.978203][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 713.983388][ C1] mcp2221_raw_event+0xf94/0x1030 [ 713.988387][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.994181][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 714.000230][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 714.005665][ C1] hid_irq_in+0x35e/0x870 [ 714.009971][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 714.015319][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 714.020500][ C1] dummy_timer+0x180e/0x3a20 [ 714.025072][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 714.030258][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 714.035172][ C1] ? rcu_is_watching+0x12/0xc0 [ 714.039910][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 714.045693][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 714.050608][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 714.055785][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 714.061478][ C1] ? read_tsc+0x9/0x20 [ 714.065523][ C1] hrtimer_run_softirq+0x17d/0x350 [ 714.070617][ C1] handle_softirqs+0x216/0x8e0 [ 714.075433][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 714.080736][ C1] __irq_exit_rcu+0x109/0x170 [ 714.085398][ C1] irq_exit_rcu+0x9/0x30 [ 714.089629][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 714.095261][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.101223][ C1] RIP: 0033:0x7fc81ac4d9f0 [ 714.105614][ C1] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 714.125197][ C1] RSP: 002b:00007ffe34d61a38 EFLAGS: 00000246 [ 714.131326][ C1] RAX: 0000000084cfb020 RBX: 00007fc81bae5720 RCX: ffffffff84cfb020 [ 714.139271][ C1] RDX: 0000000000001020 RSI: ffffffff84cfb020 RDI: 000000000000000b [ 714.147226][ C1] RBP: ffffffff84cfb020 R08: 00007fc81afa0000 R09: 00007fc81afa2000 [ 714.155168][ C1] R10: 0000000084cfb024 R11: 000000000000000b R12: 000000000000000b [ 714.163111][ C1] R13: 0000000000000000 R14: ffffffff84cfbded R15: 000000000003c3a4 [ 714.171057][ C1] ? iovec_from_user+0x2d/0x140 [ 714.175886][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 714.181844][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 714.187813][ C1] ? copy_page_from_iter_atomic+0xbc0/0x1950 [ 714.193791][ C1] [ 714.197034][ C1] Kernel Offset: disabled [ 714.201337][ C1] Rebooting in 86400 seconds..