last executing test programs: 7m26.650702705s ago: executing program 32 (id=212): prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x2f0, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3\v(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x06\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xb3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0xe23, 0xfffffffc, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6m47.296210614s ago: executing program 3 (id=332): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$selinux_create(r1, &(0x7f0000000380)=@access={'system_u:object_r:devicekit_var_lib_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0xc23}, 0x55) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x2, {{0x2, 0x0, @private=0xa010102}}, {{0x2, 0x0, @empty}}}, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x301800, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/48, 0x30, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) dup2(r5, r4) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') rmdir(&(0x7f00000001c0)='./file1\x00') mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 6m46.732674949s ago: executing program 2 (id=335): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ffd3a9a75bd312c49b2222a6", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x28}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0xc080) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500007400000000000190780a010101ac1414aa05009078e00000e0460000000000000000110000ac1e000100000000830300070300443c00030a010121000000040000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac14"], 0x0) read$msr(r5, &(0x7f0000000b00)=""/102368, 0x18fe0) timerfd_create(0x2, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x7, 0x40) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000280)}) fchdir(0xffffffffffffffff) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x2c0200, 0x0) read$rfkill(r7, &(0x7f0000000340), 0x8) recvmmsg(0xffffffffffffffff, &(0x7f000001cf00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/47, 0x2f}, 0xf9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4, 0x4}, 0x80000001}, {{&(0x7f000001cb00)=@generic, 0x80, &(0x7f000001ce80)}, 0x2}], 0x3, 0x100, 0x0) 6m46.524838392s ago: executing program 33 (id=336): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="708c4a0fdf214037ee08c64d4a0585f973fbfa7944e225d9a6d9c925eccbb0a0e1f223fb050dea47554f69bf8a4e05f06223d46737100a087fbe8bd85f0fda863350bef31ea53542007e409304e3da8b4f1351f1e55e65d589b15be61ef63ebfebd77936699dfb707be56e3710cd8a157a92629eb3f78e32ebbe13edc8dcac59b9c6c4e29a0c082e5c9d6c2234ab866d97c778b9a1af8a9031313debc91178f1e1b4a81536a6e6c203ad771c", @ANYBLOB="caafdee18d4600ccdebbed36a316850b568f1d1945e6582ea0e392a0d7a425245c9f195a5285e12b7f0a4fe22e2fc279eeccbe526e6fd7243ec5797933008894b3979254d718b7ad938b647d46b9f1f76fc9ac2da474927fc38f2ec0bde645f1503250e2fd789803693fcc4fbfc735ffcb8576a14e6ef578", @ANYRES64, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xd084a80, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000f00000000000000000000006f43fd71", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000000c0), 0x2, r5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000000)={0x4, r6, r5}) socket$igmp6(0xa, 0x3, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6m45.990918161s ago: executing program 2 (id=337): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0xf0, 0x0, 0x310, 0x310, 0x310, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000002900000034"], 0x28}, 0x0) 6m45.767790039s ago: executing program 2 (id=339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x400c090) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r8 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x9, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6m44.329888097s ago: executing program 5 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() modify_ldt$write(0x1, 0x0, 0x0) fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000d0429bd7000fcdbdf2500000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000000b0500000000000000000003000009080000753332000800024000000001080003400000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) 6m44.220791591s ago: executing program 3 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x1, 0x0, 0x25dfdbfc, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x2c04c084) 6m43.982355403s ago: executing program 2 (id=345): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xa7, 0x7b, 0x60, 0x40, 0x17cc, 0x1010, 0xfe09, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0xd0, 0x9a, 0x9f}}]}}]}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f00000ef000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) 6m42.865643552s ago: executing program 3 (id=347): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000300)='vfat\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_io_uring_setup(0x3227, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1c68, &(0x7f00000004c0)={0x0, 0x2000, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x141601) close_range(r1, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x40, 0x0, r7, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x100, 0x6000}) 6m42.781543263s ago: executing program 5 (id=348): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) r4 = dup(r3) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4040040) 6m42.652641508s ago: executing program 3 (id=349): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2e4, &(0x7f0000000140)={[{0xf3, 0x4e00, "99fb06d1f71b44fb3ebd2ffe4a020b445b4fca4120f644606842c5d6e840c6004fdc02d600116cf69a0f8c3c94bf45b76b9e12a7dfea480e89f89ec6b2bce377a2050852f30704d0b50ad4227d265072c3bc509f2b6fe639d5598097f0df295bd7bd807a0aab254aea06ff06899f03912c8b559945ef7f1f8c729b0be4c6852e1abdf55db222d362a349cf18f6575e15e4884c9bd58b6250a602898ef52c143a10f2fb4b13ceb1502b47087816c65dfad66ca6cb65c9a6c0304b9def7df2a0d21242669f95eafa403cc031e51780a528faa354c74b3502d2312aeb335dbd849b0286d985713ee123d354dd3def37002dc79438"}, {0xda, 0x4e00, "8b914ca127629c272c7e8b101270afbad975d4a5c9764ab986a9e1a9bbfcfa50540dded3781d0755df603d707adbe6ee7e32a17b69d643dad9adf8b56df6e9b056da6aa7f2d1b5762b1c2ddb88e5988d0c6f8a1f93d93cac630ec785673116aff160c204d8d964693e332c082863b1cd384aa0933a77ec1cf08462ce5659ae82bf04a0ab9b60186cf961cf59e185e1cdd098514dcd90f25151cd7729760dd57ecc77020a5d77dbb3a35f79656631ef454c9bc007e477476f8a513193ba22463731ed7ee8fd73ca7a373f7e5218a76bb31c09834348704de831b9"}, {0x69, 0x4e00, "3a83602963369495681507715959145064adbf99b43f3dc1f12a309f06a32b208350bfd4ab15c93a339ffef473a01c3b37d84159ef3ce0e0e2346197b13e9cde387b3f16400adcd70eed001062accfbc728b19e5a0dc53239ef2de4a39903d9af968052088c9f4a763"}, {0x96, 0x4e00, "40f778d4e7125625b39446eed6e1f3c33d8201a4757e4f190797df8ae292ed58905256a8c28c392932f3ec9e8034d6236675838f7cd36a83a71298b2e258115f2ce3f1d43ed12c59c0eeb69eb038d7f4d7b1b0cc6e6c8864cc15de2249ec9343ae34c96f7c31c800dd829c2c0ddf7ff50203152235b5065c5e2c85711a877c672699e629ee14352cf15d7cd784e704fd697ec96b09a7"}]}) 6m42.559484285s ago: executing program 0 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(r0, &(0x7f0000000040)='net/rt_acct\x00') ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x20900}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6m42.265233595s ago: executing program 5 (id=351): syz_usb_connect(0x2, 0x16c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000f56f9710100c000043c80102030109025a0101000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x300000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x138, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@hbh={{0x48}, {0x3ff, 0x6, 0x0, [0x2, 0xf3, 0x1, 0x3, 0x3, 0x9, 0x50c4, 0xc95, 0x4, 0x0, 0xfffb, 0x2, 0x8, 0x10, 0x711e, 0x2], 0xa}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5cfaff3, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x164, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a37f10e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329d37a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x743, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffff8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) 6m42.166031381s ago: executing program 0 (id=352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e00000310008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 6m42.014974623s ago: executing program 0 (id=353): creat(&(0x7f0000000240)='./file0\x00', 0x148) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ee0aca10801b61c143ce0102030109021200010000000009040000003952ea00"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7, 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000280)={0x18}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r3, &(0x7f0000000040)=0x8, r4, &(0x7f0000000080)=0xd, 0x7, 0xeca5309875eddac1) r5 = dup(r0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008680)=@newchain={0x1c88, 0x64, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xb}, {0xd, 0x8}, {0x8, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c58, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x3, 0x6, 0x876, 0x6, 0xd, 0xd73, 0x3, 0x7f, 0x7, 0x8, 0x6, 0x3, 0x6, 0x3c, 0x821d, 0x4, 0x8ead, 0x7ffb, 0x40, 0x7f80, 0x9, 0x7, 0x8000, 0x8c, 0x9, 0x7, 0xffff25f8, 0x800, 0x5, 0x8, 0x5, 0xd306, 0x5, 0x9, 0xc88, 0x1, 0x78b, 0x3, 0xffff, 0x2, 0x8000, 0x4, 0x7fffffff, 0x6, 0x1ff, 0x7f, 0x8, 0x70, 0x1000, 0x0, 0x1, 0x3, 0x5, 0x1, 0x4, 0x9, 0x8, 0x1, 0x5967bd4d, 0x6, 0xffffffff, 0xb, 0x4, 0x7e05, 0x6, 0x8, 0x5c2, 0xe, 0x24, 0xa3e, 0xd, 0x7, 0x5, 0x893, 0xffffffff, 0x9, 0x40, 0x7d, 0xffffffff, 0x3, 0x2, 0x8, 0x1, 0x1, 0x40, 0x6, 0x8, 0xe7, 0xffffffff, 0xee, 0x3c, 0x8, 0xfa, 0x8, 0x6, 0xfff, 0x9, 0x5, 0x8, 0x91eb, 0x4, 0x5, 0x8001, 0x1, 0xc70, 0x2, 0x7f, 0x1ff, 0xb, 0x1, 0x3, 0x6, 0x7f, 0x3, 0x5, 0x4, 0x0, 0x51, 0x1, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x3, 0x5d, 0xcc57, 0x9, 0x6, 0x2, 0x101, 0x401, 0x4000000, 0x4, 0x1, 0x10001, 0x7, 0x7, 0x2000000, 0x8000, 0x5, 0xfffffffe, 0x8, 0x0, 0x8, 0xfffffff6, 0xc, 0x8000, 0x0, 0x46, 0x80, 0x1, 0x3, 0x81, 0x7, 0x80, 0x100, 0xa8, 0x0, 0x8, 0x6, 0x83f, 0x6, 0x6, 0x7, 0x2, 0x7, 0x2, 0x5, 0x9706, 0x4, 0x8, 0x6, 0xb, 0x6e, 0xfffffff6, 0x6, 0x6, 0x8001, 0x80000000, 0x9, 0xe, 0x9, 0x81, 0x1, 0x2, 0x1, 0x7, 0x7, 0x0, 0xa047, 0x200, 0xd, 0xffffa8d5, 0x9, 0x5, 0x2, 0x3, 0x9, 0x4, 0x0, 0xf, 0x9, 0x9, 0x7, 0x33, 0x6, 0x7, 0x6, 0x100, 0x6, 0x7ff, 0xe000, 0x1, 0x0, 0x7, 0x0, 0xb64, 0x101, 0x7, 0x6173, 0x8, 0x7, 0x80000001, 0x0, 0x80000001, 0x1ff, 0xd, 0x9, 0x1, 0x7fffffff, 0x3, 0x1, 0x2, 0x10001, 0x9, 0x200004, 0x5, 0x0, 0x3, 0x6, 0x7, 0xf935, 0x90, 0x0, 0x1, 0x8001, 0x5, 0x0, 0x5, 0x471, 0x4, 0xffffffeb, 0xdafd, 0x4]}]}, @TCA_CGROUP_ACT={0x184c, 0x1, [@m_police={0x1848, 0x1f, 0x0, 0x0, {{0xb}, {0x181c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x101, 0x40, 0xfffffffb, 0x4, 0x8, 0xe07a, 0x7, 0x6, 0x5, 0xfffffffa, 0x401, 0x9fa, 0x80, 0x7, 0xfffffff7, 0xb, 0xffff8000, 0x7f, 0x2, 0xb4, 0x8000, 0xc3, 0x0, 0x9, 0xffffffff, 0x8, 0x97, 0x0, 0x3ad, 0x8, 0x9, 0x5, 0x647e, 0x8b, 0x3, 0x4, 0x8, 0xf9c, 0x7, 0x800, 0x3, 0x1, 0xfffffffa, 0xc04, 0x9, 0x0, 0x9, 0x80000001, 0x6, 0x6, 0x7ff, 0x4, 0x0, 0x7, 0x3, 0x0, 0x5, 0x0, 0x4, 0x4922, 0x7ff, 0x1, 0x1, 0x401, 0x5, 0x4, 0x7ff, 0x0, 0x60, 0x3ff, 0x7, 0x0, 0x2, 0x401, 0x7, 0x1, 0x57e, 0x2, 0x967, 0x3, 0x7f41e723, 0x50, 0x1, 0xc0000000, 0x9, 0xffff, 0x3, 0x0, 0x0, 0x2, 0xffff, 0x3, 0x960, 0x6, 0x5, 0x1c, 0x4, 0x6, 0xfffffffc, 0x3, 0x6, 0xd34, 0x1, 0x80000000, 0xbae, 0x4, 0x1, 0x19a9be8a, 0xffffff7c, 0x4, 0xc, 0x7, 0x46cc, 0x7fff, 0x3, 0x9b1, 0x2, 0x22, 0x1, 0x10, 0x7, 0x400, 0x54, 0x2, 0x8, 0x100006, 0x2e, 0xfffffe01, 0x1, 0x80, 0x7, 0x8, 0x2b90, 0x5, 0x8, 0xd7, 0xa08e, 0x9, 0x1, 0x52, 0x3ff, 0x8, 0x7, 0x80, 0x7, 0xe, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x80000000, 0x7fff, 0x0, 0x0, 0xf7d, 0x9, 0xffff3bab, 0x43d4, 0x4c7, 0xffffffff, 0x9, 0x0, 0x8, 0x5, 0xfff, 0x9, 0x4, 0x0, 0x6, 0x8, 0x2, 0xfe1a, 0x5, 0x1000, 0xfff, 0x2, 0x11b, 0x4, 0xffffffff, 0x6, 0xd, 0x3, 0x2, 0x101, 0x7ff, 0x40, 0x0, 0xb7, 0x800, 0x4, 0x7, 0x0, 0x8, 0x0, 0x8, 0x1, 0x10001, 0x5, 0x4, 0x80, 0x7, 0xffff, 0x200, 0x7ff, 0x4, 0x7, 0xd5, 0xfffffff8, 0xc4, 0x5, 0x5035, 0x5, 0x9bad, 0x100, 0x8, 0x3, 0x80000000, 0x401, 0xffffffff, 0x257, 0x8, 0x4, 0x5, 0x9, 0x80, 0x8, 0x6, 0x7, 0x6, 0x7fffffff, 0xfffffffc, 0x401, 0xdd5c, 0x3, 0x7fff, 0x7, 0x8, 0x101, 0xfffffff8, 0xffff8436, 0x9, 0xd50f, 0xfffffff8, 0x4, 0x8000, 0x6, 0x8000, 0x9, 0x6, 0x1, 0x0, 0x3, 0x0, 0x83c]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5bbe, 0x9, 0x3, 0x0, 0x100, 0x4, 0x4, 0x9, 0x7b9af1c3, 0x8, 0x0, 0x7, 0x8c, 0x3ff, 0x7, 0x2, 0x5, 0xff, 0xe51, 0x891c, 0x2, 0x8, 0x80000001, 0x1, 0x6738, 0x4, 0xffffdc3b, 0xffff, 0x7, 0x21d, 0x7, 0x3, 0xe851fe7c, 0x7, 0x7fff, 0x5, 0x0, 0xc3, 0x6, 0x90a, 0xf620, 0x4, 0x5, 0x3, 0x7fff, 0x6, 0x50a3, 0x5, 0x2, 0xb, 0x4b2e, 0x4, 0x5, 0x2, 0xe, 0x0, 0x3, 0x8, 0x0, 0x9, 0x7, 0x3, 0x8, 0x4, 0xcf97f37, 0x80000000, 0x1000, 0x5, 0x0, 0x8, 0xc, 0xe32, 0x2, 0x1000, 0xfffffff7, 0x400, 0x40, 0xffff8001, 0x9, 0xfba, 0x2, 0x7, 0x8, 0x0, 0x7, 0x3, 0x9, 0xc, 0xe, 0x5, 0xecff, 0x10001, 0x5035, 0xe, 0xfffffff8, 0x7, 0x3ff, 0x4040000, 0xfffffffa, 0x1ff, 0x100, 0x0, 0x3, 0x200, 0x6, 0x0, 0x800, 0x2, 0x3, 0x1, 0xff2, 0x1, 0x9, 0x4, 0x9, 0x4, 0x7b, 0x1, 0xea, 0x4, 0x1f0, 0x101, 0x2, 0x259, 0x8, 0x9d, 0x8, 0xfffffffe, 0x5, 0xffffffff, 0x7, 0x7f, 0x5, 0xffffd216, 0x8a2, 0x2, 0x5, 0x9, 0xf00, 0x0, 0x1, 0xffff, 0x9, 0x5, 0x3e1d000, 0x8, 0x2, 0xfbbe, 0x40, 0x6, 0x2c20c7b7, 0x0, 0x0, 0xd6b7, 0x3, 0xc, 0x1, 0x2, 0x5, 0x51e, 0x5, 0x8, 0x4, 0x7, 0x2, 0x4, 0x5, 0x7526345d, 0x2, 0x6, 0x7, 0x80000001, 0xb44, 0x1000, 0xfae, 0x1, 0x4, 0x2, 0x57, 0x5, 0x3, 0x7, 0x2, 0x9, 0x5, 0xbf27, 0xf, 0x2, 0x7fffffff, 0x0, 0x2, 0xcc7, 0x80000000, 0xa, 0x7, 0xf, 0x62f, 0x81, 0x2, 0xffffb2bc, 0x8cf, 0xaf, 0xd, 0x3, 0xc087, 0x9, 0x10000, 0x8, 0x2, 0x78, 0x6, 0x93, 0x8, 0x2, 0xb, 0xb, 0x3, 0xa93, 0x9, 0xc, 0x0, 0x676, 0x4, 0x8c9d, 0xfff, 0x5, 0x0, 0x35c00000, 0xfff, 0x401, 0x592, 0x3, 0x4, 0x2, 0xff8, 0xd70b, 0x0, 0x4, 0x9, 0x2, 0x6, 0xc985, 0x9, 0x5, 0xfffffff9, 0x305, 0x5, 0x1, 0x80000000, 0x5, 0x3, 0x5, 0xfffffff9, 0xa3b6, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x3e, 0xffffffff, 0x7, 0x8e, 0x1, 0x80, 0x5, 0x7fffffff, 0x6e7, 0x3, 0x7, 0x7, 0x2, 0x8, 0x10, 0x2, 0x3, 0x7fff, 0x3, 0x1, 0x9, 0x5, 0x6, 0x5, 0x3, 0x2, 0x7, 0x1, 0x3, 0x1, 0x1, 0x6, 0x5, 0x6, 0x7fff, 0x1, 0xfffffffe, 0x95c, 0x1, 0x7b0, 0x8, 0x101, 0x1000, 0x4b, 0x8, 0x4, 0x1, 0x80, 0x1, 0x400, 0x5, 0x6, 0xdb, 0x3, 0xec, 0x3, 0xfffffffb, 0x0, 0x7, 0x5540a31a, 0x8, 0x80000001, 0x2, 0x80000001, 0x9, 0x697, 0xf, 0x10000, 0x8000, 0x1, 0xfffffff6, 0x1, 0xec, 0x90, 0xfffffff9, 0x3, 0x9, 0x7ff, 0x4, 0x4, 0x7, 0x7fffffff, 0xfffffffd, 0x3, 0x8, 0x8, 0x4, 0x9, 0xc0, 0x81, 0x5, 0x8f51, 0x9, 0x1, 0x2, 0xffffffff, 0x5, 0xffffffff, 0xffffff80, 0x7fff, 0x7, 0x2, 0x3, 0x9, 0xb, 0x9, 0x5, 0xffff, 0x8000, 0x7, 0x7, 0x7fffffff, 0x6, 0x7, 0x7, 0x81, 0x5, 0x7, 0x233ae29c, 0x46, 0x1, 0x7f, 0x9, 0x6be, 0x1, 0x1, 0xe, 0x17, 0xe6dd, 0x9, 0x81, 0x4, 0x9, 0x401, 0x8, 0x7, 0x401, 0x7, 0xc1, 0x7, 0x7, 0x1d8c, 0x5, 0xe, 0x3, 0x81, 0x7c, 0x7f, 0x6, 0x0, 0x975, 0x6, 0x8, 0x7, 0x50000000, 0x1, 0x1, 0x2e27, 0xffff, 0x101, 0x80000000, 0x9, 0x80000000, 0x1000, 0x4, 0x5e9, 0x8000, 0xffffffa2, 0x6, 0xc, 0x7f, 0x45b, 0x8001, 0x6, 0x80000001, 0x7fffffff, 0xfffffff9, 0x40, 0xe, 0x3, 0xa, 0x2, 0xff, 0x1, 0xf, 0x1, 0xb, 0x2014b0e3, 0x1, 0x5, 0x6, 0x7, 0x53b93ecd, 0xff, 0x9, 0x1, 0x8, 0xa, 0x9, 0x7ff, 0xebc, 0x9, 0x7, 0x4, 0x19, 0x28000000, 0x4, 0x408, 0x5, 0x4, 0xfffff0bd, 0x4e4, 0x7ddf, 0x8, 0x0, 0x6, 0xffffffff, 0x4a, 0x7fffffff, 0x4, 0x2, 0x100, 0x5, 0x512b, 0xfffffffd, 0x8001, 0x7d86, 0x10000, 0x200, 0x800, 0x6, 0x8000, 0x4, 0xc, 0xe160, 0x5, 0xb, 0x7, 0x7, 0xa8fd3b, 0x9, 0x9, 0x5, 0x0, 0x6, 0x2, 0x3, 0x4, 0xffffff01, 0x2, 0x2, 0x7, 0xb, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3ff, 0x7fffffff, 0x3, 0x6, 0x2, 0x6, 0xc, 0x1, 0x7, 0x9, 0x6, 0x1ff, 0x1, 0x68, 0x0, 0x0, 0x8000, 0x8, 0xffff0001, 0x6d9864c3, 0x5, 0x2, 0xeaf, 0x1, 0x4, 0x4529, 0x7, 0xd2f1, 0x354, 0x4, 0x7, 0xff, 0x7, 0x4, 0xfffffffd, 0x80000001, 0x100, 0x4, 0x76a0430e, 0x5, 0x1, 0x0, 0x7fffffff, 0xff, 0x1, 0x5, 0x80, 0x5, 0x2, 0x10000, 0x7, 0xff, 0x6, 0x101, 0x4, 0x58e, 0x7, 0x400, 0x4843, 0x6, 0x9, 0x80000001, 0x0, 0x101, 0x7fffffff, 0xfffffff7, 0x0, 0x1, 0x3, 0x54e, 0x6, 0x6, 0x0, 0x2, 0x6, 0x86a, 0xa, 0xcadc, 0x2, 0x10001, 0x5, 0x5, 0x0, 0x6, 0x5be, 0x101, 0x7fff, 0x0, 0x12ab, 0x7, 0x400, 0x7ff, 0xf, 0x1, 0x7, 0x5, 0xffff, 0x4, 0x0, 0x4, 0x100, 0x5, 0x7fff, 0x6a4, 0x8, 0xe, 0x0, 0x5, 0x2, 0xed, 0x5, 0xfffffffc, 0xd3, 0x7, 0xe, 0x4, 0x6, 0x8, 0x8, 0x5, 0x8, 0x0, 0x8, 0x9, 0x4, 0x7fffffff, 0x4, 0x100, 0x10, 0x5, 0x7fffffff, 0x6e9, 0x100, 0x0, 0xcad, 0x6, 0x2, 0x3, 0x0, 0x8385, 0xfffffbff, 0xfffffff8, 0x8, 0x6, 0x9, 0x50000, 0xc, 0x7, 0x1, 0x8001, 0x6, 0x4, 0x7, 0x7, 0xffffffff, 0x7, 0x80000001, 0xd2, 0x7ff, 0xc, 0x6, 0x1, 0x3, 0x38, 0x9, 0xd5, 0x6, 0x7, 0x4, 0x1, 0x1, 0x1ff, 0x2, 0x7fff, 0x4, 0x4, 0x5, 0x1, 0x2, 0x401, 0x9, 0x3, 0x9, 0x3, 0xc, 0x4, 0x2, 0x3, 0x0, 0xa, 0x5, 0x3, 0x4e63, 0x7, 0x84b2, 0x3ff, 0x4, 0x6, 0x1, 0x101, 0x4, 0x4, 0x3, 0x401, 0x3, 0xc1ec, 0x7ff, 0x400, 0x8000, 0xe91, 0x200, 0x3, 0x7fffffff, 0x1, 0x5, 0xa2, 0x3, 0x1, 0x3, 0x0, 0x80000000, 0x59cb0d01, 0x21, 0x9, 0x7fffffff, 0x3ff, 0x2, 0x2, 0x9, 0x4, 0xf, 0x8, 0x8, 0x80000000, 0x9, 0x4, 0x9, 0x7, 0x6, 0x8, 0x0, 0xf, 0x3ff, 0x492e, 0x5, 0x80, 0x8, 0x9, 0x80000001, 0x200, 0x1, 0x7, 0x10001, 0xc657, 0x100]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x5cde, 0x2, 0xb54, 0x0, 0x3, 0x5, 0x6, 0x26f4, 0xffffffe5, 0x6, 0x6, 0x0, 0x4, 0x3, 0x3, 0x3ff, 0xffffffff, 0xf, 0x4, 0xa5b, 0x7, 0x2, 0x8001, 0x8, 0x9, 0x40, 0x4e69, 0x10, 0x2, 0xc00000, 0x8, 0x3ff, 0x4, 0x3, 0x8, 0x5, 0x10000, 0x8, 0x8, 0x100, 0x1, 0x9, 0x951b, 0x0, 0x7, 0xfffffff0, 0xeff2, 0x10000, 0x9, 0x1, 0x6, 0x9, 0x80000001, 0x1, 0x4, 0x17, 0x8715, 0x80000, 0xf, 0x1, 0x0, 0x9, 0xf698, 0x6, 0x3, 0x8, 0x5, 0x3, 0x3, 0x2, 0x1, 0x3800000, 0x50f2, 0x1, 0x7fff, 0x4, 0x829c, 0x401, 0x80, 0xba, 0x3, 0x3, 0x0, 0x8, 0xf0db, 0x3, 0x3, 0xd3, 0x8000, 0x80000000, 0x3, 0x10001, 0x67, 0x1ff, 0x4, 0x8001, 0x0, 0x1, 0xfffffffd, 0x7, 0x3, 0x6, 0xf, 0xfffffff9, 0x80, 0x98, 0x1ff, 0x8, 0x81, 0x5, 0x5, 0x6, 0x312, 0x81, 0x1, 0x4, 0x4, 0x40, 0x400, 0x8, 0x9, 0x40, 0x5fe10e07, 0x372, 0x8000, 0x3, 0xff, 0x6, 0x401, 0x7, 0x4, 0xb, 0x2, 0x4, 0x7, 0x4, 0x101, 0x5, 0x7, 0x4, 0x2, 0x3, 0x8, 0x10000, 0xfff, 0x2, 0x7f, 0x4, 0x7, 0x0, 0x80, 0xeb4, 0xb488, 0xcae9, 0x395d, 0x8, 0x10, 0x80000000, 0x2, 0xfff, 0x1ff, 0x7, 0x3, 0x0, 0x1, 0xb4, 0x745b, 0x6, 0x0, 0xffffffc0, 0x7fff, 0x4, 0x9, 0xfffffffe, 0xbb4, 0x0, 0x0, 0x2, 0x1, 0x93e, 0x5, 0x6, 0x6, 0x40, 0x1, 0x80000001, 0x6, 0x8187, 0x4, 0x9, 0x6, 0x4, 0x5, 0xffffffff, 0x20b, 0x1, 0xda, 0x5, 0xc, 0x8, 0x7, 0x8, 0xfffffff8, 0x4, 0x0, 0x51e, 0x4, 0x429fb44d, 0x80000000, 0x1, 0x4800, 0x4, 0x7ff, 0xfff, 0xba, 0x4, 0x100, 0xff, 0x67fb61e9, 0x10, 0x7fffffff, 0x6, 0x2, 0x6, 0x101, 0x2, 0x1, 0x4, 0x5, 0xfd, 0xffffffff, 0x0, 0xfffffffd, 0xa, 0x11fb, 0x1, 0x2f, 0x3, 0x4, 0x1, 0x8, 0x5, 0x7, 0x1c43, 0xc29, 0x8, 0xff, 0x1, 0x7, 0x1cd, 0x2, 0x3, 0x5, 0x8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7, 0xffffff00, 0x7a, 0xfffffffd, 0x6, 0x3, 0x80, 0x80000000, 0x0, 0x81, 0x0, 0x4d, 0x100, 0x5, 0xbb9, 0xffffffa0, 0x7f, 0x3ff, 0x6, 0x2, 0x3, 0xe, 0x1, 0x22, 0x7, 0x7, 0x4, 0x40, 0x4, 0x10001, 0xe, 0x0, 0x6, 0x6, 0x6, 0x1000, 0x7, 0x9, 0x101, 0x4, 0x3, 0x5, 0xffff48fe, 0x3, 0x6, 0x21ea, 0x6, 0x4, 0x9, 0x8, 0x10000, 0xfff, 0x2, 0xbee6, 0x1, 0x2, 0x7, 0x4, 0xc, 0x4, 0x6000000, 0x8, 0x7, 0x7, 0x6, 0x4, 0x1ff, 0xfffffffd, 0x4, 0x7fffffff, 0x9, 0x8, 0xfffff0df, 0x0, 0x1, 0x7, 0x8, 0xffff, 0x8, 0x1, 0x4, 0x8000, 0x3, 0x0, 0x8, 0x2, 0xe9c, 0x3, 0x7, 0x3, 0x8, 0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x800, 0x8e53, 0x8, 0xd, 0x42ef, 0x4, 0x6, 0xa05, 0x80000001, 0x81, 0x1, 0x42a, 0x77da, 0x2, 0x31c39187, 0x80000001, 0x800, 0xffffffff, 0x52, 0x1, 0x5, 0x4, 0xe, 0xffffff01, 0xfffffff0, 0xffff, 0xff, 0x10, 0x5, 0x1a, 0xd, 0xc3f, 0x8, 0x401, 0x1, 0x800, 0x6, 0x2, 0x81, 0x9, 0xdc, 0x7, 0x6, 0x1, 0x4, 0x2, 0x7, 0x6, 0x6, 0x80000001, 0xff, 0x10, 0x0, 0x0, 0x7fff, 0x401, 0x2, 0x3, 0x7, 0x8, 0x9, 0x0, 0x7fff, 0x8, 0x4, 0x4, 0x7, 0x5, 0x8, 0x371, 0x10, 0x4, 0x9, 0x8001, 0x2, 0x7fff, 0x6, 0x1, 0x101, 0xffffff00, 0xe, 0x5, 0x6, 0x100, 0x401, 0x2, 0xfffffffd, 0x4, 0x1, 0x6, 0x0, 0x7fffffff, 0x2, 0x8, 0x40, 0x200, 0x7, 0x8, 0x0, 0x0, 0x5, 0x1, 0x4, 0x3ff, 0x5, 0x2, 0x3, 0x0, 0x0, 0x80000000, 0x3, 0x7fff, 0x9, 0x91c, 0x74b8fa0b, 0x1, 0x7, 0x1, 0x517, 0xddb, 0x88000000, 0x0, 0x7fffffff, 0xa4d, 0x3, 0x0, 0x2, 0x7, 0xffff, 0xa2cd, 0x9, 0x2, 0x4, 0x4, 0x0, 0x9, 0xd, 0x81, 0x0, 0x1ff, 0x3, 0xffffffff, 0x8, 0xfffffffd, 0x4, 0x5, 0xc, 0x1000, 0x401, 0x6, 0xf, 0xed, 0x5, 0x5, 0xe, 0x4, 0xd6ef]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1c88}}, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r10, 0x2000009) sendfile(r9, r10, 0x0, 0x7ffff000) 6m41.62340854s ago: executing program 2 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001cc0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000100)}) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000002c0)={{0x0, 0x0, 0x10001, 0x2, 0xd}}) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x128, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x5c4, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x578, 0x3, 0x0, 0x1, [{0x56c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "8bd53e65877d8fe49c54b04ade3fc216b141107a5a"}, @NFTA_SET_ELEM_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "3ef879ff27a59426ea407c567a3b65c7eeb56ad8442ba5676ada7f11c12c3832703682af2a5955529b7629531c0dc3ecab3572e5f127d5c757f13d5affb36077f49971b12d1f46d1530d647eac290286719db2d72341c91c40d6dfb585247da2017f6906f997c1be447c85af7a06ac3c043a660dc8e61680ab15561e10c58c166ea4e3b2780ce483c5569e48e8f4d5ecfb155a916a614b8ad9a3a0ffec1548a957812568f67aa75a093a6daf4444bc20dd8babb7338009fd6879c0c99cb460718b10544a25ef241ccd76ae16e0269f7a14ff33a0"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa5, 0x1, "9044b3c10e8b28353a77d387eff7468c2d01e2dca8d96b8f4faf8ab600258f5cf4386d60cbbc19e2720ff88de4904a46057090e22551ed3130f49097b485bf7455db3a380799a5c072c1c77dd79a83f8796b49392e6cb27356f26821166ae42dd045a6f07719eba7d1612e158812c4c1324b8782b6dfb0768e0922db7782c1c863397492d22b348a26a0c6b769d8b6ed5dbca1a02418bed8abff527cae120ccff8"}, @NFTA_DATA_VALUE={0x5e, 0x1, "e445df764deb495f428731d77d41ed5b0463542ed3874ed5f7c12dd0c299604ed0116c65a10926f2818ee23893cd53d5d1b1eba79aa27b66f5d1c8a727570b049e46688c40f5cb43852e8266f0a5939bf9cda2eb23b8d931cd39"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}]}}}, @NFTA_SET_ELEM_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "d9a2937a6cbc7fa3f999c3fd3a0596dd4447203d5dda1bb270a586361757a51000ba4ffbbd5414d6c7b821bcd4b2a628d978e9f832f5f6c43d7127c5a1babf5814064c1470d0504b7eed9e815a23b322d900c1a8a66bedd5b60255a4026459ed43f5ff3dbc000744fa4c4b4803c083632f892c8f1c4d7203eed0fd82ae4a60a818e9845ce0edd68e4381f63063ba7f0712ac0548b124c084c468e31cecb180db97cf54718b0d720a49"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9, 0x1, "8a026f644a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "b710596580161d78a6d5d12cb087a4df8b4352cbd82448879aa1986fd5ba32a9ef1000bfba61952468ef5750837b2b6e620d76a093781511b2c1351cb6f89da095f26e65b86d01f41551ee88d36c689e395d39b9345579f2630f1e6c82ff846440b98c1f777d8ee72429e7f2054509ab2ea58ef4164187f660fa95989668afe615b3be2edcdf4b2c72ffd33cf08b7184a4c9a3df30083511c262c9a7d1b37869776d9d3e8050d973c59a92"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, {0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x714}, 0x1, 0x0, 0x0, 0x4080}, 0x801) 6m40.474871497s ago: executing program 2 (id=355): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000100)={[{0x8, 0x4e00, "159d6ac9f2014f23"}]}) 6m40.246986448s ago: executing program 5 (id=356): r0 = fanotify_init(0x0, 0x1000) write$P9_RSYMLINK(r0, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m39.831902875s ago: executing program 5 (id=357): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6m39.668733236s ago: executing program 0 (id=358): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x87) read$msr(r1, &(0x7f00000194c0)=""/102376, 0x18fe8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfc1, &(0x7f00000025c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd67a185e00f8784"], 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = inotify_init() readv(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000400)={'veth1_to_bond\x00', 0xfffffffa}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000040) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC], 0x0) 6m39.617518918s ago: executing program 3 (id=359): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, &(0x7f00000000c0)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x169282, 0x19c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000000000000080000000000000200000004000780100008800c000780080009400000e40a"], 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x24000080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}}, 0x0) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 6m39.06338156s ago: executing program 5 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2037}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd29, 0x800000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r4], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000000)) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 6m38.401760371s ago: executing program 3 (id=361): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open$dir(&(0x7f0000000000)='./bus\x00', 0x80200, 0x84) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000e80)=""/159, 0x9f}], 0x1, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/168, 0xa8}], 0x1, &(0x7f0000001200)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x7c}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x8, &(0x7f0000000480)}}], 0x4, 0x2, 0x0) 5m24.769899309s ago: executing program 34 (id=358): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x87) read$msr(r1, &(0x7f00000194c0)=""/102376, 0x18fe8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfc1, &(0x7f00000025c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd67a185e00f8784"], 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = inotify_init() readv(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000400)={'veth1_to_bond\x00', 0xfffffffa}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000040) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC], 0x0) 5m22.795700166s ago: executing program 35 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2037}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd29, 0x800000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r4], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000000)) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 5m22.706599512s ago: executing program 36 (id=355): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000100)={[{0x8, 0x4e00, "159d6ac9f2014f23"}]}) 5m22.637205333s ago: executing program 37 (id=361): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open$dir(&(0x7f0000000000)='./bus\x00', 0x80200, 0x84) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000e80)=""/159, 0x9f}], 0x1, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/168, 0xa8}], 0x1, &(0x7f0000001200)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x7c}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x8, &(0x7f0000000480)}}], 0x4, 0x2, 0x0) 2m51.824088001s ago: executing program 7 (id=799): syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0x51ca, 0x0, 0x1}, &(0x7f0000000380), &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001514010101000700fcdb7f25080001"], 0x18}, 0x1, 0x0, 0x0, 0x40008010}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) fstatfs(0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = gettid() epoll_create(0x400) r2 = eventfd(0x4) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, 0x0) 2m50.596577827s ago: executing program 7 (id=802): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1d09000000140100ed7290fe74be2abd"], 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0137014010ff"}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="35012cbd7000ffdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="2ad2b125962ba66c55afa7da7d93403a3833cfc70a49df675815b1ad581b414ea21921c529bf3dd5efe2ee49a5ea40fa1dad92214795d917ca276990451f72e27c5c32d145a6b6180e369f93651e4586612430ec6bb7528a04000b206d1e62af5f3ecd6147ada1208fbef31002044c80ace3d3e227ba6a0d75632081187b65cd95cc53b729be5bdd1698b0c4983dad7e3ede840ec8044f92fa852e746b7e2948f685a2ab528afc016bfb18282d6764b7da32d624411ae83e1766bc0b54e038a45991ea29d0b694792de2b62db178843287271952a01758cb00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f00"], 0x48}, 0x1, 0x2}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @local, 0x0, 0x1, 'wlc\x00', 0x20, 0x0, 0x1}, 0x2c) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000018001b0000000000000000000a0000000000ff000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32=r7, @ANYBLOB="0600150007"], 0x44}}, 0x0) sendmmsg(r5, &(0x7f0000000a00)=[{{&(0x7f0000000440)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="b95d39c94a8a113ef6ac45be8efd16b2eeee9129e8137d7c624b3d404cdabc3f20dc596811124946361e22f036d0bdfd507a643958dd561fbc5b0b9c8b5fda2aa77ff6be61de23a6cd0e6de58a161a9d875c3e9388ff365d32929b1fdb5fd34b5b2f0883acdb0ae88c3444f0b7d1eb087ed51e6fa0e21b4ad740ea74dbecf36935f851f7181ea131fd68433a5df66f27792bd5e881a9ff00d6c3fc22c304245821b8dfd091607c100d9dd344c917fe4429eed83bcef00c6fb8", 0xb9}, {&(0x7f0000000240)="1837871dddc64193e9ead7156117c98c230621941af73fadb25648c49521d6", 0x1f}, {&(0x7f0000000580)="02819b886e74eefd95202224f514948c08d3b8e005d216e2e7b842c66a6917238a3580352ee6fb00ba202722cacd63fc4700c533f474a50771258b1756b3874a294d59e66fbbfc9a3813a708b844dc237a86f999054fc97567ee7c7a0277a0ddab3a9090b49c6c28a461699cc363b23c0d3245d9cd99d882a34c660be35dc7385fbf88c7ea1f295764b9502caf49b1fda668d973fa30ed3d212a5b6eb1a123891692be96e4550e33473a905ea10fa4c758aabcc001ff03398bbf94acc78108be3e1cc899ba93db91ac044d", 0xcb}, {&(0x7f0000000680)="f6a52cdec22f2d43f11379f775db32a0988141bda0070471eb92884a1d360696a327ff8c6c6fc1c7c25d55563faa0e562ece58ac911c623ac5da83af294dfc08d0e1ab3a26f51a589dbeb429995006ac4145048c053f071e24b7f94083c635dfe7765c2c07be301141942056c3976153728b689f38ea750f5ce41fd8e196f313312846b1c8eea935a3b6a92cf7e43be74292fe9d96c39277bf7d4b57eb1b09ac30c31f22b9f1ff93106ae51996497fc18c2cf6c6907fa21723e9c099f8abca715bdeea4eae19f1d332a7d3c7048d6dfc246e3cc74433dc0b42368457497d5ee7", 0xe0}, {&(0x7f0000000880)="670c22cf3d32655204969bfb2d6e7ff2ff2ab27e62dd26df59ce01925297225cc578072d429312eedf97e9764a40c9f1880ecbb2da1efbfb052cbacce9718389bf93be77a45307dc608a07abe18296903585be66d9e5638f52be82e46b4d9df6d2d76605e4e4c5db5a72266fbf0df439cdf206c6acb819cec2c66d95d0c4408a2e7ade7bd50e", 0x86}, {&(0x7f0000000940)="073ae54d176e9439f3495119fb19a9826e8c2385599420839677972765a4a9b5f9b89080df34aae23a3662983338d7cc50ecf8cf734a65b77d9b96a859a7358d1e568521d0baf99f58e7d8fb94cb8b0d3b6117e2bdd42dbcfa85f3481f950e4cb04e5e52bc842b44341dd5ed6d6abb7ad0bdd14a1f9ef535614a82a580aa2400d24cf4ffc51d1c17f7c1bf3c65d7c7bba059ffad697bb237d9f74c57e481724664b25e598bf6e2e58d6326579af8cb3f0b", 0xb1}], 0x6, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x11c0}}], 0x1, 0x4040000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x601, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m49.900440626s ago: executing program 7 (id=806): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000c300)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000080)={0xff7f, {0x4, 0xfffffffa, 0x334d, 0xfffffffe, 0x6, 0x40}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpriority(0x2, 0x0) (fail_nth: 1) 2m49.032091459s ago: executing program 7 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a00000004db4f0454c597645138df23f871cef77b7847e522069f9d98fc2120fbbac48ad4d7e26417596df0ad4ac428df1fa02bf186ffb986870341bc03cee7520c3a663c5b924f644854a8d401afdcdc0015ae12c2f64bfcf93cc8b4694d1c43283f09be124d6dbeddc96ad96fc435f5f6f46f68e24f2b127ab8377574bdc9c40cb8c432c53c51c3b4d5e5e2722181a21824e91c4b9f", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014000180c200000d0000"], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) (async) mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a00000004db4f0454c597645138df23f871cef77b7847e522069f9d98fc2120fbbac48ad4d7e26417596df0ad4ac428df1fa02bf186ffb986870341bc03cee7520c3a663c5b924f644854a8d401afdcdc0015ae12c2f64bfcf93cc8b4694d1c43283f09be124d6dbeddc96ad96fc435f5f6f46f68e24f2b127ab8377574bdc9c40cb8c432c53c51c3b4d5e5e2722181a21824e91c4b9f", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014000180c200000d0000"], 0x40}}, 0x0) (async) 2m48.796088743s ago: executing program 7 (id=812): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 2m48.489704755s ago: executing program 7 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xffff, 0x4589, &(0x7f0000000480)=0xc}) 2m48.355458597s ago: executing program 38 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xffff, 0x4589, &(0x7f0000000480)=0xc}) 41.055312071s ago: executing program 8 (id=1250): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 10) 40.404050738s ago: executing program 8 (id=1251): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f00000008c0)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 40.156656474s ago: executing program 8 (id=1252): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000009c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xc, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/38, 0x26}], 0x1, &(0x7f0000000540)=[@rights={{0x10}}], 0x46}, 0x12000) wait4(r3, &(0x7f0000000040), 0x8, &(0x7f00000003c0)) read$msr(r2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r5}, 0x1) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r8) 39.096031763s ago: executing program 8 (id=1257): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080)=0x4, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000019380)=ANY=[@ANYBLOB="180000004200014600000000000008fc0000d5"], 0x18}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x901091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) 38.063751308s ago: executing program 8 (id=1261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendfile(r1, r0, 0x0, 0x3a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='iso9660\x00', 0x3, 0x0) 37.473732586s ago: executing program 8 (id=1263): socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r5, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) gettid() r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x1b, 0x0, 0x9, [0x401]}, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0xa, [{@dev}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop]}}}}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 36.915008723s ago: executing program 39 (id=1263): socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r5, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) gettid() r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x1b, 0x0, 0x9, [0x401]}, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0xa, [{@dev}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop]}}}}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 15.260616489s ago: executing program 4 (id=1330): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r3, 0x541b, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 15.109560049s ago: executing program 6 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f00000001c0)='net/udplite\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) lseek(r6, 0x7fffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000100), 0x8) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg\x00'}]}, 0x50}}, 0x0) 14.29268816s ago: executing program 9 (id=1332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xe8230000, @empty, 0x3}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x2, r4, 0xf, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x1, 0x1, 0x10, 0x1ff}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) 13.359864749s ago: executing program 4 (id=1333): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x28002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x4e72b1c8, 0x4) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000280)={"cb02c6d8cb00fc18137f1cadfe97a31b251f7340a0e800", r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x10) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) listxattr(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r6, 0x11, 0x6, @local}, 0x10) r7 = socket(0x10, 0x3, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x10}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040500000800000008"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0xc0000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 11.666172742s ago: executing program 6 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 4.917489404s ago: executing program 6 (id=1335): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a002b4011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @private}, "240086ddffff0000"}}}}}, 0x0) 4.863229239s ago: executing program 4 (id=1336): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "013528e0"}, @main=@item_4={0x3, 0x0, 0xc, "0c499a00"}, @main=@item_4={0x3, 0x0, 0x0, "4bd271b9"}]}}, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000000004000080140011"], 0x28}], 0x1}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xe81, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x53, 0xf, 0xffffffff, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x8000, 0x8000, 0xfb, 0x18000000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc01}, 0x2400c805) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000540)) 4.862895566s ago: executing program 9 (id=1337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="538b804ea34b93341537e8d14bef96490508c75baac623538679d3f888e4300c9e", 0x21}, {&(0x7f0000000040)="04d37deacac246f10144fc4b0dce5093425b87f75c41bf96bf742afb00ef0d039774ce0f7aa2d81d65daa01fe2fa09348dced84c1bc6f6a2fdcd4fb444ac07f59eab9dbe72117a3ce0936766f17b4b04b3966339b79b381c3c1b3f9511b0cb6518d1f0b8186239a2f8c9", 0x6a}, {&(0x7f0000000100)="b8fc823a895916addfb749a8db595eedfcbafe63de7457ed2700b933a817bf0536f0276ec549f708a08535595e1555e055a9169c1f474377b3bdb8096fff41e8b803925ea5d23d16dc7b05d3724dd7d048b27f6ccacec1f58f8d92a7f775d9d4fc95b6936f4dc451efda4f8f1b58eca8864d7f2c43779adbac6b15a4a5168b13514f2e0ea1c1d2139c398a70e022ef2cde3e1c54210c00055e927de608a9c5be18323e440d6b569581f503e4ec9a01db6707744e24f7e26f6597d73bf95267b7f9fd83ff03c269a53734bdc57b6013729ab72bb79a651d98e871e35a2ee9", 0xde}, {&(0x7f0000000200)="ae76b1414608071f687d58369d6cf0325e55296b55df1bf7db1679f20baf881f037e25ecfc15a2a1321e7c8ae77264487052a61a22b63fb6a5364f98d906f17e7c742212e2c7297297f13052de7ae5858b734086c778651f14f4e6e8d8ad966c7a32866108043d1cf46da039929102def149fd0877493667e985b840be2d313c346e787e0d500903c73676b140a85108f9d237f5aa06d20650d34d378e47ea6d813e19104d4f347191995c36e091b3c46ae4cb4dd7f532d3292cac22c8bf5f6f3ec8d8942282a4a9cbdb62", 0xcb}, {&(0x7f0000000300)="4c658062e264bcbcc22e7613be8303e11ce7faab6f6dcb4a53add4773cab1ba6f33747a0ce9338d8a18e087fad5bc4651c39f561f1dbeeec976ce1fac88b3b88303936b24a2f2b10ca4e1169c15481aa3b40c6a0b0b062b221db8d9a8ba4ee0c9e96239bf3f3fb76b77abf98f91ca9ca6d6d7dfe207e673e7c3659a2039f4d1db3f9741b20c0d055d8a4af788598b8d0f6308a3f09a4bf7f139d3b5110267eea5e61d29204771921", 0xa8}, {&(0x7f0000000680)="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", 0x1000}], 0x6}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="9e9c1a778f1e82d0db54c9735b14f4bc539f0801ac1d7138f1db08a29bb70b53d5cd2d547d90f166f2e4110297b717b6d2a8d1f7887015f79503cc7f0313b9b7cc0599e9b037941d746c50ce1086263551a4caa7db8969f6e5cc988b005546001085fd4fc59c423749c64d0589caa9709cef3a4dc37c4b3015aee9990006038f0812baba58cc0978ab3419f0a8e6b69f947e748cc829de8f03e79cc5c8498ec6b3c7bd58a3a6c8d034ea299ab9eb0f98463e8d064560d289e50b0ae569076ff5fce284844e84656b235df4f1e670576a", 0xd0}], 0x1, &(0x7f0000001680)=[@iv={0x88, 0x117, 0x2, 0x71, "fcccfc59d271680bca56b0b7d76ad931d76875ecd469ef3897c04676b57bc3d954ad8a649b278b1f64d6dc8ae86d87ea714d4cc5d6fdb2a796dc5e86ebfab6cfc4cb9730418576ff9053b82e03319be879f5302c119ce9a5d7caa3b2ad4c4287e7d23964c97f846bb328b959d0d03ec6b6"}], 0x88, 0x20000884}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001740)="9ecabc70ff2551e70a9325c98c52624d0c6e077ce6993ea8366e80267c066d886e5bc1f5062d8d22988ce5e09ac3fca8933c63422beddbbff12a295a29a8124779085e6bd0653ebbf76ea3c503b9eb73e9ca9b20dc0ffd59774a3cae9fd75336b7b8e0a66b79d1f070979376b8b6dc4596a066511c36f4ccacf240a5fff9f373d4504d1de273f3a094bd68c59d6997cc5c5c90c48d2690da9221ced63537beb523eccec54cd921cc923af2e33a23c8eeae45daf79bdf6a44c8ab1cc54b434ae8e4d178bc", 0xc4}], 0x1, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc3, "8f7f38d6a21a675a2d458686a9817499cc6ac3120d4e85eae47c357f8bd98a79a137fde6586bc9250c8e5b66b0fc38a3f7a97146c9f942103b8af4afa4c7c1157a1fb2bf79c49f2e529427055dba685a04e8c3795b52b4c69325c75fe61960186f20257278c7aeff85aa09a1dc759e8f7caba6f51b0e3087c57028bf47ce95f9e157ff2f94bc742fe69780d799aad05276733f119b30610c4c1e148c74f7652459bf816251435bb31fb3ede2c48b669f75469ca4f55a2ef0af2578fbb8513412e41cbb"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x98, 0x117, 0x2, 0x7e, "38ea9e0b1f61586f0ffc660b8a672811f20d7cc8462dae58b5b4d0f37d64ef924d1188e8a9373bcf5429e24c2679bd816eb6c598ff5c35f88a032d53d23ec407775def1f6e4803bca35bd353c53a66a8558a2c153e25a02d5661bc34f6b1939478cdb4fdc10ea0aa50082327802e0af25ab87a3cf8029af11e431231f2a2"}, @iv={0x90, 0x117, 0x2, 0x7c, "a1fa8ee779f6ed8e9b43fe056213d6acae321f7d2a97f48bd99b31217ecfc371bf59c74d37dbe1a4019b10d22b5cf144152c93d55997ab14702eb90d5c3979bc4a64ec0d1e5ee47bbcf8346f0a43ba9f3b087a64ee93b48076687fd07d4cab98cd7d87880e32b1a9decfe335ede2d94ed22561647c8bec7a26d652f1"}, @iv={0x108, 0x117, 0x2, 0xee, "0d849eb2b3f9f02730c5c76675ae5c32bae68a765f56181050b567dfdd7ad8c0a569c532a48bc34ebe07d007e74910e1d2f21181dc1d0c8c1d720b5640c70e7aea34532f30ccb891894f9054e3add1e6d54e9226dd236bf08a68a7ad7591cda19b39c450dd2dd3e5084dfc9c9f3a7a3fb03e19f747a9f271230d9f9900c62ac5ebf65e04008882d2c7c15e798b20e8e57526226e27b4e3ba009ce9c8e8eade49553788bc991f6194dae34564572e0c2a2921bb926a45e14d286dfbdd210eb651a1e8ddeea850794a6a8d34cee760f0607e1a05cc461107225dd70fadfb032f0b1a85546992d40eb927f93d167e55"}, @iv={0x68, 0x117, 0x2, 0x4d, "75431b1604bad9a7c4edff6bfa5e0b9896a1bb5a45d48b1b0ee24b82d7b35fc6a62e6f042a6c2f39ccf62973c1cd71bf2fddef9bb8159972a1f9c293fc2ec6a369f52cd21ad160f2b461fff797"}], 0x3d0, 0x4048840}, {0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000005c0)="8d615e7de1c7e538cc2c09d1745ab28736927aecf07432159da3c0af18020b7e8b85899ad84179008eccc7503926c22f8379479b06", 0x35}, {&(0x7f0000001c40)="be48997bb08e5e6135800dd6f51430b8502760", 0x13}, {&(0x7f0000001c80)="90b62b708615d3f0ae034f9334d3824dc6e2394db7f697183b16eac285f8de1e7da00aef32564b957c0b2b00110a1b24d5f14242978d7dbf2770464e6d0278a8ec463dff95bd", 0x46}, {&(0x7f0000001d00)="0f0ed9dcba4ca5d2942ac89a92c32a5f954d1998", 0x14}, {&(0x7f0000001d40)="9053f2e65eda43d5bf2bc7eca220c5297615f2f1e8fc4ac7f0a7bc516fa92a923c8d630ee8ec31006633b67c6cacc8aa42de2e6d9610db21ca3fe0a8", 0x3c}, {&(0x7f0000001d80)="f07e3b05cc7b3ec29897edd970bd5c02eca8c220adb3ed695d16881dae3d51b4", 0x20}, {&(0x7f0000001dc0)="26b4922445473c9395ffe6ef5beab908a047e33053d051aced5d4829744aa69741da44906bdf29c3116f9fb962ba03df3c0f96baa65c9a8d223933cdcfe0be2a19c7095c6649f7de8937fcaed58b24b4211bfaeebd806540d1f02e6d98d32af3b61f5505f333b876912973c311d66626937c123ff5e5954236f0ec076820245d73150a58ebf74a47592bc39424e6d0a029f7ff32a66abefeed572f1442093ef2f5bfa37ed728828da27842bad139a7d534400ecbd620f6cee2198d8bfdb3d2c78e3c5c763018af51981dcf8aaff7d94d9485", 0xd2}, {&(0x7f0000001ec0)="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", 0xfb}, {&(0x7f0000001fc0)="d9355789f5a0061f48329b3d164c2a420d9510ed0a443f7ce396d3c567df877a58baad87ec39004c9d796790f96953b9b716ebedcb7eed05cf7e74d239de7fa8138ac15b9c3fac269f77bcb1fee928421f5f81a1727accb286c01029b4dfb54994a6f45545f7a24821a29ddc228ee4e18f918a57b131f0f74e16a56a6f71ccf20cfdf69bb709fc4104ac7a7b3c001e9c893260df17c3f082635bc390b3a12acd5bbbb49c83612dbb1491163b938fbed0250e6f3145b6e212dc67edb342f93695bd75354a1a8ebe9e3b7c", 0xca}], 0x9, &(0x7f0000002180)=[@iv={0xf8, 0x117, 0x2, 0xdd, "514864fa39d26b6844b4ff69bf170b9eca5388963efec08fc3858cfca29895b1a96d4f89d097c2eb81f740756d2ed8a68c3ff6956213bbfa8ccad4301829137eb6d1809ee221649a442f033c670e4c5ce978530edb627354beedd5c5bb27820651803d3a29657cba1dd6203dc439771f8fd80cbacfe40c790382503c60753af5d82c3912f4b90f36d597510a458456e83efe5bec043411beb3b8fd26169c744497864515bc7ceddf1f5ea920d20102250d50941ca3963a44f50c5d93001b3a8fc2c1dde5d7347ee1c2284855bb92ee7cb7f7ee5e3f1d810750afe135ae"}, @iv={0xc8, 0x117, 0x2, 0xaf, "f8712003773761dfdab6afd7a4355cb7c290e62f63e0020c1084b6b1cb469cd674d01090080addd568e493a07d1466d2019dca2804cddbdc71cbc75ab05b1ff601b9e88b7bd09e07fe66d64276e152c3f817a196cc28116fd555fd2a154845f14048374b20337f5791534c2f0e991512ebd2811b0d9c908c75f9ccfe4d161b1f7e3ee561a0fc8d26b6c7d94e0567ddbc9d65bfaa8a51d59d946bb0d2032bcfd280e1052f89c207b529d62764458640"}, @iv={0x48, 0x117, 0x2, 0x30, "b62fb2fad9576971d567576fc6647d4eec663043b0f455877e64069d16cdff440e324ebcc88a5887eea38926baba3bf9"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}], 0x250, 0x20000000}], 0x4, 0x4000000) 4.751842871s ago: executing program 1 (id=1339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0x3, 0x1}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x80200, 0x84) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000e80)=""/159, 0x9f}], 0x1, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/168, 0xa8}], 0x1, &(0x7f0000001200)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x7c}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x8, &(0x7f0000000480)}}], 0x4, 0x2, 0x0) 4.635878297s ago: executing program 6 (id=1340): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x80}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340), &(0x7f0000000280)) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.455001912s ago: executing program 9 (id=1341): socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x2}, 0x18) connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}}, 0x18) sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e000022496f607c5822330200000008000500", @ANYRES32=r7], 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, r4, 0x17) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.354349426s ago: executing program 0 (id=1266): openat$nvram(0xffffffffffffff9c, &(0x7f0000003300), 0x801, 0x0) getrandom(&(0x7f00000011c0)=""/296, 0x128, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x40000002) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x84902, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001040)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0xf) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001180)=0x1007) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = syz_io_uring_setup(0x5fe9, &(0x7f0000000280)={0x0, 0x6e06, 0x1, 0x3, 0xa3}, 0x0, &(0x7f0000000340)) io_uring_setup(0x29ee, &(0x7f0000000080)={0x0, 0x47e4, 0x4, 0x40000, 0x1b1, 0x0, r4}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 3.528204717s ago: executing program 6 (id=1342): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f0000000080)='!selinuxrelinux\x00', 0x6e93ebbbcc0884f2, 0x34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04000404"], 0x7) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r0, @ANYBLOB="87cd39ed231edbf774bdaea244a6b66dbc057b5cb280665e82834af5d9c9f3502b78b3bad3243f4ba509ad3b9a68730cb445aba8e52457915f6a62aa"], 0x3c}}, 0x0) 3.041605503s ago: executing program 1 (id=1343): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x703642, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000000000000008000a00fcffffff"], 0x20}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file1', [], 0xa, "6eda44e0eb9a8e478b"}, 0x14) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000001440)=""/205, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$vga_arbiter(r5, 0x0, 0x0) 2.817075595s ago: executing program 1 (id=1344): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket(0x2, 0x2, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 2.619978311s ago: executing program 9 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2.527690869s ago: executing program 9 (id=1346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000140)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xe8230000, @empty, 0x3}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x2, r4, 0xf, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x1, 0x1, 0x10, 0x1ff}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) 2.514626782s ago: executing program 1 (id=1347): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) listen(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102400, 0x19000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 2.069657365s ago: executing program 9 (id=1348): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001090224000100000000090400000103c59a0009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x18, &(0x7f00000002c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x225a, 0x4000406) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f0"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_auth={0x51, 0x1, {{'sha256\x00'}, 0x48, "2a4b17173c4eb61fd3"}}]}, 0x144}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x12, 0x95, 0xa2, 0x8, 0x499, 0x5001, 0x29c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9a, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x8a, 0x28, 0x1, 0xff, 0xd5, 0x74, 0xa, [], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0xcd, 0x6, 0x77}}]}}]}}]}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ff8d00"}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00900d0000000ac2290600421e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.56655373s ago: executing program 6 (id=1349): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x1, 0xff, 0x0, 0x2, 0x600}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x3, &(0x7f0000006680)=0xfd) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = memfd_secret(0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) splice(r3, &(0x7f0000000100)=0x6, r4, &(0x7f0000000180)=0x9, 0x8, 0xd) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x2) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1.499450786s ago: executing program 4 (id=1350): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) eventfd(0x0) syz_io_uring_setup(0x1b75, &(0x7f0000007640)={0x0, 0x1fd, 0x2a}, &(0x7f0000000100), &(0x7f0000007700)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 880.999562ms ago: executing program 4 (id=1351): syz_usb_connect(0x0, 0x24, 0x0, 0x0) 859.633326ms ago: executing program 1 (id=1352): r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x80010, r0, 0xa969d000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sync() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000300)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) 283.153488ms ago: executing program 0 (id=1353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0x3, 0x1}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x80200, 0x84) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000e80)=""/159, 0x9f}], 0x1, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/168, 0xa8}], 0x1, &(0x7f0000001200)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x7c}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x8, &(0x7f0000000480)}}], 0x4, 0x2, 0x0) 226.769251ms ago: executing program 1 (id=1354): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x703642, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000000000000008000a00fcffffff"], 0x20}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file1', [], 0xa, "6eda44e0eb9a8e478b"}, 0x14) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000001440)=""/205, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$vga_arbiter(r5, 0x0, 0x0) 0s ago: executing program 4 (id=1355): r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) kernel console output (not intermixed with test programs): interface number 0 [ 448.208713][ T9501] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 448.219806][ T9501] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.252027][ T9501] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 448.270994][ T9501] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.280790][ T9501] usb 7-1: config 0 descriptor?? [ 448.288184][ T9501] ldusb 7-1:0.55: Interrupt in endpoint not found [ 449.231370][T11127] mkiss: ax0: crc mode is auto. [ 450.067498][ T5832] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 450.067798][ T5832] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 450.150890][ T29] audit: type=1400 audit(1733640998.003:645): avc: denied { setattr } for pid=11140 comm="syz.9.983" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 450.175064][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.690458][T11165] FAULT_INJECTION: forcing a failure. [ 450.690458][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 450.703126][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.1.986 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 450.713814][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.723866][T11165] Call Trace: [ 450.727227][T11165] [ 450.730156][T11165] dump_stack_lvl+0x16c/0x1f0 [ 450.734843][T11165] should_fail_ex+0x497/0x5b0 [ 450.739520][T11165] ? fs_reclaim_acquire+0xae/0x150 [ 450.744642][T11165] should_failslab+0xc2/0x120 [ 450.749325][T11165] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 450.755050][T11165] ? __d_alloc+0x31/0xaa0 [ 450.759388][T11165] __d_alloc+0x31/0xaa0 [ 450.763548][T11165] d_alloc+0x4a/0x1e0 [ 450.767537][T11165] d_alloc_parallel+0xe9/0x12b0 [ 450.772403][T11165] ? trace_lock_acquire+0x14e/0x1f0 [ 450.777617][T11165] ? __pfx_d_alloc_parallel+0x10/0x10 [ 450.782998][T11165] ? lockdep_init_map_type+0x16d/0x7d0 [ 450.788462][T11165] ? lock_acquire.part.0+0x11b/0x380 [ 450.793749][T11165] ? lockdep_init_map_type+0x16d/0x7d0 [ 450.799218][T11165] __lookup_slow+0x194/0x460 [ 450.803820][T11165] ? __pfx___lookup_slow+0x10/0x10 [ 450.808942][T11165] ? walk_component+0x342/0x5b0 [ 450.813800][T11165] ? lookup_fast+0x155/0x540 [ 450.818403][T11165] walk_component+0x350/0x5b0 [ 450.823079][T11165] path_lookupat+0x17f/0x770 [ 450.827670][T11165] filename_lookup+0x221/0x5f0 [ 450.832436][T11165] ? __pfx_filename_lookup+0x10/0x10 [ 450.837745][T11165] ? getname_kernel+0x52/0x370 [ 450.842512][T11165] ? __asan_memcpy+0x3c/0x60 [ 450.847104][T11165] kern_path+0x35/0x50 [ 450.851175][T11165] lookup_bdev+0xd9/0x280 [ 450.855504][T11165] ? __pfx_lookup_bdev+0x10/0x10 [ 450.860444][T11165] ? __asan_memcpy+0x3c/0x60 [ 450.865038][T11165] resume_store+0x1d8/0x460 [ 450.869545][T11165] ? __pfx_resume_store+0x10/0x10 [ 450.874580][T11165] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 450.880217][T11165] ? rcu_is_watching+0x12/0xc0 [ 450.884992][T11165] ? __pfx_resume_store+0x10/0x10 [ 450.890019][T11165] kobj_attr_store+0x55/0x80 [ 450.894616][T11165] ? __pfx_kobj_attr_store+0x10/0x10 [ 450.899905][T11165] sysfs_kf_write+0x117/0x170 [ 450.904591][T11165] kernfs_fop_write_iter+0x33d/0x500 [ 450.909877][T11165] ? __pfx_sysfs_kf_write+0x10/0x10 [ 450.915084][T11165] vfs_write+0x5ae/0x1150 [ 450.919417][T11165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 450.925230][T11165] ? __pfx___mutex_lock+0x10/0x10 [ 450.930259][T11165] ? __pfx_vfs_write+0x10/0x10 [ 450.935045][T11165] ksys_write+0x12b/0x250 [ 450.939374][T11165] ? __pfx_ksys_write+0x10/0x10 [ 450.944232][T11165] do_syscall_64+0xcd/0x250 [ 450.948742][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.954639][T11165] RIP: 0033:0x7fc22b77fed9 [ 450.959051][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.978662][T11165] RSP: 002b:00007fc22c5be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.987077][T11165] RAX: ffffffffffffffda RBX: 00007fc22b946160 RCX: 00007fc22b77fed9 [ 450.995044][T11165] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 451.003012][T11165] RBP: 00007fc22c5be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 451.010985][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.018952][T11165] R13: 0000000000000000 R14: 00007fc22b946160 R15: 00007ffde2ad1fa8 [ 451.026940][T11165] [ 451.029963][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.037406][T11165] syz.1.986: attempt to access beyond end of device [ 451.037406][T11165] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 452.578397][ T9] usb 7-1: USB disconnect, device number 29 [ 453.166610][T11186] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 453.175702][T11186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 453.197424][T11185] netlink: 168 bytes leftover after parsing attributes in process `syz.9.992'. [ 455.628989][ T970] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 456.666058][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.675787][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 457.039528][ T970] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 457.074018][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.093313][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.131398][ T970] usb 5-1: config 0 descriptor?? [ 457.150157][ T970] gspca_main: spca561-2.14.0 probing abcd:cdee [ 457.287854][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.297843][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.301571][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 457.367341][ T970] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 457.381957][ T970] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.399080][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.417818][ T970] usb 5-1: MIDIStreaming interface descriptor not found [ 457.425542][ T7657] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 457.449479][T11243] xt_hashlimit: max too large, truncated to 1048576 [ 457.588943][ T970] usb 5-1: USB disconnect, device number 11 [ 457.606931][ T7657] usb 2-1: Using ep0 maxpacket: 16 [ 457.623893][ T7657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.861226][ T7657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.897402][ T7657] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.952670][ T7657] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 457.974836][ T7657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.286170][ T7261] udevd[7261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.318980][ T7657] usb 2-1: config 0 descriptor?? [ 458.501140][T11274] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 458.751122][ T29] audit: type=1400 audit(1733641006.011:646): avc: denied { read write } for pid=11276 comm="syz.9.1009" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 458.816709][T11274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 458.829181][ T29] audit: type=1400 audit(1733641006.011:647): avc: denied { open } for pid=11276 comm="syz.9.1009" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 458.853425][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.031595][T11279] lo speed is unknown, defaulting to 1000 [ 459.391512][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.399014][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.412616][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.424091][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.454669][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.509900][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.531272][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.549047][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.557526][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.567200][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.574905][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.582364][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.589869][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.597464][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.604890][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.612422][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.619891][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.627332][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.634767][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.642445][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.650042][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.658263][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.668245][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.675735][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.683326][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.691509][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.700215][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.707711][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.715190][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.723341][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.730796][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 459.738271][ T5872] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 460.156165][ T5872] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.634620][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.643308][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.653507][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.664249][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.671710][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.681300][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.688847][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.696569][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.704022][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.711806][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.728733][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.736304][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.744934][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.757142][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.767376][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.804845][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.815956][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.824907][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.846172][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.860001][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 460.910847][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.122514][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.130970][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.138576][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.146051][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.153520][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.161080][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.168557][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.175979][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.183426][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.191383][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.199334][ T5872] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 461.554632][ T5872] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.989681][ T7657] usbhid 2-1:0.0: can't add hid device: -71 [ 461.998712][ T7657] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 462.044643][ T7657] usb 2-1: USB disconnect, device number 23 [ 463.452426][T11344] overlayfs: missing 'lowerdir' [ 463.497299][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 463.601506][T11351] block nbd8: shutting down sockets [ 463.899602][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.910619][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 463.921160][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.943812][ T9] usb 2-1: config 0 descriptor?? [ 464.470283][ T46] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 464.597019][ T29] audit: type=1400 audit(1733641011.511:648): avc: denied { setopt } for pid=11323 comm="syz.1.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.617860][ T9] magicmouse 0003:05AC:0265.0026: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 464.677752][ T9] usb 2-1: USB disconnect, device number 24 [ 464.684043][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 464.733780][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.745234][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.755128][ T46] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.769413][ T46] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 464.778458][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.804254][ T46] usb 9-1: config 0 descriptor?? [ 465.077091][T11386] bridge0: port 3(syz_tun) entered blocking state [ 465.087294][T11386] bridge0: port 3(syz_tun) entered disabled state [ 465.094428][T11387] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20000 [ 465.102243][T11386] syz_tun: entered allmulticast mode [ 465.109399][T11386] syz_tun: entered promiscuous mode [ 465.120736][ T29] audit: type=1400 audit(1733641012.006:649): avc: denied { ioctl } for pid=11383 comm="syz.6.1032" path="socket:[30602]" dev="sockfs" ino=30602 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 465.240321][ T7657] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 465.254662][ T46] koneplus 0003:1E7D:2E22.0027: unknown main item tag 0x0 [ 465.266501][ T46] koneplus 0003:1E7D:2E22.0027: unknown main item tag 0x0 [ 465.278710][ T46] koneplus 0003:1E7D:2E22.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.8-1/input0 [ 465.482644][ T46] koneplus 0003:1E7D:2E22.0027: couldn't init struct koneplus_device [ 465.491756][ T46] koneplus 0003:1E7D:2E22.0027: couldn't install mouse [ 465.511483][ T7657] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 465.514150][ T46] koneplus 0003:1E7D:2E22.0027: probe with driver koneplus failed with error -71 [ 466.044473][ T7657] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.055382][ T7657] usb 10-1: config 0 descriptor?? [ 466.115841][ T7657] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 466.166415][ T46] usb 9-1: USB disconnect, device number 18 [ 466.384364][ T7657] gp8psk: usb in 128 operation failed. [ 467.047354][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 467.082310][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 467.208928][ T7657] gp8psk: usb in 146 operation failed. [ 467.214431][ T7657] gp8psk: failed to get FW version [ 467.222710][ T7657] gp8psk: usb in 149 operation failed. [ 467.228266][ T7657] gp8psk: failed to get FPGA version [ 467.228571][ T46] usb 2-1: device descriptor read/64, error -32 [ 467.473402][ T7657] gp8psk: usb out operation failed. [ 467.480711][ T7657] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.491672][ T7657] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 467.501726][ T7657] usb 10-1: media controller created [ 467.536924][ T7657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.538433][ T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 467.645919][ T7657] gp8psk_fe: Frontend attached [ 467.656722][ T7657] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 467.673030][ T7657] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 467.705124][ T7657] gp8psk: usb in 138 operation failed. [ 467.715840][ T7657] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 467.752119][ T7657] gp8psk: found Genpix USB device pID = 203 (hex) [ 467.823256][ T7657] usb 10-1: USB disconnect, device number 23 [ 467.872021][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.883118][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.896096][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.916265][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.051821][ T46] usb 2-1: config 0 descriptor?? [ 468.413592][ T7657] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 468.637180][ T46] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 468.653657][ T46] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 468.671729][ T46] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 468.803072][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1052'. [ 468.981652][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.170099][ T29] audit: type=1400 audit(1733641015.795:650): avc: denied { append } for pid=11424 comm="syz.1.1038" name="pfkey" dev="proc" ino=4026534670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 469.245408][ T7657] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 469.273193][ T9501] usb 2-1: USB disconnect, device number 26 [ 469.302442][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 469.314688][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 469.327366][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.349343][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.367567][ T46] usb 5-1: Product: syz [ 469.376607][ T46] usb 5-1: Manufacturer: syz [ 469.396823][ T46] usb 5-1: SerialNumber: syz [ 469.414643][ T46] usb 5-1: config 0 descriptor?? [ 469.436503][ T7657] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.449722][ T46] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.454557][ T7657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 469.473716][ T46] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 469.503636][ T7657] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.569277][ T7657] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.579889][ T7657] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.594420][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.611416][ T7657] usb 10-1: Manufacturer: syz [ 469.638780][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.669591][ T7657] usb 10-1: config 0 descriptor?? [ 469.700220][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.737931][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.778988][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.805815][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.818121][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.828327][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.849982][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.863591][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.882970][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.904326][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.949694][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.043815][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.096833][ T46] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 470.098770][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.214555][ T7657] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 470.220479][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.426454][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.448285][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.453520][ T9] usb 10-1: USB disconnect, device number 24 [ 470.567985][ T7657] usb 7-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 470.577242][ T7657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.604628][ T7657] usb 7-1: Product: syz [ 470.611947][ T7657] usb 7-1: Manufacturer: syz [ 470.616583][ T7657] usb 7-1: SerialNumber: syz [ 470.635779][ T7657] usb 7-1: config 0 descriptor?? [ 470.648124][T11503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11503 comm=syz.1.1058 [ 470.650574][ T7657] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 470.842728][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 470.867497][ T29] audit: type=1400 audit(1733641017.376:651): avc: denied { write } for pid=11480 comm="syz.6.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 470.868783][T11484] lo speed is unknown, defaulting to 1000 [ 470.893063][T11484] lo speed is unknown, defaulting to 1000 [ 470.903615][T11484] lo speed is unknown, defaulting to 1000 [ 470.971348][T11484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 471.413483][T11484] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 471.485694][T11514] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 471.523799][T11514] bond3: (slave vti0): Error -95 calling set_mac_address [ 471.672676][T11484] lo speed is unknown, defaulting to 1000 [ 471.691644][T11484] lo speed is unknown, defaulting to 1000 [ 471.709114][T11484] lo speed is unknown, defaulting to 1000 [ 471.741075][ T46] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 471.743985][T11484] lo speed is unknown, defaulting to 1000 [ 472.081993][T11484] lo speed is unknown, defaulting to 1000 [ 472.088181][T11484] lo speed is unknown, defaulting to 1000 [ 472.095608][T11484] lo speed is unknown, defaulting to 1000 [ 472.103414][ T46] em28xx 5-1:0.0: board has no eeprom [ 472.106058][T11484] lo speed is unknown, defaulting to 1000 [ 472.116738][T11484] lo speed is unknown, defaulting to 1000 [ 472.160689][T11503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.166890][T11503] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 472.183077][T11503] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 472.194299][T11503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 472.203993][T11503] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 472.211301][T11503] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 472.221058][ T46] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 472.229061][ T46] em28xx 5-1:0.0: dvb set to bulk mode. [ 472.237145][ T2161] em28xx 5-1:0.0: Binding DVB extension [ 472.268329][T11503] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 472.286188][T11503] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 472.303972][T11503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.320471][T11503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 472.329168][ T2161] em28xx 5-1:0.0: Registering input extension [ 472.346355][T11503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 472.366398][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.375657][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.429646][ T2161] usb 5-1: USB disconnect, device number 12 [ 472.441934][ T2161] em28xx 5-1:0.0: Disconnecting em28xx [ 472.475622][ T2161] em28xx 5-1:0.0: Closing input extension [ 472.531830][ T2161] em28xx 5-1:0.0: Freeing device [ 472.589098][ T7657] pwc: Failed to set LED on/off time (-71) [ 472.599071][ T7657] pwc: send_video_command error -71 [ 472.626725][ T7657] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 472.751185][ T29] audit: type=1400 audit(1733641019.134:652): avc: denied { write } for pid=11545 comm="syz.8.1063" name="igmp" dev="proc" ino=4026534387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 472.827565][ T7657] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 472.863326][T11547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.045642][ T7657] usb 7-1: USB disconnect, device number 30 [ 473.108258][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 474.125082][T11561] vlan2: entered promiscuous mode [ 474.133652][T11561] vlan2: entered allmulticast mode [ 474.141789][ T29] audit: type=1400 audit(1733641020.416:653): avc: denied { ioctl } for pid=11560 comm="syz.6.1066" path="socket:[31274]" dev="sockfs" ino=31274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 474.168241][T11561] vlan0: entered allmulticast mode [ 474.178068][T11563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24593 sclass=netlink_route_socket pid=11563 comm=syz.6.1066 [ 474.232510][T11561] veth0_vlan: entered allmulticast mode [ 474.249826][T11561] vlan0: entered promiscuous mode [ 474.362204][ T5832] Bluetooth: hci2: unexpected event for opcode 0x203d [ 474.366820][T11561] team0: Port device vlan2 added [ 474.399618][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 474.405862][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 474.477248][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.483302][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 474.489898][T11503] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 474.649752][ T29] audit: type=1400 audit(1733641020.921:654): avc: denied { nlmsg_read } for pid=11580 comm="syz.4.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 475.762944][T11589] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1074'. [ 475.773073][T11589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1074'. [ 475.842451][ T46] libceph: connect (1)[c::]:6789 error -101 [ 475.848525][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 476.138321][ T46] libceph: connect (1)[c::]:6789 error -101 [ 476.178592][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 476.319617][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 476.612789][T11618] Unsupported ieee802154 address type: 0 [ 476.627819][T11618] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 476.636788][T11618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 476.674981][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 476.683990][ T5835] Bluetooth: hci6: command 0x0406 tx timeout [ 476.694541][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 476.700124][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.706290][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 476.716405][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 476.724830][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.159987][ T46] libceph: connect (1)[c::]:6789 error -101 [ 477.166042][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 477.294507][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.417976][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.435411][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.454346][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.463534][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.632714][T11592] ceph: No mds server is up or the cluster is laggy [ 477.784306][ T29] audit: type=1400 audit(1733641023.849:655): avc: denied { map } for pid=11623 comm="syz.6.1081" path="socket:[31495]" dev="sockfs" ino=31495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 477.787556][ T9] usb 9-1: usb_control_msg returned -32 [ 477.846450][ T9] usbtmc 9-1:16.0: can't read capabilities [ 477.970252][ T29] audit: type=1400 audit(1733641024.008:656): avc: denied { ioctl } for pid=11623 comm="syz.6.1081" path="socket:[32241]" dev="sockfs" ino=32241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 477.979990][ T6549] tipc: Subscription rejected, illegal request [ 478.059439][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.067408][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.076794][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.087662][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.097657][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.107532][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.118642][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.133240][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.143618][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.161204][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.172962][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.182056][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.190305][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.201427][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.210983][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.218715][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.230224][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.239587][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.250252][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.259772][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.271806][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.282361][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.290667][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.301732][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.310153][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.318675][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.326625][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.335784][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.345946][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.357062][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.367641][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.382437][ T7657] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 478.507766][ T7657] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.607164][ T1120] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 478.642424][T11645] FAULT_INJECTION: forcing a failure. [ 478.642424][T11645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.694060][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 478.703702][ T5832] Bluetooth: hci2: Injecting HCI hardware error event [ 478.714411][ T5832] Bluetooth: hci2: hardware error 0x00 [ 478.741638][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 478.764619][T11645] CPU: 1 UID: 0 PID: 11645 Comm: syz.9.1084 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 478.775413][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 478.785447][T11645] Call Trace: [ 478.788702][T11645] [ 478.791624][T11645] dump_stack_lvl+0x16c/0x1f0 [ 478.796317][T11645] should_fail_ex+0x497/0x5b0 [ 478.801001][T11645] _copy_to_user+0x32/0xd0 [ 478.805426][T11645] drm_ioctl+0x5fe/0xc00 [ 478.809687][T11645] ? __pfx_drm_mode_dirtyfb_ioctl+0x10/0x10 [ 478.815586][T11645] ? __pfx_drm_ioctl+0x10/0x10 [ 478.820361][T11645] ? __pfx_lock_release+0x10/0x10 [ 478.825401][T11645] ? selinux_file_ioctl+0x180/0x270 [ 478.830610][T11645] ? selinux_file_ioctl+0xb4/0x270 [ 478.835731][T11645] ? __pfx_drm_ioctl+0x10/0x10 [ 478.840508][T11645] __x64_sys_ioctl+0x190/0x200 [ 478.845275][T11645] do_syscall_64+0xcd/0x250 [ 478.849865][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.855756][T11645] RIP: 0033:0x7f620b37fed9 [ 478.860144][T11645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.879750][T11645] RSP: 002b:00007f62091f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.883752][T11651] bridge_slave_1: left allmulticast mode [ 478.888156][T11645] RAX: ffffffffffffffda RBX: 00007f620b545fa0 RCX: 00007f620b37fed9 [ 478.893873][T11651] bridge_slave_1: left promiscuous mode [ 478.901717][T11645] RDX: 0000000020000200 RSI: 00000000c01864b1 RDI: 0000000000000003 [ 478.907869][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.915210][T11645] RBP: 00007f62091f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 478.915225][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.915237][T11645] R13: 0000000000000000 R14: 00007f620b545fa0 R15: 00007ffc0c002138 [ 478.915262][T11645] [ 478.925047][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.966652][T11651] bridge1: port 1(bridge_slave_1) entered blocking state [ 478.973865][T11651] bridge1: port 1(bridge_slave_1) entered disabled state [ 478.981152][T11651] bridge_slave_1: entered allmulticast mode [ 479.111350][T11651] bridge_slave_1: entered promiscuous mode [ 479.152295][T11660] netlink: 'syz.1.1086': attribute type 39 has an invalid length. [ 479.184957][ T29] audit: type=1400 audit(1733641025.158:657): avc: denied { egress } for pid=11650 comm="syz.1.1086" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 479.208362][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.533173][ T29] audit: type=1400 audit(1733641025.158:658): avc: denied { sendto } for pid=11650 comm="syz.1.1086" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 479.784737][T11672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.053487][ T9] usb 9-1: USB disconnect, device number 19 [ 480.083094][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1094'. [ 480.669236][ T6549] tipc: Subscription rejected, illegal request [ 480.692090][T11693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.041236][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 481.158221][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 481.532285][ T970] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 482.317568][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.328707][ T7657] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 482.355622][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.378862][ T970] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 482.407613][ T970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.474928][ T970] usb 9-1: config 0 descriptor?? [ 482.497204][ T7657] usb 10-1: Using ep0 maxpacket: 16 [ 482.508706][ T7657] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 482.529599][ T7657] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.567747][ T7657] usb 10-1: Product: syz [ 482.583791][ T7657] usb 10-1: Manufacturer: syz [ 482.601733][ T7657] usb 10-1: SerialNumber: syz [ 482.629244][ T7657] usb 10-1: config 0 descriptor?? [ 482.646598][ T7657] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 482.676795][ T7657] usb 10-1: Detected FT-X [ 483.321966][T11697] tmpfs: Bad value for 'mpol' [ 483.445243][ T7657] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 483.452574][ T7657] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 483.460141][ T7657] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 483.468331][ T970] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 483.475616][ T970] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 483.484306][ T970] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.002A/input/input42 [ 483.496512][ T7657] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 483.642179][ T7657] usb 10-1: USB disconnect, device number 25 [ 483.728805][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.867049][ T970] cm6533_jd 0003:0D8C:0022.002A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 483.988349][ T7657] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 483.998158][ T7657] ftdi_sio 10-1:0.0: device disconnected [ 484.057724][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.059319][ T970] usb 9-1: USB disconnect, device number 20 [ 484.205715][ T35] tipc: Subscription rejected, illegal request [ 484.684338][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.702955][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.025390][T11787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.150409][T11790] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 486.636354][ T7657] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 487.226794][ T7657] usb 5-1: device descriptor read/64, error -71 [ 487.272622][T11799] batadv0: entered promiscuous mode [ 487.280502][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.458093][ T9361] tipc: Subscription rejected, illegal request [ 487.487056][ T7657] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 487.626098][ T7657] usb 5-1: device descriptor read/64, error -71 [ 487.752787][ T7657] usb usb5-port1: attempt power cycle [ 487.834404][ T970] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 488.010813][ T970] usb 9-1: Using ep0 maxpacket: 16 [ 488.024054][ T970] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 488.069064][ T970] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 488.101936][ T970] usb 9-1: can't read configurations, error -61 [ 488.128454][ T7657] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 488.171942][ T7657] usb 5-1: device descriptor read/8, error -71 [ 488.278977][ T970] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 488.403862][T11824] FAULT_INJECTION: forcing a failure. [ 488.403862][T11824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.422755][T11824] CPU: 1 UID: 0 PID: 11824 Comm: syz.1.1127 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 488.428024][ T7657] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 488.433510][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 488.433526][T11824] Call Trace: [ 488.433533][T11824] [ 488.433541][T11824] dump_stack_lvl+0x16c/0x1f0 [ 488.441234][ T970] usb 9-1: Using ep0 maxpacket: 16 [ 488.451118][T11824] should_fail_ex+0x497/0x5b0 [ 488.451149][T11824] _copy_from_user+0x2e/0xd0 [ 488.451167][T11824] move_addr_to_kernel+0x68/0x160 [ 488.451193][T11824] __sys_connect+0xb0/0x170 [ 488.451217][T11824] ? __pfx___sys_connect+0x10/0x10 [ 488.451250][T11824] ? __pfx_ksys_write+0x10/0x10 [ 488.451273][T11824] __x64_sys_connect+0x72/0xb0 [ 488.451296][T11824] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.451318][T11824] do_syscall_64+0xcd/0x250 [ 488.451344][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.451370][T11824] RIP: 0033:0x7fc22b77fed9 [ 488.451387][T11824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.451404][T11824] RSP: 002b:00007fc22c600058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 488.451424][T11824] RAX: ffffffffffffffda RBX: 00007fc22b945fa0 RCX: 00007fc22b77fed9 [ 488.451437][T11824] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 0000000000000003 [ 488.451449][T11824] RBP: 00007fc22c6000a0 R08: 0000000000000000 R09: 0000000000000000 [ 488.451460][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.451472][T11824] R13: 0000000000000000 R14: 00007fc22b945fa0 R15: 00007ffde2ad1fa8 [ 488.451496][T11824] [ 488.541824][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.609293][ T29] audit: type=1400 audit(1733641033.970:659): avc: denied { bind } for pid=11816 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.675673][ T7657] usb 5-1: device descriptor read/8, error -71 [ 488.706726][ T29] audit: type=1400 audit(1733641034.063:660): avc: denied { write } for pid=11816 comm="syz.6.1125" path="socket:[32635]" dev="sockfs" ino=32635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.710390][ T970] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 488.892164][ T7657] usb usb5-port1: unable to enumerate USB device [ 488.901558][ T970] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 488.910099][ T970] usb 9-1: can't read configurations, error -61 [ 489.844039][ T970] usb usb9-port1: attempt power cycle [ 490.223833][ T970] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 490.262828][ T970] usb 9-1: Using ep0 maxpacket: 16 [ 490.288496][ T970] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 490.297486][ T970] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 490.306441][ T970] usb 9-1: can't read configurations, error -61 [ 490.341373][ T6056] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 490.459282][ T970] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 490.502007][ T6056] usb 5-1: Using ep0 maxpacket: 32 [ 490.538227][ T6056] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 490.555347][ T970] usb 9-1: device descriptor read/8, error -71 [ 490.572847][ T6056] usb 5-1: config 0 has no interface number 0 [ 490.595909][ T6056] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=b1.ff [ 490.609171][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.646621][ T6056] usb 5-1: Product: syz [ 490.661714][ T6056] usb 5-1: Manufacturer: syz [ 490.682769][ T6056] usb 5-1: SerialNumber: syz [ 490.694400][ T970] usb usb9-port1: unable to enumerate USB device [ 490.701404][ T6056] usb 5-1: config 0 descriptor?? [ 490.717801][ T6056] option 5-1:0.65: GSM modem (1-port) converter detected [ 490.737090][ T3527] tipc: Subscription rejected, illegal request [ 491.096344][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.130284][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.715920][ T970] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 493.337765][ T9] usb 5-1: USB disconnect, device number 17 [ 493.349334][ T9] option 5-1:0.65: device disconnected [ 493.354893][ T970] usb 10-1: Using ep0 maxpacket: 32 [ 493.369368][ T970] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 493.525174][T11888] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1141'. [ 494.116336][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.177440][ T970] usb 10-1: config 0 descriptor?? [ 494.208187][ T970] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 494.673267][T11907] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 494.760451][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.776578][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.807613][ T970] gspca_nw80x: reg_r err -71 [ 494.812739][ T970] nw80x 10-1:0.0: probe with driver nw80x failed with error -71 [ 494.823583][ T970] usb 10-1: USB disconnect, device number 26 [ 495.160213][T11912] xt_hashlimit: max too large, truncated to 1048576 [ 496.681070][ T2161] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 496.873852][ T2161] usb 9-1: Using ep0 maxpacket: 16 [ 496.915740][ T2161] usb 9-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 496.958957][ T2161] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.009514][ T2161] usb 9-1: Product: syz [ 497.031079][ T2161] usb 9-1: Manufacturer: syz [ 497.055200][ T2161] usb 9-1: SerialNumber: syz [ 497.095730][ T29] audit: type=1400 audit(1733641041.902:661): avc: denied { connect } for pid=11936 comm="syz.6.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 497.116457][ T2161] usb 9-1: config 0 descriptor?? [ 497.123377][ T2161] safe_serial 9-1:0.0: safe_serial converter detected [ 497.135743][ T2161] usb 9-1: safe_serial converter now attached to ttyUSB0 [ 497.160081][ T29] audit: type=1400 audit(1733641041.967:662): avc: denied { read } for pid=11936 comm="syz.6.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 497.179312][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.183408][ T970] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 497.386172][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 497.514229][ T970] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 497.555163][ T970] usb 5-1: config 0 has no interface number 0 [ 497.597446][ T970] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=b1.ff [ 497.648680][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.687432][ T970] usb 5-1: Product: syz [ 497.770758][ T970] usb 5-1: Manufacturer: syz [ 497.796003][ T970] usb 5-1: SerialNumber: syz [ 497.843999][ T970] usb 5-1: config 0 descriptor?? [ 497.868176][ T970] option 5-1:0.65: GSM modem (1-port) converter detected [ 497.953076][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 498.112002][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.121429][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 498.131064][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.145296][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.159512][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.172779][ T9] usb 10-1: Product: syz [ 498.178055][ T9] usb 10-1: Manufacturer: syz [ 498.186135][ T9] usb 10-1: SerialNumber: syz [ 498.204285][ T9] usb 10-1: config 0 descriptor?? [ 498.976191][ T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 499.273718][ T970] usb 9-1: USB disconnect, device number 25 [ 499.466663][ T970] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 499.477044][ T970] safe_serial 9-1:0.0: device disconnected [ 499.495829][ T29] audit: type=1400 audit(1733641044.156:663): avc: denied { name_connect } for pid=11963 comm="syz.8.1162" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 500.165071][ T5872] usb 5-1: USB disconnect, device number 18 [ 500.193654][ T5872] option 5-1:0.65: device disconnected [ 500.462005][ T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 500.478027][T11984] netlink: 'syz.6.1164': attribute type 11 has an invalid length. [ 500.479801][ T9] usb 10-1: USB disconnect, device number 27 [ 500.985556][ T970] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 501.163650][ T970] usb 9-1: Using ep0 maxpacket: 16 [ 501.241589][T12001] ipvlan0: entered promiscuous mode [ 501.247060][T12001] ipvlan0: entered allmulticast mode [ 501.252695][T12001] veth0_vlan: entered allmulticast mode [ 501.790722][ T29] audit: type=1400 audit(1733641045.831:664): avc: denied { name_bind } for pid=11996 comm="syz.1.1169" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 502.008598][T12010] binder: 12008:12010 ioctl 4018620d 0 returned -22 [ 502.016308][T12010] binder: 12008:12010 ioctl c0306201 200001c0 returned -22 [ 502.383002][ T29] audit: type=1400 audit(1733641046.785:665): avc: denied { mounton } for pid=12006 comm="syz.9.1172" path="/161/file0" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 502.872484][T12015] orangefs_mount: mount request failed with -4 [ 502.978466][ T970] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 502.996447][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.017265][ T970] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.046421][ T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.070734][ T970] usb 9-1: Product: syz [ 503.075433][ T970] usb 9-1: Manufacturer: syz [ 503.080066][ T970] usb 9-1: SerialNumber: syz [ 503.101081][T12005] input: syz0 as /devices/virtual/input/input44 [ 503.129377][T12005] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2329 sclass=netlink_xfrm_socket pid=12005 comm=syz.4.1170 [ 503.142602][ T970] usb 9-1: config 0 descriptor?? [ 503.157851][ T970] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.168466][ T970] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 503.640025][ T29] audit: type=1400 audit(1733641048.029:666): avc: denied { setopt } for pid=11986 comm="syz.8.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 503.656455][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.670901][T12037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.670999][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.679659][T12037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.687063][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.695371][T12037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.702423][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.702445][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.702461][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.702476][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.702492][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 503.753260][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.097157][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.105105][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.113027][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.120514][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.127997][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.135459][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.143052][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.150516][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.158094][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.165564][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.173015][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.180579][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.188053][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.195534][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.203020][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.210837][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.218616][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.224058][ T29] audit: type=1400 audit(1733641048.581:667): avc: denied { write } for pid=11986 comm="syz.8.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.226063][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.253453][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.260943][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.268421][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.275916][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.283413][ T9501] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 504.295851][ T2161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.304927][ T9501] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.317788][T12030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.326673][T12030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.560268][ T970] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 504.566973][ T970] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 504.581350][ T46] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 504.587868][ T970] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 504.606987][ T970] em28xx 9-1:0.0: No AC97 audio processor [ 504.766188][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 504.773875][ T2161] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 504.784489][ T5821] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 504.793555][ T46] usb 7-1: can't read configurations, error -61 [ 504.958419][ T2161] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 504.970671][ T46] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 504.979224][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.990664][ T2161] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 505.001936][ T9501] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 505.011865][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.034248][ T2161] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 505.052086][ T5821] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.061146][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.086325][ T2161] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 505.096430][ T2161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.104595][ T2161] usb 10-1: Product: syz [ 505.127386][ T5821] usb 5-1: config 0 descriptor?? [ 505.137392][ T2161] usb 10-1: Manufacturer: syz [ 505.142228][ T2161] usb 10-1: SerialNumber: syz [ 505.171871][ T9501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.186748][ T2161] usb 10-1: config 0 descriptor?? [ 505.194019][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 505.207536][ T46] usb 7-1: can't read configurations, error -61 [ 505.221664][ T46] usb usb7-port1: attempt power cycle [ 505.227523][ T9501] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.242249][ T9501] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.252126][ T9501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.289156][ T9501] usb 2-1: config 0 descriptor?? [ 505.417344][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.437244][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.446361][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.455230][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.457183][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.478311][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.490650][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.500482][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.525387][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.553873][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.577213][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.585995][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.601398][ T5821] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 505.619092][ T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 505.633349][ T5821] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 505.675423][ T5821] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 505.689710][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 505.702178][ T46] usb 7-1: can't read configurations, error -61 [ 505.702487][ T29] audit: type=1400 audit(1733641049.965:668): avc: denied { listen } for pid=12021 comm="syz.9.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.771871][ T9501] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 505.803140][ T29] audit: type=1400 audit(1733641049.965:669): avc: denied { accept } for pid=12021 comm="syz.9.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.808732][ T9501] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 505.853801][ T46] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 505.891815][ T970] usb 5-1: USB disconnect, device number 19 [ 505.925471][ T9501] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 505.938122][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 505.960838][ T46] usb 7-1: can't read configurations, error -61 [ 505.967507][ T46] usb usb7-port1: unable to enumerate USB device [ 506.180748][ T970] usb 2-1: USB disconnect, device number 27 [ 506.313480][ T9501] usb 9-1: USB disconnect, device number 26 [ 506.319887][ T9501] em28xx 9-1:0.0: Disconnecting em28xx [ 506.362451][ T9501] em28xx 9-1:0.0: Freeing device [ 506.550513][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.595273][ T29] audit: type=1400 audit(1733641050.788:670): avc: denied { nlmsg_write } for pid=12092 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 506.802200][ T29] audit: type=1400 audit(1733641050.994:671): avc: denied { name_bind } for pid=12090 comm="syz.8.1183" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 506.859409][ T29] audit: type=1326 audit(1733641051.022:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b77fed9 code=0x7ffc0000 [ 506.883413][ T29] audit: type=1326 audit(1733641051.022:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b77fed9 code=0x7ffc0000 [ 506.907060][ T29] audit: type=1326 audit(1733641051.031:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc22b77fed9 code=0x7ffc0000 [ 506.930794][ T29] audit: type=1326 audit(1733641051.031:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12103 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b77fed9 code=0x7ffc0000 [ 507.165512][T12110] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1187'. [ 507.810085][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.178732][ T9501] net_ratelimit: 1 callbacks suppressed [ 509.178750][ T9501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.365114][T12124] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1192'. [ 509.376113][T12124] FAULT_INJECTION: forcing a failure. [ 509.376113][T12124] name failslab, interval 1, probability 0, space 0, times 0 [ 509.389401][T12124] CPU: 0 UID: 0 PID: 12124 Comm: syz.9.1192 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 509.400177][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 509.410240][T12124] Call Trace: [ 509.413516][T12124] [ 509.416438][T12124] dump_stack_lvl+0x16c/0x1f0 [ 509.421138][T12124] should_fail_ex+0x497/0x5b0 [ 509.425817][T12124] ? find_held_lock+0x2d/0x110 [ 509.430605][T12124] should_failslab+0xc2/0x120 [ 509.435271][T12124] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 509.441074][T12124] ? __alloc_skb+0x2b1/0x380 [ 509.445676][T12124] __alloc_skb+0x2b1/0x380 [ 509.450093][T12124] ? __pfx___alloc_skb+0x10/0x10 [ 509.455019][T12124] ? if_nlmsg_size+0x45d/0xa70 [ 509.459782][T12124] rtmsg_ifinfo_build_skb+0x81/0x280 [ 509.465062][T12124] rtmsg_ifinfo+0x9f/0x1a0 [ 509.469471][T12124] __dev_notify_flags+0x24e/0x2e0 [ 509.474493][T12124] ? __pfx___dev_notify_flags+0x10/0x10 [ 509.480037][T12124] ? __pfx___dev_change_flags+0x10/0x10 [ 509.485588][T12124] dev_change_flags+0x10c/0x160 [ 509.490430][T12124] do_setlink.constprop.0+0x69c/0x3f70 [ 509.495892][T12124] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 509.501802][T12124] ? lock_acquire.part.0+0x11b/0x380 [ 509.507106][T12124] ? __mutex_trylock_common+0xea/0x250 [ 509.512580][T12124] ? __pfx___mutex_trylock_common+0x10/0x10 [ 509.518552][T12124] ? rtnl_newlink+0x5e4/0x1ce0 [ 509.523308][T12124] ? rcu_is_watching+0x12/0xc0 [ 509.528061][T12124] ? trace_contention_end+0xee/0x140 [ 509.533332][T12124] ? __mutex_lock+0x1cc/0xa60 [ 509.538009][T12124] ? rtnl_newlink+0x5e4/0x1ce0 [ 509.542765][T12124] ? __pfx___mutex_lock+0x10/0x10 [ 509.547800][T12124] ? __pfx___nla_validate_parse+0x10/0x10 [ 509.553515][T12124] ? cap_capable+0x1cf/0x240 [ 509.558112][T12124] rtnl_newlink+0x12ce/0x1ce0 [ 509.562796][T12124] ? __pfx_rtnl_newlink+0x10/0x10 [ 509.567814][T12124] ? __pfx___lock_acquire+0x10/0x10 [ 509.573003][T12124] ? cred_has_capability.isra.0+0x192/0x2f0 [ 509.578901][T12124] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 509.585146][T12124] ? find_held_lock+0x2d/0x110 [ 509.589909][T12124] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 509.595018][T12124] ? __pfx_lock_release+0x10/0x10 [ 509.600124][T12124] ? trace_lock_acquire+0x14e/0x1f0 [ 509.605327][T12124] ? __pfx_rtnl_newlink+0x10/0x10 [ 509.610341][T12124] rtnetlink_rcv_msg+0x95b/0xea0 [ 509.615269][T12124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.620742][T12124] netlink_rcv_skb+0x16b/0x440 [ 509.625520][T12124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.630972][T12124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.636250][T12124] ? rcu_is_watching+0x12/0xc0 [ 509.641009][T12124] netlink_unicast+0x53c/0x7f0 [ 509.645769][T12124] ? __pfx_netlink_unicast+0x10/0x10 [ 509.651063][T12124] netlink_sendmsg+0x8b8/0xd70 [ 509.655824][T12124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.661127][T12124] ____sys_sendmsg+0xaaf/0xc90 [ 509.665898][T12124] ? copy_msghdr_from_user+0x10b/0x160 [ 509.671361][T12124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.676665][T12124] ___sys_sendmsg+0x135/0x1e0 [ 509.681334][T12124] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.686545][T12124] ? __pfx_lock_release+0x10/0x10 [ 509.691556][T12124] ? trace_lock_acquire+0x14e/0x1f0 [ 509.696756][T12124] ? __fget_files+0x206/0x3a0 [ 509.701437][T12124] __sys_sendmsg+0x16e/0x220 [ 509.706012][T12124] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.711123][T12124] do_syscall_64+0xcd/0x250 [ 509.715635][T12124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.721512][T12124] RIP: 0033:0x7f620b37fed9 [ 509.725903][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.745516][T12124] RSP: 002b:00007f62091f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.753925][T12124] RAX: ffffffffffffffda RBX: 00007f620b545fa0 RCX: 00007f620b37fed9 [ 509.761879][T12124] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 509.769840][T12124] RBP: 00007f62091f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 509.777799][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.785765][T12124] R13: 0000000000000000 R14: 00007f620b545fa0 R15: 00007ffc0c002138 [ 509.793736][T12124] [ 509.953848][T12124] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1192'. [ 510.400194][ T9501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.835284][ T970] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 510.996592][ T970] usb 9-1: Using ep0 maxpacket: 8 [ 511.006021][ T970] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.026377][ T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.081386][ T970] usb 9-1: Product: syz [ 511.098175][ T970] usb 9-1: Manufacturer: syz [ 511.122824][ T970] usb 9-1: SerialNumber: syz [ 511.140303][ T970] usb 9-1: config 0 descriptor?? [ 511.373269][ T970] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 511.881791][ T3527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.892483][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.908520][T12170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1201'. [ 512.150617][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.209791][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.448102][ T970] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 512.984852][ T9501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.636625][ T5821] usb 9-1: USB disconnect, device number 27 [ 513.645182][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.075279][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.127824][T12202] overlay: Unknown parameter 'subj_type' [ 515.212150][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.443844][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.868239][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 515.868255][ T29] audit: type=1400 audit(1733645154.474:688): avc: denied { write } for pid=12229 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 515.886662][T12230] netlink: 'syz.4.1214': attribute type 39 has an invalid length. [ 516.854759][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 517.251769][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1220'. [ 517.266307][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1220'. [ 517.596210][ T29] audit: type=1400 audit(1733645155.840:689): avc: denied { cmd } for pid=12248 comm="syz.9.1220" path="socket:[34444]" dev="sockfs" ino=34444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 517.673224][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 517.697136][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.718783][ T9] usb 2-1: Product: syz [ 517.726249][ T9] usb 2-1: Manufacturer: syz [ 517.781594][ T9] usb 2-1: SerialNumber: syz [ 517.872668][ T9] usb 2-1: config 0 descriptor?? [ 517.997445][ T9] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 518.248295][ T9] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 518.388654][T12262] input: syz1 as /devices/virtual/input/input46 [ 518.463621][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 518.849412][ T25] usb 2-1: USB disconnect, device number 28 [ 519.269802][ T7657] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 519.369852][ T29] audit: type=1400 audit(1733645157.748:690): avc: denied { getopt } for pid=12280 comm="syz.9.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.491536][ T7657] usb 7-1: Using ep0 maxpacket: 8 [ 519.519348][ T7657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.562278][ T7657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.617757][ T7657] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.708512][ T7657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.787208][ T7657] usb 7-1: config 0 descriptor?? [ 521.151785][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 521.316499][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.333134][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.336642][T12326] batman_adv: batadv0: Adding interface: ip6gretap1 [ 521.391918][T12326] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 521.483782][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.500936][T12326] batman_adv: batadv0: Interface activated: ip6gretap1 [ 521.508444][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.510856][ T25] usb 2-1: config 0 descriptor?? [ 522.043669][ T7657] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 522.208453][ T7657] usb 7-1: USB disconnect, device number 35 [ 522.223553][ T25] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 522.231724][ T25] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 522.289104][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.309439][ T25] plantronics 0003:047F:FFFF.002E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 522.616491][ T9] usb 2-1: USB disconnect, device number 29 [ 522.969355][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.977715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.150461][ T29] audit: type=1400 audit(1733645161.284:691): avc: denied { write } for pid=12362 comm="syz.8.1239" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 523.188829][T12363] tipc: Started in network mode [ 523.205191][T12363] tipc: Node identity 080211000001, cluster identity 4711 [ 523.227612][T12363] tipc: Enabled bearer , priority 0 [ 523.241038][ T29] audit: type=1400 audit(1733645161.331:692): avc: denied { ioctl } for pid=12365 comm="syz.9.1240" path="socket:[35198]" dev="sockfs" ino=35198 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.273234][ T5832] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 523.590971][T12383] xt_hashlimit: max too large, truncated to 1048576 [ 523.869078][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 524.391846][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 524.414909][ T7657] tipc: Node number set to 134418688 [ 524.444481][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 524.473290][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 524.507740][ T9] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 524.554796][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.574597][ T9] usb 7-1: Product: syz [ 524.578802][ T9] usb 7-1: Manufacturer: syz [ 524.594200][ T9] usb 7-1: SerialNumber: syz [ 524.605674][ T9] usb 7-1: config 0 descriptor?? [ 524.775860][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 524.989658][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 525.019653][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 525.098437][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.099060][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.128421][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.137308][ T25] usb 2-1: Product: syz [ 525.143645][ T25] usb 2-1: Manufacturer: syz [ 525.148681][ T25] usb 2-1: SerialNumber: syz [ 525.500345][ T25] usb 2-1: config 0 descriptor?? [ 525.529886][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.672597][ T25] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 525.792748][T12423] FAULT_INJECTION: forcing a failure. [ 525.792748][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 525.876171][T12426] overlayfs: missing 'lowerdir' [ 525.948004][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.8.1250 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 525.958806][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 525.968858][T12423] Call Trace: [ 525.972137][T12423] [ 525.975062][T12423] dump_stack_lvl+0x16c/0x1f0 [ 525.979745][T12423] should_fail_ex+0x497/0x5b0 [ 525.984414][T12423] ? fs_reclaim_acquire+0xae/0x150 [ 525.989524][T12423] should_failslab+0xc2/0x120 [ 525.994196][T12423] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 526.000346][T12423] ? __alloc_skb+0x2b1/0x380 [ 526.004945][T12423] __alloc_skb+0x2b1/0x380 [ 526.009362][T12423] ? __pfx___alloc_skb+0x10/0x10 [ 526.014281][T12423] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 526.020596][T12423] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 526.027270][T12423] netlink_alloc_large_skb+0x69/0x130 [ 526.032632][T12423] netlink_sendmsg+0x689/0xd70 [ 526.037398][T12423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.042689][T12423] ____sys_sendmsg+0xaaf/0xc90 [ 526.047445][T12423] ? copy_msghdr_from_user+0x10b/0x160 [ 526.052901][T12423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.058188][T12423] ? __lock_acquire+0xcc5/0x3c40 [ 526.063116][T12423] ? hlock_class+0x4e/0x130 [ 526.067618][T12423] ? __lock_acquire+0x15a9/0x3c40 [ 526.072648][T12423] ___sys_sendmsg+0x135/0x1e0 [ 526.077323][T12423] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.082500][T12423] ? __pfx___lock_acquire+0x10/0x10 [ 526.087687][T12423] ? __pfx___might_resched+0x10/0x10 [ 526.092961][T12423] ? __might_fault+0xe3/0x190 [ 526.097644][T12423] __sys_sendmmsg+0x201/0x420 [ 526.102327][T12423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 526.107523][T12423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 526.113516][T12423] ? fput+0x67/0x440 [ 526.117418][T12423] ? ksys_write+0x1ba/0x250 [ 526.121930][T12423] ? __pfx_ksys_write+0x10/0x10 [ 526.126779][T12423] __x64_sys_sendmmsg+0x9c/0x100 [ 526.131718][T12423] ? lockdep_hardirqs_on+0x7c/0x110 [ 526.136914][T12423] do_syscall_64+0xcd/0x250 [ 526.141415][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.147316][T12423] RIP: 0033:0x7f8b9177fed9 [ 526.151721][T12423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.171319][T12423] RSP: 002b:00007f8b925fc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.179724][T12423] RAX: ffffffffffffffda RBX: 00007f8b91945fa0 RCX: 00007f8b9177fed9 [ 526.187689][T12423] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 526.195648][T12423] RBP: 00007f8b925fc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.203610][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.211579][T12423] R13: 0000000000000000 R14: 00007f8b91945fa0 R15: 00007fff8fc7fb88 [ 526.219552][T12423] [ 526.241569][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 526.815851][T12447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.079324][ T2161] iguanair 10-1:0.0: failed to get version [ 527.109141][ T2161] iguanair 10-1:0.0: probe with driver iguanair failed with error -110 [ 527.129398][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.157089][ T2161] usb 10-1: USB disconnect, device number 28 [ 527.177141][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.236862][ T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 527.254638][T12447] netlink: 'syz.8.1252': attribute type 21 has an invalid length. [ 527.262546][T12447] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1252'. [ 527.313200][ T25] em28xx 2-1:0.0: board has no eeprom [ 527.420058][ T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 527.428328][ T25] em28xx 2-1:0.0: dvb set to bulk mode. [ 527.434904][ T46] em28xx 2-1:0.0: Binding DVB extension [ 527.466951][ T25] usb 2-1: USB disconnect, device number 30 [ 527.484321][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 527.512426][ T46] em28xx 2-1:0.0: Registering input extension [ 527.529175][ T25] em28xx 2-1:0.0: Closing input extension [ 527.553541][ T25] em28xx 2-1:0.0: Freeing device [ 527.619779][ T9501] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 527.908224][ T9501] usb 5-1: Using ep0 maxpacket: 16 [ 527.919533][ T9501] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.931957][ T9501] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 527.950882][ T9501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.959211][ T9501] usb 5-1: Product: syz [ 527.969804][ T9501] usb 5-1: Manufacturer: syz [ 528.065941][T12480] FAULT_INJECTION: forcing a failure. [ 528.065941][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 528.119900][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.1.1259 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 528.121402][ T9501] usb 5-1: SerialNumber: syz [ 528.130686][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.130730][T12480] Call Trace: [ 528.130737][T12480] [ 528.130745][T12480] dump_stack_lvl+0x16c/0x1f0 [ 528.136735][ T9501] usb 5-1: config 0 descriptor?? [ 528.145351][T12480] should_fail_ex+0x497/0x5b0 [ 528.145374][T12480] ? fs_reclaim_acquire+0xae/0x150 [ 528.149813][ T9501] mcba_usb 5-1:0.0: Can't find endpoints [ 528.151555][T12480] should_failslab+0xc2/0x120 [ 528.181203][T12480] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 528.186592][T12480] ? key_alloc+0x3e3/0x13a0 [ 528.191115][T12480] key_alloc+0x3e3/0x13a0 [ 528.195476][T12480] ? __pfx_key_alloc+0x10/0x10 [ 528.200253][T12480] ? bpf_lsm_key_permission+0x9/0x10 [ 528.205563][T12480] request_key_and_link+0x75f/0x1360 [ 528.210868][T12480] ? __pfx_request_key_and_link+0x10/0x10 [ 528.216598][T12480] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 528.221954][T12480] ? __pfx_keyring_search_iterator+0x10/0x10 [ 528.227917][T12480] ? rcu_is_watching+0x12/0xc0 [ 528.232675][T12480] request_key_tag+0x56/0xc0 [ 528.237280][T12480] dns_query+0x311/0x850 [ 528.241543][T12480] afs_try_auto_mntpt+0x362/0x620 [ 528.246586][T12480] ? __pfx_afs_try_auto_mntpt+0x10/0x10 [ 528.252144][T12480] ? lockdep_init_map_type+0x16d/0x7d0 [ 528.257613][T12480] ? lock_acquire.part.0+0x11b/0x380 [ 528.261239][T12484] netlink: zone id is out of range [ 528.262891][T12480] ? lockdep_init_map_type+0x16d/0x7d0 [ 528.267982][T12484] netlink: zone id is out of range [ 528.273412][T12480] afs_dynroot_lookup+0x131/0x4e0 [ 528.273443][T12480] __lookup_slow+0x24f/0x460 [ 528.273468][T12480] ? __pfx___lookup_slow+0x10/0x10 [ 528.293281][T12480] ? walk_component+0x342/0x5b0 [ 528.296845][T12484] netlink: zone id is out of range [ 528.298139][T12480] ? lookup_fast+0x155/0x540 [ 528.303224][T12484] netlink: zone id is out of range [ 528.307772][T12480] walk_component+0x350/0x5b0 [ 528.307796][T12480] path_lookupat+0x17f/0x770 [ 528.307818][T12480] filename_lookup+0x221/0x5f0 [ 528.313422][T12484] netlink: zone id is out of range [ 528.317549][T12480] ? __pfx_filename_lookup+0x10/0x10 [ 528.317593][T12480] ? getname_kernel+0x52/0x370 [ 528.322250][T12484] netlink: zone id is out of range [ 528.326871][T12480] ? __asan_memcpy+0x3c/0x60 [ 528.326897][T12480] kern_path+0x35/0x50 [ 528.332336][T12484] netlink: zone id is out of range [ 528.337222][T12480] lookup_bdev+0xd9/0x280 [ 528.337243][T12480] ? __pfx_lookup_bdev+0x10/0x10 [ 528.337263][T12480] ? __asan_memcpy+0x3c/0x60 [ 528.337285][T12480] resume_store+0x1d8/0x460 [ 528.337309][T12480] ? __pfx_resume_store+0x10/0x10 [ 528.337338][T12480] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 528.337360][T12480] ? rcu_is_watching+0x12/0xc0 [ 528.344794][T12484] netlink: zone id is out of range [ 528.347185][T12480] ? __pfx_resume_store+0x10/0x10 [ 528.347211][T12480] kobj_attr_store+0x55/0x80 [ 528.352740][T12489] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1258'. [ 528.355811][T12480] ? __pfx_kobj_attr_store+0x10/0x10 [ 528.360958][T12484] netlink: zone id is out of range [ 528.365191][T12480] sysfs_kf_write+0x117/0x170 [ 528.372231][T12484] netlink: zone id is out of range [ 528.374656][T12480] kernfs_fop_write_iter+0x33d/0x500 [ 528.374683][T12480] ? __pfx_sysfs_kf_write+0x10/0x10 [ 528.423658][ T9501] usb 5-1: USB disconnect, device number 20 [ 528.428546][T12480] vfs_write+0x5ae/0x1150 [ 528.428576][T12480] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 528.464907][T12480] ? __pfx___mutex_lock+0x10/0x10 [ 528.469954][T12480] ? __pfx_vfs_write+0x10/0x10 [ 528.474758][T12480] ksys_write+0x12b/0x250 [ 528.479097][T12480] ? __pfx_ksys_write+0x10/0x10 [ 528.483961][T12480] do_syscall_64+0xcd/0x250 [ 528.488481][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.494386][T12480] RIP: 0033:0x7fc22b77fed9 [ 528.498802][T12480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.518420][T12480] RSP: 002b:00007fc22c600058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.526848][T12480] RAX: ffffffffffffffda RBX: 00007fc22b945fa0 RCX: 00007fc22b77fed9 [ 528.534829][T12480] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003 [ 528.542811][T12480] RBP: 00007fc22c6000a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.550792][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.558779][T12480] R13: 0000000000000000 R14: 00007fc22b945fa0 R15: 00007ffde2ad1fa8 [ 528.566781][T12480] [ 528.591899][T12480] syz.1.1259: attempt to access beyond end of device [ 528.591899][T12480] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 530.230364][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.389726][ T29] audit: type=1400 audit(1733645168.000:693): avc: denied { setopt } for pid=12524 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.717581][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.788705][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.849053][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.081694][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.092088][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 531.099685][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.198574][ T29] audit: type=1400 audit(1733645168.814:694): avc: denied { create } for pid=12540 comm="syz.6.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 531.615114][T12526] mkiss: ax0: crc mode is auto. [ 532.829176][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.906464][T12532] lo speed is unknown, defaulting to 1000 [ 533.105582][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.748134][ T5835] Bluetooth: hci1: command tx timeout [ 534.178340][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.278253][T12532] lo speed is unknown, defaulting to 1000 [ 534.571373][ T29] audit: type=1400 audit(1733645171.966:695): avc: denied { read } for pid=12572 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.648434][T12582] FAULT_INJECTION: forcing a failure. [ 534.648434][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 534.728830][T12582] CPU: 1 UID: 0 PID: 12582 Comm: syz.9.1280 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 534.739641][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.749709][T12582] Call Trace: [ 534.752990][T12582] [ 534.755921][T12582] dump_stack_lvl+0x16c/0x1f0 [ 534.760614][T12582] should_fail_ex+0x497/0x5b0 [ 534.765299][T12582] ? fs_reclaim_acquire+0xae/0x150 [ 534.770428][T12582] should_failslab+0xc2/0x120 [ 534.775115][T12582] __kmalloc_noprof+0xcb/0x510 [ 534.779885][T12582] ? __pfx_lock_release+0x10/0x10 [ 534.784910][T12582] ? trace_lock_acquire+0x14e/0x1f0 [ 534.790115][T12582] tomoyo_encode2+0x100/0x3e0 [ 534.794789][T12582] tomoyo_encode+0x29/0x50 [ 534.799219][T12582] tomoyo_mount_acl+0x145/0x880 [ 534.804063][T12582] ? hlock_class+0x4e/0x130 [ 534.808562][T12582] ? __lock_acquire+0x15a9/0x3c40 [ 534.813578][T12582] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 534.818948][T12582] ? __pfx___lock_acquire+0x10/0x10 [ 534.824134][T12582] ? stack_trace_save+0x95/0xd0 [ 534.828979][T12582] ? __pfx_lock_release+0x10/0x10 [ 534.834001][T12582] ? trace_lock_acquire+0x14e/0x1f0 [ 534.839196][T12582] ? tomoyo_mount_permission+0x149/0x420 [ 534.844819][T12582] ? lock_acquire+0x2f/0xb0 [ 534.849309][T12582] ? tomoyo_mount_permission+0x149/0x420 [ 534.854937][T12582] tomoyo_mount_permission+0x16e/0x420 [ 534.860404][T12582] ? tomoyo_mount_permission+0x149/0x420 [ 534.866025][T12582] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 534.872003][T12582] ? get_current_fs_domain+0x184/0x1f0 [ 534.877450][T12582] security_sb_mount+0x9b/0x260 [ 534.882293][T12582] path_mount+0x129/0x1f20 [ 534.886700][T12582] ? kmem_cache_free+0x152/0x4c0 [ 534.891635][T12582] ? __pfx_path_mount+0x10/0x10 [ 534.896488][T12582] ? putname+0x13c/0x180 [ 534.900724][T12582] __x64_sys_mount+0x294/0x320 [ 534.905480][T12582] ? __pfx___x64_sys_mount+0x10/0x10 [ 534.910759][T12582] do_syscall_64+0xcd/0x250 [ 534.915262][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.921152][T12582] RIP: 0033:0x7f620b37fed9 [ 534.925552][T12582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.945162][T12582] RSP: 002b:00007f62091f6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.953565][T12582] RAX: ffffffffffffffda RBX: 00007f620b545fa0 RCX: 00007f620b37fed9 [ 534.961530][T12582] RDX: 0000000020000200 RSI: 00000000200000c0 RDI: 0000000020000180 [ 534.969489][T12582] RBP: 00007f62091f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 534.977447][T12582] R10: 0000000000008003 R11: 0000000000000246 R12: 0000000000000001 [ 534.985404][T12582] R13: 0000000000000000 R14: 00007f620b545fa0 R15: 00007ffc0c002138 [ 534.993373][T12582] [ 535.067754][T12532] chnl_net:caif_netlink_parms(): no params data found [ 535.436558][ T35] bridge_slave_1: left allmulticast mode [ 535.442417][ T35] bridge_slave_1: left promiscuous mode [ 535.455604][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.536075][ T35] bridge_slave_0: left allmulticast mode [ 535.643116][ T35] bridge_slave_0: left promiscuous mode [ 535.757103][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.970425][ T5832] Bluetooth: hci1: command tx timeout [ 536.026633][ T9501] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 536.075517][ T29] audit: type=1400 audit(1733645173.369:696): avc: denied { bind } for pid=12597 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 536.113629][ T29] audit: type=1400 audit(1733645173.369:697): avc: denied { node_bind } for pid=12597 comm="syz.4.1283" saddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 536.177382][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 536.235060][ T9501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.254298][ T9501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.266285][ T9501] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 536.276079][ T9501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.296959][ T9501] usb 10-1: config 0 descriptor?? [ 536.425730][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.444819][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.457883][ T35] bond0 (unregistering): Released all slaves [ 536.610654][T12532] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.619540][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.662840][T12532] bridge_slave_0: entered allmulticast mode [ 536.674505][ T6056] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 536.684928][T12532] bridge_slave_0: entered promiscuous mode [ 536.709699][ T35] tipc: Disabling bearer [ 536.716989][ T35] tipc: Left network mode [ 536.722862][T12532] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.770805][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.787424][T12532] bridge_slave_1: entered allmulticast mode [ 536.802375][T12532] bridge_slave_1: entered promiscuous mode [ 536.847144][ T6056] usb 5-1: Using ep0 maxpacket: 32 [ 536.861964][ T6056] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 536.873458][ T6056] usb 5-1: config 0 has no interface number 0 [ 536.882369][ T6056] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=b1.ff [ 536.897281][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.913381][ T6056] usb 5-1: Product: syz [ 536.923735][ T6056] usb 5-1: Manufacturer: syz [ 536.935561][ T6056] usb 5-1: SerialNumber: syz [ 536.950784][ T6056] usb 5-1: config 0 descriptor?? [ 536.954096][T12532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.963234][ T6056] option 5-1:0.65: GSM modem (1-port) converter detected [ 537.007769][T12532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.026893][ T9501] usb 10-1: string descriptor 0 read error: -71 [ 537.035777][ T9501] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #200: -71 [ 537.051111][ T9501] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71 [ 537.060145][ T9501] uclogic 0003:256C:006D.002F: failed probing pen v2 parameters: -71 [ 537.068300][ T9501] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 537.076174][ T9501] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71 [ 537.110092][ T9501] usb 10-1: USB disconnect, device number 29 [ 537.195133][T12532] team0: Port device team_slave_0 added [ 537.260258][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.265409][T12532] team0: Port device team_slave_1 added [ 537.293312][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.325112][T12532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.345174][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.389625][T12532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.435626][ T35] hsr_slave_0: left promiscuous mode [ 537.448279][ T35] hsr_slave_1: left promiscuous mode [ 537.459321][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.470075][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.498578][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.506187][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.531468][ T35] veth0_macvtap: left promiscuous mode [ 537.537033][ T35] veth1_vlan: left promiscuous mode [ 537.542521][ T35] veth0_vlan: left promiscuous mode [ 538.032982][ C1] net_ratelimit: 783 callbacks suppressed [ 538.033002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.257001][ T5832] Bluetooth: hci1: command tx timeout [ 538.410563][T12633] FAULT_INJECTION: forcing a failure. [ 538.410563][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 538.438014][T12633] CPU: 1 UID: 0 PID: 12633 Comm: syz.9.1287 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 538.448814][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.458877][T12633] Call Trace: [ 538.462151][T12633] [ 538.465072][T12633] dump_stack_lvl+0x16c/0x1f0 [ 538.469750][T12633] should_fail_ex+0x497/0x5b0 [ 538.474414][T12633] ? fs_reclaim_acquire+0xae/0x150 [ 538.479525][T12633] should_failslab+0xc2/0x120 [ 538.484198][T12633] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 538.489995][T12633] ? __alloc_skb+0x2b1/0x380 [ 538.494572][T12633] __alloc_skb+0x2b1/0x380 [ 538.498971][T12633] ? __pfx___alloc_skb+0x10/0x10 [ 538.503902][T12633] alloc_skb_with_frags+0xe4/0x850 [ 538.509001][T12633] ? mark_lock+0xb5/0xc60 [ 538.513318][T12633] ? __pfx___lock_acquire+0x10/0x10 [ 538.518530][T12633] sock_alloc_send_pskb+0x7f1/0x980 [ 538.523732][T12633] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 538.529447][T12633] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.534809][T12633] ? mark_held_locks+0x9f/0xe0 [ 538.539560][T12633] ? ax25cmp+0x149/0x1d0 [ 538.543807][T12633] nr_sendmsg+0x536/0xab0 [ 538.548126][T12633] ? __pfx_nr_sendmsg+0x10/0x10 [ 538.552977][T12633] __sys_sendto+0x488/0x4f0 [ 538.557483][T12633] ? __pfx___sys_sendto+0x10/0x10 [ 538.562519][T12633] ? ksys_write+0x1ba/0x250 [ 538.567016][T12633] ? __pfx_ksys_write+0x10/0x10 [ 538.571868][T12633] __x64_sys_sendto+0xe0/0x1c0 [ 538.576621][T12633] ? do_syscall_64+0x91/0x250 [ 538.581289][T12633] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.586477][T12633] do_syscall_64+0xcd/0x250 [ 538.590974][T12633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.596857][T12633] RIP: 0033:0x7f620b37fed9 [ 538.601258][T12633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.620874][T12633] RSP: 002b:00007f62091d5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.629289][T12633] RAX: ffffffffffffffda RBX: 00007f620b546080 RCX: 00007f620b37fed9 [ 538.637256][T12633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 538.645219][T12633] RBP: 00007f62091d50a0 R08: 0000000020000240 R09: 0000000000000048 [ 538.653178][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.661161][T12633] R13: 0000000000000001 R14: 00007f620b546080 R15: 00007ffc0c002138 [ 538.669134][T12633] [ 538.707782][T12635] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1289'. [ 538.717229][ T2161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.727046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.835041][ T7657] usb 5-1: USB disconnect, device number 21 [ 539.845193][ T7657] option 5-1:0.65: device disconnected [ 540.022048][ T29] audit: type=1400 audit(1733645177.064:698): avc: denied { search } for pid=12644 comm="syz.6.1292" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 540.334873][ T35] team0 (unregistering): Port device team_slave_1 removed [ 540.416346][ T5832] Bluetooth: hci1: command tx timeout [ 540.530273][ T35] team0 (unregistering): Port device team_slave_0 removed [ 541.164997][ T29] audit: type=1400 audit(1733645178.112:699): avc: denied { write } for pid=12662 comm="syz.6.1297" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 541.892180][T12532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.900555][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.926497][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.941529][T12532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.215007][T12532] hsr_slave_0: entered promiscuous mode [ 542.249614][T12532] hsr_slave_1: entered promiscuous mode [ 542.290631][T12532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.322647][T12532] Cannot create hsr debugfs directory [ 542.353800][ T7657] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 542.503457][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1302'. [ 542.623554][ T7657] usb 2-1: Using ep0 maxpacket: 32 [ 542.648228][ T7657] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 542.659580][ T7657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.668450][ T7657] usb 2-1: Product: syz [ 542.673012][ T7657] usb 2-1: Manufacturer: syz [ 542.677728][ T7657] usb 2-1: SerialNumber: syz [ 542.770843][ T7657] usb 2-1: config 0 descriptor?? [ 542.813713][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.634707][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.703251][T12722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.712283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.060356][ T7657] rtl8150 2-1:0.0: couldn't reset the device [ 544.077568][ T7657] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 544.095775][T12730] FAULT_INJECTION: forcing a failure. [ 544.095775][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.109370][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.6.1307 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 544.120142][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.130205][T12730] Call Trace: [ 544.133480][T12730] [ 544.136408][T12730] dump_stack_lvl+0x16c/0x1f0 [ 544.141098][T12730] should_fail_ex+0x497/0x5b0 [ 544.145775][T12730] _copy_from_user+0x2e/0xd0 [ 544.150364][T12730] snd_seq_event_dup+0x722/0x8b0 [ 544.155315][T12730] ? __pfx_snd_seq_event_dup+0x10/0x10 [ 544.160777][T12730] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 544.166586][T12730] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.171796][T12730] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 544.177614][T12730] snd_seq_client_enqueue_event.constprop.0+0x210/0x440 [ 544.184557][T12730] ? __pfx_snd_seq_client_enqueue_event.constprop.0+0x10/0x10 [ 544.192020][T12730] ? __might_fault+0xe3/0x190 [ 544.196703][T12730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.202607][T12730] snd_seq_write+0x363/0x6c0 [ 544.207204][T12730] ? __pfx_snd_seq_write+0x10/0x10 [ 544.212324][T12730] ? bpf_lsm_file_permission+0x9/0x10 [ 544.217701][T12730] ? security_file_permission+0x71/0x210 [ 544.223345][T12730] ? __pfx_snd_seq_write+0x10/0x10 [ 544.228462][T12730] vfs_write+0x24c/0x1150 [ 544.232791][T12730] ? __fget_files+0x1fc/0x3a0 [ 544.237465][T12730] ? __pfx_lock_release+0x10/0x10 [ 544.242488][T12730] ? __pfx_vfs_write+0x10/0x10 [ 544.247250][T12730] ? lock_acquire+0x2f/0xb0 [ 544.251751][T12730] ? __fget_files+0x40/0x3a0 [ 544.256341][T12730] ? __fget_files+0x206/0x3a0 [ 544.261024][T12730] ksys_write+0x207/0x250 [ 544.265350][T12730] ? __pfx_ksys_write+0x10/0x10 [ 544.270218][T12730] do_syscall_64+0xcd/0x250 [ 544.274729][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.280628][T12730] RIP: 0033:0x7f8fe777fed9 [ 544.285042][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.304649][T12730] RSP: 002b:00007f8fe55d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.313039][T12730] RAX: ffffffffffffffda RBX: 00007f8fe7946160 RCX: 00007f8fe777fed9 [ 544.320985][T12730] RDX: 000000000000ffc8 RSI: 0000000020000000 RDI: 0000000000000006 [ 544.328939][T12730] RBP: 00007f8fe55d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 544.336908][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.344853][T12730] R13: 0000000000000000 R14: 00007f8fe7946160 R15: 00007fff896982b8 [ 544.352818][T12730] [ 544.382180][ T7657] usb 2-1: USB disconnect, device number 31 [ 544.485116][T12735] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1308'. [ 544.638622][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1309'. [ 546.237390][ T2161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.245700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.254977][ T9501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.263210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.485845][ T6549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 547.487630][ T9] iguanair 7-1:0.0: failed to get version [ 547.502541][ C0] iguanair 7-1:0.0: failed to resubmit urb: -1 [ 547.516285][ T9] iguanair 7-1:0.0: probe with driver iguanair failed with error -110 [ 547.598761][ T9] usb 7-1: USB disconnect, device number 36 [ 547.937448][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.077558][T12785] process 'syz.4.1318' launched './file0' with NULL argv: empty string added [ 548.179888][ T29] audit: type=1400 audit(1733645184.688:700): avc: denied { execute_no_trans } for pid=12782 comm="syz.4.1318" path="/94/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 548.668403][T12796] FAULT_INJECTION: forcing a failure. [ 548.668403][T12796] name failslab, interval 1, probability 0, space 0, times 0 [ 548.681264][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.6.1320 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 548.692033][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 548.702090][T12796] Call Trace: [ 548.705370][T12796] [ 548.708297][T12796] dump_stack_lvl+0x16c/0x1f0 [ 548.712989][T12796] should_fail_ex+0x497/0x5b0 [ 548.717661][T12796] ? fs_reclaim_acquire+0xae/0x150 [ 548.722784][T12796] should_failslab+0xc2/0x120 [ 548.727466][T12796] __kmalloc_node_noprof+0xd1/0x510 [ 548.732666][T12796] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 548.738132][T12796] __kvmalloc_node_noprof+0xad/0x1a0 [ 548.743418][T12796] kvm_vcpu_ioctl_set_cpuid+0xf8/0x680 [ 548.748881][T12796] ? kvm_arch_vcpu_ioctl+0x1009/0x5070 [ 548.754353][T12796] kvm_arch_vcpu_ioctl+0x197e/0x5070 [ 548.759640][T12796] ? find_held_lock+0x2d/0x110 [ 548.764416][T12796] ? hlock_class+0x4e/0x130 [ 548.768924][T12796] ? __lock_acquire+0x15a9/0x3c40 [ 548.773950][T12796] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 548.779596][T12796] ? __pfx___lock_acquire+0x10/0x10 [ 548.784801][T12796] ? lock_acquire.part.0+0x11b/0x380 [ 548.790108][T12796] ? __mutex_trylock_common+0xea/0x250 [ 548.795596][T12796] ? __pfx___mutex_trylock_common+0x10/0x10 [ 548.801507][T12796] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 548.806457][T12796] ? rcu_is_watching+0x12/0xc0 [ 548.811249][T12796] ? trace_contention_end+0xee/0x140 [ 548.816543][T12796] ? __mutex_lock+0x1cc/0xa60 [ 548.821232][T12796] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 548.826170][T12796] ? __pfx___mutex_lock+0x10/0x10 [ 548.831202][T12796] ? irqentry_exit+0x3b/0x90 [ 548.835806][T12796] ? __x64_sys_ioctl+0x12c/0x200 [ 548.840752][T12796] ? kvm_vcpu_ioctl+0x9e6/0x1520 [ 548.845707][T12796] kvm_vcpu_ioctl+0x9e6/0x1520 [ 548.850500][T12796] ? do_vfs_ioctl+0x513/0x1990 [ 548.855291][T12796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 548.860500][T12796] ? __pfx_lock_release+0x10/0x10 [ 548.865534][T12796] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 548.872051][T12796] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 548.878916][T12796] ? rcu_is_watching+0x12/0xc0 [ 548.883684][T12796] ? selinux_file_ioctl+0x180/0x270 [ 548.888882][T12796] ? selinux_file_ioctl+0xb4/0x270 [ 548.893995][T12796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 548.899183][T12796] __x64_sys_ioctl+0x190/0x200 [ 548.903947][T12796] do_syscall_64+0xcd/0x250 [ 548.908444][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.914326][T12796] RIP: 0033:0x7f8fe777fed9 [ 548.918726][T12796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.938319][T12796] RSP: 002b:00007f8fe55d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.946717][T12796] RAX: ffffffffffffffda RBX: 00007f8fe7946160 RCX: 00007f8fe777fed9 [ 548.954674][T12796] RDX: 0000000020000540 RSI: 000000004008ae8a RDI: 000000000000000a [ 548.962629][T12796] RBP: 00007f8fe55d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 548.970594][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.978562][T12796] R13: 0000000000000000 R14: 00007f8fe7946160 R15: 00007fff896982b8 [ 548.986532][T12796] [ 549.177339][T12799] input: syz1 as /devices/virtual/input/input49 [ 549.803581][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 550.084372][ T9] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 550.269585][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.375428][ T9] usb 7-1: Product: syz [ 550.423921][T12532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.432892][ T9] usb 7-1: Manufacturer: syz [ 550.484779][T12532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.497743][ T9] usb 7-1: SerialNumber: syz [ 550.510493][T12532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.534076][ T9] usb 7-1: config 0 descriptor?? [ 550.539285][T12532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.639873][T12532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.692645][T12532] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.732340][ T9] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 550.751064][ T9] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 550.762173][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.769264][ T9361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.776870][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 550.835664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.842802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.947542][ T9] usb 7-1: USB disconnect, device number 37 [ 551.497675][T12532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.569474][T12532] veth0_vlan: entered promiscuous mode [ 551.583734][T12532] veth1_vlan: entered promiscuous mode [ 551.645603][T12532] veth0_macvtap: entered promiscuous mode [ 551.724749][T12532] veth1_macvtap: entered promiscuous mode [ 551.754345][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.764928][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.774818][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.785253][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.795190][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.805714][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.815759][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.826237][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.836213][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.846801][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.856675][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.867134][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.877720][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.888182][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.898039][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.908456][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.919504][T12532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.944778][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 551.957543][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.970419][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.980935][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.992159][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.002236][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.043011][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.068460][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.099301][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.113261][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.123543][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.141717][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.144857][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.181105][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.182757][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.210309][ T9] usb 2-1: Product: syz [ 552.212222][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.221260][ T9] usb 2-1: Manufacturer: syz [ 552.240398][ T46] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 552.248143][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.250524][ T9] usb 2-1: SerialNumber: syz [ 552.274297][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.300484][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.313292][T12532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.324893][T12532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.346568][T12532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.379632][T12532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.388373][T12532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.422356][T12532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.431139][T12532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.440282][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 552.455644][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.507477][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.570561][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 552.576809][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.590345][ T9501] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 552.597077][ T9501] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 552.617352][ T46] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 552.629851][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.640568][ T46] usb 7-1: config 0 descriptor?? [ 553.869224][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.878312][ T9] cdc_mbim 2-1:1.0: bind() failure [ 553.885569][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 553.892547][ T9] cdc_ncm 2-1:1.1: bind() failure [ 553.917275][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.925618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.795212][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 554.795593][ T9501] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 554.808359][ T9501] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 555.089048][ T46] usbhid 7-1:0.0: can't add hid device: -71 [ 555.132793][ T46] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 555.155526][ T46] usb 7-1: USB disconnect, device number 38 [ 557.008384][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 557.014484][ T9501] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 557.029443][ T9501] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 559.402876][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.402958][ T9501] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 559.426015][ T9501] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 559.937421][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.285695][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.293973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.711971][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.712141][ T9501] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 561.731526][ T9501] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 561.795182][ T9] usb 2-1: USB disconnect, device number 32 [ 561.982078][ T9501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.990520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.039351][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.108011][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.172362][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.182068][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.344521][ T29] audit: type=1400 audit(1733645197.933:701): avc: denied { mounton } for pid=12532 comm="syz-executor" path="/root/syzkaller.QKsfaa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 562.392330][ T5872] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 562.442571][ T29] audit: type=1400 audit(1733645198.008:702): avc: denied { mount } for pid=12532 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 563.060151][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.071316][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.139631][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.148843][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.158521][ T5872] usb 5-1: config 0 descriptor?? [ 563.347256][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1341'. [ 563.356291][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1341'. [ 563.678377][ T5872] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 563.678592][ T5872] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 563.711802][ T5872] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 563.921319][T13427] netlink: 'syz.6.1342': attribute type 2 has an invalid length. [ 564.119583][ T9501] usb 5-1: USB disconnect, device number 22 [ 564.297034][T13420] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1342'. [ 564.309566][T13420] batadv1: entered promiscuous mode [ 564.449842][T13420] batadv1: entered allmulticast mode [ 564.777639][ T29] audit: type=1400 audit(1733645200.225:703): avc: denied { listen } for pid=13442 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 565.004700][ T9501] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 565.042621][ T29] audit: type=1400 audit(1733645200.225:704): avc: denied { listen } for pid=13442 comm="syz.1.1347" lport=60956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.072493][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.230406][ T29] audit: type=1400 audit(1733645200.365:705): avc: denied { accept } for pid=13442 comm="syz.1.1347" lport=60956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.253371][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.267624][ T29] audit: type=1400 audit(1733645200.374:706): avc: denied { setopt } for pid=13442 comm="syz.1.1347" lport=60956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 565.291175][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.327898][ T9501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.413655][ T9501] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.443916][ T9501] usb 10-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 565.592696][ T25] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 565.738541][ T9501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.824333][ T9501] usb 10-1: config 0 descriptor?? [ 566.021084][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 566.378055][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.425696][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.435917][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.448808][ T25] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 566.457848][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.469828][ T25] usb 7-1: config 0 descriptor?? [ 566.613506][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.630656][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.720732][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.805899][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.059508][ T9501] pantherlord 0003:0F30:0111.0031: item fetching failed at offset 6/7 [ 567.068336][ T9501] pantherlord 0003:0F30:0111.0031: parse failed [ 567.074627][ T9501] pantherlord 0003:0F30:0111.0031: probe with driver pantherlord failed with error -22 [ 569.507093][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.515324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.911819][ T25] usbhid 7-1:0.0: can't add hid device: -32 [ 571.917825][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 658.451367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.244359][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 679.251326][ C1] rcu: 0-...0: (1 GPs behind) idle=354c/1/0x4000000000000000 softirq=60065/60072 fqs=2100 [ 679.262489][ C1] rcu: hardirqs softirqs csw/system [ 679.268895][ C1] rcu: number: 0 0 0 [ 679.275296][ C1] rcu: cputime: 0 0 0 ==> 52500(ms) [ 679.283087][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13487/3:b..l [ 679.291079][ C1] rcu: (detected by 1, t=10505 jiffies, g=41141, q=230 ncpus=2) [ 679.298789][ C1] Sending NMI from CPU 1 to CPUs 0: [ 679.298813][ C0] NMI backtrace for cpu 0 [ 679.298822][ C0] CPU: 0 UID: 0 PID: 13447 Comm: syz.9.1348 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 679.298839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 679.298846][ C0] RIP: 0010:__kasan_check_read+0x0/0x20 [ 679.298866][ C0] Code: c3 cc cc cc cc 48 83 c4 60 48 c7 c7 88 3c 7c 8d 5b 5d 41 5c e9 31 48 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f6 31 d2 e9 1f f1 ff ff 66 66 2e 0f 1f [ 679.298879][ C0] RSP: 0018:ffffc90000007a98 EFLAGS: 00000046 [ 679.298890][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 679.298899][ C0] RDX: 1ffff11005ab4a75 RSI: 0000000000000008 RDI: ffffffff96e52cc0 [ 679.298908][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff2dca598 [ 679.298917][ C0] R10: ffffffff96e52cc7 R11: 0000000000000000 R12: 0000000000000002 [ 679.298926][ C0] R13: ffff88802d5a4880 R14: 0000000000000000 R15: ffff88802d5a5388 [ 679.298936][ C0] FS: 00007f62091f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 679.298951][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.298962][ C0] CR2: 0000000020003c80 CR3: 0000000043494000 CR4: 00000000003526f0 [ 679.298971][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 679.298980][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 679.298989][ C0] Call Trace: [ 679.298995][ C0] [ 679.299002][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 679.299020][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 679.299034][ C0] ? nmi_handle+0x1ac/0x5d0 [ 679.299049][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 679.299063][ C0] ? default_do_nmi+0x6a/0x160 [ 679.299077][ C0] ? exc_nmi+0x170/0x1e0 [ 679.299090][ C0] ? end_repeat_nmi+0xf/0x53 [ 679.299114][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 679.299128][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 679.299142][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 679.299156][ C0] [ 679.299161][ C0] [ 679.299165][ C0] hlock_class+0x4e/0x130 [ 679.299185][ C0] __lock_acquire+0x44d/0x3c40 [ 679.299202][ C0] ? hlock_class+0x4e/0x130 [ 679.299220][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 679.299237][ C0] lock_acquire.part.0+0x11b/0x380 [ 679.299252][ C0] ? debug_object_activate+0x149/0x4a0 [ 679.299270][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 679.299285][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.299303][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 679.299321][ C0] ? debug_object_activate+0x149/0x4a0 [ 679.299337][ C0] ? lock_acquire+0x2f/0xb0 [ 679.299350][ C0] ? debug_object_activate+0x149/0x4a0 [ 679.299367][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 679.299382][ C0] ? debug_object_activate+0x149/0x4a0 [ 679.299397][ C0] debug_object_activate+0x149/0x4a0 [ 679.299413][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 679.299428][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 679.299446][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 679.299463][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 679.299480][ C0] ? __pfx_advance_sched+0x10/0x10 [ 679.299495][ C0] enqueue_hrtimer+0x25/0x3c0 [ 679.299518][ C0] __hrtimer_run_queues+0x903/0xae0 [ 679.299538][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 679.299555][ C0] ? read_tsc+0x9/0x20 [ 679.299575][ C0] hrtimer_interrupt+0x392/0x8e0 [ 679.299596][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 679.299613][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 679.299629][ C0] [ 679.299634][ C0] [ 679.299640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.299658][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 679.299675][ C0] Code: a9 0a 00 00 44 8b 0d 93 73 f6 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 a9 e8 38 00 fb 65 48 8b 1d c0 09 9b 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 679.299687][ C0] RSP: 0018:ffffc900030a78e8 EFLAGS: 00000206 [ 679.299699][ C0] RAX: 000000000000155f RBX: ffff88802d5a4880 RCX: 1ffffffff20bd9a9 [ 679.299708][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd1b560 [ 679.299717][ C0] RBP: ffffc900030a7930 R08: 0000000000000001 R09: 0000000000000001 [ 679.299726][ C0] R10: ffffffff905f0f97 R11: 0000000000000000 R12: ffff8880b863f9e0 [ 679.299736][ C0] R13: ffff888026a64880 R14: 0000000000000000 R15: ffff8880b863ebc0 [ 679.299751][ C0] ? finish_task_switch.isra.0+0x217/0xcc0 [ 679.299766][ C0] ? __switch_to+0x749/0x1190 [ 679.299785][ C0] __schedule+0xe60/0x5ad0 [ 679.299800][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 679.299819][ C0] ? __pfx___schedule+0x10/0x10 [ 679.299835][ C0] ? schedule+0x298/0x350 [ 679.299849][ C0] ? __pfx_lock_release+0x10/0x10 [ 679.299864][ C0] ? plist_check_prev_next+0x12a/0x1a0 [ 679.299878][ C0] ? lock_acquire+0x2f/0xb0 [ 679.299891][ C0] ? schedule+0x1fd/0x350 [ 679.299907][ C0] ? futex_wait_queue+0x41/0x1f0 [ 679.299922][ C0] schedule+0xe7/0x350 [ 679.299937][ C0] futex_wait_queue+0xfc/0x1f0 [ 679.299953][ C0] __futex_wait+0x291/0x3c0 [ 679.299968][ C0] ? __pfx___futex_wait+0x10/0x10 [ 679.299983][ C0] ? finish_task_switch.isra.0+0x160/0xcc0 [ 679.300000][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 679.300017][ C0] ? __schedule+0xe60/0x5ad0 [ 679.300033][ C0] futex_wait+0xe9/0x380 [ 679.300048][ C0] ? __pfx_futex_wait+0x10/0x10 [ 679.300066][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 679.300082][ C0] do_futex+0x22b/0x350 [ 679.300096][ C0] ? __pfx_do_futex+0x10/0x10 [ 679.300108][ C0] ? __seccomp_filter+0x6a2/0xf40 [ 679.300130][ C0] __x64_sys_futex+0x1e1/0x4c0 [ 679.300144][ C0] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 679.300159][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 679.300174][ C0] ? __secure_computing+0x273/0x3f0 [ 679.300189][ C0] do_syscall_64+0xcd/0x250 [ 679.300206][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.300224][ C0] RIP: 0033:0x7f620b37fed9 [ 679.300236][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.300248][ C0] RSP: 002b:00007f62091f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 679.300261][ C0] RAX: ffffffffffffffda RBX: 00007f620b545fa8 RCX: 00007f620b37fed9 [ 679.300271][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f620b545fa8 [ 679.300280][ C0] RBP: 00007f620b545fa0 R08: 0000000000000000 R09: 0000000000000000 [ 679.300289][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f620b545fac [ 679.300299][ C0] R13: 0000000000000000 R14: 00007ffc0c002050 R15: 00007ffc0c002138 [ 679.300313][ C0] [ 679.300809][ C1] task:cmp state:R running task stack:25296 pid:13487 tgid:13487 ppid:13471 flags:0x00004002 [ 679.959651][ C1] Call Trace: [ 679.962923][ C1] [ 679.965853][ C1] __schedule+0xe58/0x5ad0 [ 679.970270][ C1] ? page_ext_put+0x3e/0xd0 [ 679.974775][ C1] ? __pfx_lock_release+0x10/0x10 [ 679.979806][ C1] ? __pfx___schedule+0x10/0x10 [ 679.984656][ C1] ? page_table_check_set+0x8ee/0x9c0 [ 679.990036][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 679.995415][ C1] preempt_schedule_common+0x44/0xc0 [ 680.000698][ C1] preempt_schedule_thunk+0x1a/0x30 [ 680.005896][ C1] _raw_spin_unlock+0x3e/0x50 [ 680.010568][ C1] filemap_map_pages+0xe4e/0x16b0 [ 680.015589][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 680.020793][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 680.026252][ C1] ? do_pte_missing+0xcec/0x3e70 [ 680.031189][ C1] ? lock_acquire+0x2f/0xb0 [ 680.035694][ C1] ? do_pte_missing+0xcec/0x3e70 [ 680.040630][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 680.046084][ C1] do_pte_missing+0xdab/0x3e70 [ 680.050856][ C1] __handle_mm_fault+0x103c/0x2a40 [ 680.055973][ C1] ? lock_vma_under_rcu+0x6b9/0x980 [ 680.061167][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 680.066638][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 680.071840][ C1] handle_mm_fault+0x3fa/0xaa0 [ 680.076606][ C1] do_user_addr_fault+0x60d/0x13f0 [ 680.081718][ C1] exc_page_fault+0x5c/0xc0 [ 680.086224][ C1] asm_exc_page_fault+0x26/0x30 [ 680.091074][ C1] RIP: 0033:0x7f79fdd12000 [ 680.095483][ C1] RSP: 002b:00007ffedd87ba98 EFLAGS: 00010206 [ 680.101544][ C1] RAX: 00007f79fdd12000 RBX: 00007f79fddc63d0 RCX: 00007ffedd87bb50 [ 680.109510][ C1] RDX: 00007ffedd87bb50 RSI: 00007ffedd87bb28 RDI: 0000000000000004 [ 680.117478][ C1] RBP: 0000000000000000 R08: 0000561bb7e4e2a0 R09: 00007f79fdcf4b10 [ 680.125440][ C1] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000004 [ 680.133405][ C1] R13: 00007ffedd87bb28 R14: 00007ffedd87bb50 R15: 0000000000000000 [ 680.141383][ C1]