last executing test programs: 35m37.888469928s ago: executing program 32 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a010400000000001f000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) 34m24.768309145s ago: executing program 2 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x55, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) memfd_secret(0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000340)={{r2}, 0x1, &(0x7f0000000080)=[0x104000001], 0x100000000}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x4, 0x0, 0x0, 0x0, "978e8676a8cfd89c"}, 0x10}}, 0x20008081) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 34m22.039849716s ago: executing program 2 (id=520): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x4, 0x0, 0x0, 0x8d, &(0x7f0000000300)="4e3283e6007cff852abf706b8e5590535685f779386b446c3f6ee13e6188ba029daad0a9fb121f931e9b968119351a296f9ac2eaa706ac377b873629593eac2c2b7ba0b0b32b23f8594e2312f7e86575eb581046128a62480511b0702afd3bfb0c8d1b174758ff75a1259077a76d499c1cec7f51d2e8bd6023df35f6a14c22ab2ec2ce82ceffe30201c2e800ba", 0x9}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000008d80402f000000000000109022400000000000009040000010300000009210000000122050009058103"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x1, 0xd329686, 0xfffffffffffffffa, 0x8}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000030000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000000c0)=0x7, 0x2) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ptrace(0x10, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) ptrace(0x11, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) 34m19.438459476s ago: executing program 2 (id=528): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x4000, 0x400, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xec79, 0x10100, 0xbffffffe, 0xe0}, 0x0, &(0x7f00000001c0)) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad102, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = shmget$private(0x0, 0x14000, 0x200, &(0x7f0000fec000/0x14000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000200)=""/117) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398f1, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x6e13], 0x0, 0xfffffffffffffffc, 0x1, 0x1}}, 0x40) r6 = socket(0x2, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000080)={0x4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0xa20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 34m18.546314136s ago: executing program 2 (id=532): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000000400)=""/228, 0xe4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc"], 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x22, &(0x7f0000000880)="d40b409b492157c5ab29c77f2f60554480e079f9dcc30977508a6099ec1cf083aa6c"}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0xa1, &(0x7f0000000080)="54667cf3465a7e36c33a2a0683111f2cf7bc362fe2f01f0b4f003cf43b9b7961d7cf38ea71cacb2f5e468d0da8048d2da99652c77798d25ade47f3114236040a6dc6c50330f298a661bf34a9e68b187cd27c87ecc10a16b4f30ebc55376684739d08fc32d0c11a60ccfb730bf88c286ded43385b0cbbb910255f424817e9730f601b14506ab8793c98921d167ca4d9c1f4e48a552afb9ed06504e31c48b1485c6f"}, {0x0, 0x0, 0x93, &(0x7f00000004c0)="8ce4918f0867f7383b224c943878137192ecfc94130fcff9ef318679faec025a60c7e6b7e33c5fcef3f932e2c835421b1e20683f4007cf9f9375221c82e50590e353509d00d7385a1d56d8e166d68af13e14289872e7e06e8bac76a64ef96bf23bec471bde78bdb180e2a77c5e18767a88d88400ddd3a33b89cd8762cb0126f5e39dcdc63e115556cecfc48b9a9a192c53fd31"}, {0x0, 0x0, 0x2b, &(0x7f0000000340)="ddcb3ede94ef129681394f01d96c9ef96799bf156506586f4b41aa9483c9d5f93b0039bc6a63c55e82ca05"}], 0x6}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000c74da8fbbf9d98470ed7683b6395057dc05da732a95e7870908b45ebded42253dd7790fc880ef4b48a473bf2efd49afd003107aac5fa2e50a4680b3965f02f48d6000d"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r10}, 0x10) 34m17.161227786s ago: executing program 2 (id=540): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 34m17.121560563s ago: executing program 2 (id=541): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000d16100000000000000000000000a3c000000120a0102000000000000000002000000cd0c17c30e7a0f570000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x477f) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005"], 0x90}}, 0x0) socket(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) 34m1.44073787s ago: executing program 33 (id=541): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000d16100000000000000000000000a3c000000120a0102000000000000000002000000cd0c17c30e7a0f570000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x477f) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005"], 0x90}}, 0x0) socket(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) 23m24.169027137s ago: executing program 6 (id=2654): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x200, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0xc800) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@op={0x18, 0x114}], 0x18}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81", 0xd7}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) 23m21.385677926s ago: executing program 6 (id=2659): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) unshare(0x6a040000) r0 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0xc5, &(0x7f0000000300)=""/197}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x3, 0x0}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040)) unshare(0x20000000) r7 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x60081) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000500000000000000d20000001811000011f8a97150adfaf371fe3cce8a5f7181a4354dc68f2dd74df1a98c35de3af02a2efec0258cd44e79504d8e71534ccaf2e564bbd9eb77a4173b8ea32fb1abc92b25f1e160e57595d02e40f158962afc7d7043a6f07fd077c6533959030b0eea5969a981bc31751cfe8e5b5461c0869b51d2bc7e946153ef2fea2fe4bdd2f12258dd02ff095821ea66fdea6fd058426ff88216378fbd15e8a9c1fc06a4e3ff86460417eeadfaf8f851", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000600000085100000feffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009555e0ff010000001800000007000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b70200007bb3315a8500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x0, 0x3, 0x2483, 0x800}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000001c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000040)=0x6) 23m17.952492034s ago: executing program 6 (id=2674): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 23m17.830632836s ago: executing program 6 (id=2676): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x8b202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x43b3, 0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x9, 0x6d0}, 0xf4}, 0x1) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x7000000, 0x0) 23m16.020237202s ago: executing program 6 (id=2680): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x28b, @loopback, 0xd9bc}, 0x1c) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000040)=ANY=[], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 23m12.130115662s ago: executing program 6 (id=2695): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffd, 0x8180) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) r1 = socket(0xb, 0x3, 0x40000000) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), 0x4) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x404) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x2004a00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000004c0)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) getresuid(0x0, 0x0, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x24048880) ioprio_set$pid(0x1, r4, 0x2007) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000014) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x10}, 0x14) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = dup(r0) fanotify_mark(r8, 0x1, 0x4800107b, r9, 0x0) read$ptp(r9, &(0x7f0000000340)=""/269, 0x10d) 22m55.948043747s ago: executing program 34 (id=2695): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffd, 0x8180) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) r1 = socket(0xb, 0x3, 0x40000000) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), 0x4) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x404) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x2004a00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000004c0)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) getresuid(0x0, 0x0, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x24048880) ioprio_set$pid(0x1, r4, 0x2007) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000014) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x10}, 0x14) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = dup(r0) fanotify_mark(r8, 0x1, 0x4800107b, r9, 0x0) read$ptp(r9, &(0x7f0000000340)=""/269, 0x10d) 20m35.815970944s ago: executing program 7 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_dccp_buf(r2, 0x118, 0xd, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000280)={@local}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', r10, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@host, 0xec}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) unshare(0x62040200) 20m32.017340132s ago: executing program 7 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffff9c}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) 20m31.794269297s ago: executing program 7 (id=3132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8000101, 0x7ffffffb}, 0x10) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4010, r0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000b92f75da0c6d", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000f00000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 20m30.617473244s ago: executing program 7 (id=3134): mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000200)='ramfs\x00', 0x896000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x3) (async) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) (async) socket$inet(0x2, 0x2, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x21) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 32) r3 = syz_io_uring_setup(0xd9e, &(0x7f00000004c0)={0x0, 0x1, 0x400, 0x0, 0xcd}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) (rerun: 32) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r6 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) (async, rerun: 64) io_setup(0x5, &(0x7f0000000300)=0x0) (rerun: 64) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) (async) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f041}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20m29.516717889s ago: executing program 7 (id=3137): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x268]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 20m28.581410004s ago: executing program 7 (id=3139): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e282753796e7468204361f39b05f71fcdda5a303030303030303030303030303030303030300a751455d7c1e454d0e222987f97cc2df1a1f0c9f14b955780f8f042f19212ca9b80520fb33994cb372683d922831504d6e3bb3cbffb6605a3589a7fde8fb09a0fcf906f0498cbc0f7a8289ba5289ff21bef94ba2825"], 0x7c) dup3(r5, r3, 0x0) fchdir(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x2044810, &(0x7f0000000480)={[{@verity_off}, {@xino_auto}, {@xino_on}, {@uuid_off}, {@nfs_export_off}, {@index_on}, {@default_permissions}, {@uuid_auto}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x39, 0x35, 0x62, 0x35, 0x63, 0xe, 0x30], 0x2d, [0x64, 0x39, 0x34, 0x30], 0x2d, [0x31, 0x36, 0x62, 0x34], 0x2d, [0x64, 0x38, 0x35, 0x34], 0x2d, [0x37, 0x65, 0x38, 0x33, 0x38, 0x39, 0x30, 0x63]}}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsname={'fsname', 0x3d, '%@:@'}}, {@pcr={'pcr', 0x3d, 0xa}}, {@obj_user={'obj_user', 0x3d, '/dev/cpu/#/msr\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$char_usb(r0, 0x0, 0x0) 20m12.4578332s ago: executing program 35 (id=3139): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e282753796e7468204361f39b05f71fcdda5a303030303030303030303030303030303030300a751455d7c1e454d0e222987f97cc2df1a1f0c9f14b955780f8f042f19212ca9b80520fb33994cb372683d922831504d6e3bb3cbffb6605a3589a7fde8fb09a0fcf906f0498cbc0f7a8289ba5289ff21bef94ba2825"], 0x7c) dup3(r5, r3, 0x0) fchdir(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x2044810, &(0x7f0000000480)={[{@verity_off}, {@xino_auto}, {@xino_on}, {@uuid_off}, {@nfs_export_off}, {@index_on}, {@default_permissions}, {@uuid_auto}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x39, 0x35, 0x62, 0x35, 0x63, 0xe, 0x30], 0x2d, [0x64, 0x39, 0x34, 0x30], 0x2d, [0x31, 0x36, 0x62, 0x34], 0x2d, [0x64, 0x38, 0x35, 0x34], 0x2d, [0x37, 0x65, 0x38, 0x33, 0x38, 0x39, 0x30, 0x63]}}}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsname={'fsname', 0x3d, '%@:@'}}, {@pcr={'pcr', 0x3d, 0xa}}, {@obj_user={'obj_user', 0x3d, '/dev/cpu/#/msr\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$char_usb(r0, 0x0, 0x0) 11m32.165225955s ago: executing program 1 (id=4861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) process_mrelease(0xffffffffffffffff, 0x0) msgget(0x2, 0x624) r5 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x4}, 0x8084) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000140)={0x7, 0x8}, 0x1) io_uring_enter(r5, 0x2def, 0x0, 0xe, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x14, r8, 0x30b, 0xfffffffe, 0x25dfdbfc}, 0x14}}, 0x40000) 11m30.12928332s ago: executing program 1 (id=4865): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000000000010000000000109500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8b202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = inotify_init1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x541b, 0xffffffffffffffff) 11m29.14752364s ago: executing program 1 (id=4873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000400)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x32, 0x11, 0x1, @private1, @mcast2, {[], {0x0, 0xe22, 0x32, 0x0, @gue={{0x2, 0x0, 0x2, 0x75, 0x100, @val=0x80}, "b343e3b7555e29ad1748c431994072568ee381d6032587af0eaa68d410677c2e07ef"}}}}}}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x9}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, r6, 0x1}, 0x14}}, 0x0) ioperm(0x0, 0x2, 0x7e) syslog(0xa, 0x0, 0x0) socket(0x25, 0x80000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 11m28.880664104s ago: executing program 1 (id=4875): r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5c1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000514010028bd7000fbdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x20004845}, 0x24000080) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c832, 0xffffffffffffffff, 0x0) 11m26.70301071s ago: executing program 1 (id=4879): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_dev$radio(&(0x7f0000002480), 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0xdccb, 0xfffb, 0x8, 0x0, 0x7, 0x80a0000, 0xdddd0000, '\x00', 0x8}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000002640)={0x4, "fbf873bc12b7344985ed5c23577aeb40430ff3c72642920e94b8915eb4a7ecfd"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r7, 0xfffffffffffffff5, 0x1) 11m25.681053799s ago: executing program 1 (id=4880): r0 = memfd_secret(0x0) mmap(&(0x7f00003d8000/0x1000)=nil, 0x1000, 0xa, 0x10, r0, 0x4b3f4000) ftruncate(r0, 0xe4c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000200)="94", 0x1}], 0x1, 0xa) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) splice(r1, &(0x7f0000000100)=0x6a322b62, r3, &(0x7f0000000140)=0x97, 0xfffffffffffffff7, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1b2308217f01"], 0xffdd) write(r1, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 11m25.180131839s ago: executing program 36 (id=4880): r0 = memfd_secret(0x0) mmap(&(0x7f00003d8000/0x1000)=nil, 0x1000, 0xa, 0x10, r0, 0x4b3f4000) ftruncate(r0, 0xe4c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000200)="94", 0x1}], 0x1, 0xa) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) splice(r1, &(0x7f0000000100)=0x6a322b62, r3, &(0x7f0000000140)=0x97, 0xfffffffffffffff7, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1b2308217f01"], 0xffdd) write(r1, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2m59.220568841s ago: executing program 8 (id=6598): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000bb00010f5e05000003000000810000004a0000009cd2b5367ed6af6ef36f0563042517314b2829eff041ec92c61600d2c1f6be0a7214ca6eb229149db8ac0ef1875b1f7a39b5f6f0586f31b30de6d7fd160747cfd0c7dfc9b010340602dc3973cec7aaef9f9c272d5add2524092b5e5c76a5be20f0d40d74030386b7904ebca28c097cae62bd64fdc76cbdd04898686e056df298673891ba30d725e4a5e27ea69a4b02296648432e5d07709d3287b13f4418b8bd6c4ee32717508a4647e133990004a65f5d4e4fff1d124d3a431f51"], 0x1d3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcb09fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffffd]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x84000, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a2503, 0x0) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000001580)=""/47, 0x2f}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/147, 0x93}, {&(0x7f0000001400)=""/129, 0x81}], 0x5, 0x9bf, 0x87d0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x1c1101) r8 = dup(r2) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3217, &(0x7f0000000080)={0x0, 0x7f36, 0x2000, 0x4, 0x7c}, &(0x7f0000001540)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 2m52.272763488s ago: executing program 8 (id=6605): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd27e961b3719609ab712940ecf8144bddecefbabf2f18e909822089ac4fcedea2b8ec7e90d0456d07b3770b0000005000000000000000000000000000000072a9590a604c03a1efaa205bc9b33fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f22600000000e0000000000000000000000000000000187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799022be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba0b1dec676eb60a744f5aac4213806b82bfc2390dc42723bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2000000000000001000000000000000100100000d000000000000"], 0x200, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0xc800) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@op={0x18, 0x114}], 0x18}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cd", 0x6c}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69", 0x15}, {&(0x7f00000002c0)="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", 0x1e0}, {0x0}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd88702912", 0x6e}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) 2m51.286969577s ago: executing program 8 (id=6610): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xa80) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/90, 0x5a}], 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104f0ffff0324bb436d5ecfecdf", @ANYRES32=0x0, @ANYBLOB="00000000800402001c0012800b000100697036746e6c00000c0002800800"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2m50.49600743s ago: executing program 8 (id=6614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xdf27302e1510fa48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') sendto$inet6(r1, 0x0, 0x0, 0x20000844, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x9c, 0x12, 0x2, 0x0, 0x0, "", [@generic="81da6243dc3560c438853be7aeb87d53a34bccf0cf27be0b7263b86cc5ca1c77e8710bcc738c2dee1b68ba11846cdaf3fe5fdfb519b102496f1f1c09f7c3763293e00772d12ac86e770703ac6c3a0dd9c1ba5d3d301e710c29033b7748154d8e77e69459bcd836a351aa9a798e2ff092f5a788b05ec8590612ceb945483891c8ba577c53f2088a", @nested={0x4, 0x34}]}, 0x9c}], 0x1}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 2m49.651265413s ago: executing program 8 (id=6619): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xbf, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\xf7\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) 2m48.113356932s ago: executing program 8 (id=6623): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0xdacc}, 0x1c) listen(r1, 0x0) r2 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0x4, @win={{0x902b, 0x9, 0xd3, 0xfffeffff}, 0x9ee203fa2a9a1c6b, 0x4, &(0x7f0000000200)={{0xffffff66, 0x10, 0x7, 0xae91}, &(0x7f00000001c0)={{0xa, 0x7fffffff, 0x2, 0x1}, &(0x7f0000000140)={{0xd, 0xfffffff8, 0x4, 0x5}}}}, 0x8, &(0x7f0000000240)="77c2a4d8555d41cb43074046345145dcbe7755d2f1dab66ffc85871ca8ddd6f96ec85061f8aa1986acc6bd6fe07ce88da9c22b16cd5ea000548769cc60cfa9e185891ef58722cd97a474f692bc73e90e8363e665eab3a30ecd187f3164bfdad7bab1e8ecc0290952ed0455da59d99fc44983c4aae4530b7ad306f06bd2a02079", 0xc0}}) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0xfffffdef}}, 0x40400c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.485535339s ago: executing program 37 (id=6623): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0xdacc}, 0x1c) listen(r1, 0x0) r2 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0x4, @win={{0x902b, 0x9, 0xd3, 0xfffeffff}, 0x9ee203fa2a9a1c6b, 0x4, &(0x7f0000000200)={{0xffffff66, 0x10, 0x7, 0xae91}, &(0x7f00000001c0)={{0xa, 0x7fffffff, 0x2, 0x1}, &(0x7f0000000140)={{0xd, 0xfffffff8, 0x4, 0x5}}}}, 0x8, &(0x7f0000000240)="77c2a4d8555d41cb43074046345145dcbe7755d2f1dab66ffc85871ca8ddd6f96ec85061f8aa1986acc6bd6fe07ce88da9c22b16cd5ea000548769cc60cfa9e185891ef58722cd97a474f692bc73e90e8363e665eab3a30ecd187f3164bfdad7bab1e8ecc0290952ed0455da59d99fc44983c4aae4530b7ad306f06bd2a02079", 0xc0}}) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0xfffffdef}}, 0x40400c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.969627885s ago: executing program 4 (id=7130): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)={{0x12, 0x1, 0x250, 0x85, 0xd5, 0xc2, 0x8, 0x460, 0x4, 0x9631, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x10, 0x3, [{{0x9, 0x4, 0x58, 0x8, 0x1, 0x19, 0x66, 0x21, 0x94, [], [{{0x9, 0x5, 0x9, 0x3, 0x10, 0x7, 0x80, 0x8}}]}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3849f6c3febd7b52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000003060101000000000000000001020008050001000700000005000100070000000900020073597a31000000000900020073797a310000000005000100070000000900020073797a31004000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x60000804}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x20c00) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000300)={0x0}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x101, 0x200, 0x7, 0xe, 0x4, 0xfffffffc, 0x3b72, r6}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 10.209419791s ago: executing program 0 (id=7139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (fail_nth: 1) 10.107683074s ago: executing program 4 (id=7140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1eef, &(0x7f0000000000)={0x0, 0x98d6, 0x100, 0x4001, 0x367}, &(0x7f0000000240), &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001140)="8780d715e858874e3ba35a45ff2f747d60de6bfdde2b8e8ffaf99981b50d4e39506fdc45644efe75602cd4f39d4c4b7cb7d02c84b67ab545a2db26b70e6966b7ac3fee63952bcdeed74162730d6d51a9b1a4cbbd5b5c8915ef2d59400749be1de9dd8fffd397c834173a4eda3a50b2be125389700ddc769105f32b3718", 0x7d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001a9b712299ce94bda0612", @ANYRES32=r2, @ANYBLOB="00000000fe88000000000000000000000000000108000000"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, 0x27bae304562a7b2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x42080, 0x0) 10.057677237s ago: executing program 0 (id=7141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0xa, 0xa) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 8.553461861s ago: executing program 9 (id=7143): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xa80) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/90, 0x5a}], 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104f0ffff0324bb436d5ecfecdf", @ANYRES32=0x0, @ANYBLOB="00000000800402001c0012800b000100697036746e6c00000c0002800800"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r5, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r7], 0x48}}, 0x0) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 7.999316057s ago: executing program 5 (id=7144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}, @IFLA_AF_SPEC={0x4}]}, 0x28}}, 0x0) 7.849347281s ago: executing program 9 (id=7145): msgget$private(0x0, 0x790) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0x38}}, 0x0) 6.833306294s ago: executing program 9 (id=7146): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000d2fbffff0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000005900000000000000000000000000e87fa78ffa37a333694b6775a80000000000"], 0x50) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x58000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) (async) lseek(r5, 0x1003ff, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x2c, &(0x7f0000000200)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000540)="9d8d645e53b6183d874f9e06a18dd009a0d07d18950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bfd9a315544fa0a1622d749faba7978890835497c9b7ab548704e680dae25bc94962f5fce4", 0x53) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) (async) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) (async) syz_usb_control_io(r7, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="001502000000fd88"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 6.7686909s ago: executing program 4 (id=7147): socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000ffffff9000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.670532441s ago: executing program 0 (id=7148): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f0000001940)=""/4067, 0xfe3) keyctl$negate(0xd, r5, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='sched_switch\x00'}, 0x18) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x800, 0x6, 0x0, 0x3, 0x1, 0x3}, &(0x7f0000000100)={0xd, 0x4, 0x0, 0x800, 0xfff, 0x40974819, 0x8, 0x6}, &(0x7f0000000240)={0x8, 0xffffffff00000000, 0xffff, 0x1, 0xd53b, 0xfffffffffffffff7, 0x0, 0xfffffffffffff800}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000000) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 6.670112775s ago: executing program 3 (id=7149): r0 = socket(0xf, 0x5, 0x6) getsockname$netrom(r0, 0x0, &(0x7f0000000000)) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2119838f000000000000030000001400010000e0"], 0x30}}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7fff, 0x8200) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x2010, r6, 0x4000) write$P9_RVERSION(r6, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES64], 0x13) socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000140)) ioctl$BLKRRPART(r6, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r6, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x490c01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.5806743s ago: executing program 4 (id=7150): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)={{0x12, 0x1, 0x250, 0x85, 0xd5, 0xc2, 0x8, 0x460, 0x4, 0x9631, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x10, 0x3, [{{0x9, 0x4, 0x58, 0x8, 0x1, 0x19, 0x66, 0x21, 0x94, [], [{{0x9, 0x5, 0x9, 0x3, 0x10, 0x7, 0x80, 0x8}}]}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3849f6c3febd7b52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000003060101000000000000000001020008050001000700000005000100070000000900020073597a31000000000900020073797a310000000005000100070000000900020073797a31004000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x60000804}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x20c00) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000300)={0x0}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x101, 0x200, 0x7, 0xe, 0x4, 0xfffffffc, 0x3b72, r6}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 5.693428079s ago: executing program 3 (id=7151): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @remote, 0x19}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000600)="56501366ff47fd29ff39cc10d7e7ae240fee90ea7a4c89f1cdfe3f2e0f12891baba90886caf8977d0dcc", 0x2a}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590, 0x6000}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="95dbf7", 0x3}], 0x1}}], 0x2, 0x8048041) 5.62436095s ago: executing program 9 (id=7152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (fail_nth: 2) 5.573295646s ago: executing program 3 (id=7153): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x1a) socket(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5e00000006000000060000001b00000000040000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000000000000000000000b00"/28], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYBLOB="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"], 0x114}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000080)=0x20, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800800114000000000050005000ac3102510e008cc22797d9c6fca09000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r8 = getpgrp(0xffffffffffffffff) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.52233948s ago: executing program 5 (id=7154): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "dbbfa97f9b05f72bfe56b452b98dcc20"}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40240, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x248, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x234, 0x3, 0x0, 0x1, [{0x230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "ebeee4b03560a7da290854994b5eacb252c57a603255b83986d81218484e44ddac734195f04e5a68358780cf7f2a24f2e03aaf0fa1236d2cd8419fec058954ce65922dfc9c90febf24dccae5597dcd9918f02997c36b2823293adf0ba48c4f74aaf9484d4e64849b97ac2edd764a9e837e44308dac029318222eedb47eafa1db41dd0b232af85edf97875b28017a72af15023acd198dd348739edc549951d4be0f59e3b41f370c1ee336e5e56445840a6e18400361f9cd9353b4c74127510c18f96c"}, @NFTA_DATA_VALUE={0x37, 0x1, "5c7d79150568bb9511211b59f24c2e5e952c7a70d1173e19de26a3db0b9deae0cc27e809112d451f1b30aba881e9f153438539"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x7c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "75e4eaba0f"}, @NFTA_DATA_VALUE={0x6c, 0x1, "acb89ba213fecbf30be57cf1f9e36466ca179587099a7dcc7811c4d57bb2e14d4d7399b3f3332e11ef591920707d2eeb64aa8559025ad36485938c5398e11b537e4bb98876e34fa0890af5f9bbac01a6c7ae388922069672ff1920ef616a8f1f910484c4ca1153cb"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}, @NFT_MSG_DELOBJ={0x130, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xdf, 0x8, "1b407d52a30fd9d287b3def2552ca56868ad156f2b353ae8aefe28fc43a464d55cbb62561fbb7e54f342caa614ab513998fe793ec43a558365574053c0884562314953905efca43c18c79830f02c881acc38f1ab2ebbf41d15660f3ca769039a105d68e35ea60e6066797205291858f331c0cc460118f1dd8c99a0582544b529e651cf7e5ecde0dbb81d7cb2ffad282fd31467cee5b998a1fb4ec423d5b562b738c3e1d7500a3c4ae8bf4927a7ed2c863f3cc168ce015112a2f4c0cf7127b47cc20e4e6f8d95b6b3e546235fcd3586c00a4dc51af96516bea3cdc8"}, @NFTA_OBJ_USERDATA={0x33, 0x8, "db8dc499ad69f1e9505f29c160a88db97020965351c38cf83b8fcaa7d2ea6cbd55b771989967a9fbbb28a6cc731854"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0xd8, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "a6a9eefa6c8033330e47a837625257736c20fbe6b0811ee92c00da04bbb54b17e84ae06054b11e320edd80c31eec4098189cd11edfc4d7d61d2b6c3a7a8e40b17d39a851e385c8bd1752aaba1ec08c3b522990e4588016853f27bb9fca3c8a8daa974d0bb386296b9b"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1e8, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x1d4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb84}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x192}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0x7, 0x8, "a4e377"}]}, @NFT_MSG_NEWSETELEM={0x1ef4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1ec0, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "0153f23b1f359e0fe530197edc34b34e15bbd4bd03b4810ba020c70e5a9dc69c2d3cdcb243f271b1ed33b42c0c3a5bb731"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "bede2bab46fbf508b2508a85243a8224ef57889665a8c028485e358b73836d75b29c734081242683a448be9c35d7c337dda7bf02c66f9fc9db6d6f8493dcd7f0fe0693b41932c4a058bf63fc2c54b4143a2318f76a923c18e8c1a318e60a0c819a9afa42a1a1691862006fcfcc86c0bbc126221298623da3a6874cce0eedfc7aa351c878d6b5501549e57ac4e9ae6cabd3dc9806f77a3e678be3b552ac9ba0eb45234e27d88177812cceb31ce57ae5eaefb28cdeb9d364ea46a537699213ebba83057b4fad85b47345ab5930b642bacdd55abab50f52130dce9d0c13613627439373e803f5c0ff091261074c8a64529462aa856141228f25"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}, {0x51c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}]}}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xec2a}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9aa3}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xe8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x314, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3f, 0x1, "825c5d5a1c6a3178c40b8e3276063fc4528496fa42669a36b1872d1370d897893dc79d803318917cbabaa94fb17d45640aad90fd636495f5b0c8e2"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "d1ac235671526af2d41b9c70b1a2226e28b624c0e5d2f32d912f94c1bd1550db93af59a3c69efa5c4bc9b8a010ef6900cb1f6fe1cff98b0d6e1249396e121d7c68c0e3ecc1274ca6a0990e1e63a27567a65eb17820f3d376330e531dcd1b47404633ddfcb2d641bc1ad19da355b1cf56b57808c58aba0d90ea166bb175f062d3e9872d855aeaa2751d68512bc78a0c9513520205e9b551e620e0ee55a79fff76f49cd5cd7bef9c651580852b93948765833e"}, @NFTA_DATA_VALUE={0xd3, 0x1, "daf13d9d1bcb492b44476c3e2e563ce77674c047148668b50cff06c07b3a665fd78fac00f627602504162830a9606e03f74db33f5d3d907efd8c7f593779f41362df2a23a9151c169bc0f73d147dd1942cb6a084b19272ce18445fdd778c6bf65483471cc217a1284bfcb578f946d51966b0440f07dbcd5db5a33553b3408ba173678d9d4d9093947b159af183ff42651db6fb59f3e8cb1a572db55d65d70b8aef7416e222f445922ca5ccc07060fbf6cfa797757c92972f7d0629d54ced0ff8e099e60c1c5d57659b7daf1d1f4908"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000004}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x13f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa, 0x1, "5b16bc916300"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "6aaa29a10ad61270bc3b72c4817d6a"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "2a23ce142a5d30fee8bdc24e3687878f1bd9391ffde17e"}, @NFTA_SET_ELEM_KEY={0x105c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "8fe61e8fad4ca20010c3d8c5b7d10ce8e037d46aa2f233f4d5202991e28ce2f892d83e20f4ffd0e1e540d4119a71a2681b5ff1a0434ddaf94e1a8cf39a16d827ce5b0269b212ad230084a441497c2a36fe7862d9e612a87038f816bcda4b76091b7389051bdbe085228e5295740b48d24abc1c7ef524081236f787495fefa73cbbc5226049625b9ac9d7ec1f4c9a153f7598fe728d656ede95a2330545a9d11f1655b7e665ed150b2b1ba94f0968cc57f6cb2d7aebfd78bfcfe25517156067cd67ac5aa19cd684ac2427922e39cf1cfe81d25f6f7c9e59c5bc56f06c78c75cd4a8e018db6f7767b82bd0c37d0fbc76bda112"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "658b127caa50974e2823ceee8a624c0bd783176f2215e3478def52fc8de23e3dd98f3eb6f445520b0a15cbb7429b83381c85d007f874e8b310934575785a8f5162e07156319137030435d2ad7cbbbaada26c78f442f5df2b0f83e4978920f0cdfabd19c47043e997d54ac66a6f9d7ce955794f02bb9e09c835d64471e9d755f3f0bd8b19d9c56281b6e4ea639317105751c4ca1507fe696bcee48ccf76ea1d976722478d60c5687b285528d309f3bab1ff5ed0fae9a85182f383aee16fca0e0a3a4d60ba0c707048bc7bee1a9f27da3de58b9fafd77ec20858502f03"}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9f46}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x70, 0x1, "f4a5298aaecc599a4449b128355651be0436d7d96af1561bdcf2d47fbcddad45fa3b4404d98c4e765fc5785a6c55bc0511873128c30c1f3a932dd0470c3bf93237459b2c78503c390ec4dc50adc250b363aa6d913a62137a8bcfd9ac792f037c2fc76987399d45472a569034"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x1d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "1e0d86f381685eb7c156c7883318b44dc9901b4f922fd44774c15f50d7d5a9bdc48bd547844ed4aa339dcef28e49133b310f7f960391d370c2403dc85cd72a3797a9372a2a66cd48f815876cf4b90cbc83f7b0afb5731d3ad9d40db2442e9477c4"}, @NFTA_DATA_VALUE={0x97, 0x1, "6ebe0acea86ffc35901247cf75cc485a303c07591df1e86d6d8017c0b99ecadbbaef488c073a6369e1267b49bfec82d4ca82baced2a0816adb4312aef1403e2e0d012fbb8008eea3c015bc8595888499250c83aae2733d13f9aefd2a7d0b600617e6867c57f3a69b52be43024ff34a2a85824ba9e02ede00a0579ef0e0f942539ccd591039322cc8253f243c688c7bd12cfc20"}, @NFTA_DATA_VALUE={0x2e, 0x1, "b7cc332dbe26b26e24f8147078b2c844eeed83701119d081ff4eb78df0af4109769d9a0f09442e33176f"}, @NFTA_DATA_VALUE={0x31, 0x1, "6ba6faa0558e89210beeaa3f62d6058f294bafa67140765f107218bb8a64307b679abe27c185537c2f686d30a8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cbf2ed3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x208, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xc9, 0x7, 0x1, 0x0, "7500dd88e424efd1bb58f289feff6b470d713fd83c0977a105dbb1a5ab80d2cccc62e2564957dca2f37c7bf94bf313a06a22707db2609ebaa5d8bd7cd998506ece8ff670eb8a39e55fea2a2ef7cd2d942a6f52efbeedb25efc28280edf16fa9dc7a296595bdeca1ef911e82de13aa2aacf9b6dbb9d9b33208e75ab1b5a8139702012cbb711a6f339f722814f2fd006f434ba1202f72847978079ca25de0035979a4ab9c06ce44ac95d05a3647dc2ddb8e797147b9a12355fc890df98ebca3a6216949fbe64"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_USERDATA={0xd0, 0x7, 0x1, 0x0, "38387086658902ad9851fbf59e4c8d2e55656630cbca0b4589639bc2750cfefffe8eca1e35431fd6545b9e3fd372ef2711dd07df7acf216d2c0102b614be9516430f0675451baa282bd11f3cd8dd17cfe9d5cf97aa20cdc213a3072acb82310092aa95f91a67b4289f26d9896d3b38c1e0966dc4e5aa9811ed2c0000a6eb0cbec5d24dd33ba6d46f92bfb61ec2888aa89cd4a15dccfc5d93568ef62f63bf61ea796a7f770151a7bc13e6b1b2a9e5aa08b712d8f7bc143c85bdb63413f4446f718c93a9db286a58e4b72a3772"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x283c}, 0x1, 0x0, 0x0, 0x200c4000}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002b00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xa, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2004c881) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r0, {0x1, 0x9}}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002c40)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$selinux_create(r1, &(0x7f0000002c80)=@access={'u:object_r:app_data_file:s0:c512,c768', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x69) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d40), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002e00)={'ip6gre0\x00', &(0x7f0000002d80)={'ip6gre0\x00', r2, 0x29, 0x9, 0x8, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xbeb6, 0x7}}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x28, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="293a73557d8e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4000011) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000003000)=""/104) r7 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000003080)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) r10 = dup(r0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000030c0)={r1, 0x7, 0x3, r1}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000003100)=0x6, 0x4) process_madvise(r1, &(0x7f0000003480)=[{&(0x7f0000003140)="54a835471153d8af6e8c4db72b5a2c6a84acc3b0b1c589a2e589aa3e00751c5bb4698a1fa732dc95214312e78ab51813cceebd7fea1244174b41662bff03d959dd9c3e83463789e604c3709360ff3d85fe57c6e569c1187bd8a312ca23ec6280417f28a6eecc43a8a37b412289333bd7cda6df141163a4a92bdad18a041f71394ada5058f9cc265518111546c77459271a5c3f45de893f6b4e24fa265a39bb2691", 0xa1}, {&(0x7f0000003200)="e6371c50b8abb2322ecde9f44a83890fe18acb3019a07bed0e6f7df66b89b64e8e822a158f01ca68c4f262e6749c93f34c45db0c641369faa029f2a5bd6570ec7b63ddbd95ba882bd476ba64021c3ff064bd88865801e13bf26ce34ec9be746b0f37082e529cc5a7ce35c538627fa0cce62c45c7e52050b4be0c6442b828340ead5fb78563f9a8ec85", 0x89}, {&(0x7f00000032c0)="3adac24d583f229e9e63bec4fd9a602f3531cee7b95e68c2a501cab7e174cb495bed90f15ebda4b7b62f94d07ed719c56a6aff55fd0be604d6cb398b7254b680a7c7e7cb64b70e958e5745d78a19cce79d7a02cbab7e0806aee43b1ead9246b6e42ce18a3a75301c125a4cf6f20553968d3d8842a1c93b5949fa7ab72e2a02d1ab7926f599df6aedd1c8ffea02135e240fd9054e3101cb6622ad1976d0b198e523261625f56c75aa72555c7fc05dc6a9f346653ab28408770b9742e1cb0d55e2", 0xc0}, {&(0x7f0000003380)="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", 0xfd}], 0x4, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003980)={r9, 0xe0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000003700)=[0x0], &(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000003780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000037c0), &(0x7f0000003800), 0x8, 0xce, 0x8, 0x8, &(0x7f0000003840)}}, 0x10) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000039c0)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003a80)={0x15, 0xc, &(0x7f00000034c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x70c, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000003540)='syzkaller\x00', 0x81, 0x9f, &(0x7f0000003580)=""/159, 0x40f00, 0x40, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000003680)={0x2, 0xe, 0x2, 0x6}, 0x10, r11, r8, 0x4, &(0x7f0000003a00)=[r12, r8, r10, r8, r8], &(0x7f0000003a40)=[{0x5, 0x5, 0xe, 0xc84f7bda683dcdfb}, {0x3, 0x5, 0x5, 0x2}, {0x3, 0x1, 0x10, 0x5}, {0x4, 0x4, 0x3, 0x1}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11cc}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x34}}, 0x8000) 5.219465694s ago: executing program 9 (id=7155): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000380)=0x102) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000001e9473b000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_transmit\x00', 0xffffffffffffffff, 0x0, 0xe07}, 0xfffffffffffffdf4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x204, 0x2e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000480)={&(0x7f00000002c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000240)=0x5, 0x4) io_setup(0x801, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 5.053093142s ago: executing program 5 (id=7156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf2505000000907e607feb975250d93e9c48d5d193fe1332e2e716b4a96d36d8d18d693c2a6f9b3b4ef3e74a91844adca0a99ab0229a31025ea58cc70c3298e3891f2ffdb346417136f98c78a41a5ab67605074ecd995a9c9f43"], 0xfebe}}, 0x200040d1) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) read(r3, 0x0, 0x1e) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 4.508292746s ago: executing program 3 (id=7157): msgget$private(0x0, 0x790) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000002000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0x38}}, 0x0) 4.424239794s ago: executing program 5 (id=7158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0xa, 0xa) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 3.237387427s ago: executing program 4 (id=7159): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.032726006s ago: executing program 0 (id=7160): socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000ffffff9400850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.031976109s ago: executing program 3 (id=7161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x800000000000000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@upd={0xe8, 0x12, 0x9175d1cc76b41d65, 0x70bd2a, 0x25dfdbfd, {{'drbg_nopr_hmac_sha384\x00'}, '\x00', '\x00', 0x0, 0x2400}, [{0x8, 0x1, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x14}, 0x800) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x102300) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) 2.070330994s ago: executing program 3 (id=7162): syz_clone3(&(0x7f0000000500)={0x4a000800, &(0x7f0000000100), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x23}, &(0x7f0000000300)=""/197, 0xc5, &(0x7f0000000400)=""/62, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCPKT(r4, 0x5420, 0x0) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 1.209312278s ago: executing program 0 (id=7163): r0 = socket(0xf, 0x5, 0x6) getsockname$netrom(r0, 0x0, &(0x7f0000000000)) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb910865", 0xbb, 0x4040004, 0x0, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x2010, r5, 0x4000) write$P9_RVERSION(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64=r3], 0x13) ioctl$BLKRRPART(r5, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r5, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x490c01, 0x0) r6 = syz_clone(0x1880000, &(0x7f0000000300)="cdc0ef70a183ba5dc262faf0abbd7b93115354be2de04ea8c715b011eb9a269aa00efd33872ead1f4d54370eb0d0bd0242f3c6108a9d4bdb3cb30b6325b2550f430a029097cf3b0e86d286d2113ee4abc3e54a3646b1097d1d3fde3cf4347413c37ce53fb28e47a2fd50142c2606e25781a631f3ef08488411d00b946295051d0b35521cb65b12e63bd8be1bbcde9550f611090dd5b18320543da479d291beb35185021592672ef6cd0dd80a17af915afe115d4dba", 0xb5, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000003c0)="cfe1c0cb846a616b5affec0a89cbd2c9135ef94619b34e2feafac37507a5f59c5a70265ffd64512f470058c6328ac0b549622016704e9e4b1b02c4a0d06dddec92b5de28515e362cc44ac57a865747d729ed49745bd4a9f3c348b22664392630b8c0a422bfd33711c6128f22c532fc4e8da7c56fb9ffdb9680da492e90640e1e5982a409def4fbfd92") prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.203224993s ago: executing program 4 (id=7164): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e21, 0xf36b, @mcast1, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x3, 0x2, 0x20, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0x817b, 0x8a, &(0x7f0000000300)=""/138, 0x40f00, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x8}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x0, 0x4, 0x4, 0xb}, {0x3, 0x2, 0x0, 0x6c835471f712451f}, {0x5, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x8, 0xc}, {0x1, 0x3, 0x5, 0x7}], 0x10, 0x2000, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002100010000000000000000000200000000000000000000000c000c400000000000000004"], 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x73, 0x4f, &(0x7f0000000500)="06829e05d6142272161ede5829dbdf2f8710c4230179a1e746578d44efdf8b71bdfaab93370835f54f101f212e2933cb9b83a01c4eb8578084099e00ebc24372e906e7ee84fac16518280709ab0feea6c69b6c4920eb6513938ac640eee9fcd5019a8bf11ed223da8a9def1463a233196e6916", &(0x7f0000000580)=""/79, 0xd, 0x0, 0x1000, 0x9b, &(0x7f0000000cc0)="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", &(0x7f0000000600)="11bf4d3ade55911df81964a01ea6e6fd255aeb5bd124aa2bf40f825b65740212185fe1a705cd4610230bd6b25a6f67cdfc48f56a9a7ffb5cb716b28aebebf0a1c83d3923e561650bd527a30cc6f643bb8ed309a1a14aec33e222ef0e982f457eea98383384a7ef78867034c217fe455fcafbbbfa7aa0178025e5563813588775ecb03401e54e1abb4ab349db4b42eeaca9864d927a1222ef64b95a", 0x4, 0x0, 0x7}, 0x50) sendto$inet6(r1, &(0x7f00000002c0)="a5", 0x34000, 0x4001, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x15}}) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 1.012089118s ago: executing program 5 (id=7165): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)="52832af39c1bba026237b258953a56d13bb688f1283bfdaed0df07fbab6584bd672aafc724315c17dbe826f874038165206187ffd0f48e79be8bfece4eb73c7d22d8c8442879c71e257abe5cbfbb1aafcaef3cfe2b52ea64b78a5494af20ce604fca2d88a8428ee5a0d9e00bcc70e41842103388d73d2433292651c24f7c5f62ab94352da70b08", 0x87}, {&(0x7f0000000240)="55fc25ec6934acef4d881477a0b943d0b9c74b8575c133c69c536b0d333e78253b79e4a90ed78cc08550c5ca811a4d25842db8e94d77c055ad7ac61ac728a2fc", 0x40}, {&(0x7f0000000580)="4c2a47616c186af860a27272fce3016e5d113a040798fc2b8cd182f4d65682b14bbab81f707b6b968bec644f5fbf7e86f7b2cead26af854b6dc2dd0710d7a0e1d69e3d84fcd91e7d443ba886ff783dc019852caabca9555e0965e1bdb0af40e0a065db5c2a16dc9b924f7430cde2c0126ea7112b444f0d1f0044b94ef43ed3eaccc3dddfda0480e4896fc4f8baeadf331a371db32174aca1b6e90b7631df61cb42f3758b50df5241fd29e9d5e0d371194dd02c5ce79ca4f6e60a7b665fdc91dd79cc0cd43e22f53566dcf82328bb323041b64cccea2b04cf0c", 0xd9}, {&(0x7f00000003c0)="6ea5bb6ac8159fa833eb8bdd1a9de04eaf20ff092bbe3e471bdec7beeabfb36839e7d4716321b0bb1191096534192b30521e7bbf72ccbac0ce37f44e4355b7c3a771ccc47b3fb5ec326f5639d441565cc60e8e19df62e68b1dd8e31681d8d6ae9d40421ada2003cd4019ef48878a116959940ee35017176f2f0c56e37e8d706b6a6f3d0549207e9d6fe9de932ce9199b388c6e7a0197ec95120c602ab76d740cf36877405e48a7826c1fb187", 0xac}, {&(0x7f0000000740)="b8956c1928f15315610acda19c9e8cd2fbab13801a8aec73d33c129ce79f65b9ea7e2c8bc750ff5b9f3a1704849d1405d2fcd848759bb2f08ee3e76c98845fc906652e2b4919f7efe59d824b6efd850173e2857aed4bf1813b09e85756b970a1960003", 0x63}], 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="9c0000000000000500000000020000dede51acfba7f55d59a5944bc0aaf172eeb39be8c626c5ac2f34f17e68011bc655f0d2115c35e8d4161582e597765c", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000021000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4040080}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_evm(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000100)={{0x1}, 0x0, 0x0, 0x9}) socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0xfffffb56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f0000000080)={0x0, 0x4, "00fa00"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) 841.293081ms ago: executing program 9 (id=7166): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x200, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0xc800) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r5, &(0x7f0000000640)={0x0, 0x100000, 0x0, 0x0, &(0x7f00000026c0)=[@op={0x18, 0x114}], 0x18}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81", 0xd7}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69", 0x15}, {&(0x7f00000002c0)="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", 0x1e0}, {0x0}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd88702912", 0x6e}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) 452.814623ms ago: executing program 0 (id=7167): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f000000b980)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd4}}, {{&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000200), 0x4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r6 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r5, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="f4000900062b8925fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10002bbd7000ffdbdf250a0000000c000380080003003b000000080005002130c55b200001800c0007003900000022000000060001000a000000060001000a0000000800c54f0400000008000400070000000800050001000000080005006a1b0000"], 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r11) r12 = syz_usb_connect(0x5, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r11, 0x550c, 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) syz_usb_control_io$printer(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, 0x0) 0s ago: executing program 5 (id=7168): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x1a) socket(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5e00000006000000060000001b00000000040000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000000000000000000000b00"/28], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d40000140005000000000000000000000000000000000114000600fe880000000000000000000000000001d052e954c998accfca473bd7da65028bfe393f86e9597de84ed44cad9e75315f6df5595d33c157456112513689923ce1ae2ad4f3dbe154f9148a5033a4c7db3883f3b5437bf83ac9eeda68911cf87b7101d950c78400262ceb71d8c65841329000fc18a9318f0cd8b608180f3c6cff0a02f4778b28539f63144f67637644c2cafa480e258eb4c4e9675d5b01b8a634b7714d0f63352d7293f5ca27"], 0x114}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000080)=0x20, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800800114000000000050005000ac3102510e008cc22797d9c6fca09000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r8 = getpgrp(0xffffffffffffffff) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 2053.229099][T29735] Use struct sctp_assoc_value instead [ 2054.050925][ T9] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 2054.588823][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6432'. [ 2054.779147][T21870] usb 5-1: device descriptor read/64, error -71 [ 2055.536210][T21870] usb usb5-port1: attempt power cycle [ 2056.032625][T21870] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2056.256938][T21870] usb 5-1: device not accepting address 27, error -71 [ 2056.627484][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2056.634269][ T9] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 2056.641715][ T9] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 2056.649898][ T9] em28xx 9-1:0.0: No AC97 audio processor [ 2056.781019][T29775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6455'. [ 2057.278721][ T9] usb 9-1: USB disconnect, device number 44 [ 2057.290354][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 2057.347814][ T9] em28xx 9-1:0.0: Freeing device [ 2057.459064][T26872] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2059.089553][T26872] usb 10-1: Using ep0 maxpacket: 8 [ 2059.131609][T26872] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2059.233032][T26872] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2059.270740][T26872] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2059.283384][T29794] vlan0: entered promiscuous mode [ 2059.303646][T26872] usb 10-1: Product: syz [ 2059.318775][T26872] usb 10-1: Manufacturer: syz [ 2059.343868][T26872] usb 10-1: SerialNumber: syz [ 2059.657691][T26872] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 2059.686773][T26872] usb 10-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 2059.719371][T29805] bond0: (slave syz_tun): Releasing backup interface [ 2059.726362][T26872] usb 10-1: Handspring Visor / Palm OS: port 92, is for unknown use [ 2059.744949][T29805] bridge0: port 3(team0) entered disabled state [ 2059.754691][T26872] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2059.788880][T29805] bridge_slave_0: left allmulticast mode [ 2059.794608][T29805] bridge_slave_0: left promiscuous mode [ 2059.806726][T29805] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.820047][T29805] bridge_slave_1: left allmulticast mode [ 2059.825821][T29805] bridge_slave_1: left promiscuous mode [ 2059.832440][T29805] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.247923][T29805] bond0: (slave bond_slave_0): Releasing backup interface [ 2060.392670][T26872] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 2060.401284][T29805] bond0: (slave bond_slave_1): Releasing backup interface [ 2060.404949][T26872] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2060.418520][T26872] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2060.429274][T26872] usb 10-1: USB disconnect, device number 48 [ 2060.430695][T29805] team_slave_0: left allmulticast mode [ 2060.437585][T26872] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2060.452848][T26872] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2060.462669][T26872] visor 10-1:1.0: device disconnected [ 2060.469653][T17325] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2060.539113][T29805] team_slave_0: left promiscuous mode [ 2060.573236][T29805] team0: Port device team_slave_0 removed [ 2060.584506][T29805] team_slave_1: left allmulticast mode [ 2060.607001][T29805] team_slave_1: left promiscuous mode [ 2060.622382][T29805] team0: Port device team_slave_1 removed [ 2060.631148][T29805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2060.652016][T29805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2060.659576][T29805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2060.721355][T17325] usb 9-1: Using ep0 maxpacket: 16 [ 2060.727820][T29805] team0: Port device bridge1 removed [ 2060.738579][T17325] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2060.753673][T29802] lo speed is unknown, defaulting to 1000 [ 2060.760728][T17325] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2060.780933][T17325] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2060.792094][T17325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.811387][T17325] usb 9-1: Product: syz [ 2060.821647][T17325] usb 9-1: Manufacturer: syz [ 2060.826357][T17325] usb 9-1: SerialNumber: syz [ 2060.838638][T17325] usb 9-1: config 0 descriptor?? [ 2060.856578][T17325] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2060.867170][T17325] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 2061.287838][T29824] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6472'. [ 2062.090328][T17325] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2062.808006][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6468'. [ 2063.186365][T17325] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 2063.269745][T29841] syz.9.6475 (29841): drop_caches: 2 [ 2064.295686][T17325] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 2064.933163][T17325] em28xx 9-1:0.0: No AC97 audio processor [ 2064.941300][T29858] kernel profiling enabled (shift: 7) [ 2065.502989][T17325] usb 9-1: USB disconnect, device number 45 [ 2066.339357][T17325] em28xx 9-1:0.0: Disconnecting em28xx [ 2067.450504][T17325] em28xx 9-1:0.0: Freeing device [ 2067.561989][T29891] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6491'. [ 2067.700438][T29900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6493'. [ 2069.767133][T27312] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2069.993544][T29935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6506'. [ 2070.017277][T29934] x_tables: duplicate underflow at hook 1 [ 2070.284601][T18166] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2070.577157][T18166] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 2070.710131][T18166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.872366][T18166] usb 5-1: Product: syz [ 2070.959799][T18166] usb 5-1: Manufacturer: syz [ 2070.999090][T18166] usb 5-1: SerialNumber: syz [ 2071.245336][T18166] usb 5-1: config 0 descriptor?? [ 2071.252945][T18166] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 2071.261151][T18166] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 2072.169624][ T29] audit: type=1400 audit(1735478116.557:6047): avc: denied { getopt } for pid=29970 comm="syz.8.6515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2072.838382][T30004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6521'. [ 2073.773397][ T970] usb 5-1: USB disconnect, device number 29 [ 2074.185796][T30018] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6526'. [ 2074.782863][ T970] kernel write not supported for file bpf-map (pid: 970 comm: kworker/1:2) [ 2075.258518][T30026] tmpfs: Bad value for 'mpol' [ 2075.718212][T30040] binder: 30030:30040 ioctl 4018620d 0 returned -22 [ 2077.317763][T30047] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2077.327373][T30047] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2077.502876][ T29] audit: type=1326 audit(1735478121.609:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.8.6534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2077.528918][ T29] audit: type=1326 audit(1735478121.627:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.8.6534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2078.196482][T30055] serio: Serial port ptm0 [ 2078.222438][ T29] audit: type=1326 audit(1735478121.627:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.8.6534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2078.279666][ T29] audit: type=1326 audit(1735478121.627:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.8.6534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2078.463658][T30055] binder: 30044:30055 ioctl c0306201 200003c0 returned -22 [ 2078.814489][T18166] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2078.965052][T30076] FAULT_INJECTION: forcing a failure. [ 2078.965052][T30076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2078.978861][T30076] CPU: 1 UID: 0 PID: 30076 Comm: syz.9.6543 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2078.989656][T30076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2078.999737][T30076] Call Trace: [ 2079.003046][T30076] [ 2079.006000][T30076] dump_stack_lvl+0x16c/0x1f0 [ 2079.010726][T30076] should_fail_ex+0x497/0x5b0 [ 2079.015449][T30076] _copy_to_user+0x32/0xd0 [ 2079.019909][T30076] simple_read_from_buffer+0xd0/0x160 [ 2079.025327][T30076] proc_fail_nth_read+0x198/0x270 [ 2079.030391][T30076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2079.035976][T30076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2079.041823][T30076] vfs_read+0x1df/0xbe0 [ 2079.046009][T30076] ? __fget_files+0x1fc/0x3a0 [ 2079.050710][T30076] ? __pfx___mutex_lock+0x10/0x10 [ 2079.055761][T30076] ? __pfx_vfs_read+0x10/0x10 [ 2079.060477][T30076] ? __fget_files+0x206/0x3a0 [ 2079.065207][T30076] ksys_read+0x12b/0x250 [ 2079.069494][T30076] ? __pfx_ksys_read+0x10/0x10 [ 2079.074298][T30076] do_syscall_64+0xcd/0x250 [ 2079.078841][T30076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.084963][T30076] RIP: 0033:0x7f25ab78473c [ 2079.089420][T30076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2079.109058][T30076] RSP: 002b:00007f25ac628030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2079.117504][T30076] RAX: ffffffffffffffda RBX: 00007f25ab976080 RCX: 00007f25ab78473c [ 2079.125502][T30076] RDX: 000000000000000f RSI: 00007f25ac6280a0 RDI: 0000000000000009 [ 2079.133503][T30076] RBP: 00007f25ac628090 R08: 0000000000000000 R09: 0000000000000000 [ 2079.141499][T30076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2079.149588][T30076] R13: 0000000000000000 R14: 00007f25ab976080 R15: 00007ffeaa753e58 [ 2079.157604][T30076] [ 2079.177425][T18166] usb 9-1: Using ep0 maxpacket: 32 [ 2079.187219][T18166] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2079.197510][T18166] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.205837][T18166] usb 9-1: Product: syz [ 2079.210331][T18166] usb 9-1: Manufacturer: syz [ 2079.215250][T18166] usb 9-1: SerialNumber: syz [ 2079.226820][T18166] usb 9-1: config 0 descriptor?? [ 2080.337138][T30087] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6540'. [ 2080.352528][T18166] airspy 9-1:0.0: Board ID: 00 [ 2080.357852][T18166] airspy 9-1:0.0: Firmware version: [ 2080.498589][ T29] audit: type=1326 audit(1735478124.396:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.4.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7fc00000 [ 2081.510496][T18166] airspy 9-1:0.0: usb_control_msg() failed -110 request 11 [ 2081.569776][T18166] airspy 9-1:0.0: Registered as swradio24 [ 2081.584916][T18166] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2081.882541][T18166] usb 9-1: USB disconnect, device number 46 [ 2082.249745][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'. [ 2082.976745][T30102] vlan2: entered promiscuous mode [ 2083.396262][ T29] audit: type=1400 audit(1735478127.118:6053): avc: denied { setcurrent } for pid=30114 comm="syz.8.6560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2083.665820][T19226] Bluetooth: hci5: command 0x0406 tx timeout [ 2084.670852][T30130] loop7: detected capacity change from 0 to 16384 [ 2085.485191][T26872] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2085.656148][T26872] usb 5-1: Using ep0 maxpacket: 16 [ 2085.662144][T26872] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 2085.831161][T26872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2085.839297][T26872] usb 5-1: can't read configurations, error -61 [ 2087.075015][T26872] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2087.216468][ T29] audit: type=1326 audit(1735478130.682:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.240080][ C0] vkms_vblank_simulate: vblank timer overrun [ 2087.259614][T26872] usb 5-1: Using ep0 maxpacket: 16 [ 2087.279274][T26872] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 2087.297479][T26872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2087.305332][T26872] usb 5-1: can't read configurations, error -61 [ 2087.311759][ T29] audit: type=1326 audit(1735478130.682:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.345196][T26872] usb usb5-port1: attempt power cycle [ 2087.390280][ T29] audit: type=1326 audit(1735478130.691:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.439840][ T29] audit: type=1326 audit(1735478130.804:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.474450][ T29] audit: type=1326 audit(1735478130.813:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.557602][ T29] audit: type=1326 audit(1735478130.813:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.694133][T30170] tmpfs: Unknown parameter 'czcA2y9<+/?:8$@a' [ 2087.717331][ T29] audit: type=1326 audit(1735478130.813:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2087.783782][T26872] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2087.837250][ T29] audit: type=1326 audit(1735478130.813:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2088.300330][ T29] audit: type=1326 audit(1735478130.813:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30163 comm="syz.8.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9d79985d29 code=0x7ffc0000 [ 2088.365052][T26872] usb 5-1: device descriptor read/8, error -71 [ 2089.151952][T26872] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2089.400266][T26872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 2089.416554][T26872] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2089.578789][T26872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2089.619422][T26872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2090.201419][T26872] usb 5-1: SerialNumber: syz [ 2090.213654][T30191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2091.722685][T30216] tipc: Enabled bearer , priority 0 [ 2091.831357][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 2091.831374][ T29] audit: type=1400 audit(1735478135.003:6072): avc: denied { name_bind 0x1000000 } for pid=30213 comm="syz.3.6584" path="socket:[109762]" dev="sockfs" ino=109762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2091.883935][T30216] syzkaller0: entered promiscuous mode [ 2091.889672][T30216] syzkaller0: entered allmulticast mode [ 2091.895899][T30216] tipc: Resetting bearer [ 2091.919628][T30213] tipc: Resetting bearer [ 2092.271676][T26872] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2092.440342][T26872] usb 5-1: USB disconnect, device number 33 [ 2093.265841][T26872] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2093.470784][T26872] usb 5-1: Using ep0 maxpacket: 32 [ 2093.523056][T26872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.573154][T26872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.615903][T26872] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 2093.646482][T26872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.714297][T26872] usb 5-1: config 0 descriptor?? [ 2094.154393][T26872] razer 0003:1532:010D.001C: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.4-1/input0 [ 2095.932478][T29385] usb 5-1: USB disconnect, device number 34 [ 2096.650110][T30268] netlink: 'syz.4.6596': attribute type 1 has an invalid length. [ 2096.878105][T30273] loop9: detected capacity change from 0 to 7 [ 2096.895577][T30273] Dev loop9: unable to read RDB block 7 [ 2096.901213][T30273] loop9: unable to read partition table [ 2096.927167][T30273] loop9: partition table beyond EOD, truncated [ 2096.943129][T30273] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2097.121001][T29385] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2097.426829][T29385] usb 5-1: Using ep0 maxpacket: 16 [ 2097.503667][T29385] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2097.513819][T29385] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2097.545470][T29385] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2097.561207][T29385] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2097.570598][T29385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.608393][T29385] usb 5-1: Product: syz [ 2097.612715][T29385] usb 5-1: Manufacturer: syz [ 2097.628695][T29385] usb 5-1: SerialNumber: syz [ 2097.868517][T30269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6596'. [ 2098.027213][T30284] serio: Serial port ptm0 [ 2098.246152][T30284] binder: 30281:30284 ioctl c0306201 200003c0 returned -22 [ 2102.304508][T30223] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2102.569293][T30223] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.579997][T30223] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2102.589396][T30223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.625665][T30223] aiptek 10-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2102.869646][T30223] usb 10-1: USB disconnect, device number 49 [ 2103.178748][T29385] usbhid 5-1:1.0: can't add hid device: -32 [ 2103.184734][T29385] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 2103.582545][T30213] tipc: Disabling bearer [ 2103.614071][T30268] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2103.898353][T30294] vlan0: entered promiscuous mode [ 2103.928036][ T970] usb 5-1: USB disconnect, device number 35 [ 2104.562275][T30302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30302 comm=syz.3.6606 [ 2106.115151][T29385] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 2106.282422][T29385] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2106.290802][ T29] audit: type=1400 audit(1735478148.492:6073): avc: denied { ioctl } for pid=30334 comm="syz.3.6613" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2106.331802][T29385] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.367567][T29385] usb 10-1: Product: syz [ 2106.380225][T29385] usb 10-1: Manufacturer: syz [ 2106.390852][T29385] usb 10-1: SerialNumber: syz [ 2106.410237][T29385] usb 10-1: config 0 descriptor?? [ 2106.440133][T29385] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2106.778436][T28315] bond0: (slave syz_tun): Releasing backup interface [ 2107.708573][T29385] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 2107.716346][T29385] sq905c 10-1:0.0: probe with driver sq905c failed with error -110 [ 2107.992578][T30361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6622'. [ 2108.353282][T10015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2108.405727][T10015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.635706][T10015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2108.657240][T10015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.885689][T19226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2108.905424][T19226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2108.930214][T19226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2108.934574][T10015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2108.977183][T19226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2108.986569][T10015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.002880][T19226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2109.012104][T19226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2109.231860][T10015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2109.256654][T10015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.324439][T30369] lo speed is unknown, defaulting to 1000 [ 2110.832312][ T29] audit: type=1326 audit(1735478152.767:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.4.6627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7fc00000 [ 2110.959556][T10015] bridge_slave_1: left allmulticast mode [ 2110.965719][T10015] bridge_slave_1: left promiscuous mode [ 2110.984587][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.005145][T17325] usb 10-1: USB disconnect, device number 50 [ 2111.043078][T10015] bridge_slave_0: left allmulticast mode [ 2111.056788][T10015] bridge_slave_0: left promiscuous mode [ 2111.071860][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.082663][ T29] audit: type=1326 audit(1735478153.019:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30384 comm="syz.3.6629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cfb85d29 code=0x0 [ 2111.189761][T27312] Bluetooth: hci0: command tx timeout [ 2112.756697][T30408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6634'. [ 2113.120863][T30223] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2113.334264][T30223] usb 5-1: Using ep0 maxpacket: 8 [ 2113.343172][T30223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2113.355291][T30223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.363345][T30223] usb 5-1: Product: syz [ 2113.368533][T30223] usb 5-1: Manufacturer: syz [ 2113.373201][T30223] usb 5-1: SerialNumber: syz [ 2113.393297][T30223] usb 5-1: config 0 descriptor?? [ 2113.417057][T27312] Bluetooth: hci0: command tx timeout [ 2113.550414][T10015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2113.593672][T10015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2113.701099][T10015] bond0 (unregistering): Released all slaves [ 2114.083820][T30369] chnl_net:caif_netlink_parms(): no params data found [ 2114.528792][T30223] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 2114.769235][T30369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.786502][T30369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.813374][T30369] bridge_slave_0: entered allmulticast mode [ 2114.839309][T30369] bridge_slave_0: entered promiscuous mode [ 2114.899596][T30369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.924602][T30369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.931982][T30223] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2114.957731][T30369] bridge_slave_1: entered allmulticast mode [ 2114.989237][T30369] bridge_slave_1: entered promiscuous mode [ 2115.200356][T30369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2115.245092][T30369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.419963][T10015] hsr_slave_0: left promiscuous mode [ 2115.436552][T10015] hsr_slave_1: left promiscuous mode [ 2115.451307][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2115.459707][T10015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2115.468245][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2115.476807][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2115.509977][T10015] veth1_macvtap: left promiscuous mode [ 2115.515853][T10015] veth0_macvtap: left promiscuous mode [ 2115.522140][T10015] veth1_vlan: left promiscuous mode [ 2115.603165][T10660] usb 5-1: USB disconnect, device number 36 [ 2115.643242][T27312] Bluetooth: hci0: command tx timeout [ 2117.219648][T30466] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6649'. [ 2117.877490][T27312] Bluetooth: hci0: command tx timeout [ 2117.922653][T30481] netlink: 'syz.3.6653': attribute type 39 has an invalid length. [ 2118.154418][T10015] team0 (unregistering): Port device team_slave_1 removed [ 2118.209994][T30223] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2118.245998][T10015] team0 (unregistering): Port device team_slave_0 removed [ 2118.423419][T30223] usb 10-1: Using ep0 maxpacket: 8 [ 2118.436795][T30223] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2118.456382][T30223] usb 10-1: config index 0 descriptor too short (expected 8203, got 27) [ 2118.468394][T30223] usb 10-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 2118.497583][T30223] usb 10-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2118.520975][T30223] usb 10-1: string descriptor 0 read error: -22 [ 2118.528380][T30223] usb 10-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=f0.25 [ 2118.551122][T30223] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.920416][ C0] vkms_vblank_simulate: vblank timer overrun [ 2119.343741][T30369] team0: Port device team_slave_0 added [ 2119.410897][T30481] veth0_macvtap: left promiscuous mode [ 2119.493142][T30369] team0: Port device team_slave_1 added [ 2119.499927][ T29] audit: type=1326 audit(1735478160.886:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.4.6654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x0 [ 2119.574440][T30369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2119.589625][T30369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.615598][ C0] vkms_vblank_simulate: vblank timer overrun [ 2119.679068][T30369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2119.717257][T30369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2119.733262][T30369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.759271][ C0] vkms_vblank_simulate: vblank timer overrun [ 2119.823630][T30369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2119.891986][T30490] 9pnet_fd: Insufficient options for proto=fd [ 2119.913137][T30369] hsr_slave_0: entered promiscuous mode [ 2119.959493][T30369] hsr_slave_1: entered promiscuous mode [ 2119.987701][T30369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2119.995560][T30369] Cannot create hsr debugfs directory [ 2120.078239][ C0] vkms_vblank_simulate: vblank timer overrun [ 2120.188977][T30369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.296512][T30369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.394405][T30369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.483198][T30369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.709648][T30369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2120.730732][T30369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2120.748697][T30369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2120.762349][T30369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2120.981786][T30369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2121.017693][T30369] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.043370][T30459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.050508][T30459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.707694][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.717977][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.719782][ T970] usb 10-1: USB disconnect, device number 51 [ 2121.966798][T30369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2122.023235][T30369] veth0_vlan: entered promiscuous mode [ 2122.044394][T30369] veth1_vlan: entered promiscuous mode [ 2122.487139][T30369] veth0_macvtap: entered promiscuous mode [ 2122.498797][T30369] veth1_macvtap: entered promiscuous mode [ 2122.519810][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.558263][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.572501][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.584470][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.595281][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.605877][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.617395][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.628984][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.640217][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.654090][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.664895][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.676466][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.693415][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.705227][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.717753][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.729670][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.914242][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.014270][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.025147][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.036586][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.111832][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.182280][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.193702][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.206278][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.217676][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.229467][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.281095][T30369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.343188][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.372572][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.404814][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.427065][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.447389][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.482282][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.503120][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.514784][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.531864][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.604266][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.616937][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.631385][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.642594][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.658585][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.744298][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.758246][T26872] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2123.776792][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.835718][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.895900][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.929604][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.943470][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.956293][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.967295][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.978833][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.991627][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.992563][T26872] usb 10-1: Using ep0 maxpacket: 16 [ 2124.002778][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.090482][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.101138][T26872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.114633][T30369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.128190][T26872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2124.138238][T30369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.148365][T26872] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2124.162974][T30369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.172278][T26872] usb 10-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 2124.184244][T30369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.203745][T26872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.218737][T26872] usb 10-1: Product: syz [ 2124.224993][T30369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.234474][T26872] usb 10-1: Manufacturer: syz [ 2124.239874][T26872] usb 10-1: SerialNumber: syz [ 2124.245163][T30369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.255463][T26872] usb 10-1: config 0 descriptor?? [ 2124.260753][T30369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.282318][T26872] peak_usb 10-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 2124.290248][T26872] peak_usb 10-1:0.0: unable to read PCAN-USB serial number (err -8) [ 2124.414951][T26872] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -8 [ 2124.486187][T10035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.507067][T10035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.526592][T30531] netlink: 'syz.5.6667': attribute type 1 has an invalid length. [ 2124.535264][T30531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6667'. [ 2124.592288][T10018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.600181][T10018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.071463][T30541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.080228][T30541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.740120][ T29] audit: type=1326 audit(1735478166.723:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab59785d29 code=0x7ffc0000 [ 2125.917063][ T29] audit: type=1326 audit(1735478166.723:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab59785d29 code=0x7ffc0000 [ 2125.964239][ T29] audit: type=1326 audit(1735478166.751:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab59787c47 code=0x7ffc0000 [ 2126.034715][ T29] audit: type=1326 audit(1735478166.760:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fab59787bbc code=0x7ffc0000 [ 2126.103460][ T29] audit: type=1326 audit(1735478166.779:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fab59787af4 code=0x7ffc0000 [ 2126.139158][ T29] audit: type=1326 audit(1735478166.779:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fab59787af4 code=0x7ffc0000 [ 2126.165383][ T29] audit: type=1326 audit(1735478166.779:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab5978498a code=0x7ffc0000 [ 2126.302074][ T29] audit: type=1326 audit(1735478166.788:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab59785d29 code=0x7ffc0000 [ 2126.775153][ T29] audit: type=1326 audit(1735478166.788:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab59785d29 code=0x7ffc0000 [ 2126.967499][ T29] audit: type=1326 audit(1735478166.788:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.0.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab59785d29 code=0x7ffc0000 [ 2127.114964][T30577] netlink: 'syz.5.6679': attribute type 1 has an invalid length. [ 2127.122818][T30577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6679'. [ 2127.918694][T26872] usb 10-1: USB disconnect, device number 52 [ 2128.172678][T30602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30602 comm=syz.9.6687 [ 2128.822329][T30322] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2128.997510][T30322] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2129.008464][T30322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.020354][T30322] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2129.059029][T30322] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2129.090728][T30322] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2129.111282][T30322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.144797][T30322] usb 5-1: Product: syz [ 2129.150336][T30322] usb 5-1: Manufacturer: syz [ 2129.155075][T30322] usb 5-1: SerialNumber: syz [ 2129.938023][T30617] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6690'. [ 2131.253279][ T970] kernel write not supported for file bpf-map (pid: 970 comm: kworker/1:2) [ 2131.636429][T30618] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6691'. [ 2131.872396][T26872] kernel write not supported for file bpf-map (pid: 26872 comm: kworker/0:5) [ 2133.389218][T30322] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 2133.398742][T30322] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 2133.408524][T30322] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 2133.470707][T30322] usb 5-1: 2:1: All rates were zero [ 2133.539771][T30322] usb 5-1: USB disconnect, device number 37 [ 2133.806577][ T5903] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2133.978767][ T5903] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2133.987532][ T5903] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2134.006456][ T5903] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2134.015702][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2134.027804][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2134.040529][ T5903] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2134.049974][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2134.058990][ T5903] usb 10-1: Product: syz [ 2134.063507][ T5903] usb 10-1: Manufacturer: syz [ 2134.071203][ T5903] cdc_wdm 10-1:1.0: skipping garbage [ 2134.076660][ T5903] cdc_wdm 10-1:1.0: skipping garbage [ 2134.090274][ T5903] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2134.096434][ T5903] cdc_wdm 10-1:1.0: Unknown control protocol [ 2134.351122][T10660] usb 10-1: USB disconnect, device number 53 [ 2135.418509][T30657] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2135.923343][T10660] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 2136.335319][T30673] batadv0: entered allmulticast mode [ 2136.390680][T30673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2136.402376][T10660] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 2136.437044][T30673] bond0: (slave bond3): Enslaving as an active interface with an up link [ 2136.445675][T10660] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2136.460701][T10660] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2136.470198][T10660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2136.478822][T10660] usb 10-1: SerialNumber: syz [ 2136.485638][T30668] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2136.652045][T30676] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6706'. [ 2136.675722][ T970] kernel write not supported for file bpf-map (pid: 970 comm: kworker/1:2) [ 2137.015552][T27312] Bluetooth: hci2: command 0x0405 tx timeout [ 2138.097051][T30702] kvm: kvm [30699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2138.124411][T30702] kvm: kvm [30699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2138.600974][T28427] bond0: (slave syz_tun): Releasing backup interface [ 2138.639093][T10660] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 2138.656203][T10660] usb 10-1: USB disconnect, device number 54 [ 2138.844569][T19226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2138.864719][T19226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2138.876765][T19226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2138.891260][T19226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2138.901022][T19226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2138.908649][T19226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2138.966415][T30711] lo speed is unknown, defaulting to 1000 [ 2139.236915][T30711] chnl_net:caif_netlink_parms(): no params data found [ 2139.340594][T30711] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.348162][T30711] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.355846][T30711] bridge_slave_0: entered allmulticast mode [ 2139.363603][T30711] bridge_slave_0: entered promiscuous mode [ 2139.394125][T30711] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.452467][T30711] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.460126][T30711] bridge_slave_1: entered allmulticast mode [ 2139.655782][T30711] bridge_slave_1: entered promiscuous mode [ 2139.925464][T30711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2139.945670][T30711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.050725][T30730] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6722'. [ 2140.163239][T30711] team0: Port device team_slave_0 added [ 2140.188813][T30711] team0: Port device team_slave_1 added [ 2140.244474][T30711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2140.251546][T30711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.316455][T30711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2140.349381][T30711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2140.356382][T30711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.392264][T30711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.856535][T30711] hsr_slave_0: entered promiscuous mode [ 2140.863518][T30711] hsr_slave_1: entered promiscuous mode [ 2140.874451][T30711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2140.890597][T30711] Cannot create hsr debugfs directory [ 2141.175586][T19226] Bluetooth: hci1: command tx timeout [ 2141.618612][T30749] kvm: kvm [30748]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2141.654002][T30749] kvm: kvm [30748]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 2141.829815][T30711] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2141.867219][T30711] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.992145][T30711] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2142.015170][T30711] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.179591][T30711] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2142.189627][T30711] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.272608][T30711] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2142.283032][T30711] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.294896][ T5903] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2142.487473][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 2142.499995][T30711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2142.500066][ T5903] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2142.520472][T30711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2142.527588][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.544122][T30711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2142.551380][ T5903] usb 10-1: Product: syz [ 2142.555660][ T5903] usb 10-1: Manufacturer: syz [ 2142.560351][ T5903] usb 10-1: SerialNumber: syz [ 2142.572400][T30711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2142.595944][ T5903] usb 10-1: config 0 descriptor?? [ 2142.745656][T30711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2142.767537][T30711] 8021q: adding VLAN 0 to HW filter on device team0 [ 2142.779565][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.786728][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.828049][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.835247][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2142.862900][T30773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6733'. [ 2142.880495][ T5903] rtl8150 10-1:0.0: couldn't reset the device [ 2142.887588][ T5903] rtl8150 10-1:0.0: probe with driver rtl8150 failed with error -5 [ 2142.898995][ T5903] usb 10-1: USB disconnect, device number 55 [ 2142.953735][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 2143.316643][T30711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2143.342656][T19226] Bluetooth: hci1: command tx timeout [ 2143.807626][T30711] veth0_vlan: entered promiscuous mode [ 2143.828292][T30711] veth1_vlan: entered promiscuous mode [ 2143.929156][T30711] veth0_macvtap: entered promiscuous mode [ 2143.966597][T30711] veth1_macvtap: entered promiscuous mode [ 2143.982750][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2143.998871][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.009183][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.020086][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.030614][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.046108][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.056345][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.067024][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.077107][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.088260][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.098763][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.117444][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.127742][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.141006][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.152217][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.162869][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.172976][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.183512][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.193631][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.204335][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.215073][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.225704][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.235831][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.246911][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.257522][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.268201][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.278425][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.290314][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.301580][T30711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2144.328877][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.339720][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.350924][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.362070][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.372912][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.383591][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.393682][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.404348][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.414326][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.425246][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.435800][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.446469][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.456528][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.467627][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.478025][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.488843][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.498760][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.510413][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.520429][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.539753][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.549619][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.581748][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.602985][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.614639][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.624757][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.637238][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.647232][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.657989][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.667910][T30711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.682570][T30711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.694959][T30711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2144.706500][T30711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.725296][T30711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.734165][T30711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.743040][T30711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.933605][T28761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.941868][T28761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2144.968240][T19263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.976373][T19263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.079065][T30809] ip6t_srh: unknown srh match flags 4000 [ 2145.145518][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 2145.145539][ T29] audit: type=1400 audit(1735478184.879:6144): avc: denied { unmount } for pid=30711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2145.496890][T30821] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6748'. [ 2145.635006][T19226] Bluetooth: hci1: command tx timeout [ 2145.990612][T30824] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6747'. [ 2146.010526][T10660] kernel write not supported for file bpf-map (pid: 10660 comm: kworker/0:0) [ 2147.561058][ T29] audit: type=1400 audit(1735478187.133:6145): avc: denied { setattr } for pid=30843 comm="syz.4.6754" name="PF_CAIF" dev="sockfs" ino=113925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2147.886355][T19226] Bluetooth: hci1: command tx timeout [ 2147.907640][T10660] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2148.057370][T10660] usb 5-1: device descriptor read/64, error -71 [ 2148.503549][T10660] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2148.773278][T10660] usb 5-1: device descriptor read/64, error -71 [ 2148.891141][T10660] usb usb5-port1: attempt power cycle [ 2148.902685][T30863] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6760'. [ 2149.337113][T10660] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2149.350946][ T29] audit: type=1326 audit(1735478188.808:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30865 comm="syz.5.6761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4efc185d29 code=0x0 [ 2149.438031][T10660] usb 5-1: device descriptor read/8, error -71 [ 2149.628742][T30223] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2149.788993][T10660] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2149.789006][T30223] usb 10-1: Using ep0 maxpacket: 8 [ 2149.807867][T30223] usb 10-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 2149.817328][T30223] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.826626][T30223] usb 10-1: Product: syz [ 2149.826988][T10660] usb 5-1: device descriptor read/8, error -71 [ 2149.838187][T30223] usb 10-1: Manufacturer: syz [ 2149.845562][T30223] usb 10-1: SerialNumber: syz [ 2149.863133][T30223] usb 10-1: config 0 descriptor?? [ 2149.871536][T30223] esd_usb 10-1:0.0: sending version message failed [ 2149.879845][T30223] esd_usb 10-1:0.0: probe with driver esd_usb failed with error -22 [ 2149.982134][T10660] usb usb5-port1: unable to enumerate USB device [ 2150.086111][T30870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.096378][T30870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.112247][T30878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.121082][T30878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.129763][T10660] usb 10-1: USB disconnect, device number 56 [ 2151.034288][T30895] vlan2: entered promiscuous mode [ 2151.109690][T30898] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6769'. [ 2151.267552][T10660] kernel write not supported for file bpf-map (pid: 10660 comm: kworker/0:0) [ 2153.710199][T30920] netlink: 'syz.0.6779': attribute type 9 has an invalid length. [ 2153.731974][T18166] IPVS: starting estimator thread 0... [ 2153.740982][T30930] bridge0: port 1(veth0_to_bridge) entered blocking state [ 2153.749495][T30930] bridge0: port 1(veth0_to_bridge) entered disabled state [ 2153.758432][T30930] veth0_to_bridge: entered allmulticast mode [ 2153.766341][T30930] veth0_to_bridge: entered promiscuous mode [ 2153.773040][T30930] bridge0: port 1(veth0_to_bridge) entered blocking state [ 2153.780489][T30930] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 2153.830959][T30933] IPVS: using max 31 ests per chain, 74400 per kthread [ 2154.074199][T30939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30939 comm=syz.0.6783 [ 2154.144412][T30941] vlan2: entered promiscuous mode [ 2154.175399][T30944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6786'. [ 2154.269860][T30944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6786'. [ 2154.524690][T30953] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 2156.609807][T10660] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2156.780562][T10660] usb 10-1: Using ep0 maxpacket: 8 [ 2156.793605][T10660] usb 10-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 2156.813478][T10660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2156.829892][T10660] usb 10-1: SerialNumber: syz [ 2156.845568][T10660] usb 10-1: config 0 descriptor?? [ 2157.068381][T30223] usb 10-1: USB disconnect, device number 57 [ 2157.442050][T30984] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6796'. [ 2157.966600][T18166] kernel write not supported for file bpf-map (pid: 18166 comm: kworker/1:4) [ 2158.076465][T30987] vlan0: entered promiscuous mode [ 2159.111194][T10660] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 2159.238712][T31006] dvmrp0: entered allmulticast mode [ 2159.298046][T10660] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 2159.318215][T10660] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2159.376114][T10660] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2159.400077][T10660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2159.419623][T10660] usb 10-1: SerialNumber: syz [ 2159.432188][T31011] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2159.433039][T31005] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2159.627331][T31019] netlink: 'syz.5.6807': attribute type 1 has an invalid length. [ 2159.652792][T31019] netlink: 'syz.5.6807': attribute type 1 has an invalid length. [ 2160.073397][T18166] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2160.255509][T18166] usb 6-1: Using ep0 maxpacket: 32 [ 2160.286700][T18166] usb 6-1: config 0 has an invalid interface number: 111 but max is 3 [ 2160.312345][T18166] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2160.340070][T18166] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.353957][T18166] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 2160.437459][T18166] usb 6-1: config 0 has no interface number 0 [ 2160.447262][T18166] usb 6-1: config 0 interface 111 altsetting 1 endpoint 0xB has an invalid bInterval 138, changing to 11 [ 2160.508455][T18166] usb 6-1: config 0 interface 111 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 2160.519585][T18166] usb 6-1: config 0 interface 111 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 2160.652390][T18166] usb 6-1: config 0 interface 111 has no altsetting 0 [ 2160.718775][T18166] usb 6-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=57.90 [ 2160.747406][T18166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.829568][T18166] usb 6-1: Product: syz [ 2160.839004][T18166] usb 6-1: Manufacturer: syz [ 2160.848354][T18166] usb 6-1: SerialNumber: syz [ 2160.861756][T18166] usb 6-1: config 0 descriptor?? [ 2160.874679][T18166] usb 6-1: Could not find all expected endpoints [ 2161.277742][T31026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.286805][T31026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.298261][T31026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.307619][T31026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.313631][T31044] can: request_module (can-proto-4) failed. [ 2161.851296][T10660] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 2161.863792][T10660] usb 10-1: USB disconnect, device number 58 [ 2162.074395][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6819'. [ 2162.371874][T27312] Bluetooth: hci1: command 0x0405 tx timeout [ 2162.487613][T10660] usb 6-1: USB disconnect, device number 73 [ 2162.784377][T31057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31057 comm=syz.5.6822 [ 2163.026614][ T29] audit: type=1326 audit(1735478201.604:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.222221][ T29] audit: type=1326 audit(1735478201.632:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.334386][ T29] audit: type=1326 audit(1735478201.632:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.435787][ T29] audit: type=1326 audit(1735478201.632:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.562081][ T29] audit: type=1326 audit(1735478201.632:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.653437][ T29] audit: type=1326 audit(1735478201.632:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2163.778079][ T29] audit: type=1326 audit(1735478201.632:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2164.282075][ T29] audit: type=1326 audit(1735478201.632:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2164.282217][ T29] audit: type=1326 audit(1735478201.641:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fda62b85d29 code=0x7ffc0000 [ 2164.282350][ T29] audit: type=1326 audit(1735478201.641:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31061 comm="syz.4.6824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2165.215964][T17325] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2165.412627][T17325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 2165.480007][T17325] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2165.506354][T17325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2165.521839][T17325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2165.536232][T17325] usb 5-1: SerialNumber: syz [ 2165.546563][T31084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2165.600349][T31089] nbd0: detected capacity change from 0 to 30 [ 2165.610780][T31086] block nbd0: shutting down sockets [ 2165.654849][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.665809][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.690537][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.703701][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.715193][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.724503][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.732838][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.743633][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.755480][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.768972][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.778710][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.789427][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.798022][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.807706][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.816350][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.844303][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.870178][T31095] ldm_validate_partition_table(): Disk read failed. [ 2165.892209][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.901618][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.909744][T31095] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2165.920129][T31095] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2165.944503][T31095] Dev nbd0: unable to read RDB block 0 [ 2165.952754][T31095] nbd0: unable to read partition table [ 2166.004525][T31095] nbd0: partition table beyond EOD, truncated [ 2166.372903][T31104] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2166.543723][T31114] batadv_slave_1: entered promiscuous mode [ 2166.552869][T31113] batadv_slave_1: left promiscuous mode [ 2167.111104][T31129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6847'. [ 2167.136754][T31130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6847'. [ 2167.215619][T31129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6847'. [ 2167.409818][T31138] mkiss: ax0: crc mode is auto. [ 2169.222997][T17325] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2169.953988][T17325] usb 5-1: USB disconnect, device number 42 [ 2169.963135][T31153] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6851'. [ 2170.033398][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 2170.033416][ T29] audit: type=1326 audit(1735478208.152:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31155 comm="syz.0.6852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab59785d29 code=0x0 [ 2170.108135][T31163] FAULT_INJECTION: forcing a failure. [ 2170.108135][T31163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.177158][T31163] CPU: 1 UID: 0 PID: 31163 Comm: syz.4.6856 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2170.187970][T31163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2170.198024][T31163] Call Trace: [ 2170.201295][T31163] [ 2170.204208][T31163] dump_stack_lvl+0x16c/0x1f0 [ 2170.208875][T31163] should_fail_ex+0x497/0x5b0 [ 2170.213544][T31163] _copy_to_user+0x32/0xd0 [ 2170.217959][T31163] simple_read_from_buffer+0xd0/0x160 [ 2170.224302][T31163] proc_fail_nth_read+0x198/0x270 [ 2170.229333][T31163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2170.234918][T31163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2170.240591][T31163] vfs_read+0x1df/0xbe0 [ 2170.244766][T31163] ? __fget_files+0x1fc/0x3a0 [ 2170.249445][T31163] ? __pfx___mutex_lock+0x10/0x10 [ 2170.254475][T31163] ? __pfx_vfs_read+0x10/0x10 [ 2170.259159][T31163] ? __fget_files+0x206/0x3a0 [ 2170.263822][T31163] ksys_read+0x12b/0x250 [ 2170.268046][T31163] ? __pfx_ksys_read+0x10/0x10 [ 2170.272796][T31163] do_syscall_64+0xcd/0x250 [ 2170.277288][T31163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.283176][T31163] RIP: 0033:0x7fda62b8473c [ 2170.287594][T31163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2170.307199][T31163] RSP: 002b:00007fda63971030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2170.315607][T31163] RAX: ffffffffffffffda RBX: 00007fda62d75fa0 RCX: 00007fda62b8473c [ 2170.323590][T31163] RDX: 000000000000000f RSI: 00007fda639710a0 RDI: 0000000000000004 [ 2170.331573][T31163] RBP: 00007fda63971090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.339967][T31163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.347937][T31163] R13: 0000000000000000 R14: 00007fda62d75fa0 R15: 00007ffe52863368 [ 2170.355914][T31163] [ 2172.020395][ T29] audit: type=1400 audit(1735478210.013:6182): avc: denied { write } for pid=31186 comm="syz.4.6864" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2174.441641][T10660] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 2174.495584][T31214] netlink: 'syz.9.6870': attribute type 29 has an invalid length. [ 2174.503444][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6870'. [ 2174.614119][T10660] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.645651][T10660] usb 5-1: New USB device found, idVendor=0572, idProduct=86d6, bcdDevice=5c.39 [ 2174.654964][T10660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.667986][T10660] usb 5-1: Product: syz [ 2174.681764][T10660] usb 5-1: Manufacturer: syz [ 2174.694770][T10660] usb 5-1: SerialNumber: syz [ 2174.752575][T10660] usb 5-1: config 0 descriptor?? [ 2174.760721][T10660] dvb-usb: found a 'Conexant DMB-TH Stick' in warm state. [ 2174.785303][T10660] usb 5-1: setting power ON [ 2174.838497][T10660] dvb-usb: bulk message failed: -22 (2/0) [ 2175.029639][T10660] dvb-usb: bulk message failed: -22 (1/0) [ 2175.148633][T10660] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2175.171821][T10660] dvb-usb: Conexant DMB-TH Stick error while loading driver (-19) [ 2175.209438][T10660] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 2175.252195][T10660] usb 5-1: USB disconnect, device number 43 [ 2175.565854][T31229] serio: Serial port ptm0 [ 2175.671413][T31229] binder: BINDER_SET_CONTEXT_MGR already set [ 2175.677493][T31229] binder: 31226:31229 ioctl 4018620d 20000240 returned -16 [ 2177.178844][ T5903] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2177.399768][T31250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6880'. [ 2177.517238][ T5903] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.569135][ T5903] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2177.652056][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.940216][ T5903] aiptek 10-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2177.965724][T31266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31266 comm=syz.5.6885 [ 2178.293513][T29385] usb 10-1: USB disconnect, device number 59 [ 2178.303499][T31265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6886'. [ 2179.389346][ T29] audit: type=1400 audit(1735478216.907:6183): avc: denied { setopt } for pid=31280 comm="syz.4.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2179.649142][T31286] syz.4.6890: attempt to access beyond end of device [ 2179.649142][T31286] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2179.665375][T31286] (syz.4.6890,31286,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 2179.673260][T31286] (syz.4.6890,31286,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2179.680757][T31286] (syz.4.6890,31286,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2179.689499][T31286] (syz.4.6890,31286,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2179.735568][T31287] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2181.412171][T17325] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2181.428382][T31314] loop8: detected capacity change from 0 to 7 [ 2181.444268][T31314] Dev loop8: unable to read RDB block 7 [ 2181.450670][T31314] loop8: unable to read partition table [ 2181.457231][T31314] loop8: partition table beyond EOD, truncated [ 2181.463973][T31314] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 2181.463973][T31314] ) failed (rc=-5) [ 2181.478366][ T29] audit: type=1326 audit(1735478218.862:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.9.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ab785d29 code=0x7fc00000 [ 2181.595291][T17325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.619316][T17325] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2181.643645][T17325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.658956][ T5903] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2181.675001][T17325] usb 6-1: config 0 descriptor?? [ 2181.683289][T17325] pwc: Askey VC010 type 2 USB webcam detected. [ 2181.803935][T31319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31319 comm=syz.0.6899 [ 2181.839518][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 2181.847053][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2182.232057][ T5903] usb 5-1: config 3 has an invalid interface number: 7 but max is 1 [ 2182.253415][T31320] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6900'. [ 2182.279216][ T5903] usb 5-1: config 3 has no interface number 0 [ 2182.301187][ T5903] usb 5-1: config 3 interface 7 has no altsetting 0 [ 2182.345103][ T5903] usb 5-1: config 3 interface 1 has no altsetting 0 [ 2182.376284][ T5903] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2 [ 2182.392697][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.426745][ T5903] usb 5-1: Product: syz [ 2182.454335][ T5903] usb 5-1: Manufacturer: syz [ 2182.460048][T17325] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2182.467257][T17325] pwc: recv_control_msg error -32 req 02 val 2700 [ 2182.474447][T17325] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2182.506080][ T5903] usb 5-1: SerialNumber: syz [ 2182.708218][T17325] pwc: recv_control_msg error -71 req 04 val 1300 [ 2182.716682][T17325] pwc: recv_control_msg error -71 req 04 val 1400 [ 2182.723464][T17325] pwc: recv_control_msg error -71 req 02 val 2000 [ 2182.730861][T17325] pwc: recv_control_msg error -71 req 02 val 2100 [ 2182.737847][T17325] pwc: recv_control_msg error -71 req 04 val 1500 [ 2182.744642][T17325] pwc: recv_control_msg error -71 req 02 val 2500 [ 2182.762525][T17325] pwc: recv_control_msg error -71 req 02 val 2400 [ 2182.778744][T17325] pwc: recv_control_msg error -71 req 02 val 2600 [ 2182.818053][T17325] pwc: recv_control_msg error -71 req 02 val 2900 [ 2182.833998][T17325] pwc: recv_control_msg error -71 req 02 val 2800 [ 2182.841118][T17325] pwc: recv_control_msg error -71 req 04 val 1100 [ 2182.849172][T31310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.866270][T17325] pwc: recv_control_msg error -71 req 04 val 1200 [ 2182.887562][T17325] pwc: Registered as video103. [ 2182.894264][T17325] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input154 [ 2182.904431][T31310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.938580][T17325] usb 6-1: USB disconnect, device number 74 [ 2184.641313][ T5903] xr_serial 5-1:3.7: xr_serial converter detected [ 2184.649502][ T5903] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2184.656770][ T5903] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2184.668272][ T5903] usb 5-1: USB disconnect, device number 44 [ 2184.676448][ T5903] xr_serial 5-1:3.7: device disconnected [ 2186.285391][ T29] audit: type=1326 audit(1735478223.324:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31352 comm="syz.4.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7fc00000 [ 2186.400604][T31365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31365 comm=syz.5.6913 [ 2186.421979][ T29] audit: type=1326 audit(1735478223.483:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31369 comm="syz.9.6914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ab785d29 code=0x0 [ 2186.821473][ T5903] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2186.982464][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 2186.997189][ T5903] usb 10-1: config 0 has an invalid interface number: 247 but max is 0 [ 2187.017052][ T5903] usb 10-1: config 0 has no interface number 0 [ 2187.030734][ T5903] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 2187.181070][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 2187.190832][ T5903] usb 10-1: Product: syz [ 2187.196263][ T5903] usb 10-1: Manufacturer: syz [ 2187.834525][ T5903] usb 10-1: config 0 descriptor?? [ 2188.388409][T31375] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2188.417309][T31389] overlayfs: missing 'lowerdir' [ 2188.565661][T31393] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6921'. [ 2188.851311][T31396] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6922'. [ 2188.908260][T31396] netlink: 'syz.4.6922': attribute type 2 has an invalid length. [ 2189.235681][T31402] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6924'. [ 2189.482556][T31409] sp0: Synchronizing with TNC [ 2189.558969][T31409] xt_socket: unknown flags 0x50 [ 2189.615279][T31409] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2189.624609][T31409] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2189.745676][T10660] usb 10-1: USB disconnect, device number 60 [ 2190.077430][T31415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6927'. [ 2191.132202][T31431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6931'. [ 2191.442302][T21870] kernel write not supported for file bpf-map (pid: 21870 comm: kworker/0:3) [ 2193.880661][T31458] Bluetooth: MGMT ver 1.23 [ 2194.575623][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6939'. [ 2196.075480][ T29] audit: type=1326 audit(1735478232.397:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31466 comm="syz.5.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efc185d29 code=0x7fc00000 [ 2196.886922][T31494] binder: Bad value for 'max' [ 2199.172455][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6952'. [ 2199.938749][ T25] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2200.152628][ T29] audit: type=1326 audit(1735478236.307:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31517 comm="syz.3.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cfb85d29 code=0x7fc00000 [ 2200.268220][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 2200.281818][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2200.312162][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.333363][ T25] usb 6-1: Product: syz [ 2200.353701][ T25] usb 6-1: Manufacturer: syz [ 2200.375067][ T25] usb 6-1: SerialNumber: syz [ 2200.436651][ T25] usb 6-1: config 0 descriptor?? [ 2200.444052][ T25] appledisplay 6-1:0.0: Could not find int-in endpoint [ 2200.492817][ T25] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2200.810292][ T25] usb 6-1: USB disconnect, device number 75 [ 2201.953987][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6965'. [ 2202.187833][T31566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.195150][T31566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.557941][T31592] serio: Serial port ptm0 [ 2203.659473][T31592] binder: BINDER_SET_CONTEXT_MGR already set [ 2203.665609][T31592] binder: 31589:31592 ioctl 4018620d 20000240 returned -16 [ 2204.408856][T17325] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2204.582024][T17325] usb 5-1: Using ep0 maxpacket: 32 [ 2204.588671][T17325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.610364][T17325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.971580][T17325] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2205.161489][T17325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.178815][T31603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6977'. [ 2205.180342][T17325] usb 5-1: config 0 descriptor?? [ 2205.798061][ T25] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2205.856973][T31615] input: syz1 as /devices/virtual/input/input155 [ 2205.905805][T17325] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 2205.928771][T17325] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 2205.956824][T17325] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 2206.011811][T17325] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 2206.062004][T17325] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 2206.149340][T17325] kone 0003:1E7D:2CED.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 2206.226991][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 2206.244858][ T25] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2206.270701][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2206.318233][ T25] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2206.342405][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.351913][T17325] kone 0003:1E7D:2CED.001D: couldn't init struct kone_device [ 2206.359636][T17325] kone 0003:1E7D:2CED.001D: couldn't install mouse [ 2206.364098][ T25] usb 10-1: Product: syz [ 2206.367505][T17325] kone 0003:1E7D:2CED.001D: probe with driver kone failed with error -5 [ 2206.370372][ T25] usb 10-1: Manufacturer: syz [ 2206.396149][ T25] usb 10-1: SerialNumber: syz [ 2206.414065][T17325] usb 5-1: USB disconnect, device number 45 [ 2206.424190][ T25] usb 10-1: config 0 descriptor?? [ 2206.433590][ T25] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2206.443335][ T25] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2206.566836][T18166] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2206.589291][T31622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6982'. [ 2206.730652][T18166] usb 6-1: Using ep0 maxpacket: 8 [ 2206.738512][T18166] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2206.809690][T18166] usb 6-1: config 0 has no interface number 0 [ 2206.831059][T18166] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2206.923439][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6978'. [ 2207.473198][T18166] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2207.484941][T18166] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2207.496844][T18166] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2207.510298][T18166] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2207.556053][T18166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.078777][T18166] usb 6-1: config 0 descriptor?? [ 2208.096296][T18166] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2208.372786][T21870] usb 6-1: USB disconnect, device number 76 [ 2208.380880][T21870] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2208.674306][T31634] serio: Serial port ptm0 [ 2208.684753][ T25] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2208.697838][ T25] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 2208.760507][T31634] binder: BINDER_SET_CONTEXT_MGR already set [ 2208.766954][T31634] binder: 31631:31634 ioctl 4018620d 20000240 returned -16 [ 2209.404385][ T25] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 2209.416816][ T25] em28xx 10-1:0.0: No AC97 audio processor [ 2209.497101][T21870] usb 10-1: USB disconnect, device number 61 [ 2209.508971][T21870] em28xx 10-1:0.0: Disconnecting em28xx [ 2209.533722][T21870] em28xx 10-1:0.0: Freeing device [ 2210.412271][ T29] audit: type=1400 audit(1735478245.923:6189): avc: denied { bind } for pid=31650 comm="syz.0.6991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2210.432841][T31651] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2210.462416][T31654] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2211.783018][T18166] IPVS: starting estimator thread 0... [ 2211.944526][T31663] IPVS: using max 30 ests per chain, 72000 per kthread [ 2215.561870][ T29] audit: type=1400 audit(1735478250.741:6190): avc: denied { read write } for pid=31687 comm="syz.5.6999" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2215.595067][ T29] audit: type=1400 audit(1735478250.741:6191): avc: denied { open } for pid=31687 comm="syz.5.6999" path="/65/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2215.623122][ T29] audit: type=1800 audit(1735478250.778:6192): pid=31695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6999" name="/" dev="9p" ino=2 res=0 errno=0 [ 2219.943967][T31690] lo speed is unknown, defaulting to 1000 [ 2220.422524][T18166] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 2220.598544][T18166] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.745258][T18166] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2220.781228][T18166] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2220.814841][T18166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.888872][T18166] usb 10-1: config 0 descriptor?? [ 2220.996244][T31734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7010'. [ 2221.281760][T18166] usb 10-1: string descriptor 0 read error: -71 [ 2221.289936][T18166] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2221.321140][T18166] usb 10-1: USB disconnect, device number 62 [ 2223.597092][T31758] IPv6: NLM_F_CREATE should be specified when creating new route [ 2223.639847][T18166] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 2223.844543][T18166] usb 6-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 2223.864288][T18166] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 2223.885973][T18166] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2223.905814][T31763] Bluetooth: MGMT ver 1.23 [ 2223.910072][T18166] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2223.919901][T18166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2223.922224][T31585] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2223.927909][T18166] usb 6-1: SerialNumber: syz [ 2223.945910][T31585] CPU: 0 UID: 0 PID: 31585 Comm: kworker/u9:1 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2223.956968][T31585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2223.967031][T31585] Workqueue: hci4 hci_rx_work [ 2223.971819][T31585] Call Trace: [ 2223.975092][T31585] [ 2223.978017][T31585] dump_stack_lvl+0x16c/0x1f0 [ 2223.982720][T31585] sysfs_warn_dup+0x7f/0xa0 [ 2223.987232][T31585] sysfs_create_dir_ns+0x24d/0x2b0 [ 2223.992353][T31585] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2223.998003][T31585] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2224.003385][T31585] ? kobject_add_internal+0x12d/0x990 [ 2224.008768][T31585] ? do_raw_spin_unlock+0x172/0x230 [ 2224.013973][T31585] kobject_add_internal+0x2c8/0x990 [ 2224.019189][T31585] kobject_add+0x16f/0x240 [ 2224.023610][T31585] ? __pfx_kobject_add+0x10/0x10 [ 2224.028553][T31585] ? class_to_subsys+0x3e/0x160 [ 2224.033411][T31585] ? do_raw_spin_unlock+0x172/0x230 [ 2224.038699][T31585] ? kobject_put+0xab/0x5a0 [ 2224.043215][T31585] device_add+0x289/0x1a70 [ 2224.047644][T31585] ? __pfx_dev_set_name+0x10/0x10 [ 2224.052678][T31585] ? __pfx_device_add+0x10/0x10 [ 2224.057535][T31585] ? mgmt_send_event_skb+0x2f2/0x460 [ 2224.062850][T31585] hci_conn_add_sysfs+0x17e/0x230 [ 2224.067904][T31585] le_conn_complete_evt+0x107f/0x1da0 [ 2224.073287][T31585] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2224.079007][T31585] ? trace_contention_end+0xee/0x140 [ 2224.084292][T31585] ? __mutex_lock+0x1cc/0xa60 [ 2224.088979][T31585] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 2224.094877][T31585] ? skb_pull_data+0x166/0x210 [ 2224.099654][T31585] hci_le_meta_evt+0x2e2/0x5d0 [ 2224.104420][T31585] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2224.110837][T31585] hci_event_packet+0x666/0x1180 [ 2224.115774][T31585] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2224.121060][T31585] ? __pfx_hci_event_packet+0x10/0x10 [ 2224.126429][T31585] ? mark_held_locks+0x9f/0xe0 [ 2224.131190][T31585] ? kcov_remote_start+0x3cf/0x6e0 [ 2224.136299][T31585] ? lockdep_hardirqs_on+0x7c/0x110 [ 2224.141500][T31585] hci_rx_work+0x2c5/0x16b0 [ 2224.146010][T31585] ? process_one_work+0x921/0x1ba0 [ 2224.151123][T31585] process_one_work+0x9c5/0x1ba0 [ 2224.156066][T31585] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2224.161701][T31585] ? __pfx_process_one_work+0x10/0x10 [ 2224.167075][T31585] ? rcu_is_watching+0x12/0xc0 [ 2224.171852][T31585] ? assign_work+0x1a0/0x250 [ 2224.176485][T31585] worker_thread+0x6c8/0xf00 [ 2224.181084][T31585] ? __kthread_parkme+0x148/0x220 [ 2224.186113][T31585] ? __pfx_worker_thread+0x10/0x10 [ 2224.191220][T31585] kthread+0x2c1/0x3a0 [ 2224.195291][T31585] ? _raw_spin_unlock_irq+0x23/0x50 [ 2224.200485][T31585] ? __pfx_kthread+0x10/0x10 [ 2224.205080][T31585] ret_from_fork+0x45/0x80 [ 2224.209493][T31585] ? __pfx_kthread+0x10/0x10 [ 2224.214081][T31585] ret_from_fork_asm+0x1a/0x30 [ 2224.218855][T31585] [ 2224.223607][T31585] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2224.237784][T31585] Bluetooth: hci4: failed to register connection device [ 2224.268652][T31754] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2225.916818][T21870] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2226.505758][T19226] Bluetooth: hci4: command 0x0405 tx timeout [ 2226.540328][T18166] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2226.574841][T21870] usb 10-1: Using ep0 maxpacket: 16 [ 2226.605307][T21870] usb 10-1: config 0 has no interfaces? [ 2226.613616][T21870] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2226.623271][T21870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.631372][T21870] usb 10-1: Product: syz [ 2226.635763][ T29] audit: type=1326 audit(1735478261.030:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31784 comm="syz.3.7027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cfb85d29 code=0x7fc00000 [ 2226.677311][T21870] usb 10-1: Manufacturer: syz [ 2226.682831][T21870] usb 10-1: SerialNumber: syz [ 2226.682910][T18166] usb 6-1: USB disconnect, device number 77 [ 2226.704077][T21870] usb 10-1: config 0 descriptor?? [ 2226.873755][T31796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7028'. [ 2227.358524][T31806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7025'. [ 2228.853112][T31818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7036'. [ 2229.003639][T21870] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2229.036506][T10660] usb 10-1: USB disconnect, device number 63 [ 2229.253131][T21870] usb 6-1: Using ep0 maxpacket: 8 [ 2229.260255][ T29] audit: type=1400 audit(1735478263.555:6194): avc: denied { map } for pid=31819 comm="syz.0.7035" path="socket:[117534]" dev="sockfs" ino=117534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2229.291037][T21870] usb 6-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 2229.301786][T21870] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.907355][T21870] usb 6-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 2229.916759][T21870] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 2229.925905][T21870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.938736][T21870] usb 6-1: probing VID:PID(2201:012C) [ 2229.945946][T21870] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 2230.044125][T21870] vub300 6-1:63.0: probe with driver vub300 failed with error -22 [ 2230.071046][ T29] audit: type=1400 audit(1735478264.313:6195): avc: denied { read } for pid=31832 comm="syz.9.7040" dev="sockfs" ino=117558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2230.109316][T31833] 9pnet_fd: Insufficient options for proto=fd [ 2230.191853][T29385] usb 6-1: USB disconnect, device number 78 [ 2230.209700][T31836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31836 comm=syz.3.7041 [ 2231.890546][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7047'. [ 2232.126085][ T29] audit: type=1400 audit(1735478266.231:6196): avc: denied { setattr } for pid=31860 comm="syz.5.7048" path="socket:[117602]" dev="sockfs" ino=117602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2232.140837][T31866] FAULT_INJECTION: forcing a failure. [ 2232.140837][T31866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.171230][T31866] CPU: 1 UID: 0 PID: 31866 Comm: syz.9.7049 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2232.182045][T31866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2232.192119][T31866] Call Trace: [ 2232.195408][T31866] [ 2232.198344][T31866] dump_stack_lvl+0x16c/0x1f0 [ 2232.203044][T31866] should_fail_ex+0x497/0x5b0 [ 2232.207750][T31866] _copy_from_iter+0x2a1/0x1560 [ 2232.212633][T31866] ? trace_lock_acquire+0x14e/0x1f0 [ 2232.217875][T31866] ? __alloc_skb+0x1fe/0x380 [ 2232.222500][T31866] ? __pfx__copy_from_iter+0x10/0x10 [ 2232.227815][T31866] ? __virt_addr_valid+0x1a4/0x590 [ 2232.232938][T31866] ? __virt_addr_valid+0x5e/0x590 [ 2232.237961][T31866] ? __phys_addr_symbol+0x30/0x80 [ 2232.242980][T31866] ? __check_object_size+0x488/0x710 [ 2232.248264][T31866] netlink_sendmsg+0x813/0xd70 [ 2232.253032][T31866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2232.258330][T31866] ____sys_sendmsg+0xaaf/0xc90 [ 2232.263090][T31866] ? copy_msghdr_from_user+0x10b/0x160 [ 2232.268542][T31866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2232.273832][T31866] ___sys_sendmsg+0x135/0x1e0 [ 2232.278502][T31866] ? __pfx____sys_sendmsg+0x10/0x10 [ 2232.283705][T31866] ? __pfx_lock_release+0x10/0x10 [ 2232.288726][T31866] ? trace_lock_acquire+0x14e/0x1f0 [ 2232.293928][T31866] ? __fget_files+0x206/0x3a0 [ 2232.298602][T31866] __sys_sendmsg+0x16e/0x220 [ 2232.303182][T31866] ? __pfx___sys_sendmsg+0x10/0x10 [ 2232.308295][T31866] do_syscall_64+0xcd/0x250 [ 2232.312796][T31866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.318689][T31866] RIP: 0033:0x7f25ab785d29 [ 2232.323105][T31866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2232.342714][T31866] RSP: 002b:00007f25ac649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2232.351118][T31866] RAX: ffffffffffffffda RBX: 00007f25ab975fa0 RCX: 00007f25ab785d29 [ 2232.359078][T31866] RDX: 0000000020040000 RSI: 0000000020000140 RDI: 0000000000000003 [ 2232.367040][T31866] RBP: 00007f25ac649090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.375005][T31866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.382969][T31866] R13: 0000000000000000 R14: 00007f25ab975fa0 R15: 00007ffeaa753e58 [ 2232.390946][T31866] [ 2232.403605][T31865] netlink: 'syz.3.7045': attribute type 10 has an invalid length. [ 2236.674014][T31898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31898 comm=syz.9.7055 [ 2238.318252][T31904] pim6reg527: entered allmulticast mode [ 2241.076230][T21870] kernel write not supported for file bpf-map (pid: 21870 comm: kworker/0:3) [ 2241.669108][T31955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31955 comm=syz.3.7071 [ 2241.783122][T19226] Bluetooth: hci0: command 0x0406 tx timeout [ 2241.888563][T18166] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2241.920862][T30926] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2242.054941][T18166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.075320][T18166] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2242.090581][T30926] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.101904][T18166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.111508][T30926] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2242.122730][T30926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.131841][T18166] usb 10-1: config 0 descriptor?? [ 2242.151428][T30926] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2242.379474][T21870] usb 5-1: USB disconnect, device number 46 [ 2242.581881][T18166] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 2242.609919][T18166] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001E/input/input157 [ 2242.712761][T18166] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 2243.539015][T31968] binder: BINDER_SET_CONTEXT_MGR already set [ 2243.545723][T31968] binder: 31965:31968 ioctl 4018620d 20000240 returned -16 [ 2244.934772][T10660] usb 10-1: USB disconnect, device number 64 [ 2246.385268][T31993] binder: BINDER_SET_CONTEXT_MGR already set [ 2246.391794][T31993] binder: 31987:31993 ioctl 4018620d 20000240 returned -16 [ 2247.581134][ T29] audit: type=1326 audit(1735478280.692:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31982 comm="syz.9.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ab785d29 code=0x7fc00000 [ 2247.927755][T32010] vlan0: entered promiscuous mode [ 2247.950499][T32012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7084'. [ 2248.027932][T32013] fuse: Bad value for 'group_id' [ 2248.052584][T32013] fuse: Bad value for 'group_id' [ 2248.144036][T17325] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2248.443392][T17325] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.454903][T17325] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2248.495477][T17325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.635819][T17325] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2248.730081][T32020] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7088'. [ 2248.759142][T30926] kernel write not supported for file bpf-map (pid: 30926 comm: kworker/1:8) [ 2249.786054][T18166] usb 5-1: USB disconnect, device number 47 [ 2250.223042][ T29] audit: type=1400 audit(1735478283.161:6198): avc: denied { setopt } for pid=32029 comm="syz.0.7092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2250.244990][T32030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2250.251548][T32030] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2250.264701][T32030] vhci_hcd vhci_hcd.0: Device attached [ 2250.398345][T30926] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2250.460685][ T5903] vhci_hcd: vhci_device speed not set [ 2250.526546][ T5903] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 2251.082542][T30926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 2251.225193][T30926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.235878][T30926] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2251.249558][T30926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.308608][T30926] usb 6-1: config 0 descriptor?? [ 2252.199193][ T29] audit: type=1326 audit(1735478284.752:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda62b85d29 code=0x7fc00000 [ 2252.521665][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7091'. [ 2252.591381][T32049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=32049 comm=syz.5.7091 [ 2252.608139][T30926] sony 0003:054C:0268.001F: unbalanced collection at end of report description [ 2252.638087][T30926] sony 0003:054C:0268.001F: parse failed [ 2252.657615][T30926] sony 0003:054C:0268.001F: probe with driver sony failed with error -22 [ 2253.993444][T32034] vhci_hcd: connection reset by peer [ 2254.509362][T10035] vhci_hcd: stop threads [ 2254.564662][T10035] vhci_hcd: release socket [ 2254.583472][T10035] vhci_hcd: disconnect device [ 2254.794730][T32073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7100'. [ 2255.008750][T30926] usb 6-1: USB disconnect, device number 79 [ 2255.968732][ T5903] vhci_hcd: vhci_device speed not set [ 2258.531128][T30926] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2258.766494][T30926] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2258.784276][T30926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.801940][T30926] usb 5-1: Product: syz [ 2258.809618][T30926] usb 5-1: Manufacturer: syz [ 2258.823296][T30926] usb 5-1: SerialNumber: syz [ 2258.840638][T30926] usb 5-1: config 0 descriptor?? [ 2259.836318][T32133] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7118'. [ 2260.321533][T32135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7119'. [ 2260.542427][T30926] usb 5-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 2260.550244][T30926] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 2260.559867][T30926] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 2260.637692][T32137] syz.5.7120: attempt to access beyond end of device [ 2260.637692][T32137] nbd5: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 2260.640189][T30926] usb 5-1: USB disconnect, device number 48 [ 2260.909742][T32154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=32154 comm=syz.5.7125 [ 2261.063074][T32154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7125'. [ 2261.284650][T32164] fuse: Unknown parameter 'f%39}Zeϸ_E'' [ 2261.292369][T17325] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 2261.301832][T32164] overlay: Unknown parameter 'volatile:volatile' [ 2261.319466][ T29] audit: type=1400 audit(1735478293.544:6200): avc: denied { map } for pid=32163 comm="syz.5.7128" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2261.352541][ T29] audit: type=1400 audit(1735478293.563:6201): avc: denied { execute } for pid=32163 comm="syz.5.7128" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2261.495082][T17325] usb 10-1: Using ep0 maxpacket: 16 [ 2261.503269][T17325] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2261.539485][T17325] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2261.573286][T17325] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2261.582646][T17325] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.601519][T17325] usb 10-1: Product: syz [ 2261.614763][T17325] usb 10-1: Manufacturer: syz [ 2261.627906][T17325] usb 10-1: SerialNumber: syz [ 2261.647205][T17325] usb 10-1: config 0 descriptor?? [ 2261.664113][T17325] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2261.700010][T17325] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2262.065377][ T29] audit: type=1400 audit(1735478294.246:6202): avc: denied { setopt } for pid=32166 comm="syz.5.7129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2262.149560][T32170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7126'. [ 2263.084727][T32174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7129'. [ 2263.280778][T26872] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2263.783048][T26872] usb 5-1: Using ep0 maxpacket: 8 [ 2263.794921][T26872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2263.816763][T26872] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 2263.825403][T26872] usb 5-1: config 0 has no interface number 0 [ 2263.825823][ T29] audit: type=1400 audit(1735478295.883:6203): avc: denied { map } for pid=32179 comm="syz.5.7132" path="cgroup:[4026533032]" dev="nsfs" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2263.831818][T26872] usb 5-1: config 0 interface 88 has no altsetting 0 [ 2263.854951][ C1] vkms_vblank_simulate: vblank timer overrun [ 2263.876672][T26872] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2263.886447][T26872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.894838][T26872] usb 5-1: Product: syz [ 2263.902236][T26872] usb 5-1: Manufacturer: syz [ 2263.909378][T26872] usb 5-1: SerialNumber: syz [ 2263.914456][ T29] audit: type=1400 audit(1735478295.939:6204): avc: denied { execute } for pid=32179 comm="syz.5.7132" path="cgroup:[4026533032]" dev="nsfs" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2263.916750][T26872] usb 5-1: config 0 descriptor?? [ 2264.104461][T17325] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2264.111354][T17325] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 2264.121966][T17325] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 2264.129441][T17325] em28xx 10-1:0.0: No AC97 audio processor [ 2264.184485][T26872] usb 5-1: USB disconnect, device number 49 [ 2264.324950][T17325] usb 10-1: USB disconnect, device number 65 [ 2264.331999][T17325] em28xx 10-1:0.0: Disconnecting em28xx [ 2264.350476][T17325] em28xx 10-1:0.0: Freeing device [ 2264.376894][T32185] lo speed is unknown, defaulting to 1000 [ 2264.470974][T19226] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2264.480890][T19226] CPU: 1 UID: 0 PID: 19226 Comm: kworker/u9:3 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2264.491844][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2264.501885][T19226] Workqueue: hci4 hci_rx_work [ 2264.506579][T19226] Call Trace: [ 2264.509840][T19226] [ 2264.512755][T19226] dump_stack_lvl+0x16c/0x1f0 [ 2264.517443][T19226] sysfs_warn_dup+0x7f/0xa0 [ 2264.521940][T19226] sysfs_create_dir_ns+0x24d/0x2b0 [ 2264.527040][T19226] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2264.532677][T19226] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2264.538057][T19226] ? kobject_add_internal+0x12d/0x990 [ 2264.543436][T19226] ? do_raw_spin_unlock+0x172/0x230 [ 2264.548742][T19226] kobject_add_internal+0x2c8/0x990 [ 2264.553937][T19226] kobject_add+0x16f/0x240 [ 2264.558350][T19226] ? __pfx_kobject_add+0x10/0x10 [ 2264.563280][T19226] ? class_to_subsys+0x3e/0x160 [ 2264.568119][T19226] ? do_raw_spin_unlock+0x172/0x230 [ 2264.573304][T19226] ? kobject_put+0xab/0x5a0 [ 2264.577819][T19226] device_add+0x289/0x1a70 [ 2264.582226][T19226] ? __pfx_dev_set_name+0x10/0x10 [ 2264.587241][T19226] ? __pfx_device_add+0x10/0x10 [ 2264.592080][T19226] ? mgmt_send_event_skb+0x2f2/0x460 [ 2264.597383][T19226] hci_conn_add_sysfs+0x17e/0x230 [ 2264.602399][T19226] le_conn_complete_evt+0x107f/0x1da0 [ 2264.607765][T19226] ? __pfx_lock_release+0x10/0x10 [ 2264.612801][T19226] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2264.618505][T19226] ? trace_contention_end+0xee/0x140 [ 2264.623786][T19226] ? __mutex_lock+0x1cc/0xa60 [ 2264.628454][T19226] hci_le_conn_complete_evt+0x23c/0x370 [ 2264.633992][T19226] hci_le_meta_evt+0x2e2/0x5d0 [ 2264.638743][T19226] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2264.644794][T19226] hci_event_packet+0x666/0x1180 [ 2264.649727][T19226] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2264.655001][T19226] ? __pfx_hci_event_packet+0x10/0x10 [ 2264.660364][T19226] ? mark_held_locks+0x9f/0xe0 [ 2264.665114][T19226] ? kcov_remote_start+0x3cf/0x6e0 [ 2264.670217][T19226] ? lockdep_hardirqs_on+0x7c/0x110 [ 2264.675408][T19226] hci_rx_work+0x2c5/0x16b0 [ 2264.679902][T19226] ? process_one_work+0x921/0x1ba0 [ 2264.685006][T19226] process_one_work+0x9c5/0x1ba0 [ 2264.689937][T19226] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2264.695566][T19226] ? __pfx_process_one_work+0x10/0x10 [ 2264.700922][T19226] ? rcu_is_watching+0x12/0xc0 [ 2264.705693][T19226] ? assign_work+0x1a0/0x250 [ 2264.710276][T19226] worker_thread+0x6c8/0xf00 [ 2264.715057][T19226] ? __pfx_worker_thread+0x10/0x10 [ 2264.720157][T19226] kthread+0x2c1/0x3a0 [ 2264.724246][T19226] ? _raw_spin_unlock_irq+0x23/0x50 [ 2264.729429][T19226] ? __pfx_kthread+0x10/0x10 [ 2264.734016][T19226] ret_from_fork+0x45/0x80 [ 2264.738416][T19226] ? __pfx_kthread+0x10/0x10 [ 2264.742990][T19226] ret_from_fork_asm+0x1a/0x30 [ 2264.747752][T19226] [ 2264.750839][ C1] vkms_vblank_simulate: vblank timer overrun [ 2264.759621][T19226] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2264.774183][T19226] Bluetooth: hci4: failed to register connection device [ 2265.767420][T32200] FAULT_INJECTION: forcing a failure. [ 2265.767420][T32200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.803494][T32200] CPU: 0 UID: 0 PID: 32200 Comm: syz.0.7139 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2265.811125][T32182] netlink: 'syz.5.7133': attribute type 21 has an invalid length. [ 2265.814295][T32200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2265.814311][T32200] Call Trace: [ 2265.814319][T32200] [ 2265.814328][T32200] dump_stack_lvl+0x16c/0x1f0 [ 2265.814358][T32200] should_fail_ex+0x497/0x5b0 [ 2265.814387][T32200] _copy_from_user+0x2e/0xd0 [ 2265.814414][T32200] copy_msghdr_from_user+0x99/0x160 [ 2265.814437][T32200] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2265.814460][T32200] ? __pfx___lock_acquire+0x10/0x10 [ 2265.814492][T32200] ___sys_recvmsg+0xdc/0x1a0 [ 2265.814514][T32200] ? __pfx____sys_recvmsg+0x10/0x10 [ 2265.814536][T32200] ? __pfx_lock_release+0x10/0x10 [ 2265.814558][T32200] ? trace_lock_acquire+0x14e/0x1f0 [ 2265.814606][T32200] do_recvmmsg+0x2f8/0x740 [ 2265.814631][T32200] ? __pfx_do_recvmmsg+0x10/0x10 [ 2265.814651][T32200] ? vfs_write+0x306/0x1150 [ 2265.814678][T32200] ? __mutex_unlock_slowpath+0x164/0x690 [ 2265.814715][T32200] ? __fget_files+0x206/0x3a0 [ 2265.814745][T32200] __x64_sys_recvmmsg+0x239/0x290 [ 2265.814769][T32200] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2265.814800][T32200] do_syscall_64+0xcd/0x250 [ 2265.814829][T32200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.814856][T32200] RIP: 0033:0x7fab59785d29 [ 2265.814876][T32200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2265.814897][T32200] RSP: 002b:00007fab5a629038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2265.814920][T32200] RAX: ffffffffffffffda RBX: 00007fab59975fa0 RCX: 00007fab59785d29 [ 2265.814936][T32200] RDX: 0000000000000001 RSI: 0000000020007340 RDI: 0000000000000004 [ 2265.814949][T32200] RBP: 00007fab5a629090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.814962][T32200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.814975][T32200] R13: 0000000000000000 R14: 00007fab59975fa0 R15: 00007fff7df5eb78 [ 2265.814998][T32200] [ 2265.834923][T32182] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7133'. [ 2266.894500][T32210] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7138'. [ 2267.446280][T32207] bond0: entered promiscuous mode [ 2267.453932][T32207] bond0: entered allmulticast mode [ 2269.426312][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7149'. [ 2269.729339][T26872] kernel write not supported for file bpf-map (pid: 26872 comm: kworker/0:5) [ 2270.224871][T30926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2270.389731][T30926] usb 5-1: Using ep0 maxpacket: 8 [ 2270.396692][T30926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2270.406235][T30926] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 2270.414484][T30926] usb 5-1: config 0 has no interface number 0 [ 2270.434416][T30926] usb 5-1: config 0 interface 88 has no altsetting 0 [ 2270.452583][T32250] FAULT_INJECTION: forcing a failure. [ 2270.452583][T32250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2270.466778][T30926] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2270.486001][T30926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.497483][T30926] usb 5-1: Product: syz [ 2270.501693][T30926] usb 5-1: Manufacturer: syz [ 2270.507381][T32250] CPU: 1 UID: 0 PID: 32250 Comm: syz.9.7152 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2270.518173][T32250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2270.528246][T32250] Call Trace: [ 2270.531538][T32250] [ 2270.534484][T32250] dump_stack_lvl+0x16c/0x1f0 [ 2270.539194][T32250] should_fail_ex+0x497/0x5b0 [ 2270.543899][T32250] _copy_to_user+0x32/0xd0 [ 2270.548344][T32250] simple_read_from_buffer+0xd0/0x160 [ 2270.553741][T32250] proc_fail_nth_read+0x198/0x270 [ 2270.558788][T32250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2270.564370][T32250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2270.569942][T32250] vfs_read+0x1df/0xbe0 [ 2270.574119][T32250] ? __fget_files+0x1fc/0x3a0 [ 2270.578813][T32250] ? __pfx___mutex_lock+0x10/0x10 [ 2270.583859][T32250] ? __pfx_vfs_read+0x10/0x10 [ 2270.588561][T32250] ? __fget_files+0x206/0x3a0 [ 2270.593263][T32250] ksys_read+0x12b/0x250 [ 2270.597520][T32250] ? __pfx_ksys_read+0x10/0x10 [ 2270.602305][T32250] do_syscall_64+0xcd/0x250 [ 2270.606827][T32250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.612795][T32250] RIP: 0033:0x7f25ab78473c [ 2270.617219][T32250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2270.637020][T32250] RSP: 002b:00007f25ac649030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2270.645449][T32250] RAX: ffffffffffffffda RBX: 00007f25ab975fa0 RCX: 00007f25ab78473c [ 2270.653438][T32250] RDX: 000000000000000f RSI: 00007f25ac6490a0 RDI: 0000000000000005 [ 2270.661426][T32250] RBP: 00007f25ac649090 R08: 0000000000000000 R09: 0000000000000000 [ 2270.669409][T32250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.677390][T32250] R13: 0000000000000000 R14: 00007f25ab975fa0 R15: 00007ffeaa753e58 [ 2270.685404][T32250] [ 2270.710356][T30926] usb 5-1: SerialNumber: syz [ 2270.722540][T30926] usb 5-1: config 0 descriptor?? [ 2270.860149][T32254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7153'. [ 2271.362350][T30926] usb 5-1: USB disconnect, device number 50 [ 2272.681669][T19226] Bluetooth: hci4: command 0x0405 tx timeout [ 2274.971964][T27312] Bluetooth: hci1: command 0x0405 tx timeout [ 2275.136762][ T29] audit: type=1400 audit(1735478306.425:6205): avc: denied { listen } for pid=32293 comm="syz.5.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2276.423360][T32313] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7168'. [ 2388.820132][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2388.827126][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P32287/1:b..l P62/1:b..l [ 2388.837080][ C0] rcu: (detected by 0, t=10503 jiffies, g=128921, q=262 ncpus=2) [ 2388.844886][ C0] task:kworker/u8:4 state:R running task stack:23264 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 2388.858586][ C0] Workqueue: bat_events batadv_nc_worker [ 2388.864250][ C0] Call Trace: [ 2388.867528][ C0] [ 2388.870462][ C0] __schedule+0xe58/0x5ad0 [ 2388.874891][ C0] ? hlock_class+0x4e/0x130 [ 2388.879420][ C0] ? __pfx___schedule+0x10/0x10 [ 2388.884274][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2388.889048][ C0] ? mark_held_locks+0x9f/0xe0 [ 2388.893822][ C0] preempt_schedule_irq+0x51/0x90 [ 2388.898851][ C0] irqentry_exit+0x36/0x90 [ 2388.903270][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2388.909258][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 2388.915157][ C0] Code: b8 ff ff ff ff 65 0f c1 05 30 c2 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 2388.934766][ C0] RSP: 0018:ffffc9000213faa8 EFLAGS: 00000206 [ 2388.940836][ C0] RAX: 0000000000000046 RBX: 1ffff92000427f56 RCX: 00000000e69e0c98 [ 2388.948807][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd1eda0 [ 2388.956780][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca398 [ 2388.964754][ C0] R10: ffffffff96e51cc7 R11: 0000000000000002 R12: 0000000000000000 [ 2388.972725][ C0] R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 [ 2388.980715][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2388.986355][ C0] ? rcu_is_watching+0x12/0xc0 [ 2388.991134][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 2388.996341][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2389.001465][ C0] ? lock_acquire+0x2f/0xb0 [ 2389.005970][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2389.011091][ C0] batadv_nc_worker+0x16a/0x1060 [ 2389.016037][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2389.021165][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2389.026546][ C0] ? rcu_is_watching+0x12/0xc0 [ 2389.031318][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 2389.036530][ C0] ? process_one_work+0x921/0x1ba0 [ 2389.041644][ C0] ? lock_acquire+0x2f/0xb0 [ 2389.046147][ C0] ? process_one_work+0x921/0x1ba0 [ 2389.051265][ C0] process_one_work+0x9c5/0x1ba0 [ 2389.056215][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2389.061593][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2389.066979][ C0] ? rcu_is_watching+0x12/0xc0 [ 2389.071756][ C0] ? assign_work+0x1a0/0x250 [ 2389.076353][ C0] worker_thread+0x6c8/0xf00 [ 2389.080969][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2389.086083][ C0] kthread+0x2c1/0x3a0 [ 2389.090155][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2389.095357][ C0] ? __pfx_kthread+0x10/0x10 [ 2389.099959][ C0] ret_from_fork+0x45/0x80 [ 2389.104380][ C0] ? __pfx_kthread+0x10/0x10 [ 2389.108979][ C0] ret_from_fork_asm+0x1a/0x30 [ 2389.113763][ C0] [ 2389.116780][ C0] task:syz.3.7162 state:R running task stack:25328 pid:32287 tgid:32287 ppid:21821 flags:0x00004000 [ 2389.128543][ C0] Call Trace: [ 2389.131819][ C0] [ 2389.134753][ C0] __schedule+0xe58/0x5ad0 [ 2389.139203][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2389.143988][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2389.149213][ C0] ? __pfx___schedule+0x10/0x10 [ 2389.154089][ C0] ? mark_held_locks+0x9f/0xe0 [ 2389.158866][ C0] preempt_schedule_irq+0x51/0x90 [ 2389.163896][ C0] irqentry_exit+0x36/0x90 [ 2389.168317][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2389.173783][ C0] RIP: 0010:lock_acquire+0x46/0xb0 [ 2389.178900][ C0] Code: 48 83 ec 08 48 8b 5c 24 40 48 89 3c 24 53 e8 51 10 ff ff 48 c7 c0 74 69 5f 90 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 <48> c1 e9 03 83 c0 03 0f b6 14 11 59 38 d0 7c 04 84 d2 75 47 8b 05 [ 2389.198603][ C0] RSP: 0018:ffffc9000cc5f700 EFLAGS: 00000202 [ 2389.204693][ C0] RAX: 0000000000000004 RBX: ffffffff81e986b2 RCX: ffffffff905f6974 [ 2389.212677][ C0] RDX: dffffc0000000000 RSI: ffffffff8bd1ed20 RDI: ffffffff8da77ce8 [ 2389.220658][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20be6ca [ 2389.228647][ C0] R10: ffffffff905f3657 R11: 0000000000000003 R12: 0000000000000000 [ 2389.236631][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 2389.244615][ C0] ? ___pte_offset_map+0x42/0x540 [ 2389.249670][ C0] ? ___pte_offset_map+0x42/0x540 [ 2389.254709][ C0] ___pte_offset_map+0x48/0x540 [ 2389.259575][ C0] ? ___pte_offset_map+0x42/0x540 [ 2389.264611][ C0] __pte_offset_map_lock+0x8e/0x300 [ 2389.269819][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 2389.275643][ C0] __get_locked_pte+0x79/0xc0 [ 2389.280326][ C0] vm_insert_page+0x42e/0x6d0 [ 2389.285008][ C0] ? __pfx_vm_insert_page+0x10/0x10 [ 2389.290214][ C0] ? vmalloc_to_page+0x2d3/0x430 [ 2389.295167][ C0] kcov_mmap+0xd7/0x150 [ 2389.299331][ C0] __mmap_region+0x1823/0x2760 [ 2389.304103][ C0] ? find_held_lock+0x2d/0x110 [ 2389.308873][ C0] ? __pfx___mmap_region+0x10/0x10 [ 2389.313990][ C0] ? hlock_class+0x4e/0x130 [ 2389.318498][ C0] ? mark_lock+0xb5/0xc60 [ 2389.322836][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2389.328095][ C0] ? cap_mmap_addr+0x53/0x320 [ 2389.332778][ C0] mmap_region+0x270/0x320 [ 2389.337228][ C0] do_mmap+0xc00/0xfc0 [ 2389.341305][ C0] vm_mmap_pgoff+0x1ba/0x360 [ 2389.345908][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2389.351026][ C0] ? __fget_files+0x206/0x3a0 [ 2389.355714][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 2389.360476][ C0] ? rcu_is_watching+0x12/0xc0 [ 2389.365254][ C0] __x64_sys_mmap+0x125/0x190 [ 2389.369937][ C0] do_syscall_64+0xcd/0x250 [ 2389.374450][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2389.380349][ C0] RIP: 0033:0x7f54cfb85d63 [ 2389.384762][ C0] RSP: 002b:00007ffc4090ff38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2389.393185][ C0] RAX: ffffffffffffffda RBX: 00007f54cfd763b8 RCX: 00007f54cfb85d63 [ 2389.401160][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f54cd1f4000 [ 2389.409130][ C0] RBP: 00007f54cfd76320 R08: 00000000000000dc R09: 0000000000000000 [ 2389.417103][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000004 [ 2389.425070][ C0] R13: 00007f54cfd76320 R14: 0000000000000003 R15: 00000000000010c7 [ 2389.433056][ C0] [ 2389.436073][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g128921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2389.448482][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=157554 [ 2389.456448][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g128921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 2389.467899][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2389.477888][ C0] rcu: RCU grace-period kthread stack dump: [ 2389.483766][ C0] task:rcu_preempt state:I stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2389.493960][ C0] Call Trace: [ 2389.497234][ C0] [ 2389.500173][ C0] __schedule+0xe58/0x5ad0 [ 2389.504598][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2389.509809][ C0] ? __pfx___schedule+0x10/0x10 [ 2389.514664][ C0] ? schedule+0x298/0x350 [ 2389.518995][ C0] ? __pfx_lock_release+0x10/0x10 [ 2389.524025][ C0] ? lock_acquire+0x2f/0xb0 [ 2389.528530][ C0] ? schedule+0x1fd/0x350 [ 2389.532870][ C0] schedule+0xe7/0x350 [ 2389.536950][ C0] schedule_timeout+0x124/0x280 [ 2389.541806][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2389.547186][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2389.552485][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2389.558301][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 2389.563773][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2389.568556][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2389.573857][ C0] ? rcu_gp_init+0xc82/0x1630 [ 2389.578553][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2389.583769][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2389.589600][ C0] rcu_gp_kthread+0x271/0x380 [ 2389.594298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2389.599605][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2389.604824][ C0] ? __kthread_parkme+0x148/0x220 [ 2389.610375][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2389.615581][ C0] kthread+0x2c1/0x3a0 [ 2389.619656][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2389.624857][ C0] ? __pfx_kthread+0x10/0x10 [ 2389.629458][ C0] ret_from_fork+0x45/0x80 [ 2389.633878][ C0] ? __pfx_kthread+0x10/0x10 [ 2389.638479][ C0] ret_from_fork_asm+0x1a/0x30 [ 2389.643269][ C0] [ 2389.646290][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2389.652621][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2389.657829][ C1] NMI backtrace for cpu 1 [ 2389.657844][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 2389.657864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2389.657875][ C1] RIP: 0010:__lock_acquire+0x3a9/0x3c40 [ 2389.657898][ C1] Code: 8b 14 24 83 d8 ff c1 e5 0f c1 e0 0d c1 e1 10 0f b7 ed 09 e8 81 e1 00 00 03 00 c1 e2 12 81 e2 00 00 04 00 09 c8 c1 e3 13 09 d0 <8b> 94 24 48 01 00 00 09 d8 c1 e2 14 09 d0 8b 94 24 38 01 00 00 c1 [ 2389.657914][ C1] RSP: 0018:ffffc90000a18b48 EFLAGS: 00000006 [ 2389.657930][ C1] RAX: 0000000000024000 RBX: 0000000000080000 RCX: 0000000000020000 [ 2389.657942][ C1] RDX: 0000000000000000 RSI: ffff88801d6c5344 RDI: ffff88801d6c5384 [ 2389.657954][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2389.657965][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 2389.657976][ C1] R13: ffff88801d6c4880 R14: 0000000000000021 R15: ffff88801d6c5360 [ 2389.657988][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2389.658007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2389.658020][ C1] CR2: 00000000203ef000 CR3: 0000000045560000 CR4: 00000000003526f0 [ 2389.658032][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2389.658043][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2389.658054][ C1] Call Trace: [ 2389.658060][ C1] [ 2389.658068][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2389.658090][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2389.658107][ C1] ? nmi_handle+0x1ac/0x5d0 [ 2389.658127][ C1] ? __lock_acquire+0x3a9/0x3c40 [ 2389.658145][ C1] ? default_do_nmi+0x6a/0x160 [ 2389.658162][ C1] ? exc_nmi+0x170/0x1e0 [ 2389.658179][ C1] ? end_repeat_nmi+0xf/0x53 [ 2389.658206][ C1] ? __lock_acquire+0x3a9/0x3c40 [ 2389.658225][ C1] ? __lock_acquire+0x3a9/0x3c40 [ 2389.658244][ C1] ? __lock_acquire+0x3a9/0x3c40 [ 2389.658262][ C1] [ 2389.658268][ C1] [ 2389.658279][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2389.658297][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 2389.658318][ C1] lock_acquire.part.0+0x11b/0x380 [ 2389.658337][ C1] ? advance_sched+0x679/0xc60 [ 2389.658356][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2389.658375][ C1] ? rcu_is_watching+0x12/0xc0 [ 2389.658404][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 2389.658428][ C1] ? advance_sched+0x679/0xc60 [ 2389.658444][ C1] ? lock_acquire+0x2f/0xb0 [ 2389.658462][ C1] ? advance_sched+0x679/0xc60 [ 2389.658480][ C1] advance_sched+0x67f/0xc60 [ 2389.658497][ C1] ? advance_sched+0x679/0xc60 [ 2389.658518][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2389.658535][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 2389.658561][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2389.658583][ C1] ? read_tsc+0x9/0x20 [ 2389.658608][ C1] hrtimer_interrupt+0x392/0x8e0 [ 2389.658635][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2389.658657][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2389.658678][ C1] [ 2389.658683][ C1] [ 2389.658689][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2389.658713][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 2389.658737][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 a1 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2389.658754][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 2389.658767][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c759 [ 2389.658779][ C1] RDX: 0000000000000001 RSI: ffff888143ea2000 RDI: ffff888143ea2064 [ 2389.658791][ C1] RBP: ffff888143ea2064 R08: 0000000000000001 R09: ffffed10170e6fed [ 2389.658803][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888147e86000 [ 2389.658815][ C1] R13: ffffffff8ee16aa0 R14: 0000000000000001 R15: 0000000000000000 [ 2389.658829][ C1] ? ct_kernel_exit+0x139/0x190 [ 2389.658853][ C1] acpi_idle_enter+0xc5/0x160 [ 2389.658876][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 2389.658899][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 2389.658918][ C1] cpuidle_enter+0x4e/0xa0 [ 2389.658942][ C1] do_idle+0x310/0x3f0 [ 2389.658960][ C1] ? __pfx_do_idle+0x10/0x10 [ 2389.658981][ C1] cpu_startup_entry+0x4f/0x60 [ 2389.658998][ C1] start_secondary+0x222/0x2b0 [ 2389.659014][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2389.659033][ C1] common_startup_64+0x13e/0x148 [ 2389.659058][ C1] [ 2391.888572][ T33] sched: DL replenish lagged too much