last executing test programs: 6m48.646385416s ago: executing program 2 (id=218): fchdir(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000a00)={0x200, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x23, 0x4, 0x800], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x4, 0x1, 0x3f, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) 6m47.314413512s ago: executing program 0 (id=224): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20d0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r6, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb0, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e142c08004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d13", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES64], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x6000) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x8000) write$P9_RMKDIR(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 6m47.25987805s ago: executing program 2 (id=225): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000025c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd5, 0x7) timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x1fc, 0x0, 0x0, 0x20000, 0x0}) timer_gettime(0x0, &(0x7f0000000040)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0xfffffffc, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 6m47.034756949s ago: executing program 2 (id=227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40004}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32], 0x50) syz_clone3(&(0x7f00000004c0)={0x114040000, 0x0, 0x0, 0x0, {0x13}, &(0x7f0000000300)=""/119, 0x77, &(0x7f0000000380)=""/176, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x98) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m46.168719472s ago: executing program 2 (id=228): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m45.289867054s ago: executing program 2 (id=229): lsetxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x882, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m44.37626507s ago: executing program 2 (id=231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) semget$private(0x0, 0x7, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@remote, 0xe}) semctl$SETALL(0x0, 0x0, 0xe, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4512, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000004, 0x1, 0x5]}, 0x45c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) 6m44.133826024s ago: executing program 0 (id=232): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0xd7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6m43.957845233s ago: executing program 0 (id=234): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4c, 0x3}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) lseek(r4, 0x7, 0x3) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, [], "caa7c1b7f4c336af"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2140, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) 6m43.028423328s ago: executing program 0 (id=236): fchdir(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000a00)={0x200, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x23, 0x4, 0x800], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x4, 0x1, 0x3f, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) 6m41.829976609s ago: executing program 0 (id=241): lsetxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x882, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m40.88732936s ago: executing program 0 (id=243): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kvm_ack_irq\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 6m39.459180873s ago: executing program 1 (id=250): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x800) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x8, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04080400000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB="370ead0252db8bbe6c581f0d7c6fe607370649fb5a774875d20804f237e7959c21af9b7fe7e6f4f446619dc88eccb2676759c84b00a826cfeac7379155b8"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m39.211703954s ago: executing program 1 (id=251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="a6"], 0x20) 6m39.211387196s ago: executing program 1 (id=252): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd2, 0x2}) 6m39.108393585s ago: executing program 1 (id=253): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x6, 0xd, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x10, 0x10, 0x4}]}, 0x38}}, 0x4000010) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setrlimit(0xb, &(0x7f0000000000)={0x4, 0x8}) clock_gettime(0xfeffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) 6m38.991117885s ago: executing program 1 (id=254): lsetxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x0, 0x201, 0x2, 0x0, 0x1, 0x54, 0x7fff}, &(0x7f0000000240)=0x20) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x882, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m38.160150597s ago: executing program 1 (id=257): syz_usb_connect(0x4, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c010000000009040000015b04b1000905810bb1"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x1, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x77, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x81, 0x6, 0x81}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x5, 0x7b, 0x0, 0x8, 0x7f}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "7a69dd8f3272e0a60f9fcce656ae78cf"}]}, 0x1, [{0x79, &(0x7f0000000800)=@string={0x79, 0x3, "7a239bbcbedfc8b270bb375363df83cece4096b03487692c53810c3a7361ba84f43244cf1ecf4b186867265b99ff8827d4ca66ff1d3830da497b4c072cf2601da91bc17dce9c0cc4d760a85565cd1627cae55e4c6441cd3430c01b97c3696093682228e97b6c6380c0434c3f063f4f57e90cac58217a1e"}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x6, 0x2, 0x40, 0x7}, 0xc0, &(0x7f0000000080)={0x5, 0xf, 0xc0, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d03c9cb5e7b764136749f2bd3b2d88b6"}, @generic={0x9d, 0x10, 0x2, "1d03d13a24265f7d0f6c237bbb558663646106fccad58f27c6ca2a8cb4165df43b98635d7f232e220a23380682cc2a4d24e40e28ccb113395dd0fb8cce3118276b842cb48734d4df2714848d290442d9b1698ac0f288875c58c5087096aa4879d7102014c2719107914aebadd72f41086534fbb0172dc54d602cd2bb99aebcb225fad5aac099612d673e0298fa9e00ffd9185db03fce194be6a8"}]}, 0x9, [{0x8b, &(0x7f0000000140)=@string={0x8b, 0x3, "466f4caf7ff961aa4ba4ae20f55c1ed4a5ea559cc919dba28bdb92da122e066b86f31e2f1b857600ff8013640932df973a083377c7e823c60294c31fb9f34ee04fa6ac2e908ee7443008af2997968b456cfb2b85e4264db2893351e99b2b2daadf345aa59597a08314a91c981b35a06c002a84dfe81fb1b4a6d8b6630a6585269b7b859f63f3d0e1e6"}}, {0x24, &(0x7f0000000200)=@string={0x24, 0x3, "a5ed57293a9e3612c167971c92bdf700ca35dada14839aea814eae9c0b4076af7d12"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x418}}, {0xbe, &(0x7f0000000280)=@string={0xbe, 0x3, "997485952770cb341862a98ad174f9e24e24539d7a2db2b983e31b803972359aab02b177578800fdb007bb06e161371dac16e3d1d2995d77ca98e39fd921bdf2a9941e6bef16eaf58c85b2c47c02c797929c849c5017d66851a51a93ae26abe2ea7e5b7d3f668ef3ec9b26e899c1d0c35d835591ebfa502126acd5f7b2c3341eb400c4dd112daf5f6ed1c3da0f0013fe24cbfba05303405a74c2010f0ab1e119775d24a9ae68d0fb492d2a41ee7fcef309e80c7a4700565b7acf82ab"}}, {0x32, &(0x7f0000000380)=@string={0x32, 0x3, "c1de5730d5d67bf2f47b11e18510d532f46346711d42e6e09a2eef0308dd4fa762f55106ede5565d67b41a91a433d279"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0xec, &(0x7f0000000400)=@string={0xec, 0x3, "ca0e2ce9933abfda9b1690f52c04ef4ca37fa8e1b9effbe8f98976c7feeef2d1509b9f8597658247d812901039a7113d8a5daa3b1d772cfe9b3b9629c9611bf464b15cc3ecdd2e0a3c56c611fefe6cc2c7eda54a1caed6f81c58a1abe8140d0f1c410a382d3ce4fd746037ea2ac2372225f81258ba19c063e274613e0a19617448c5938b5c0b4008b7e5d0fae2c00d035ff0c6cd195300c3b6298a5f9f3ceb0ec1b8001b8ab32611e7c250f0d96e23ac5aaf60020fd47cf84e99bd6cc46208cdcdc912a90637ef78013a1f8676004582aa2119799587a0759139084e43db18411375492f8e2643449618"}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "73200cb806e73eed3abe01186b3a84b466a3c5f51c6ea5a206f366d9732de752a6b6742bc405c8da2cdac59a70de4cb6a3f37b350bec1e752284750e162af1bed3b8f5a78f94380b6f9f024c2e464b6979d5a7ef68331e4161d8764f1ac3b4e369a300bd9d399b5b41caf75da3a1cd927f472deb3fbea243fe68e7"}}, {0x48, &(0x7f0000000580)=@string={0x48, 0x3, "de831524595d80d95e2b271abbce464371955a93bd5b6b9017ebe3711145c52043d580e340a140dc12a1145c9a93c560e6241ce36f6238bef0daa11f17e551016710894f92b7"}}]}) 6m37.196887321s ago: executing program 32 (id=207): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000680)=""/198, 0xc6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x9, '\x00', 0x0, r1, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xacd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x2, 0x3, 0x5, 0x18, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffff7f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x200089, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x4492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1200000, 0x0, 0x0, 0x800010, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioprio_set$pid(0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000000), 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x1f887, 0xd51f52931289733a, 0xce89, 0x8, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102}}}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 6m31.5009029s ago: executing program 33 (id=267): lsetxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x0, 0x201, 0x2, 0x0, 0x1, 0x54, 0x7fff}, &(0x7f0000000240)=0x20) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x882, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m28.70484792s ago: executing program 34 (id=231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) semget$private(0x0, 0x7, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@remote, 0xe}) semctl$SETALL(0x0, 0x0, 0xe, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4512, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000004, 0x1, 0x5]}, 0x45c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) 6m25.760191771s ago: executing program 35 (id=243): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kvm_ack_irq\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 6m22.675220711s ago: executing program 36 (id=257): syz_usb_connect(0x4, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c010000000009040000015b04b1000905810bb1"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x1, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x77, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x81, 0x6, 0x81}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x5, 0x7b, 0x0, 0x8, 0x7f}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "7a69dd8f3272e0a60f9fcce656ae78cf"}]}, 0x1, [{0x79, &(0x7f0000000800)=@string={0x79, 0x3, "7a239bbcbedfc8b270bb375363df83cece4096b03487692c53810c3a7361ba84f43244cf1ecf4b186867265b99ff8827d4ca66ff1d3830da497b4c072cf2601da91bc17dce9c0cc4d760a85565cd1627cae55e4c6441cd3430c01b97c3696093682228e97b6c6380c0434c3f063f4f57e90cac58217a1e"}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x6, 0x2, 0x40, 0x7}, 0xc0, &(0x7f0000000080)={0x5, 0xf, 0xc0, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d03c9cb5e7b764136749f2bd3b2d88b6"}, @generic={0x9d, 0x10, 0x2, "1d03d13a24265f7d0f6c237bbb558663646106fccad58f27c6ca2a8cb4165df43b98635d7f232e220a23380682cc2a4d24e40e28ccb113395dd0fb8cce3118276b842cb48734d4df2714848d290442d9b1698ac0f288875c58c5087096aa4879d7102014c2719107914aebadd72f41086534fbb0172dc54d602cd2bb99aebcb225fad5aac099612d673e0298fa9e00ffd9185db03fce194be6a8"}]}, 0x9, [{0x8b, &(0x7f0000000140)=@string={0x8b, 0x3, "466f4caf7ff961aa4ba4ae20f55c1ed4a5ea559cc919dba28bdb92da122e066b86f31e2f1b857600ff8013640932df973a083377c7e823c60294c31fb9f34ee04fa6ac2e908ee7443008af2997968b456cfb2b85e4264db2893351e99b2b2daadf345aa59597a08314a91c981b35a06c002a84dfe81fb1b4a6d8b6630a6585269b7b859f63f3d0e1e6"}}, {0x24, &(0x7f0000000200)=@string={0x24, 0x3, "a5ed57293a9e3612c167971c92bdf700ca35dada14839aea814eae9c0b4076af7d12"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x418}}, {0xbe, &(0x7f0000000280)=@string={0xbe, 0x3, "997485952770cb341862a98ad174f9e24e24539d7a2db2b983e31b803972359aab02b177578800fdb007bb06e161371dac16e3d1d2995d77ca98e39fd921bdf2a9941e6bef16eaf58c85b2c47c02c797929c849c5017d66851a51a93ae26abe2ea7e5b7d3f668ef3ec9b26e899c1d0c35d835591ebfa502126acd5f7b2c3341eb400c4dd112daf5f6ed1c3da0f0013fe24cbfba05303405a74c2010f0ab1e119775d24a9ae68d0fb492d2a41ee7fcef309e80c7a4700565b7acf82ab"}}, {0x32, &(0x7f0000000380)=@string={0x32, 0x3, "c1de5730d5d67bf2f47b11e18510d532f46346711d42e6e09a2eef0308dd4fa762f55106ede5565d67b41a91a433d279"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0xec, &(0x7f0000000400)=@string={0xec, 0x3, "ca0e2ce9933abfda9b1690f52c04ef4ca37fa8e1b9effbe8f98976c7feeef2d1509b9f8597658247d812901039a7113d8a5daa3b1d772cfe9b3b9629c9611bf464b15cc3ecdd2e0a3c56c611fefe6cc2c7eda54a1caed6f81c58a1abe8140d0f1c410a382d3ce4fd746037ea2ac2372225f81258ba19c063e274613e0a19617448c5938b5c0b4008b7e5d0fae2c00d035ff0c6cd195300c3b6298a5f9f3ceb0ec1b8001b8ab32611e7c250f0d96e23ac5aaf60020fd47cf84e99bd6cc46208cdcdc912a90637ef78013a1f8676004582aa2119799587a0759139084e43db18411375492f8e2643449618"}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "73200cb806e73eed3abe01186b3a84b466a3c5f51c6ea5a206f366d9732de752a6b6742bc405c8da2cdac59a70de4cb6a3f37b350bec1e752284750e162af1bed3b8f5a78f94380b6f9f024c2e464b6979d5a7ef68331e4161d8764f1ac3b4e369a300bd9d399b5b41caf75da3a1cd927f472deb3fbea243fe68e7"}}, {0x48, &(0x7f0000000580)=@string={0x48, 0x3, "de831524595d80d95e2b271abbce464371955a93bd5b6b9017ebe3711145c52043d580e340a140dc12a1145c9a93c560e6241ce36f6238bef0daa11f17e551016710894f92b7"}}]}) 5m2.851361549s ago: executing program 8 (id=556): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m2.811495734s ago: executing program 8 (id=557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x3, 0x37, {0x37, 0x3, "bbff56340bcba51358c13180f6bfded158a916e0e4a59817d6c51f8e7fd345703389e0bf8a8a4b9861cb5d988e83e2277170dc58aa"}}, &(0x7f0000000080)={0x0, 0x3, 0x71, @string={0x71, 0x3, "c49dc989586ecc60dbb891a734942f23c85ef4deb8ec116ab25d5c6fa0a4311768935f15a8e8c4f45efcd26e950a49b6244e6334e4cf27e2caf07ea9b0677253206f0b3155989f389aeb204e03b64c7982825f31b2debbe1e63d3ca23ea6a9463426f501b724ad0dfd65cb8f69d345"}}, &(0x7f0000000180)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xeb, 0x1, 0x50, 0xf00, 0x1, [0xc030]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0xf8, 0x4, "bf225c89", "07f6eb44"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x19, 0x4, 0xff, 0x8, 0xb, 0x1, 0xe}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x6c, "7f3eedf0abc513f11d09bb0d1644fe83a104603f537a6781bf934c0129ee4db6431d3a2a7e1a622a782002af840630235d3cccad9ae11ef4ebc31fc18897704683ece4fc51988fe869919eefb12dfa8b09561a820a0d838b298e81590c07cc6382b9ce49ebf02da385f9f5b6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x7b}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0e4a"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, ' :'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x10}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, 0x0) 4m59.545930039s ago: executing program 8 (id=570): syz_emit_ethernet(0x6f, &(0x7f0000000180)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000004", 0x39, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xf6, {0x8, 0x6, "8fc8e1", 0xb2, 0xeb7a632068c6b7c5, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], "4c5d21c04f21204400"}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xe) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) shutdown(r0, 0x1) 4m57.40187792s ago: executing program 8 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) read$msr(r0, &(0x7f00000004c0)=""/102392, 0x18ff8) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, 0x0) getpid() ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r5, &(0x7f000001b1c0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f000001a7c0)=[{&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f00000194c0)=""/114, 0x72}, {&(0x7f0000019540)=""/4096, 0x1000}, {&(0x7f000001a540)=""/239, 0xef}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f000001a640)=""/124, 0x7c}, {&(0x7f000001a6c0)=""/231, 0xe7}], 0x9}, 0x3}, {{&(0x7f000001a880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f000001a900)=""/77, 0x4d}, {&(0x7f000001a980)=""/184, 0xb8}, {&(0x7f000001aa40)=""/104, 0x68}, {&(0x7f000001aac0)=""/74, 0x4a}], 0x4, &(0x7f000001ab40)=""/240, 0xf0}, 0x9}, {{0x0, 0x0, &(0x7f000001af00)=[{&(0x7f000001ac40)=""/141, 0x8d}, {&(0x7f000001ad00)=""/89, 0x59}, {&(0x7f0000000280)}, {&(0x7f000001ad80)=""/221, 0xdd}, {&(0x7f000001ae80)=""/67, 0x43}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f000001af80)=""/190, 0xbe}, {&(0x7f000001b040)=""/207, 0xcf}, {&(0x7f000001b140)=""/91, 0x5b}], 0x3}, 0x7}], 0x4, 0x20, &(0x7f000001b2c0)) ioctl$KDSIGACCEPT(r4, 0x5607, 0x10) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) 4m55.204483568s ago: executing program 8 (id=586): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0xf2) 4m54.59125426s ago: executing program 8 (id=592): close(0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m54.20061248s ago: executing program 37 (id=592): close(0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m46.659186391s ago: executing program 6 (id=617): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) fsopen(&(0x7f0000000340)='hfs\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) listen(0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000000)=0x800, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) 4m46.117994565s ago: executing program 6 (id=618): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40c00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x2000000, {0x3ff, 0x1, 0x201b, 0x7, 0x5, 0x1, 0x2}}) 4m46.024860049s ago: executing program 6 (id=620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xe, 0xa, 0xbb9b}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x30) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x42}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000380)={0x48}) close(r6) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) io_setup(0x1, &(0x7f0000000040)) 4m44.672046724s ago: executing program 6 (id=622): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='s\x01\x04\x10\x00%', &(0x7f0000000100)='\x12\xf3', 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) r2 = semget$private(0x0, 0x3, 0x3c1) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000002c80)=""/170) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x3, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = io_uring_setup(0x74e9, &(0x7f00000002c0)={0x0, 0xedd3, 0x800, 0x3, 0x21e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000002c40)=[{0x0, 0x0, 0x0, &(0x7f0000001740), &(0x7f00000017c0)=[0x24, 0x0, 0x5, 0x7fff]}, {0x6, 0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001800)=""/19, 0x13}, {&(0x7f0000001840)=""/183, 0xb7}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/140, 0x8c}, {&(0x7f00000029c0)=""/234, 0xea}, {&(0x7f0000002ac0)=""/184, 0xb8}], &(0x7f0000002c00)=[0xffffffffffffffff, 0x0, 0x3]}], 0x2) 4m44.230330352s ago: executing program 6 (id=625): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x800) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x8, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m41.639082732s ago: executing program 6 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000005f40), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) recvmmsg(r6, &(0x7f0000009840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/166, 0xa6}], 0x2}, 0xfffffff2}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000007200)=@can, 0x80, 0x0}, 0xffffffc0}], 0x3, 0x40, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)="711fc0e3579edf91501b5773dfbc", 0xe}, 0x1, 0x0, 0x0, 0x80}, 0x24000840) recvmmsg(r4, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 4m41.199871272s ago: executing program 38 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000005f40), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) recvmmsg(r6, &(0x7f0000009840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/166, 0xa6}], 0x2}, 0xfffffff2}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000007200)=@can, 0x80, 0x0}, 0xffffffc0}], 0x3, 0x40, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)="711fc0e3579edf91501b5773dfbc", 0xe}, 0x1, 0x0, 0x0, 0x80}, 0x24000840) recvmmsg(r4, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 1m52.550709313s ago: executing program 3 (id=1212): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioprio_get$uid(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x7dea, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0xdc}, &(0x7f0000000140), &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)=ANY=[], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14) r4 = socket(0x200000000000011, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, 0x0, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="010000000000000000000000000000000000000089075d1c8acf6d13e26af22d9486a18abd7d400aa3c7150736486b6e04aa508f594605e197", @ANYRES32=r3, @ANYRES32, @ANYBLOB="010000000100"/20], 0x50) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setrlimit(0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000980)) close(0xffffffffffffffff) syz_usb_ep_write(r0, 0x8d, 0x73, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb") 1m50.096529114s ago: executing program 7 (id=1224): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x80080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRES8=r7, @ANYRESHEX=r7, @ANYRES32=r10], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0xffffffff, 0x9, 0x1, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r8, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) write$proc_mixer(r1, &(0x7f00000006c0)=[{'DIGITAL3', @val={' \'', 'Master Playback Volume'}}, {'SYNTH', @void}, {'PHONEIN', @val={' \'', 'Master Playback Switch'}}, {'LINE2', @val={' \'', 'Capture Switch'}}, {'SPEAKER', @val={' \'', 'Master'}}, {'LINE2', @void}, {'SYNTH', @val={' \'', 'Line Capture'}}, {'MONITOR', @val={' \'', 'CD'}}], 0x117) 1m49.791500634s ago: executing program 3 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000380), 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000072c0)={0x3, @capture={0x0, 0x0, {0x10001, 0x6}}}) 1m49.507283845s ago: executing program 3 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) dup(r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000040), &(0x7f0000000080), 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x62ff, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) lstat(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000540)) 1m48.97709505s ago: executing program 3 (id=1230): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b0001000000000904"], 0x0) 1m48.654943682s ago: executing program 7 (id=1231): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b0001000000000904"], 0x0) 1m46.026033343s ago: executing program 9 (id=1233): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f0000000640)={0x88000100, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000003c0)=0x0, {0x2b}, &(0x7f0000000400)=""/251, 0xfb, &(0x7f0000000500)=""/209, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) get_robust_list(r0, &(0x7f00000007c0)=&(0x7f0000000780)={&(0x7f0000000700)={&(0x7f00000006c0)}, 0x0, &(0x7f0000000740)}, &(0x7f0000000800)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1a, 0x2, 0xfffffffd) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="6110000000000000"], 0x20}}, 0x400c004) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 1m44.662356556s ago: executing program 5 (id=1234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001880)="580004c60e49a2c787bb35192433deee5b30da6e7c36e8385b7e3d0988cf2e4cb628610e1f475d2c309b36a9e0c34d78da306ef449632f91d1c133a1c9e99b384157a18316fcf25dc8ab50fb71573db4d079dd04d227cfe5228b1433d3fba90654b7e08622ad79ada62602e7147d133be618a663f3607c755087796bdde2b8b221344465aca08aeaa8959c6bd131be176da1737faa", 0x95}], 0x1}}], 0x2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) 1m44.633658267s ago: executing program 3 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x3fb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x10000000000000, 0x7f03) 1m43.32526813s ago: executing program 9 (id=1237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xe, 0xa, 0xbb9b}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x30) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x42}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) close(r6) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) io_setup(0x1, &(0x7f0000000040)) 1m42.38545277s ago: executing program 3 (id=1238): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001280)={0x5, 0x7f, {0xffffffffffffffff}, {0xee00}, 0x8, 0x6}) r3 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000012c0)={0xfffffffc, 0x10, {0x0}, {0xee01}, 0x18, 0x4}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_clone3(&(0x7f0000001340)={0x220400, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180), {0xf}, &(0x7f00000011c0)=""/64, 0x40, &(0x7f0000001200)=""/71, &(0x7f0000001300)=[r1, r2, r3, r4, r5, r6], 0x6}, 0x58) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000080)={0xb, {"a2e3ad21ed0d09f91b4d090987f70906f038e7ff7fc6e5539b0d3d0e8b089b3f310768060890e0878f0e70d4e8cd9b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b4d31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b4124351eb000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa478ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b477941554ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535e0dcb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d789d6c4b2d8dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a290744da7afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59767bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a6033bba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f465a034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624080043a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e50bee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff7f000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) landlock_create_ruleset(&(0x7f00000010c0)={0x411, 0x1, 0x1}, 0x18, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = fanotify_init(0xf00, 0x0) fanotify_mark(r11, 0x71, 0x10000002, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12050000297ffb4071180603d21a0000000109022b00010002000009040b40000e01000f082402010303650209240202f9ff0300460824020108020505"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0}}, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0xf487, 0x800, 0x0, 0x1d}) r13 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r13, &(0x7f0000000080), 0xc) read(r13, &(0x7f0000000180)=""/52, 0x34) ioctl$sock_qrtr_SIOCGIFADDR(r13, 0x8915, &(0x7f0000000000)={'bond0\x00'}) close_range(r12, 0xffffffffffffffff, 0x0) 1m42.117494781s ago: executing program 7 (id=1239): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f00000002c0)) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x173, "c3e600000000000099ebff00", 0x4, 0x800, 0x101, 0x6, 0x1, 0x3, 0x1, 0x4}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000440)) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000280)={0x0, 0x7, 0x9306, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x990afa, 0x4, '\x00', @p_u32=&(0x7f0000000200)=0x7}}) 1m38.574567319s ago: executing program 5 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x3fb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) (fail_nth: 7) 1m36.735747165s ago: executing program 7 (id=1242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xe, 0xa, 0xbb9b}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x30) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x42}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000380)={0x48}) close(r6) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5"]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) io_setup(0x1, &(0x7f0000000040)) 1m34.548813665s ago: executing program 5 (id=1243): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r4, 0x4420}], 0x1, 0x0, &(0x7f0000000280)={[0x9b9]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m34.482540343s ago: executing program 9 (id=1245): ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0)={0x0, 0x4}) close(0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) lsm_set_self_attr(0x0, 0x0, 0x0, 0x1f) sendto$inet6(r3, &(0x7f0000000040), 0xfffffe0f, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e27, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) 1m29.500261881s ago: executing program 5 (id=1246): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f0000000640)={0x88000100, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000003c0)=0x0, {0x2b}, &(0x7f0000000400)=""/251, 0xfb, &(0x7f0000000500)=""/209, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) get_robust_list(r0, &(0x7f00000007c0)=&(0x7f0000000780)={&(0x7f0000000700)={&(0x7f00000006c0)}, 0x0, &(0x7f0000000740)}, &(0x7f0000000800)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1a, 0x2, 0xfffffffd) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x2]}}) 1m29.499845778s ago: executing program 9 (id=1247): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f0000000640)={0x88000100, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000003c0)=0x0, {0x2b}, &(0x7f0000000400)=""/251, 0xfb, &(0x7f0000000500)=""/209, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) get_robust_list(r0, &(0x7f00000007c0)=&(0x7f0000000780)={&(0x7f0000000700)={&(0x7f00000006c0)}, 0x0, &(0x7f0000000740)}, &(0x7f0000000800)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1a, 0x2, 0xfffffffd) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="6110000000000000"], 0x20}}, 0x400c004) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 1m28.54855388s ago: executing program 4 (id=1249): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m26.557310428s ago: executing program 39 (id=1238): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001280)={0x5, 0x7f, {0xffffffffffffffff}, {0xee00}, 0x8, 0x6}) r3 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000012c0)={0xfffffffc, 0x10, {0x0}, {0xee01}, 0x18, 0x4}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_clone3(&(0x7f0000001340)={0x220400, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180), {0xf}, &(0x7f00000011c0)=""/64, 0x40, &(0x7f0000001200)=""/71, &(0x7f0000001300)=[r1, r2, r3, r4, r5, r6], 0x6}, 0x58) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff7f000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) landlock_create_ruleset(&(0x7f00000010c0)={0x411, 0x1, 0x1}, 0x18, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = fanotify_init(0xf00, 0x0) fanotify_mark(r11, 0x71, 0x10000002, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12050000297ffb4071180603d21a0000000109022b00010002000009040b40000e01000f082402010303650209240202f9ff0300460824020108020505"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0}}, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0xf487, 0x800, 0x0, 0x1d}) r13 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r13, &(0x7f0000000080), 0xc) read(r13, &(0x7f0000000180)=""/52, 0x34) ioctl$sock_qrtr_SIOCGIFADDR(r13, 0x8915, &(0x7f0000000000)={'bond0\x00'}) close_range(r12, 0xffffffffffffffff, 0x0) 1m25.380352081s ago: executing program 4 (id=1251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001880)="580004c60e49a2c787bb35192433deee5b30da6e7c36e8385b7e3d0988cf2e4cb628610e1f475d2c309b36a9e0c34d78da306ef449632f91d1c133a1c9e99b384157a18316fcf25dc8ab50fb71573db4d079dd04d227cfe5228b1433d3fba90654b7e08622ad79ada62602e7147d133be618a663f3607c755087796bdde2b8b221344465aca08aeaa8959c6bd131be176da1737faa", 0x95}], 0x1}}], 0x2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) 1m24.416847862s ago: executing program 5 (id=1252): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f00000002c0)) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x173, "c3e600000000000099ebff00", 0x4, 0x800, 0x101, 0x6, 0x1, 0x3, 0x1, 0x4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000280)={0x0, 0x7, 0x9306, r2, 0x0, &(0x7f0000000240)={0x990afa, 0x4, '\x00', @p_u32=&(0x7f0000000200)=0x7}}) 1m24.40706778s ago: executing program 9 (id=1253): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.047175625s ago: executing program 9 (id=1254): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x48}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x9, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x4000) 1m23.958059369s ago: executing program 4 (id=1255): syz_clone(0x644c7080, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0) 1m23.569056817s ago: executing program 7 (id=1256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) sync() 1m23.101805777s ago: executing program 4 (id=1257): ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0)={0x0, 0x4}) close(0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) lsm_set_self_attr(0x0, 0x0, 0x0, 0x1f) sendto$inet6(r3, &(0x7f0000000040), 0xfffffe0f, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e27, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) 1m21.114979867s ago: executing program 4 (id=1258): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, 0x0, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) 1m21.112328754s ago: executing program 7 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c001}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8e}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8e}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', '', [], 0xa, "97c425e0cf688ec5126cbf68e121b23326411f64ab7cc7711278b9ca1db9"}, 0x22) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d9dbead39108506518989861e74b8929e3049b64a03e47fa9dcb256315a7a57f8e38f59e37e1feaa848eebd741d851cd61bb4330c4d5b25ed1338d81f9f657c7e35f497ca38d76730a3f1cbfb983ad7a248067be705f625f226ed4b952f9ab8c2a5191e58173810d0932220928246f6932c50c726d87128d305ad9d7249b13150fc598", 0x83}], 0x1, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r1, r0, r6, r3, r0, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r3]}}, @rights={{0x20, 0x1, 0x1, [r5, r0, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r5, r6, r3, r1, r3]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}], 0x150, 0x24000000}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)="dc1fe7ed8da105a7a4eefe24275fcdaa98073415afe626d35a16fe5c66f0e731976e9bd00114cd6ad5e06dd9a6797a275fff6565a925e2de06dfb4369ce701affae6d256d4d17b35bdd0264e9ba1e1d4e622ec8aa3a86234908a542bdd67b3d32080cc3eaf6b9949", 0x68}, {&(0x7f0000000740)="45b4bb6e97535525bdd12b0637ff3095a5c5f5a2360f9885781ce952edd3af26fd62e08752764047cc1f987515d5cedc195f812714f3c72bb6d3d597af", 0x3d}], 0x2, &(0x7f00000008c0)=ANY=[], 0x70}}, {{&(0x7f0000000940)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="83ac0a71c8775be6043d36226f670f64ec9d11094a10a9ce9f14ee930301a7f8384717206ee3361329fe09ee85ba2a72af07830a041921d83d2743dd9fabcb74805db1954d5307c47eb864f2e22f96ee306155c31233bdb30ef8960561cbf98c92aabcdfd2aab1d018c3175b5ca975e10c9b0adb3958721eba6c253e319b37b77d16be8d42106b69d15695417e6d43041ea6c46cf283ea29c0bd587314a9b6b8e7f13a930d784bff559343f3bc37ae442c4fa18dc252a3ec24e49d2bf100f5e78e4516fb6cb3bb30838f3aee7c90984d98131d8e59312bc1e08941c1bf141195e32d3ff6fd4fdc5876b44f4b2a320f7e2de066c54608", 0xf6}, {&(0x7f0000000ac0)="a1fb31f7dc5b3fc455f13a4b688532d28fc4a629205f0de1a2d8575466473c558acdeffde427300771a84f14b9caa1898dd653fce0218ee5c6e8", 0x3a}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000000010000001c000000000700000100fb3b0b2d0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x4000}}], 0x3, 0xbb5b8ca2ca402424) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x9c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r6}, 0x14) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r6}, 0x14) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14e15, 0x28812}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x44}}, 0x20040840) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1m21.002856625s ago: executing program 5 (id=1260): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m18.293854409s ago: executing program 4 (id=1261): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xfe, "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"}, &(0x7f0000000040)=0x106) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x12, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000780)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r4, r5, 0x3, 0x0, 0xffffffff, 0x806, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x3, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 0s ago: executing program 40 (id=1254): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x48}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x9, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x4000) kernel console output (not intermixed with test programs): 585] ? __pfx_tcf_action_init+0x10/0x10 [ 388.604131][T11585] ? is_bpf_text_address+0x94/0x1a0 [ 388.604151][T11585] ? kernel_text_address+0x8d/0x100 [ 388.604192][T11585] ? __lock_acquire+0x5b6/0x1b80 [ 388.604212][T11585] tcf_action_add+0xfd/0x5d0 [ 388.604233][T11585] ? __pfx_tcf_action_add+0x10/0x10 [ 388.604253][T11585] ? find_held_lock+0x2b/0x80 [ 388.604299][T11585] ? __nla_parse+0x40/0x60 [ 388.604321][T11585] tc_ctl_action+0x35d/0x470 [ 388.604341][T11585] ? __pfx_tc_ctl_action+0x10/0x10 [ 388.604367][T11585] ? __pfx_tc_ctl_action+0x10/0x10 [ 388.604387][T11585] rtnetlink_rcv_msg+0x3c7/0xea0 [ 388.604416][T11585] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.604448][T11585] netlink_rcv_skb+0x16b/0x440 [ 388.604473][T11585] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.604499][T11585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.604533][T11585] ? netlink_deliver_tap+0x1ae/0xd30 [ 388.604559][T11585] netlink_unicast+0x53c/0x7f0 [ 388.604585][T11585] ? __pfx_netlink_unicast+0x10/0x10 [ 388.604615][T11585] netlink_sendmsg+0x8cb/0xd70 [ 388.604648][T11585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.604671][T11585] ? __import_iovec+0x1cd/0x660 [ 388.604696][T11585] ____sys_sendmsg+0xa87/0xc70 [ 388.604717][T11585] ? copy_msghdr_from_user+0x10b/0x160 [ 388.604746][T11585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.604770][T11585] ? rcu_is_watching+0x12/0xc0 [ 388.604793][T11585] ? irqentry_exit+0x3b/0x90 [ 388.604821][T11585] ___sys_sendmsg+0x135/0x1e0 [ 388.604848][T11585] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.604872][T11585] ? __lock_acquire+0x5b6/0x1b80 [ 388.604906][T11585] ? __fget_files+0x20e/0x3b0 [ 388.604932][T11585] __sys_sendmsg+0x16e/0x220 [ 388.604949][T11585] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.604970][T11585] ? __might_fault+0xe3/0x190 [ 388.604997][T11585] ? rcu_is_watching+0x12/0xc0 [ 388.605021][T11585] do_syscall_64+0xcd/0x250 [ 388.605039][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.605062][T11585] RIP: 0033:0x7f2730f8d169 [ 388.605075][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.605092][T11585] RSP: 002b:00007f2731e74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.605108][T11585] RAX: ffffffffffffffda RBX: 00007f27311a6080 RCX: 00007f2730f8d169 [ 388.605119][T11585] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 388.605130][T11585] RBP: 00007f2731e74090 R08: 0000000000000000 R09: 0000000000000000 [ 388.605140][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.605149][T11585] R13: 0000000000000000 R14: 00007f27311a6080 R15: 00007ffdc2765688 [ 388.605168][T11585] [ 388.605230][ T5914] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 388.699455][T11588] SQUASHFS error: Failed to read block 0x0: -5 [ 388.706466][ T30] audit: type=1400 audit(1742917369.464:2581): avc: denied { open } for pid=11579 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.755273][T11588] unable to read squashfs_super_block [ 388.802822][ T30] audit: type=1400 audit(1742917369.464:2582): avc: denied { getattr } for pid=11579 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.064456][ T30] audit: type=1400 audit(1742917369.464:2583): avc: denied { getattr } for pid=11579 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 389.109340][ T30] audit: type=1400 audit(1742917369.474:2584): avc: denied { read write } for pid=11570 comm="syz.3.1092" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.634926][ T30] audit: type=1400 audit(1742917369.474:2585): avc: denied { open } for pid=11570 comm="syz.3.1092" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.701626][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 389.719593][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.733818][ T30] audit: type=1400 audit(1742917369.474:2586): avc: denied { ioctl } for pid=11570 comm="syz.3.1092" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.770666][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.810921][ T5914] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 389.832500][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.861971][ T5914] usb 4-1: Product: syz [ 389.872013][ T5914] usb 4-1: Manufacturer: syz [ 389.882118][ T5914] usb 4-1: SerialNumber: syz [ 389.897414][ T5914] usb 4-1: config 0 descriptor?? [ 389.913427][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub [ 389.922602][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5 [ 390.029210][ T5914] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.100502][T11625] mkiss: ax0: crc mode is auto. [ 390.125308][ T36] usb 4-1: Failed to submit usb control message: -71 [ 390.125574][T11570] [U] è [ 390.196476][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 390.243288][ T5914] usb 4-1: USB disconnect, device number 17 [ 390.312416][ T36] usb 4-1: unable to get target info from device [ 390.337315][ T36] usb 4-1: could not get target info (-71) [ 390.361315][ T36] usb 4-1: could not probe fw (-71) [ 391.104695][T11664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'. [ 391.705672][T11665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.726045][T11665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.857407][T11661] overlayfs: failed to resolve './file1': -2 [ 391.891701][T11642] Invalid ELF header magic: != ELF [ 392.357857][T11672] random: crng reseeded on system resumption [ 392.520791][T11679] 9pnet: Could not find request transport: tÌl“cp [ 392.971792][T11705] input: syz1 as /devices/virtual/input/input40 [ 393.616571][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.653954][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.193822][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 394.193839][ T30] audit: type=1400 audit(1742917375.364:2676): avc: denied { create } for pid=11729 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 394.264001][ T30] audit: type=1400 audit(1742917375.404:2677): avc: denied { getopt } for pid=11729 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 394.354370][ T30] audit: type=1400 audit(1742917375.404:2678): avc: denied { read } for pid=11729 comm="syz.4.1117" path="socket:[30930]" dev="sockfs" ino=30930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 394.592827][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 395.379579][ T30] audit: type=1400 audit(1742917376.504:2679): avc: denied { create } for pid=11745 comm="syz.7.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 395.594436][T11737] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 395.606837][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 395.608880][ T30] audit: type=1400 audit(1742917376.764:2680): avc: denied { setopt } for pid=11735 comm="syz.5.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.759478][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 395.899650][ T30] audit: type=1400 audit(1742917376.844:2681): avc: denied { create } for pid=11756 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.944217][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 396.019528][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.072586][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.102924][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 396.155456][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 396.216285][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 396.230009][ T30] audit: type=1400 audit(1742917377.404:2682): avc: denied { create } for pid=11769 comm="syz.5.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.239034][T11773] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 396.428460][T11773] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1125'. [ 396.507456][ T30] audit: type=1400 audit(1742917377.404:2683): avc: denied { connect } for pid=11769 comm="syz.5.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.692424][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.720269][ T30] audit: type=1400 audit(1742917377.404:2684): avc: denied { ioctl } for pid=11769 comm="syz.5.1125" path="socket:[31899]" dev="sockfs" ino=31899 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.745939][ T5869] usb 4-1: config 0 descriptor?? [ 396.755644][T11748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 396.839358][ T30] audit: type=1400 audit(1742917377.874:2685): avc: denied { write } for pid=11769 comm="syz.5.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 397.032493][T11788] syz.9.1129: attempt to access beyond end of device [ 397.032493][T11788] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 397.093636][T11788] SQUASHFS error: Failed to read block 0x0: -5 [ 397.137182][T11788] unable to read squashfs_super_block [ 397.565609][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 397.572906][ T5832] Bluetooth: hci3: unexpected event 0x07 length: 6 < 255 [ 397.580259][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 397.587082][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 397.594125][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 397.601316][ T5832] Bluetooth: hci3: unexpected event 0x09 length: 0 < 3 [ 397.608219][ T5832] Bluetooth: hci3: unexpected event 0x02 length: 0 < 1 [ 397.790607][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 397.791919][ T5869] usb 4-1: USB disconnect, device number 18 [ 397.871180][T11808] netlink: 'syz.5.1131': attribute type 10 has an invalid length. [ 397.879018][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1131'. [ 397.910302][T11808] CUSE: unknown device info "ÿ" [ 397.915303][T11808] CUSE: zero length info key specified [ 398.172853][T11818] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 398.440411][T11822] FAULT_INJECTION: forcing a failure. [ 398.440411][T11822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.454703][T11822] CPU: 1 UID: 0 PID: 11822 Comm: syz.5.1135 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 398.454726][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.454736][T11822] Call Trace: [ 398.454742][T11822] [ 398.454748][T11822] dump_stack_lvl+0x16c/0x1f0 [ 398.454778][T11822] should_fail_ex+0x50a/0x650 [ 398.454808][T11822] _copy_to_user+0x32/0xd0 [ 398.454827][T11822] simple_read_from_buffer+0xe0/0x170 [ 398.454850][T11822] proc_fail_nth_read+0x198/0x270 [ 398.454872][T11822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.454893][T11822] ? rw_verify_area+0xcf/0x680 [ 398.454911][T11822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.454931][T11822] vfs_read+0x1df/0xbf0 [ 398.454953][T11822] ? __pfx___mutex_lock+0x10/0x10 [ 398.454969][T11822] ? __pfx_vfs_read+0x10/0x10 [ 398.454994][T11822] ? __fget_files+0x20e/0x3b0 [ 398.455020][T11822] ksys_read+0x12b/0x250 [ 398.455040][T11822] ? __pfx_ksys_read+0x10/0x10 [ 398.455059][T11822] ? __might_fault+0xe3/0x190 [ 398.455086][T11822] ? rcu_is_watching+0x12/0xc0 [ 398.455111][T11822] do_syscall_64+0xcd/0x250 [ 398.455128][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.455150][T11822] RIP: 0033:0x7f2730f8bb7c [ 398.455163][T11822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.455179][T11822] RSP: 002b:00007f2731e95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.455196][T11822] RAX: ffffffffffffffda RBX: 00007f27311a5fa0 RCX: 00007f2730f8bb7c [ 398.455207][T11822] RDX: 000000000000000f RSI: 00007f2731e950a0 RDI: 0000000000000004 [ 398.455217][T11822] RBP: 00007f2731e95090 R08: 0000000000000000 R09: 0000000000000000 [ 398.455227][T11822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.455237][T11822] R13: 0000000000000000 R14: 00007f27311a5fa0 R15: 00007ffdc2765688 [ 398.455257][T11822] [ 399.265802][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 399.265820][ T30] audit: type=1400 audit(1742917380.434:2692): avc: denied { unlink } for pid=11841 comm="syz.4.1141" name="#74" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.833701][ T30] audit: type=1400 audit(1742917380.504:2693): avc: denied { mount } for pid=11841 comm="syz.4.1141" name="/" dev="overlay" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 400.210500][ T30] audit: type=1400 audit(1742917381.374:2694): avc: denied { unmount } for pid=8922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 400.281354][ T30] audit: type=1400 audit(1742917381.434:2695): avc: denied { write } for pid=11848 comm="syz.7.1142" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 400.319023][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 400.459942][ T30] audit: type=1400 audit(1742917381.454:2696): avc: denied { create } for pid=11853 comm="syz.3.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.644526][T11869] mkiss: ax0: crc mode is auto. [ 401.100705][ T5903] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 401.262957][ T30] audit: type=1400 audit(1742917382.424:2697): avc: denied { setopt } for pid=11830 comm="syz.9.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.320577][ T5903] usb 4-1: config 129 has an invalid interface number: 88 but max is 0 [ 401.328878][ T5903] usb 4-1: config 129 has no interface number 0 [ 401.355367][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1146'. [ 401.361187][ T5903] usb 4-1: config 129 interface 88 has no altsetting 0 [ 401.376692][ T5903] usb 4-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f [ 401.399678][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.471391][ T30] audit: type=1400 audit(1742917382.644:2698): avc: denied { setopt } for pid=11886 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.709646][ T30] audit: type=1400 audit(1742917382.644:2699): avc: denied { bind } for pid=11886 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.720746][T11887] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 401.734410][ T30] audit: type=1400 audit(1742917382.644:2700): avc: denied { name_bind } for pid=11886 comm="syz.4.1148" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 401.772424][ T5903] usb 4-1: string descriptor 0 read error: -71 [ 401.830021][ T5903] usb 4-1: NDI device with a latency value of 1 [ 401.850483][ T5903] ftdi_sio 4-1:129.88: FTDI USB Serial Device converter detected [ 401.871942][ T30] audit: type=1400 audit(1742917382.644:2701): avc: denied { node_bind } for pid=11886 comm="syz.4.1148" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 401.899083][ T5903] ftdi_sio ttyUSB0: unknown device type: 0x357f [ 401.918614][ T5903] usb 4-1: USB disconnect, device number 19 [ 401.939095][T11887] syz.4.1148 (11887) used greatest stack depth: 21032 bytes left [ 401.948721][ T5903] ftdi_sio 4-1:129.88: device disconnected [ 402.355579][T11903] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1152'. [ 402.619478][ T5903] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 402.651952][ T9002] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 402.810725][ T5903] usb 10-1: device descriptor read/64, error -71 [ 402.903165][ T9002] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.987621][ T9002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.089461][ T5903] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 403.117623][ T9002] usb 8-1: config 0 descriptor?? [ 403.216596][ T9002] cp210x 8-1:0.0: cp210x converter detected [ 403.321509][ T5903] usb 10-1: device descriptor read/64, error -71 [ 403.442897][ T5903] usb usb10-port1: attempt power cycle [ 403.499930][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 403.776678][ T9002] usb 8-1: cp210x converter now attached to ttyUSB0 [ 403.851284][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 403.864835][ T5869] usb 8-1: USB disconnect, device number 17 [ 403.872585][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 403.888058][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.909992][ T24] usb 5-1: config 0 descriptor?? [ 403.933529][ T24] cytherm 5-1:0.0: Cypress thermometer device now attached [ 404.022175][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.032539][ T5869] cp210x 8-1:0.0: device disconnected [ 404.060202][ T5903] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 404.090468][ T5903] usb 10-1: device descriptor read/8, error -71 [ 404.360256][ T5903] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 404.497414][ T24] usb 5-1: USB disconnect, device number 14 [ 404.533695][ T5903] usb 10-1: device descriptor read/8, error -71 [ 404.541029][ T24] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 404.651635][ T5903] usb usb10-port1: unable to enumerate USB device [ 404.899666][ T5869] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 405.149499][ T5869] usb 8-1: Using ep0 maxpacket: 8 [ 405.192578][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 405.288087][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.344520][ T5869] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.393605][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 405.416334][ T5869] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 405.444133][ T5869] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 405.454465][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.465362][ T5869] usb 8-1: config 0 descriptor?? [ 405.472802][T11951] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 405.528740][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 405.528756][ T30] audit: type=1400 audit(1742917386.694:2723): avc: denied { create } for pid=11972 comm="syz.5.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.564976][T11973] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.582643][ T30] audit: type=1400 audit(1742917386.734:2724): avc: denied { write } for pid=11972 comm="syz.5.1168" path="socket:[32219]" dev="sockfs" ino=32219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.607733][ T30] audit: type=1400 audit(1742917386.754:2725): avc: denied { read } for pid=11972 comm="syz.5.1168" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 405.635035][ T30] audit: type=1400 audit(1742917386.754:2726): avc: denied { open } for pid=11972 comm="syz.5.1168" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 405.661196][ T5899] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 405.691869][ T30] audit: type=1400 audit(1742917386.854:2727): avc: denied { write } for pid=11972 comm="syz.5.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 405.712541][ T30] audit: type=1400 audit(1742917386.854:2728): avc: denied { ioctl } for pid=11972 comm="syz.5.1168" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 405.748604][ T30] audit: type=1400 audit(1742917386.854:2729): avc: denied { mount } for pid=11972 comm="syz.5.1168" name="/" dev="pstore" ino=3468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 405.829438][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 405.867535][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.889120][ T30] audit: type=1400 audit(1742917387.024:2730): avc: denied { unmount } for pid=6805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 405.922247][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.955385][ T5899] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 405.993226][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.994193][ T30] audit: type=1400 audit(1742917387.164:2731): avc: denied { read } for pid=11978 comm="syz.3.1171" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 406.027945][ T5899] usb 5-1: Product: syz [ 406.041503][ T5899] usb 5-1: Manufacturer: syz [ 406.058481][ T5899] usb 5-1: SerialNumber: syz [ 406.087380][ T30] audit: type=1400 audit(1742917387.164:2732): avc: denied { open } for pid=11978 comm="syz.3.1171" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 406.100062][ T5899] usb 5-1: config 0 descriptor?? [ 406.126181][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 406.134635][ T5832] Bluetooth: hci3: unexpected event 0x07 length: 6 < 255 [ 406.142182][ T5832] Bluetooth: hci3: unexpected event 0x02 length: 0 < 1 [ 406.150158][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 406.156996][ T5832] Bluetooth: hci3: unexpected event 0x05 length: 0 < 4 [ 406.164966][ T5832] Bluetooth: hci3: unexpected event 0x01 length: 0 < 1 [ 406.171996][ T5832] Bluetooth: hci3: unexpected event 0x07 length: 0 < 255 [ 406.179500][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 406.186325][ T5832] Bluetooth: hci3: unexpected event 0x09 length: 0 < 3 [ 406.193514][ T5832] Bluetooth: hci3: unexpected event 0x02 length: 0 < 1 [ 406.360455][ T9002] usb 8-1: USB disconnect, device number 18 [ 406.367737][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 406.445294][ T5867] usb 5-1: USB disconnect, device number 15 [ 406.690641][T11996] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 407.934926][T12021] overlayfs: failed to resolve './file0': -2 [ 408.195171][T12033] vlan2: entered allmulticast mode [ 408.611849][ T5867] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 408.871522][T12028] sp0: Synchronizing with TNC [ 409.006342][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.018222][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.038657][ T5867] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 409.071450][ T5867] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 409.081281][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.097867][ T5867] usb 5-1: Product: syz [ 409.106764][ T5867] usb 5-1: Manufacturer: syz [ 409.114710][ T5867] usb 5-1: SerialNumber: syz [ 409.139488][ T5899] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 409.321883][ T5899] usb 10-1: Using ep0 maxpacket: 16 [ 409.357660][ T5899] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.370580][ T5867] usb 5-1: selecting invalid altsetting 1 [ 409.378161][ T5899] usb 10-1: config 0 interface 0 has no altsetting 0 [ 409.396758][ T5899] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 409.418840][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.446458][ T5899] usb 10-1: Product: syz [ 409.469445][ T5899] usb 10-1: Manufacturer: syz [ 409.474291][ T5899] usb 10-1: SerialNumber: syz [ 409.481001][ T5899] usb 10-1: config 0 descriptor?? [ 409.501634][ T5899] hub 10-1:0.0: bad descriptor, ignoring hub [ 409.519869][ T5899] hub 10-1:0.0: probe with driver hub failed with error -5 [ 409.558784][ T5899] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 409.572235][ T5867] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 409.572274][ T5867] usb 5-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 409.598346][ T12] usb 10-1: Failed to submit usb control message: -71 [ 409.625458][ T12] usb 10-1: unable to send the bmi data to the device: -71 [ 409.633326][ T12] usb 10-1: unable to get target info from device [ 409.640251][ T12] usb 10-1: could not get target info (-71) [ 409.646476][ T12] usb 10-1: could not probe fw (-71) [ 409.648733][ T5867] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 409.694851][ T5867] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 409.715477][ T5867] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 409.774159][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.933045][ T5867] usb 5-1: media controller created [ 409.941991][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.968649][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.002441][T12024] [U] è [ 410.105298][ T5867] DVB: Unable to find symbol m88rs2000_attach() [ 410.115879][ T9002] usb 10-1: USB disconnect, device number 18 [ 410.122837][T12088] netlink: 'syz.5.1187': attribute type 10 has an invalid length. [ 410.130933][T12088] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1187'. [ 410.155785][ T5867] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 410.155817][ T5867] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 410.339728][T12094] CUSE: unknown device info "ÿ" [ 410.344685][T12094] CUSE: zero length info key specified [ 410.361932][ T5867] usb 5-1: USB disconnect, device number 16 [ 410.690118][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 410.690153][ T30] audit: type=1400 audit(1742917391.824:2802): avc: denied { name_bind } for pid=12091 comm="syz.4.1188" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 410.718425][ T30] audit: type=1400 audit(1742917391.824:2803): avc: denied { node_bind } for pid=12091 comm="syz.4.1188" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 411.135586][ T30] audit: type=1400 audit(1742917392.224:2804): avc: denied { create } for pid=12099 comm="syz.7.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 411.180020][ T30] audit: type=1400 audit(1742917392.224:2805): avc: denied { bind } for pid=12099 comm="syz.7.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 411.243998][ T30] audit: type=1326 audit(1742917392.414:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a5f8d169 code=0x7fc00000 [ 411.305407][ T30] audit: type=1326 audit(1742917392.474:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6a5f84127 code=0x7fc00000 [ 411.333533][ T9002] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.345388][ T30] audit: type=1326 audit(1742917392.474:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6a5f29359 code=0x7fc00000 [ 411.411217][ T30] audit: type=1326 audit(1742917392.474:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff6a5f2941f code=0x7fc00000 [ 411.446324][ T30] audit: type=1326 audit(1742917392.474:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6a5f8d169 code=0x7fc00000 [ 411.499603][ T9002] usb 4-1: Using ep0 maxpacket: 16 [ 411.516478][ T9002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.537707][ T9002] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.560822][ T9002] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 411.579372][ T9002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.597571][ T9002] usb 4-1: Product: syz [ 411.607673][ T9002] usb 4-1: Manufacturer: syz [ 411.627992][ T9002] usb 4-1: SerialNumber: syz [ 411.635784][ T30] audit: type=1400 audit(1742917392.574:2811): avc: denied { read write } for pid=12117 comm="syz.9.1193" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 411.673285][ T9002] usb 4-1: config 0 descriptor?? [ 411.888817][ T9002] usb 4-1: USB disconnect, device number 20 [ 412.068223][T12131] fuse: Bad value for 'fd' [ 412.721894][T12155] tmpfs: Bad value for 'nr_inodes' [ 412.760814][ T834] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 412.789077][T12160] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1201'. [ 412.922427][ T834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.939424][ T5867] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 412.944777][ T834] usb 10-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 412.966556][ T834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.981104][ T834] usb 10-1: config 0 descriptor?? [ 413.130574][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 413.172949][ T5867] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.252706][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 413.298484][ T5867] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 413.312993][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.324936][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.339439][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.363031][ T5867] usb 5-1: config 0 descriptor?? [ 413.592084][ T834] glorious 0003:22D4:1503.000E: item fetching failed at offset 0/3 [ 413.610224][ T834] glorious 0003:22D4:1503.000E: probe with driver glorious failed with error -22 [ 413.819723][ T834] usb 10-1: USB disconnect, device number 19 [ 413.852788][ T5867] petalynx 0003:18B1:0037.000F: item fetching failed at offset 0/3 [ 413.869622][ T5867] petalynx 0003:18B1:0037.000F: parse failed [ 413.875706][ T5867] petalynx 0003:18B1:0037.000F: probe with driver petalynx failed with error -22 [ 414.022763][T12197] input: syz1 as /devices/virtual/input/input41 [ 415.624212][ T10] usb 5-1: USB disconnect, device number 17 [ 415.750245][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 415.750259][ T30] audit: type=1400 audit(1742917396.924:2847): avc: denied { create } for pid=12235 comm="syz.9.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.781291][T12236] FAULT_INJECTION: forcing a failure. [ 415.781291][T12236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.902802][ T30] audit: type=1400 audit(1742917396.954:2848): avc: denied { getopt } for pid=12235 comm="syz.9.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.924115][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.9.1215 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 415.924139][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.924148][T12236] Call Trace: [ 415.924153][T12236] [ 415.924158][T12236] dump_stack_lvl+0x16c/0x1f0 [ 415.924187][T12236] should_fail_ex+0x50a/0x650 [ 415.924206][T12236] _copy_to_user+0x32/0xd0 [ 415.924225][T12236] ax25_getsockopt+0x465/0x760 [ 415.924252][T12236] ? __pfx_ax25_getsockopt+0x10/0x10 [ 415.924277][T12236] ? __might_fault+0xe3/0x190 [ 415.924303][T12236] ? __pfx_ax25_getsockopt+0x10/0x10 [ 415.924327][T12236] do_sock_getsockopt+0x3fe/0x800 [ 415.924348][T12236] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 415.924366][T12236] ? __fget_files+0x204/0x3b0 [ 415.924389][T12236] ? __fget_files+0x20e/0x3b0 [ 415.924413][T12236] __sys_getsockopt+0x12f/0x260 [ 415.924440][T12236] __x64_sys_getsockopt+0xbd/0x160 [ 415.924463][T12236] ? syscall_trace_enter+0xee/0x260 [ 415.924483][T12236] do_syscall_64+0xcd/0x250 [ 415.924508][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.924531][T12236] RIP: 0033:0x7f1fbb58d169 [ 415.924543][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.924558][T12236] RSP: 002b:00007f1fbc3a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 415.924573][T12236] RAX: ffffffffffffffda RBX: 00007f1fbb7a5fa0 RCX: 00007f1fbb58d169 [ 415.924584][T12236] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 415.924593][T12236] RBP: 00007f1fbc3a4090 R08: 0000200000000000 R09: 0000000000000000 [ 415.924603][T12236] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 415.924612][T12236] R13: 0000000000000000 R14: 00007f1fbb7a5fa0 R15: 00007ffee500ea68 [ 415.924630][T12236] [ 416.617679][T12234] input: syz1 as /devices/virtual/input/input42 [ 416.624376][ T5867] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 416.673206][T12246] syz.9.1216: attempt to access beyond end of device [ 416.673206][T12246] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 416.724350][ T30] audit: type=1400 audit(1742917397.894:2849): avc: denied { read write } for pid=12245 comm="syz.9.1216" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 416.753585][T12246] SQUASHFS error: Failed to read block 0x0: -5 [ 416.781491][ T30] audit: type=1400 audit(1742917397.894:2850): avc: denied { open } for pid=12245 comm="syz.9.1216" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 416.809451][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 416.817034][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 416.830718][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.861493][T12246] unable to read squashfs_super_block [ 416.896328][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.926918][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 416.982337][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 417.003776][ T5867] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 417.021860][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.031612][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.040965][ T30] audit: type=1400 audit(1742917398.194:2851): avc: denied { create } for pid=12255 comm="syz.9.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 417.072507][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.081173][ T5867] usb 4-1: config 0 descriptor?? [ 417.098591][T12228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.170303][T12264] syz.9.1219: attempt to access beyond end of device [ 417.170303][T12264] nbd9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 417.199499][T12264] SQUASHFS error: Failed to read block 0x0: -5 [ 417.216040][T12264] unable to read squashfs_super_block [ 417.365031][ T30] audit: type=1400 audit(1742917398.534:2852): avc: denied { write } for pid=12272 comm="syz.9.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.395040][T12271] FAULT_INJECTION: forcing a failure. [ 417.395040][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 417.399562][ T30] audit: type=1400 audit(1742917398.564:2853): avc: denied { unlink } for pid=12270 comm="syz.7.1220" name="#76" dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 417.470064][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 417.476437][ T30] audit: type=1400 audit(1742917398.564:2854): avc: denied { mount } for pid=12270 comm="syz.7.1220" name="/" dev="overlay" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.477180][ T5832] Bluetooth: hci3: unexpected event 0x07 length: 6 < 255 [ 417.507315][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.7.1220 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 417.507337][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.507346][T12271] Call Trace: [ 417.507351][T12271] [ 417.507357][T12271] dump_stack_lvl+0x16c/0x1f0 [ 417.507383][T12271] should_fail_ex+0x50a/0x650 [ 417.507395][T12271] ? __kmalloc_cache_noprof+0x55/0x410 [ 417.507413][T12271] ? alloc_pipe_info+0x10e/0x590 [ 417.507428][T12271] should_failslab+0xc2/0x120 [ 417.507448][T12271] __kmalloc_cache_noprof+0x68/0x410 [ 417.507471][T12271] alloc_pipe_info+0x10e/0x590 [ 417.507495][T12271] splice_direct_to_actor+0x793/0xa40 [ 417.507515][T12271] ? __pfx_direct_splice_actor+0x10/0x10 [ 417.507534][T12271] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 417.507548][T12271] ? __pfx___might_resched+0x10/0x10 [ 417.507568][T12271] do_splice_direct+0x178/0x250 [ 417.507581][T12271] ? __pfx_do_splice_direct+0x10/0x10 [ 417.507598][T12271] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 417.507620][T12271] ? rw_verify_area+0xcf/0x680 [ 417.507638][T12271] do_sendfile+0xafb/0xe40 [ 417.507658][T12271] ? __pfx_do_sendfile+0x10/0x10 [ 417.507678][T12271] __x64_sys_sendfile64+0x1da/0x220 [ 417.507694][T12271] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 417.507710][T12271] ? __might_fault+0xe3/0x190 [ 417.507726][T12271] ? rcu_is_watching+0x12/0xc0 [ 417.507746][T12271] do_syscall_64+0xcd/0x250 [ 417.507764][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.507785][T12271] RIP: 0033:0x7f2f4bf8d169 [ 417.507803][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.507817][T12271] RSP: 002b:00007f2f49df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 417.507827][T12271] RAX: ffffffffffffffda RBX: 00007f2f4c1a5fa0 RCX: 00007f2f4bf8d169 [ 417.507833][T12271] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 417.507839][T12271] RBP: 00007f2f49df6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.507845][T12271] R10: 0002000080200001 R11: 0000000000000246 R12: 0000000000000001 [ 417.507850][T12271] R13: 0000000000000000 R14: 00007f2f4c1a5fa0 R15: 00007ffd265b1e78 [ 417.507861][T12271] [ 417.559883][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 417.738269][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 417.745220][ T5832] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 417.750616][ T9] usb 4-1: USB disconnect, device number 21 [ 417.752110][ T5832] Bluetooth: hci3: unexpected event 0x09 length: 0 < 3 [ 417.765295][ T5832] Bluetooth: hci3: unexpected event 0x02 length: 0 < 1 [ 417.774323][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 417.790174][ T30] audit: type=1400 audit(1742917398.564:2855): avc: denied { nlmsg_write } for pid=12272 comm="syz.9.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.819331][ T30] audit: type=1400 audit(1742917398.564:2856): avc: denied { create } for pid=12272 comm="syz.9.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 418.087174][T12295] bridge0: port 4(veth0_to_bridge) entered blocking state [ 418.103807][T12295] bridge0: port 4(veth0_to_bridge) entered disabled state [ 418.112188][T12295] veth0_to_bridge: entered allmulticast mode [ 418.122331][T12295] veth0_to_bridge: entered promiscuous mode [ 418.128432][T12295] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.145818][T12295] bridge0: port 4(veth0_to_bridge) entered blocking state [ 418.153417][T12295] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 418.427824][T12311] af_packet: tpacket_rcv: packet too big, clamped from 3944 to 3696. macoff=96 [ 418.529232][T12308] sp0: Synchronizing with TNC [ 418.614404][T12320] syz.3.1228: attempt to access beyond end of device [ 418.614404][T12320] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 418.632433][T12320] SQUASHFS error: Failed to read block 0x0: -5 [ 418.644450][T12320] unable to read squashfs_super_block [ 418.880205][ T9002] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 419.132807][ T9002] usb 5-1: Using ep0 maxpacket: 16 [ 419.150502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.163056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.166022][ T9002] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.175388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.197582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.209280][ T9002] usb 5-1: config 0 interface 0 has no altsetting 0 [ 419.209828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.228413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.240745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.253055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.253584][ T9002] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 419.265391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.286746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 419.333965][ T9002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.352755][ T9002] usb 5-1: Product: syz [ 419.356956][ T9002] usb 5-1: Manufacturer: syz [ 419.685104][T12335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.292274][ T9002] usb 5-1: SerialNumber: syz [ 420.319406][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 420.361305][ T9002] usb 5-1: config 0 descriptor?? [ 420.455716][ T9002] hub 5-1:0.0: bad descriptor, ignoring hub [ 420.485288][ T9002] hub 5-1:0.0: probe with driver hub failed with error -5 [ 420.726050][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 420.746812][T12307] [U] è [ 420.756658][ T9002] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 420.766386][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.778814][ T3644] usb 5-1: Failed to submit usb control message: -71 [ 420.823775][ T3644] usb 5-1: unable to send the bmi data to the device: -71 [ 420.838998][ T5867] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 420.870829][ T5914] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 420.884578][ T9002] usb 5-1: USB disconnect, device number 18 [ 420.942501][ T3644] usb 5-1: unable to get target info from device [ 420.950181][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.002874][ T3644] usb 5-1: could not get target info (-71) [ 421.008730][ T3644] usb 5-1: could not probe fw (-71) [ 421.020084][ T5867] usb 4-1: Product: syz [ 421.037644][ T5867] usb 4-1: Manufacturer: syz [ 421.060501][ T5867] usb 4-1: SerialNumber: syz [ 421.100499][ T5867] usb 4-1: config 0 descriptor?? [ 421.133604][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 421.185344][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.200997][ T5867] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 421.220902][ T5914] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 421.234278][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 421.234293][ T30] audit: type=1400 audit(1742917402.404:2920): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.290953][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.426053][ T9002] usb 4-1: USB disconnect, device number 22 [ 421.434196][ T12] usb 4-1: Failed to submit usb control message: -71 [ 421.441588][ T5914] usb 8-1: Product: syz [ 421.938788][ T5914] usb 8-1: Manufacturer: syz [ 421.947369][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 421.957109][ T30] audit: type=1400 audit(1742917402.404:2921): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.013622][ T5914] usb 8-1: SerialNumber: syz [ 422.068493][ T5914] usb 8-1: config 0 descriptor?? [ 422.083386][ T12] usb 4-1: unable to get target info from device [ 422.195019][ T12] usb 4-1: could not get target info (-71) [ 422.222469][ T5914] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 422.235682][ T12] usb 4-1: could not probe fw (-71) [ 422.253667][ T30] audit: type=1400 audit(1742917402.404:2922): avc: denied { rename } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.119560][ T30] audit: type=1400 audit(1742917402.404:2923): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.159444][ C0] net_ratelimit: 23387 callbacks suppressed [ 424.159458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.177681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.190049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.202430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.214938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.225287][ T30] audit: type=1400 audit(1742917402.404:2924): avc: denied { unlink } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.227325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.261687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.263278][ T53] usb 8-1: Failed to submit usb control message: -110 [ 424.274012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.274237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.274475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 424.454037][ T10] usb 8-1: USB disconnect, device number 19 [ 425.085940][ T30] audit: type=1400 audit(1742917402.404:2925): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.732546][ T30] audit: type=1400 audit(1742917402.484:2926): avc: denied { add_name } for pid=12326 comm="dhcpcd-run-hook" name="resolv.conf.lapb9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.963598][ T53] usb 8-1: unable to send the bmi data to the device: -110 [ 426.512866][T12374] netlink: 'syz.5.1234': attribute type 10 has an invalid length. [ 426.557690][ T53] usb 8-1: unable to get target info from device [ 426.620601][ T53] usb 8-1: could not get target info (-110) [ 426.626552][ T53] usb 8-1: could not probe fw (-110) [ 426.632214][ T30] audit: type=1400 audit(1742917402.484:2927): avc: denied { create } for pid=12326 comm="dhcpcd-run-hook" name="resolv.conf.lapb9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 426.654817][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1234'. [ 427.654009][T12374] CUSE: unknown device info "ÿ" [ 427.659031][T12374] CUSE: zero length info key specified [ 428.370273][ T30] audit: type=1400 audit(1742917402.484:2928): avc: denied { write } for pid=12326 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb9.link" dev="tmpfs" ino=6935 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.824235][ T30] audit: type=1400 audit(1742917403.594:2929): avc: denied { read } for pid=12360 comm="syz.9.1233" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 428.854296][ T30] audit: type=1400 audit(1742917403.594:2930): avc: denied { open } for pid=12360 comm="syz.9.1233" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 429.169487][ C0] net_ratelimit: 30150 callbacks suppressed [ 429.169507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.187786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.200144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.212471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.224799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.237185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.249557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.261923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.274314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.286626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 429.519810][ T30] audit: type=1400 audit(1742917403.954:2931): avc: denied { create } for pid=12360 comm="syz.9.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.519847][ T30] audit: type=1400 audit(1742917404.194:2932): avc: denied { execmem } for pid=12360 comm="syz.9.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 429.519873][ T30] audit: type=1400 audit(1742917404.304:2933): avc: denied { create } for pid=12360 comm="syz.9.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.519900][ T30] audit: type=1400 audit(1742917405.274:2934): avc: denied { sys_module } for pid=12360 comm="syz.9.1233" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 429.519928][ T30] audit: type=1400 audit(1742917405.874:2935): avc: denied { create } for pid=12366 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.519955][ T30] audit: type=1400 audit(1742917406.324:2936): avc: denied { unlink } for pid=12367 comm="syz.3.1235" name="#78" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 432.069027][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 432.069045][ T30] audit: type=1400 audit(1742917412.944:2962): avc: denied { ioctl } for pid=12397 comm="syz.4.1240" path="socket:[32831]" dev="sockfs" ino=32831 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.069079][ T30] audit: type=1400 audit(1742917412.944:2963): avc: denied { read } for pid=12397 comm="syz.4.1240" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 432.069107][ T30] audit: type=1400 audit(1742917412.944:2964): avc: denied { open } for pid=12397 comm="syz.4.1240" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.202475][T12414] FAULT_INJECTION: forcing a failure. [ 433.202475][T12414] name failslab, interval 1, probability 0, space 0, times 0 [ 433.202539][T12414] CPU: 1 UID: 0 PID: 12414 Comm: syz.5.1241 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 433.202560][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.202570][T12414] Call Trace: [ 433.202575][T12414] [ 433.202582][T12414] dump_stack_lvl+0x16c/0x1f0 [ 433.202613][T12414] should_fail_ex+0x50a/0x650 [ 433.202628][T12414] ? __kmalloc_noprof+0xb8/0x510 [ 433.202654][T12414] ? iter_file_splice_write+0x1d0/0x1120 [ 433.202675][T12414] should_failslab+0xc2/0x120 [ 433.202699][T12414] __kmalloc_noprof+0xcb/0x510 [ 433.202719][T12414] ? ovl_revert_creds+0x13/0x50 [ 433.202743][T12414] ? ovl_other_xattr_get+0x101/0x160 [ 433.202768][T12414] iter_file_splice_write+0x1d0/0x1120 [ 433.202792][T12414] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 433.202817][T12414] ? bpf_lsm_capable+0x9/0x10 [ 433.202832][T12414] ? security_capable+0x7e/0x260 [ 433.202855][T12414] ? __pfx_iter_file_splice_write+0x10/0x10 [ 433.202877][T12414] ? __lock_acquire+0xa92/0x1b80 [ 433.202910][T12414] backing_file_splice_write+0x27c/0x890 [ 433.202939][T12414] ovl_splice_write+0x38e/0x630 [ 433.202964][T12414] ? __pfx_ovl_splice_write+0x10/0x10 [ 433.202989][T12414] ? __pfx_ovl_file_end_write+0x10/0x10 [ 433.203018][T12414] ? __pfx_ovl_splice_write+0x10/0x10 [ 433.203043][T12414] direct_splice_actor+0x18f/0x6c0 [ 433.203066][T12414] splice_direct_to_actor+0x346/0xa40 [ 433.203088][T12414] ? __pfx_direct_splice_actor+0x10/0x10 [ 433.203112][T12414] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 433.203135][T12414] ? __pfx___might_resched+0x10/0x10 [ 433.203162][T12414] do_splice_direct+0x178/0x250 [ 433.203183][T12414] ? __pfx_do_splice_direct+0x10/0x10 [ 433.203204][T12414] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 433.203227][T12414] ? rw_verify_area+0xcf/0x680 [ 433.203247][T12414] do_sendfile+0xafb/0xe40 [ 433.203270][T12414] ? __pfx_do_sendfile+0x10/0x10 [ 433.203290][T12414] ? __might_fault+0xe3/0x190 [ 433.203320][T12414] __x64_sys_sendfile64+0x155/0x220 [ 433.203345][T12414] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 433.203369][T12414] ? __might_fault+0xe3/0x190 [ 433.203395][T12414] ? rcu_is_watching+0x12/0xc0 [ 433.203419][T12414] do_syscall_64+0xcd/0x250 [ 433.203437][T12414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.203466][T12414] RIP: 0033:0x7f2730f8d169 [ 433.203479][T12414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.203495][T12414] RSP: 002b:00007f2731e74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 433.203511][T12414] RAX: ffffffffffffffda RBX: 00007f27311a6080 RCX: 00007f2730f8d169 [ 433.203522][T12414] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 433.203532][T12414] RBP: 00007f2731e74090 R08: 0000000000000000 R09: 0000000000000000 [ 433.203541][T12414] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 433.203551][T12414] R13: 0000000000000000 R14: 00007f27311a6080 R15: 00007ffdc2765688 [ 433.203570][T12414] [ 433.827637][T12423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.954827][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.966094][ T30] audit: type=1400 audit(1742917415.094:2965): avc: denied { mounton } for pid=12412 comm="syz.7.1242" path="/syzcgroup/unified/syz7" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 434.179485][ C0] net_ratelimit: 26638 callbacks suppressed [ 434.179505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 434.179761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.180074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 434.180323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.180644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 434.180887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.181196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 434.181436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.181770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 434.182012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.485080][ T30] audit: type=1400 audit(1742917415.254:2966): avc: denied { create } for pid=12420 comm="syz.9.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.485198][ T30] audit: type=1400 audit(1742917415.254:2967): avc: denied { ioctl } for pid=12420 comm="syz.9.1245" path="socket:[32909]" dev="sockfs" ino=32909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.485292][ T30] audit: type=1400 audit(1742917415.264:2968): avc: denied { bind } for pid=12420 comm="syz.9.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 435.225425][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 435.226823][ T30] audit: type=1400 audit(1742917416.394:2969): avc: denied { create } for pid=12425 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.234159][ T30] audit: type=1400 audit(1742917416.404:2970): avc: denied { ioctl } for pid=12425 comm="syz.4.1244" path="socket:[32928]" dev="sockfs" ino=32928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.170542][ T30] audit: type=1400 audit(1742917416.404:2971): avc: denied { bind } for pid=12425 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 438.282517][ T15] sched: DL replenish lagged too much [ 439.189683][ C0] net_ratelimit: 19392 callbacks suppressed [ 439.189712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 439.190539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.191474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 439.192304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.193251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 439.194060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.195012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 439.195898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.196883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 439.197751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.463368][ T30] audit: type=1400 audit(1742917420.554:2972): avc: denied { setopt } for pid=12449 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.463409][ T30] audit: type=1400 audit(1742917420.554:2973): avc: denied { write } for pid=12449 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.370455][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.370531][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.808273][ T30] audit: type=1400 audit(1742917422.964:2974): avc: denied { create } for pid=12455 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.418245][T12468] netlink: 'syz.4.1251': attribute type 10 has an invalid length. [ 443.418267][T12468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 443.419720][T12468] CUSE: unknown device info "ÿ" [ 443.419734][T12468] CUSE: zero length info key specified [ 443.937441][ T30] audit: type=1400 audit(1742917425.104:2975): avc: denied { write } for pid=12474 comm="syz.9.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.937614][ T30] audit: type=1400 audit(1742917425.104:2976): avc: denied { nlmsg_write } for pid=12474 comm="syz.9.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.132851][ T30] audit: type=1400 audit(1742917425.304:2977): avc: denied { read write } for pid=12481 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 444.156613][ T30] audit: type=1400 audit(1742917425.324:2978): avc: denied { open } for pid=12481 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 444.175424][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.178068][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.179208][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.180036][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.180616][ T5819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.182123][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.199279][ C0] net_ratelimit: 23813 callbacks suppressed [ 444.199297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.199547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 444.199753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.200027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 444.200240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.200500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 444.200699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.200974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 444.201171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.201425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 444.246478][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.252028][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.252272][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.253204][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.256139][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.260211][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.295155][ T30] audit: type=1400 audit(1742917425.464:2979): avc: denied { mounton } for pid=12481 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 445.008248][T12481] lo speed is unknown, defaulting to 1000 [ 445.101966][ T30] audit: type=1400 audit(1742917426.274:2980): avc: denied { mounton } for pid=12483 comm="syz.9.1254" path="/205/file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 445.185486][T12485] bond0: entered promiscuous mode [ 445.185508][T12485] bond_slave_0: entered promiscuous mode [ 445.185641][T12485] bond_slave_1: entered promiscuous mode [ 445.186992][T12485] batadv0: entered promiscuous mode [ 445.190888][T12485] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 445.538008][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1254'. [ 446.269545][ T5832] Bluetooth: hci3: command tx timeout [ 446.519361][T12485] bond0: left promiscuous mode [ 446.519387][T12485] bond_slave_0: left promiscuous mode [ 446.519506][T12485] bond_slave_1: left promiscuous mode [ 446.705675][ T30] audit: type=1400 audit(1742917427.874:2981): avc: denied { write } for pid=12492 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 446.719329][T12485] batadv0: left promiscuous mode [ 447.177861][ T30] audit: type=1400 audit(1742917428.344:2982): avc: denied { create } for pid=12500 comm="syz.7.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 447.188037][ T30] audit: type=1400 audit(1742917428.354:2983): avc: denied { write } for pid=12501 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.207064][ T30] audit: type=1400 audit(1742917428.364:2984): avc: denied { setopt } for pid=12500 comm="syz.7.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 448.357569][ T5832] Bluetooth: hci3: command tx timeout [ 449.209333][ C0] net_ratelimit: 27723 callbacks suppressed [ 449.209352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 449.209359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.209582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.209604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.209799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.209884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 449.210099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.210356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 449.210410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.210565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.527892][ T5832] Bluetooth: hci3: command tx timeout [ 452.833843][T12505] syz.7.1259 (12505) used greatest stack depth: 20680 bytes left [ 452.935722][ T5832] Bluetooth: hci3: command tx timeout [ 454.219275][ C1] net_ratelimit: 41043 callbacks suppressed [ 454.219294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.219372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.219576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.219616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.219845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 454.219862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.220042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.220077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.220284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.220377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.229352][ C0] net_ratelimit: 39258 callbacks suppressed [ 459.229371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.229475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.229615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.229759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.229903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.229977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.230212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.230260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.230473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.230510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.239298][ C1] net_ratelimit: 41566 callbacks suppressed [ 464.239319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.239440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.239618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.239761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.239944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.240012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.240212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.240299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.240530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.240616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.249434][ C0] net_ratelimit: 40704 callbacks suppressed [ 469.249454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.249486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.249700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.249762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.249949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.250018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.250185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.250289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.250468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.250620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259295][ C1] net_ratelimit: 39314 callbacks suppressed [ 474.259314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.259944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.260055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.260151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.260259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.260436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.269416][ C1] net_ratelimit: 41468 callbacks suppressed [ 479.269434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.269626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.269667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.269882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.269950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.270099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.270158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.270391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.270441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.270657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 484.279444][ C0] net_ratelimit: 40955 callbacks suppressed [ 484.279465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.279531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.279682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.279752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.279972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.280050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.280239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.280284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.280477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.280504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289313][ C0] net_ratelimit: 40537 callbacks suppressed [ 489.289332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.289909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.290071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.290128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.290363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.290416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.299344][ C0] net_ratelimit: 41275 callbacks suppressed [ 494.299367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.299478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.299655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.299771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.299986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.299993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.300213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.300298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.300482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.300563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309353][ C0] net_ratelimit: 42000 callbacks suppressed [ 499.309377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.309977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.310193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.310214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.310402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.310435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.610063][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.319364][ C0] net_ratelimit: 41629 callbacks suppressed [ 504.319385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.319394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.319626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.319671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.319875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.319921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.320077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.320134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.320368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.320379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329251][ C0] net_ratelimit: 42119 callbacks suppressed [ 509.329271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.329886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.330029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 509.330142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.330263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.330426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.339236][ C0] net_ratelimit: 42425 callbacks suppressed [ 514.339257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.339390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.339474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.339614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.339727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.339895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.340003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.340144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.340214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.340361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.349311][ C0] net_ratelimit: 40903 callbacks suppressed [ 519.349332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.349441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.349609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.349834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 519.349849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.350048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.350147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.350302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.350385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.350541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.359348][ C1] net_ratelimit: 41105 callbacks suppressed [ 524.359372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.359609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.359632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.359858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.359929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.360118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.360205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.360434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.360451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.360646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369251][ C0] net_ratelimit: 41180 callbacks suppressed [ 529.369271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.369999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.370113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.370298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.370385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379273][ C0] net_ratelimit: 40286 callbacks suppressed [ 534.379293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.379859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.380067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.380109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.380311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.380322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389263][ C1] net_ratelimit: 41476 callbacks suppressed [ 539.389284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.389957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.390072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.390216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.390287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.390470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399241][ C1] net_ratelimit: 41122 callbacks suppressed [ 544.399264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.399891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.400106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.400208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.400379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.400471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409278][ C1] net_ratelimit: 40150 callbacks suppressed [ 549.409299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.409958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.410134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.410195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.410390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.410499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419362][ C0] net_ratelimit: 40579 callbacks suppressed [ 554.419380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.419909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.420170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.420178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.420433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.420460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429262][ C0] net_ratelimit: 41314 callbacks suppressed [ 559.429281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.429827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.430012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.430085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.430222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 559.430306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.991195][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006124][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.439236][ C0] net_ratelimit: 41561 callbacks suppressed [ 564.439258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.439261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.439514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.439564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.439775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.439811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.440001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.440027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.440244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.440320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.449286][ C1] net_ratelimit: 41671 callbacks suppressed [ 569.449304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.449328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.449589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.449609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.449829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.450023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.450099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.450269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.450346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.450517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459394][ C1] net_ratelimit: 42179 callbacks suppressed [ 574.459413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.459969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.460137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.460180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.460416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.460464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.328103][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 579.469375][ C1] net_ratelimit: 41384 callbacks suppressed [ 579.469394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.469460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.469602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.469712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.469880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.469953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.470130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.470155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.470337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.470422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.479339][ C0] net_ratelimit: 41157 callbacks suppressed [ 584.479361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.479612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.479647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.479840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.479870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.480117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.480164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.480349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.480408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.480593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.489264][ C0] net_ratelimit: 40089 callbacks suppressed [ 589.489285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.489533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.489667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.489814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.489966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.490159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.490205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.490420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.490510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.490718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499303][ C0] net_ratelimit: 40596 callbacks suppressed [ 594.499325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.499914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.500056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.500161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.500337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.500449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509269][ C0] net_ratelimit: 40482 callbacks suppressed [ 599.509287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.509946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.510098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.510175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.510303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.510479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519247][ C0] net_ratelimit: 40673 callbacks suppressed [ 604.519268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.519830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.520041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.520068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.520245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.520286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.529402][ C1] net_ratelimit: 39666 callbacks suppressed [ 609.529423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.529636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.529693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.529931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.530882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539240][ C1] net_ratelimit: 40562 callbacks suppressed [ 614.539259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.539950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.540054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.540215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.540305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.540427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549203][ C0] net_ratelimit: 41418 callbacks suppressed [ 619.549223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.549920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:db:3b:6c:eb:bd, vlan:0) [ 619.550005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.550114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.550250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.129623][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.144937][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.559247][ C1] net_ratelimit: 40483 callbacks suppressed [ 624.559267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.559274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.559490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.559531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.559731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.559779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.560011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.560013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.560247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.560255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569302][ C0] net_ratelimit: 41455 callbacks suppressed [ 629.569322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.569920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.570082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.570125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.570296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.570446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579218][ C0] net_ratelimit: 41363 callbacks suppressed [ 634.579235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.579963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.580163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.580244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.580409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589247][ C1] net_ratelimit: 41506 callbacks suppressed [ 639.589266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.589822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.590004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.590060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.590239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.590491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599311][ C0] net_ratelimit: 42034 callbacks suppressed [ 644.599331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.599877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.600100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.600150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.600348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.600364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.289769][ T31] INFO: task dhcpcd:5488 blocked for more than 145 seconds. [ 649.289795][ T31] Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 [ 649.289809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.289817][ T31] task:dhcpcd state:D stack:23256 pid:5488 tgid:5488 ppid:5487 task_flags:0x400140 flags:0x00000002 [ 649.289878][ T31] Call Trace: [ 649.289886][ T31] [ 649.289899][ T31] __schedule+0x112e/0x5b80 [ 649.289941][ T31] ? __lock_acquire+0x5b6/0x1b80 [ 649.289968][ T31] ? __pfx___schedule+0x10/0x10 [ 649.290001][ T31] ? schedule+0x2d7/0x3a0 [ 649.290030][ T31] schedule+0xe7/0x3a0 [ 649.290056][ T31] schedule_preempt_disabled+0x13/0x30 [ 649.290084][ T31] __mutex_lock+0x6bd/0xb10 [ 649.290104][ T31] ? inet_rtm_newaddr+0x316/0x1560 [ 649.290133][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 649.290151][ T31] ? find_held_lock+0x2b/0x80 [ 649.290178][ T31] ? avc_has_perm_noaudit+0x119/0x3a0 [ 649.290207][ T31] ? __nla_parse+0x40/0x60 [ 649.290233][ T31] ? inet_rtm_newaddr+0x316/0x1560 [ 649.290259][ T31] inet_rtm_newaddr+0x316/0x1560 [ 649.290286][ T31] ? __lock_acquire+0x5b6/0x1b80 [ 649.290311][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 649.290344][ T31] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 649.290376][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 649.290410][ T31] rtnetlink_rcv_msg+0x95b/0xea0 [ 649.290441][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.290469][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 649.290500][ T31] netlink_rcv_skb+0x16b/0x440 [ 649.290530][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.290560][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.290598][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 649.290629][ T31] netlink_unicast+0x53c/0x7f0 [ 649.290659][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 649.290694][ T31] netlink_sendmsg+0x8cb/0xd70 [ 649.290724][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.290752][ T31] ? __import_iovec+0x1cd/0x660 [ 649.290782][ T31] ____sys_sendmsg+0xa87/0xc70 [ 649.290807][ T31] ? copy_msghdr_from_user+0x10b/0x160 [ 649.290836][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.290862][ T31] ? lock_acquire+0x18e/0x360 [ 649.290882][ T31] ? find_held_lock+0x2b/0x80 [ 649.290910][ T31] ? finish_task_switch.isra.0+0x212/0xcc0 [ 649.290940][ T31] ___sys_sendmsg+0x135/0x1e0 [ 649.290971][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.291018][ T31] ? __lock_acquire+0xa92/0x1b80 [ 649.291044][ T31] __sys_sendmsg+0x16e/0x220 [ 649.291063][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.291087][ T31] ? __might_fault+0xe3/0x190 [ 649.291118][ T31] ? rcu_is_watching+0x12/0xc0 [ 649.291147][ T31] do_syscall_64+0xcd/0x250 [ 649.291168][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.291195][ T31] RIP: 0033:0x7f5829064a4b [ 649.291212][ T31] RSP: 002b:00007ffe763f70a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.291232][ T31] RAX: ffffffffffffffda RBX: 00007f5828f8c6c0 RCX: 00007f5829064a4b [ 649.291245][ T31] RDX: 0000000000000000 RSI: 00007ffe7640b258 RDI: 000000000000003e [ 649.291258][ T31] RBP: 000000000000003e R08: 0000000000000000 R09: 00007ffe7640b258 [ 649.291270][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 649.291282][ T31] R13: 00007ffe7640b258 R14: 0000000000000044 R15: 0000000000000001 [ 649.291304][ T31] [ 649.291349][ T31] [ 649.291349][ T31] Showing all locks held in the system: [ 649.291358][ T31] 1 lock held by kthreadd/2: [ 649.291370][ T31] 3 locks held by kworker/0:1/10: [ 649.291381][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 649.291444][ T31] #1: ffffc900000f7d18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 649.291499][ T31] #2: ffffffff8fef7828 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 649.291555][ T31] 3 locks held by kworker/u8:0/12: [ 649.291566][ T31] 3 locks held by kworker/u8:1/13: [ 649.291579][ T31] 1 lock held by khungtaskd/31: [ 649.291590][ T31] #0: ffffffff8e1be500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 649.291641][ T31] 3 locks held by kworker/u8:2/36: [ 649.291654][ T31] 3 locks held by kworker/u8:3/53: [ 649.291666][ T31] 3 locks held by kworker/u8:4/63: [ 649.291678][ T31] 3 locks held by kswapd0/90: [ 649.291695][ T31] 3 locks held by kworker/u8:5/1152: [ 649.291719][ T31] 2 locks held by kworker/R-bat_e/3394: [ 649.291731][ T31] 3 locks held by kworker/u8:6/3644: [ 649.291742][ T31] 3 locks held by kworker/u8:7/3682: [ 649.291753][ T31] 4 locks held by kworker/u8:8/3728: [ 649.291765][ T31] 2 locks held by syslogd/5176: [ 649.291776][ T31] 2 locks held by udevd/5194: [ 649.291787][ T31] 1 lock held by dhcpcd/5488: [ 649.291798][ T31] #0: ffffffff8fef7828 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 649.291852][ T31] 2 locks held by getty/5581: [ 649.291863][ T31] #0: ffff88814d6bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 649.291909][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 649.291956][ T31] 1 lock held by syz-executor/5806: [ 649.291967][ T31] 3 locks held by kworker/0:3/5818: [ 649.291978][ T31] 4 locks held by kworker/1:3/5867: [ 649.291990][ T31] 3 locks held by kworker/u8:9/6129: [ 649.292001][ T31] #0: ffff88814d272148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 649.292052][ T31] #1: ffffc9000afffd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 649.292100][ T31] #2: ffffffff8fef7828 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 649.292152][ T31] 3 locks held by kworker/u8:10/6219: [ 649.292164][ T31] 3 locks held by kworker/u8:11/6672: [ 649.292175][ T31] 4 locks held by syz-executor/6805: [ 649.292186][ T31] 2 locks held by syz-executor/7032: [ 649.292197][ T31] 3 locks held by kworker/u8:12/7385: [ 649.292208][ T31] 1 lock held by syz-executor/8922: [ 649.292221][ T31] 6 locks held by syz.3.1238/12400: [ 649.292232][ T31] 2 locks held by syz-executor/12481: [ 649.292243][ T31] 3 locks held by kworker/u8:13/12508: [ 649.292254][ T31] 2 locks held by kworker/0:4/12510: [ 649.292264][ T31] [ 649.292270][ T31] ============================================= [ 649.292270][ T31] [ 649.292277][ T31] NMI backtrace for cpu 0 [ 649.292288][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 649.292309][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.292318][ T31] Call Trace: [ 649.292323][ T31] [ 649.292329][ T31] dump_stack_lvl+0x116/0x1f0 [ 649.292357][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 649.292378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 649.292407][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 649.292430][ T31] watchdog+0xf62/0x12b0 [ 649.292453][ T31] ? __pfx_watchdog+0x10/0x10 [ 649.292471][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.292496][ T31] ? __kthread_parkme+0x148/0x220 [ 649.292514][ T31] ? __pfx_watchdog+0x10/0x10 [ 649.292534][ T31] kthread+0x3af/0x750 [ 649.292554][ T31] ? __pfx_kthread+0x10/0x10 [ 649.292575][ T31] ? rcu_is_watching+0x12/0xc0 [ 649.292597][ T31] ? __pfx_kthread+0x10/0x10 [ 649.292618][ T31] ret_from_fork+0x45/0x80 [ 649.292639][ T31] ? __pfx_kthread+0x10/0x10 [ 649.292657][ T31] ret_from_fork_asm+0x1a/0x30 [ 649.292683][ T31] [ 649.292689][ T31] Sending NMI from CPU 0 to CPUs 1: [ 649.292713][ C1] NMI backtrace for cpu 1 [ 649.292724][ C1] CPU: 1 UID: 0 PID: 5867 Comm: kworker/1:3 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 649.292741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.292750][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 649.292765][ C1] RIP: 0010:stack_trace_save+0x38/0xd0 [ 649.292786][ C1] Code: 53 89 f6 31 c9 48 83 c4 80 48 89 e3 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 0d bb 98 8d 48 c1 eb 03 48 c7 44 24 10 20 36 a6 81 <48> 01 c3 c7 03 f1 f1 f1 f1 c7 43 04 00 00 00 f3 c7 43 08 f3 f3 f3 [ 649.292799][ C1] RSP: 0018:ffffc90000a07bc8 EFLAGS: 00000a02 [ 649.292809][ C1] RAX: dffffc0000000000 RBX: 1ffff92000140f79 RCX: 0000000000000000 [ 649.292818][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc90000a07c58 [ 649.292827][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000000 [ 649.292835][ C1] R10: ffffed103dc61100 R11: 0000000000000005 R12: 0000000000000001 [ 649.292843][ C1] R13: 0000000000212110 R14: ffffea0007b8c200 R15: 0000000000000000 [ 649.292852][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 649.292866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.292875][ C1] CR2: 000055556f7ba5c8 CR3: 000000002b05e000 CR4: 00000000003526f0 [ 649.292884][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.292891][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.292900][ C1] Call Trace: [ 649.292904][ C1] [ 649.292909][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 649.292927][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 649.292943][ C1] ? nmi_handle+0x1ac/0x5d0 [ 649.292962][ C1] ? stack_trace_save+0x38/0xd0 [ 649.292980][ C1] ? default_do_nmi+0x6a/0x160 [ 649.292995][ C1] ? exc_nmi+0x170/0x1e0 [ 649.293011][ C1] ? end_repeat_nmi+0xf/0x53 [ 649.293032][ C1] ? stack_trace_save+0x38/0xd0 [ 649.293051][ C1] ? stack_trace_save+0x38/0xd0 [ 649.293070][ C1] ? stack_trace_save+0x38/0xd0 [ 649.293088][ C1] [ 649.293092][ C1] [ 649.293097][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 649.293116][ C1] ? __lock_acquire+0xa92/0x1b80 [ 649.293131][ C1] kasan_save_stack+0x33/0x60 [ 649.293162][ C1] kasan_save_track+0x14/0x30 [ 649.293178][ C1] kasan_save_free_info+0x3b/0x60 [ 649.293192][ C1] __kasan_slab_free+0x51/0x70 [ 649.293209][ C1] kmem_cache_free+0x2e2/0x4d0 [ 649.293227][ C1] ? __skb_ext_put+0x102/0x2c0 [ 649.293244][ C1] ? find_held_lock+0x2b/0x80 [ 649.293262][ C1] __skb_ext_put+0x102/0x2c0 [ 649.293278][ C1] ? ip6_mc_input+0x7af/0xfd0 [ 649.293291][ C1] skb_release_head_state+0x1c2/0x290 [ 649.293305][ C1] sk_skb_reason_drop+0xeb/0x1a0 [ 649.293319][ C1] ip6_mc_input+0x7af/0xfd0 [ 649.293332][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 649.293347][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 649.293360][ C1] ip6_rcv_finish+0x3a2/0x5b0 [ 649.293372][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 649.293384][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 649.293400][ C1] ip_sabotage_in+0x21b/0x290 [ 649.293415][ C1] nf_hook_slow+0xbb/0x200 [ 649.293431][ C1] nf_hook.constprop.0+0x42e/0x750 [ 649.293451][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 649.293464][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 649.293486][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 649.293499][ C1] ? __lock_acquire+0x5b6/0x1b80 [ 649.293514][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 649.293526][ C1] ipv6_rcv+0xa4/0x680 [ 649.293538][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 649.293549][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 649.293568][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 649.293588][ C1] ? lock_acquire+0x18e/0x360 [ 649.293604][ C1] __netif_receive_skb+0x1d/0x160 [ 649.293621][ C1] netif_receive_skb+0x13f/0x7b0 [ 649.293642][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 649.293663][ C1] br_pass_frame_up+0x346/0x490 [ 649.293679][ C1] br_handle_frame_finish+0xecc/0x1c90 [ 649.293697][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.293714][ C1] ? mark_held_locks+0x49/0x80 [ 649.293729][ C1] ? ip6t_do_table+0xd20/0x1d40 [ 649.293747][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 649.293766][ C1] ? ip6t_do_table+0xd50/0x1d40 [ 649.293787][ C1] ? nf_hook_slow+0x132/0x200 [ 649.293802][ C1] br_nf_hook_thresh+0x303/0x410 [ 649.293818][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.293836][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 649.293853][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.293869][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.293884][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.293901][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 649.293918][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.293936][ C1] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 649.293954][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 649.293970][ C1] ? lock_acquire+0x18e/0x360 [ 649.293985][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 649.294002][ C1] ? net_generic+0xea/0x2a0 [ 649.294018][ C1] br_nf_pre_routing+0x860/0x15b0 [ 649.294037][ C1] br_handle_frame+0xad7/0x14a0 [ 649.294053][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 649.294070][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.294088][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 649.294102][ C1] __netif_receive_skb_core.constprop.0+0xa20/0x4330 [ 649.294125][ C1] ? kmem_cache_free+0x2e2/0x4d0 [ 649.294141][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 649.294157][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 649.294177][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 649.294193][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 649.294207][ C1] ? ip6_mc_input+0x492/0xfd0 [ 649.294220][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 649.294235][ C1] ? __lock_acquire+0x5b6/0x1b80 [ 649.294250][ C1] ? process_backlog+0x3f1/0x15f0 [ 649.294267][ C1] __netif_receive_skb_one_core+0xb1/0x1e0 [ 649.294287][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 649.294306][ C1] ? lock_acquire+0x18e/0x360 [ 649.294321][ C1] ? process_backlog+0x3f1/0x15f0 [ 649.294338][ C1] __netif_receive_skb+0x1d/0x160 [ 649.294355][ C1] process_backlog+0x443/0x15f0 [ 649.294374][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 649.294393][ C1] net_rx_action+0xa94/0x1010 [ 649.294414][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 649.294435][ C1] ? tmigr_handle_remote+0x133/0x380 [ 649.294455][ C1] ? run_timer_base+0x121/0x190 [ 649.294469][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 649.294484][ C1] handle_softirqs+0x213/0x8f0 [ 649.294505][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 649.294525][ C1] ? neigh_periodic_work+0x767/0xcb0 [ 649.294539][ C1] do_softirq+0xb2/0xf0 [ 649.294557][ C1] [ 649.294561][ C1] [ 649.294566][ C1] __local_bh_enable_ip+0x100/0x120 [ 649.294585][ C1] neigh_periodic_work+0x767/0xcb0 [ 649.294600][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 649.294618][ C1] process_one_work+0x9c5/0x1ba0 [ 649.294642][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 649.294661][ C1] ? __pfx_process_one_work+0x10/0x10 [ 649.294681][ C1] ? assign_work+0x1a0/0x250 [ 649.294697][ C1] worker_thread+0x6c8/0xf00 [ 649.294717][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.294735][ C1] kthread+0x3af/0x750 [ 649.294751][ C1] ? __pfx_kthread+0x10/0x10 [ 649.294768][ C1] ? rcu_is_watching+0x12/0xc0 [ 649.294786][ C1] ? __pfx_kthread+0x10/0x10 [ 649.294802][ C1] ret_from_fork+0x45/0x80 [ 649.294818][ C1] ? __pfx_kthread+0x10/0x10 [ 649.294834][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.294853][ C1] [ 649.295710][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 649.295722][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 649.295742][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.295752][ T31] Call Trace: [ 649.295758][ T31] [ 649.295764][ T31] dump_stack_lvl+0x3d/0x1f0 [ 649.295791][ T31] panic+0x71d/0x800 [ 649.295810][ T31] ? __pfx_panic+0x10/0x10 [ 649.295827][ T31] ? __pfx__printk+0x10/0x10 [ 649.295844][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 649.295865][ T31] ? irq_work_claim+0x76/0xa0 [ 649.295885][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 649.295907][ T31] ? irq_work_queue+0x2a/0x80 [ 649.295926][ T31] ? watchdog+0xdcc/0x12b0 [ 649.295945][ T31] ? watchdog+0xdbf/0x12b0 [ 649.295967][ T31] watchdog+0xddd/0x12b0 [ 649.295989][ T31] ? __pfx_watchdog+0x10/0x10 [ 649.296008][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.296034][ T31] ? __kthread_parkme+0x148/0x220 [ 649.296052][ T31] ? __pfx_watchdog+0x10/0x10 [ 649.296073][ T31] kthread+0x3af/0x750 [ 649.296093][ T31] ? __pfx_kthread+0x10/0x10 [ 649.296115][ T31] ? rcu_is_watching+0x12/0xc0 [ 649.296138][ T31] ? __pfx_kthread+0x10/0x10 [ 649.296159][ T31] ret_from_fork+0x45/0x80 [ 649.296180][ T31] ? __pfx_kthread+0x10/0x10 [ 649.296200][ T31] ret_from_fork_asm+0x1a/0x30 [ 649.296227][ T31] [ 649.296482][ T31] Kernel Offset: disabled