last executing test programs: 8m16.927148555s ago: executing program 4 (id=670): utimes(0x0, &(0x7f0000000180)={{0x0, 0xea60}}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xd880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x800000000000025, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x515002, 0xc6) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x22, {0xffffffff, 0x3, 0x8, 0x8e6, 0x0, 0xbc6d}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000001000000001000000201000042020000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000002000000040007000000000080c30000290177f4"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8m14.469116491s ago: executing program 4 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x4945, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x1020, 0x0, 0x0, "dd0400", 0x0, 0xffff9832}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8m12.682773809s ago: executing program 4 (id=677): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r4, 0x7, 0x0}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) (rerun: 64) 8m12.393492058s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @multicast1, @link_local, @rand_addr=0x64010102}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_sfeatures}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 8m11.250909142s ago: executing program 4 (id=682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000a40)={0x0, r1}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000000)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x38, 0x67]}}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000500)={0x20, 0x39, 0x20, {0x20, 0xb, "6e08b4643119e3611ea176815c5911b63b601222d9881b350507afda1bdf"}}, &(0x7f0000000540)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000000680)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0xb, "2aaa3380"}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x3, "b7058ca2"}, @local=@item_012={0x1, 0x2, 0x8, 'u'}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf9, 0x1, {0x22, 0x720}}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x20, 0x14, 0xa7, "72476cb647a70aebb4983f2f2514811e376b0135842fa1d2eef13ee061bb9d4a8aa7f8ed6c096d6c5998ae2c4b7c8946e11abc56475d6a77ecc328221c7cc21f801ca4e8340a3bd9480966e6b369a1fbf498d9ebdfd4f2740729b5cde86d3b848640d55f1db9247598eebf48601613252f3a5b6d330d3060e731f3d39f6ef8835a8203b34694cd4cbb0c63c9de9669602460bac9f6785e27fcf91d496060bb311e1432708cfd72"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000008c0)={0x20, 0x1, 0x7b, "4fe310d2a3f35c0b65be55395eeb96d2d0e6510a61c57cfe15bdb12fb402425cefdc924918232d19be33f8083babc9d8744e56659d5bb952407e46caf450508103e433a48e59bac0423dfa714148ada5d661e76dcb525070e3c030f9804f520c16001770f9ce876706eadf33a695130adfad34adff1f3ecfef32c1"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x3}}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xda, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb12}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x3, 0xf, 0xa7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x2, 0x6, 0xff, 0x5}, 0x45, &(0x7f00000000c0)={0x5, 0xf, 0x45, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0xf}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x4, 0xf00, 0x2, [0x30, 0x3f3f, 0xffc0f0, 0xc0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "2ded7026262cc3430bd2cd97b48f783a"}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x32, &(0x7f00000003c0)=@string={0x32, 0x3, "3613a7ee41c66e953d7f0326c89067a535110dcffbea95a712d71e0bf0cc4b03eecd3514934d63c0382d688b2eccf92f"}}, {0x17, &(0x7f0000000400)=@string={0x17, 0x3, "af1032aa67962eb2470fe065c94fb20b6121d81b67"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x413}}]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 8m10.477624624s ago: executing program 4 (id=687): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3}, {0x4, 0x0, 0x1}}], 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x310) 8m9.952464197s ago: executing program 32 (id=687): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3}, {0x4, 0x0, 0x1}}], 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x310) 7m57.808209757s ago: executing program 0 (id=728): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0) r5 = socket(0x2b, 0x1, 0x1) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) read$usbfs(r4, &(0x7f00000001c0)=""/93, 0x5d) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x9, 0x0, @val=@iter={&(0x7f0000000080)=@task={r2, r3, r4}, 0x10}}, 0x20) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={[{@huge_always}]}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m53.553507626s ago: executing program 0 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x13}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) 7m53.241056781s ago: executing program 0 (id=742): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'macvlan0\x00'}}, 0x80) write$UHID_INPUT(r0, &(0x7f00000009c0)={0xf, {"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", 0x1000}}, 0x1006) 7m52.008972283s ago: executing program 0 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @multicast1, @link_local, @rand_addr=0x64010102}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_sfeatures}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 7m51.450129721s ago: executing program 0 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0xfffffe0f, 0x5, 0x28, 0x6, 0x0, 0x2, 0x6, 0x40, 0x401, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r2, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/234, 0xea}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000700)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz1\x00'}, 0x4, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) 7m50.949217486s ago: executing program 0 (id=749): setrlimit(0xc, &(0x7f0000000000)={0x9, 0x8001}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5076, &(0x7f00000002c0)={0x0, 0x7d44, 0x2000, 0x2, 0x8a}, &(0x7f0000000340), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}, 0xff}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x44, 0x2004, @fd=r1, 0x6f21, 0xc, 0x7f91, 0x19, 0x0, {0x2}}) r5 = socket(0x1f, 0xa, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000440), r5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, 0x0, 0x0) syz_usb_connect(0x2, 0x395, &(0x7f0000001840)={{0x12, 0x1, 0x110, 0xb5, 0xfa, 0x3a, 0x0, 0x46d, 0x8c1, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x1, 0x28, 0x9, 0x10, 0xc6, [{{0x9, 0x4, 0xee, 0x0, 0x8, 0xff, 0x1, 0x0, 0x2, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x62ae, 0x2, 0x7e, "30eb8a087a06f2"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x3, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x17, "d7362e7401"}, @as_header={0x7, 0x24, 0x1, 0x80, 0xf5, 0x1001}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x6, 0x2, "68c132181bdc30"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x8001, 0x8, 0x9}, [@mdlm_detail={0x8e, 0x24, 0x13, 0x7, "e3a6f1c95b3c130a85ec601d571aa534d3d4d417f370d078a923b00793126a843f6749e2da11b88afea80c3879046ecc951ed1801d91a385a09dd4b469cdbb9669a2386ec21d08493bb93a93abeeddd4cb6f848b702521ff3f85c4bfb563f7437e01c3153ab9e27b9e5bd41691f20bdd968037196f35a240b2f57d4dc5b4929c063351fbe3b7eaf90975"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @generic={0x25, 0x7, "28c5a1944c0995786d39a7391062b4b125a58759df5d4acf0922155b29188667f89df0"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x3}, @generic={0xc4, 0x21, "a140f8560054eaf4cafd4eae3d45c51a82be2436e95f223208eac04b13d666d7049be594b388e4f1c9cd595366933c3ece5ff889c4aeb8784d5ef4e36a6d8269c6c4784cc1d9365d6169d90349def54353e71f3304913fc7eecd62271c7dde6aae3b27112e28fa40fc19da314792f28a37d55c9cc1d49846421befe9bd9fe80f61685dfa7e36f7544420b1f0d3132b1c779d425bbbfecc42f0065e2e3b1f7c6530b72bf364fff50316981665df4517f2774455d8e7b2618fc10d2e739a93fae152cb"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x3, 0xfd, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x7, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x2, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x93}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf4, 0xf, 0x2, [@generic={0x7a, 0x11, "7457ba3e8d91d5b68bb42b7b1fcf742c0801614a3e4ecc5d3a8de0a2afd0a58a51be648aa033b7c72ea268e25ee895c8c8d0a860849f59ecf716310621a3b53a56f3978f49b3afab5de77bfe1e99fa499a741fdc49cf5629bfd8ff46ea91ea6fd67cc9f87f52da6f205011aa33dc9666118276f06f909c45"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xd, 0x5, 0x7, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xd8, 0x0, 0xff, [@generic={0xb4, 0x2, "04a8e21683432fca83b90a7ecef088352ed5fe2880dafdd6ab17f93bcb5848b3156c10b82008b4517c8cbd38166a6fc3332e966872c12cf55734dfe31955a409e294fdbe5a076e3bad73b1bd637499d54d58093044f29d3f38898efb3450653005a21b8f43da98c594a2f000f105e6f06bb25f5d907a45cdb5003154e857935b9dad890cc2f91fb790b49c9b53e8cba4f37ec926726c09bf27211ecf1629e1c12f2057e154559951e8df45821c3ae9d2c053"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x81, 0xa9, 0x10, 0x4}, 0xe1, &(0x7f0000000480)={0x5, 0xf, 0xe1, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f65eaf06391f28deee00a2a0d60cd456"}, @generic={0xc1, 0x10, 0xb, "a27184517d4ec1d496d7568afb4d0970b178742862dd9c382bca33ee8cb1feb82917c83a23aa4db148f7d703bdaeab5de3ccb5c81f30de64900afa77d5a28e37f015acd08145aa1e05f80e079ca3d92899678fd1c1b5f8445e7fb616c9b76f2ff667c4ff0f47b143ce26bf5b94070f943c0e00e7e257e455ecc97d54dd04a3479ae58ba182611491fd2e34789e7a7b9aa8cb2ca6852ff4d3e672d91c424d80a0df4164b7a9489c29e6e6766df1af49307acae3dae3a3178a50b9a4a76994"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0xc, 0xbca3}]}, 0x6, [{0x35, &(0x7f0000000600)=@string={0x35, 0x3, "5f946c75f68f6db40c696179912aa0a3676ae7a30e35e689e1fe73f701ac6893da1c5fcd69eb9177e380402c0f12193f496921"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0xb2, &(0x7f0000000740)=ANY=[@ANYBLOB="b203c897d598e05317b6bcc4e37654220b36fb9c7747b70689bef35df6dcefde65ac4f0a616d16dc739cdf3016a899b025548b0d7e828a625d94f0f66a4cf9eddb5af9510437ebb0bdf526c1b42d0de6172679c92ae8f557e21ca2fc45e00732afe8877378d66a980ec7a2af819982c1eefee6f0fa2de446e2c4a8249507ac004a5f9456b3fc4f679c75f47ecfd169c1db6604544fd5b1f77c03bf5a29cfd25a5eb3fe6f36881a2db2000000000000000000", @ANYRES16=r0]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc32}}, {0x60, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0]}]}) syz_open_dev$media(&(0x7f0000002940), 0x8, 0x1c3441) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000002a80)) 7m50.661581495s ago: executing program 33 (id=749): setrlimit(0xc, &(0x7f0000000000)={0x9, 0x8001}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x5076, &(0x7f00000002c0)={0x0, 0x7d44, 0x2000, 0x2, 0x8a}, &(0x7f0000000340), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}, 0xff}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x44, 0x2004, @fd=r1, 0x6f21, 0xc, 0x7f91, 0x19, 0x0, {0x2}}) r5 = socket(0x1f, 0xa, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000440), r5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, 0x0, 0x0) syz_usb_connect(0x2, 0x395, &(0x7f0000001840)={{0x12, 0x1, 0x110, 0xb5, 0xfa, 0x3a, 0x0, 0x46d, 0x8c1, 0x98c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x383, 0x1, 0x28, 0x9, 0x10, 0xc6, [{{0x9, 0x4, 0xee, 0x0, 0x8, 0xff, 0x1, 0x0, 0x2, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x62ae, 0x2, 0x7e, "30eb8a087a06f2"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x3, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x17, "d7362e7401"}, @as_header={0x7, 0x24, 0x1, 0x80, 0xf5, 0x1001}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x6, 0x2, "68c132181bdc30"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x8001, 0x8, 0x9}, [@mdlm_detail={0x8e, 0x24, 0x13, 0x7, "e3a6f1c95b3c130a85ec601d571aa534d3d4d417f370d078a923b00793126a843f6749e2da11b88afea80c3879046ecc951ed1801d91a385a09dd4b469cdbb9669a2386ec21d08493bb93a93abeeddd4cb6f848b702521ff3f85c4bfb563f7437e01c3153ab9e27b9e5bd41691f20bdd968037196f35a240b2f57d4dc5b4929c063351fbe3b7eaf90975"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @generic={0x25, 0x7, "28c5a1944c0995786d39a7391062b4b125a58759df5d4acf0922155b29188667f89df0"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x3}, @generic={0xc4, 0x21, "a140f8560054eaf4cafd4eae3d45c51a82be2436e95f223208eac04b13d666d7049be594b388e4f1c9cd595366933c3ece5ff889c4aeb8784d5ef4e36a6d8269c6c4784cc1d9365d6169d90349def54353e71f3304913fc7eecd62271c7dde6aae3b27112e28fa40fc19da314792f28a37d55c9cc1d49846421befe9bd9fe80f61685dfa7e36f7544420b1f0d3132b1c779d425bbbfecc42f0065e2e3b1f7c6530b72bf364fff50316981665df4517f2774455d8e7b2618fc10d2e739a93fae152cb"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x3, 0xfd, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x7, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x2, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x93}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf4, 0xf, 0x2, [@generic={0x7a, 0x11, "7457ba3e8d91d5b68bb42b7b1fcf742c0801614a3e4ecc5d3a8de0a2afd0a58a51be648aa033b7c72ea268e25ee895c8c8d0a860849f59ecf716310621a3b53a56f3978f49b3afab5de77bfe1e99fa499a741fdc49cf5629bfd8ff46ea91ea6fd67cc9f87f52da6f205011aa33dc9666118276f06f909c45"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xd, 0x5, 0x7, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xd8, 0x0, 0xff, [@generic={0xb4, 0x2, "04a8e21683432fca83b90a7ecef088352ed5fe2880dafdd6ab17f93bcb5848b3156c10b82008b4517c8cbd38166a6fc3332e966872c12cf55734dfe31955a409e294fdbe5a076e3bad73b1bd637499d54d58093044f29d3f38898efb3450653005a21b8f43da98c594a2f000f105e6f06bb25f5d907a45cdb5003154e857935b9dad890cc2f91fb790b49c9b53e8cba4f37ec926726c09bf27211ecf1629e1c12f2057e154559951e8df45821c3ae9d2c053"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x81, 0xa9, 0x10, 0x4}, 0xe1, &(0x7f0000000480)={0x5, 0xf, 0xe1, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f65eaf06391f28deee00a2a0d60cd456"}, @generic={0xc1, 0x10, 0xb, "a27184517d4ec1d496d7568afb4d0970b178742862dd9c382bca33ee8cb1feb82917c83a23aa4db148f7d703bdaeab5de3ccb5c81f30de64900afa77d5a28e37f015acd08145aa1e05f80e079ca3d92899678fd1c1b5f8445e7fb616c9b76f2ff667c4ff0f47b143ce26bf5b94070f943c0e00e7e257e455ecc97d54dd04a3479ae58ba182611491fd2e34789e7a7b9aa8cb2ca6852ff4d3e672d91c424d80a0df4164b7a9489c29e6e6766df1af49307acae3dae3a3178a50b9a4a76994"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0xc, 0xbca3}]}, 0x6, [{0x35, &(0x7f0000000600)=@string={0x35, 0x3, "5f946c75f68f6db40c696179912aa0a3676ae7a30e35e689e1fe73f701ac6893da1c5fcd69eb9177e380402c0f12193f496921"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0xb2, &(0x7f0000000740)=ANY=[@ANYBLOB="b203c897d598e05317b6bcc4e37654220b36fb9c7747b70689bef35df6dcefde65ac4f0a616d16dc739cdf3016a899b025548b0d7e828a625d94f0f66a4cf9eddb5af9510437ebb0bdf526c1b42d0de6172679c92ae8f557e21ca2fc45e00732afe8877378d66a980ec7a2af819982c1eefee6f0fa2de446e2c4a8249507ac004a5f9456b3fc4f679c75f47ecfd169c1db6604544fd5b1f77c03bf5a29cfd25a5eb3fe6f36881a2db2000000000000000000", @ANYRES16=r0]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc32}}, {0x60, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0]}]}) syz_open_dev$media(&(0x7f0000002940), 0x8, 0x1c3441) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000002a80)) 7m49.524078088s ago: executing program 3 (id=751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7m49.25403209s ago: executing program 3 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 6) 7m48.62147882s ago: executing program 3 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) lsetxattr$system_posix_acl(&(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x20, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x3}}, 0xc, 0x2) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0', [{0x20, 'system.posix_acl_access\x00'}, {0x20, 'system.posix_acl_access\x00'}, {}, {0x20, './:^/$['}, {0x20, 'system.posix_acl_access\x00'}, {}, {0x20, 'system.posix_acl_access\x00'}, {0x20, '@'}], 0xa, "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"}, 0x107b) 7m48.229756851s ago: executing program 3 (id=759): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(0x0, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xb, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef33f86bf01933bdb6fd7ecdd91b59ca8d541", "78042a8bde94000000008d030000004f07b84819ffdf4a0400", [0x7fffffff, 0x7]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001400010000000000000000002800110001"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0xa8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$packet_buf(r8, 0x107, 0xb, 0x0, &(0x7f0000000180)) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 7m48.021403115s ago: executing program 3 (id=761): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES8=r2], 0x30}, 0x1, 0x0, 0x0, 0x2048891}, 0x4c000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000810) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) pread64(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f0000000480)={'syz_tun\x00', 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_open_dev$vivid(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r10, 0x80045643, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000580)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffa) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7m46.976225245s ago: executing program 3 (id=763): r0 = syz_usbip_server_init(0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r2, r3+60000000}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x620240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r6 = fcntl$getown(r0, 0x9) prlimit64(r6, 0x8, &(0x7f0000000040)={0x7, 0x7}, 0x0) write$usbip_server(r0, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x7ff, 0x0, 0x1, 0xfffffff9}, {0x8}}, 0x30) 7m46.17496347s ago: executing program 34 (id=763): r0 = syz_usbip_server_init(0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r2, r3+60000000}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x620240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r6 = fcntl$getown(r0, 0x9) prlimit64(r6, 0x8, &(0x7f0000000040)={0x7, 0x7}, 0x0) write$usbip_server(r0, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x7ff, 0x0, 0x1, 0xfffffff9}, {0x8}}, 0x30) 6m42.64595018s ago: executing program 1 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @multicast1, @link_local, @rand_addr=0x64010102}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_sfeatures}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 6m41.908778702s ago: executing program 1 (id=972): socket(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="7466642c726d557b009c83b0565400c80447f69966646e6f3d0000000000", @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES64=r3, @ANYBLOB=',\x00']) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f00000004c0)=@ethtool_regs={0x4, 0x54f, 0x62, "d071ac522d050e834e89b9e91c131dc58a37bcb43f265e2ae3bfa7b1fdf88a1113ad24623ee12d243c872bbd759e231043306e9f23401af5a39423f5e2fb7ae608db3a7e1fefbd1518b98417d6b1bea23ba3df84cdad8b69fd1ae8e00aeca8a52f6e"}}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r6 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1e}}}, 0x24}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000140)={0x0, 0x0, 0x9}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r6, @ANYRES32=r7, @ANYBLOB="010000000000000000000000000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007dc3dcd2d97800f6771d9a24d8563a96ea96226d243d21bb9ccd4f539f2479f2c36fb"], 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x4004) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000480)={0x3, 0x0, 0x98, &(0x7f00000003c0)={0x2, 0x2aa6, 0x3}}) 6m40.719952253s ago: executing program 1 (id=977): r0 = socket$inet6(0x10, 0xa, 0x1000002) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x140c, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4008004) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffffffffff9) syz_open_dev$sndmidi(&(0x7f0000000000), 0x87, 0x101000) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="5500000020007fafb72d13b2a4a2719302000000030b43f06c26236925000400fe7f0000bd2dca8a9848a3c728f133d109000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9bb", 0x56}], 0x1}, 0x0) 6m40.51271404s ago: executing program 1 (id=979): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000004e7957eb0bffa43900000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES64=r0, @ANYBLOB="00000000000000000000000000000000000000009154be1dac86e6a455aeec48f991042d20e79d5158a6d5e8169006a7b66e6fdfbc2e1d0449fdab22ab36fa2434585b5c12d16ae2c1661d281e21dccdc0a8822c68626cf8ac282191c7456a7bf191122f4892b16c8f54e6d31874f2e35eb1bab0f78ef690f7052079af37754997a7ffd471ef5883e007da4ce7958d75bb8dc4d1ec195a29b54044caec19b8b855f2055d6c0dd3ef114e0bc7bfcd", @ANYRES32=0x0, @ANYRES32=r2], 0x50) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000181000/0x1000)=nil, 0x1000}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setaffinity(r8, 0x0, 0x0) gettid() r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 6m39.395155576s ago: executing program 1 (id=981): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xc) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 6m39.121446983s ago: executing program 1 (id=983): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 6m23.220389006s ago: executing program 35 (id=983): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 55.771581524s ago: executing program 8 (id=2053): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0xfbfc, 0x4}, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000038e9e0100006802161dcc3c18000000009500"/31], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000400000000000000", @ANYRES32=r3, @ANYRES64=0x0], 0x20) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0x0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x401}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) 54.861397178s ago: executing program 2 (id=2054): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000125e4b4d000000480000000900000000000000010000030000000003000000020000000000000000000000406d04db62bc617f000000000000000300000000030000000400000003000000040000000000000803000000"], 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlock2(&(0x7f0000e77000/0x3000)=nil, 0x3000, 0x1) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) migrate_pages(r5, 0xb, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) 53.089224355s ago: executing program 8 (id=2058): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4000810) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r1, @ANYRESHEX=0x0], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x40844) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x4}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0x6, {0x8, 0x30}, {0x2}, @time=@tick=0x400001}], 0x38) 52.489159609s ago: executing program 2 (id=2061): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000014c0)=[{{&(0x7f0000000c00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)}, {&(0x7f0000001000)=""/79, 0x4f}], 0x2, &(0x7f0000000380)=""/47, 0x2f}, 0x68}, {{&(0x7f0000000f80)=@xdp, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/230, 0xe6}, {&(0x7f0000000440)=""/47, 0x2f}], 0x2, &(0x7f0000001640)=""/110, 0x6e}, 0x100}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001780)=""/28, 0x1c}, {&(0x7f00000015c0)=""/94, 0x5e}, {&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f00000017c0)=""/186, 0xba}], 0x4, &(0x7f0000001280)=""/197, 0xc5}, 0x8}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001400)=""/119, 0x77}], 0x2}, 0x6}], 0x4, 0x10143, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0xfffffffffffffd8e, 0x5, 0x0, 0x5, 0x0, 0x2000003, 0x1000, 0xfff7fffffffffffe, 0x1, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82540, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x541400, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x645, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002848946ff4d1d0c009711010203010902330603210010010904140f00b80fb70609047e0809c4e4130109050d10ff03190e1d09058001ff030600096623fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d61c31f809050e044000070d0509050c1d0000011f087b0dc5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69072501f6e0030009050c101000020e0d410c26f5046af0276a40f990be2b5c39e1a4b696224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7072501808f060009050901ff038a070e5c2358f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0516a01d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754270905090110000d02fb0725010301050009050d00080006040809050c000002090200072501030403006f2162577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf090406810efc5b82d70921faff800122470209050910400040080f09050100000207340607250183080010090500082000090c042e30adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5c0404692409050c032000080dca07250180073a0009050c007802050140072501030206000905070008008004ab0725010003eff7072501022a08000905020210006ff6a3696c4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0ec0fc8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df09050400400002380807250100090700020609050f1020004c01fe2f0f11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2e9d95f0090880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e0905080240000301810725018106040007250183810a000905030308008f04c1090502001000a9ef0609050d1000020807810725018003010009050e100800400307642254d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb0a314b143e0f2ad03248000000000000000000"], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050f1900020a1003020c655b681110d6cb85cd87aef801"], 0x4, [{0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "62dd396ed9f6d9bf69252fc70cbd708841f5f9950454323e22900253b3695ae886d90228ef82a4bb1fe8b0da3e06fc0e9d1dc58884b27df1c20f9739a714571ebeeb600f193a7d018f075a02c62651d5d46fac40036a4e4996fc3ab74b9e0ac84e9f3412a8f53de6f36df89e1022ce648101c1f4a7b986adc33b8510ace339159da5483e3153c66ad185ed040cbf3d1418c10a56e45d48cff8ebc05d30fba421283bd4fa65"}}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) r11 = openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f00000001c0)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000b00)={{0x3, @name="7397be59ae94e60ef37478ce5ebed11f00dc845c0c539d9bfeee911c1a09a2de"}, "e02d58a15094971099e2042c3dcde3f52b44e6453658ec47f7ca3f4a51996417", 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 52.13296598s ago: executing program 8 (id=2064): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2084) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 49.902531176s ago: executing program 2 (id=2073): r0 = io_uring_setup(0x7d28, &(0x7f0000000340)={0x0, 0x38d7, 0x10000, 0x4000000, 0x3b8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f00000000c0)=@framed={{0x85, 0x0, 0x0, 0x0, 0xa0, 0x27}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x88) close(r2) socket$unix(0x1, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x20000001e093923, 0x4a4140) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x7f, 0x7, 0x75a, 0x103, 0xffffffffffffffff, 0x3, '\x00', r1, r2, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 49.436222396s ago: executing program 2 (id=2074): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}], 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x200, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000000000)) 49.197600529s ago: executing program 2 (id=2075): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x55, 0xa, 0x3, "387c000000000000d97c940900", 0x3631564e}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4800) 47.529783644s ago: executing program 7 (id=2081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/208, 0xd0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x15, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000300)) tkill(r0, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 47.511858072s ago: executing program 2 (id=2082): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) (fail_nth: 7) r1 = semget$private(0x0, 0x4000000009, 0x88) semctl$SEM_STAT(r1, 0x3, 0x12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f0000000500)={0xeb, 0x0, 0x4}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000003"]) syz_usb_disconnect(r0) 47.388231883s ago: executing program 7 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000001c0)={0x20, 0x12, 0x51, "a0bf1a3d1af3b8d85d8fc93975dea1a14af2ba751c2ce5facea67e843e0a02154c54218f2281ee66e1758f77ff804542777d4ddcf176c1352b16531b5b974a6c50c58a67ed4cf90bb422c7fad341074275"}, 0x0, 0x0, 0x0, 0x0}) fcntl$setflags(r0, 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x7, "629dc26bd12c14"}, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14012000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x0) 47.387778852s ago: executing program 8 (id=2086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) r1 = semget$private(0x0, 0x4000000009, 0x88) semctl$SEM_STAT(r1, 0x3, 0x12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000f9000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 47.261414496s ago: executing program 6 (id=2087): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10001, 0x0, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x10, 0x80, 0xffffffffffffffff, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x40000, 0x7, 0x7f, 0x9, 0x1000000000400001, 0xfffffffffffffffd, 0x1002], 0x1, 0x3e0602}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xf, 0x0, 0x0, 0x3, 0x3, 0xff, 0x6, 0x1, 0x6, 0xff, 0x9, 0x0, 0x28000, 0x1, 0xc9, 0x46, 0x4, 0x9, '\x00', 0x4, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r4, 0x0, 0x0, 0x105, &(0x7f0000000180)={{0x3, @default}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 47.218197069s ago: executing program 5 (id=2088): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x2080, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@empty, 0x0, 0x40, 0x0, 0x1, 0x0, 0xa0, 0x0, 0x32}, {@in=@multicast1, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc82}, {}, {0x1, 0x5}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'sha1-generic\x00'}}}]}, 0x138}}, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffe8b) close(r0) 46.450300938s ago: executing program 5 (id=2089): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea560300000000000000a3ae714d", 0x6, 0x0, 0x5a7a}, 0x3c) 45.745501314s ago: executing program 6 (id=2090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x200000, 0xcb8b, 0x0, @void, @value}, 0x28) 45.651851666s ago: executing program 6 (id=2091): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2", 0x37) 45.579684623s ago: executing program 5 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffd, 0x804000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000001180)={0xa, @vbi={0x80000000, 0x800, 0xf, 0x47524247, [0x2, 0x2], [0x0, 0x4], 0x108}}) socket$kcm(0x29, 0x5, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r3, 0x6}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000f3b1e150ca24e0619d8dc5a75382148aa5cef340fff898858dac4d8ef54704585a9890e1540c7b91aca43118dc07b0c6279c", @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 44.435692454s ago: executing program 5 (id=2093): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x55, 0xa, 0x3, "387c000000000000d97c940900", 0x3631564e}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000030605000000000000000000050000030900020073797a3200"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4800) 44.288710469s ago: executing program 7 (id=2094): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x32a, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 43.88388079s ago: executing program 6 (id=2095): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/208, 0xd0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x15, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000300)) tkill(r0, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 43.735594964s ago: executing program 6 (id=2096): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2084) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 43.697056276s ago: executing program 8 (id=2097): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000380)={0xffffffffffffff89, 0x2, r6}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc0405668, &(0x7f0000000300)={0x8, 0x0, 0x1, {0xfffffffd, 0x4004001, 0x0, 0x4}}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r9, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 43.696429454s ago: executing program 5 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d972a440b72040155a01000203010902120001000000000904000000ff0000001949661845990d295b3db729b5e249fdb9e9752c6a0e17915ddf6bf7c4d73116ce959564e04b117ff6a348f62b2fb5ac07a96d2c733e3813c47cedb6fdf2ffe17475b81cf4824f8a581246d5b74ee811bccaffb3146d6a2152ddfdfd468ef35fcfe03bce6508b3e1453fce6f6249af30cb1806000000000000cf8957d378e9ede7457fa691b211edeb24ed5d320d857edd1e2e90b2c0cc8f858202e08535546d80f5f2bc4536a8f4d10d49f644427980bf4120bb59359c1ab66157c7621d657a66043aff44667e8f9170cb967c32035ef86f6fcbd1613144848fe558052db1dc15211a8d43639ff227b98008436169e282e785eadd113c0735d962230714d853702e938737b924661d0676bbb36a2aaee954698bcbd376fe88168b5914b02fcf77aa1c2305920cbdcd5f1fe732c46b72f2f9ac6f89945c9e793fd1ffe0f318b4f2956568ed6ef7f97b873c2233bf275822ef3c48e352f850db46993a77a7ce8829face"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioperm(0x0, 0xab49, 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0xe, 0xa, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x7b, 0xc60e}}, 0x44) setpgid(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000000a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000a08000240000000030900010073797a30000000000900020073"], 0x7c}}, 0x0) 43.655455713s ago: executing program 7 (id=2099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2500, 0xe, 0x0, &(0x7f0000000580)="ddb6d048e9c35688177609b4ebd1", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.425413645s ago: executing program 7 (id=2100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="fbe2ffddffde013453218dba9f78f064e92f4dff09cbc40836da5cc26588ee5ddf4a12046a2da47e8bd2d62c5537c8f0bde32935fffaf00158fe0a0fdb9e9876c32835d83324b2e87824bf82263b9e82e9a4dbe17322bbb0e014ec5eaf71c636d674b8d58a26c0edb90c17ec24c6f83650992398ef2af8d85ea3f6", 0x7b}], 0x2, &(0x7f0000000600)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x90}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010118090000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42242, 0x0) setresuid(0x0, 0xee00, 0x0) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) 35.842542563s ago: executing program 8 (id=2101): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4000810) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=0x0], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x40844) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x4}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0x6, {0x8, 0x30}, {0x2}, @time=@tick=0x400001}], 0x38) 35.38168396s ago: executing program 6 (id=2102): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea560300000000000000a3ae714d", 0x6, 0x0, 0x5a7a}, 0x3c) 35.241463867s ago: executing program 5 (id=2103): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1]) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) read$char_usb(0xffffffffffffffff, &(0x7f0000001980)=""/179, 0xb3) 34.853290265s ago: executing program 7 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffd, 0x804000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000001180)={0xa, @vbi={0x80000000, 0x800, 0xf, 0x47524247, [0x2, 0x2], [0x0, 0x4], 0x108}}) socket$kcm(0x29, 0x5, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r3, 0x6}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000f3b1e150ca24e0619d8dc5a75382148aa5cef340fff898858dac4d8ef54704585a9890e1540c7b91aca43118dc07b0c6279c", @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 0s ago: executing program 36 (id=2082): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) (fail_nth: 7) r1 = semget$private(0x0, 0x4000000009, 0x88) semctl$SEM_STAT(r1, 0x3, 0x12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f0000000500)={0xeb, 0x0, 0x4}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000003"]) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): async page read [ 652.473637][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.738703][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.900600][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.908793][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.922405][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.986515][ T6019] ldm_validate_partition_table(): Disk read failed. [ 653.011845][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.032438][ T6019] Dev loop6: unable to read RDB block 0 [ 653.038414][ T6019] loop6: unable to read partition table [ 653.163810][T13356] nbd: must specify a size in bytes for the device [ 655.268153][T13371] nbd: must specify a size in bytes for the device [ 655.626160][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1850'. [ 656.935233][T13385] overlayfs: failed to resolve './file1': -2 [ 657.904659][ T30] audit: type=1400 audit(1747224142.849:1084): avc: denied { lock } for pid=13390 comm="syz.2.1855" path="socket:[40009]" dev="sockfs" ino=40009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 658.010240][T13397] tmpfs: Bad value for 'mpol' [ 658.595298][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'. [ 658.637338][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1857'. [ 658.763124][T13409] xt_hashlimit: size too large, truncated to 1048576 [ 660.310007][ T30] audit: type=1400 audit(1747224145.039:1085): avc: denied { write } for pid=13420 comm="syz.7.1862" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 660.728115][T13431] veth0: entered promiscuous mode [ 660.779307][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1864'. [ 660.910352][T13435] veth0: entered promiscuous mode [ 660.933524][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 660.954830][T13430] veth0: left promiscuous mode [ 661.071845][T13434] veth0: left promiscuous mode [ 661.144443][ T30] audit: type=1400 audit(1747224146.079:1086): avc: denied { read } for pid=13438 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 661.163919][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.461298][T13440] syz.7.1868 (13440): drop_caches: 2 [ 661.495889][T13440] syz.7.1868 (13440): drop_caches: 2 [ 662.979101][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 663.177058][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 663.499151][T13472] xt_hashlimit: size too large, truncated to 1048576 [ 665.641501][ T30] audit: type=1800 audit(1747224150.549:1087): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1881" name="file1" dev="overlay" ino=1937 res=0 errno=0 [ 665.778816][ T30] audit: type=1400 audit(1747224150.649:1088): avc: denied { write } for pid=13489 comm="syz.2.1881" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 665.925408][ T30] audit: type=1400 audit(1747224150.649:1089): avc: denied { ioctl } for pid=13489 comm="syz.2.1881" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 665.975276][T13502] loop8: detected capacity change from 0 to 7 [ 665.987167][T13502] Dev loop8: unable to read RDB block 7 [ 666.007945][T13502] loop8: unable to read partition table [ 666.015855][T13502] loop8: partition table beyond EOD, truncated [ 666.038260][T13502] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 666.280721][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 666.308944][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 666.381563][T10082] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 666.544143][T10082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 666.555489][T13511] team_slave_0: entered promiscuous mode [ 666.561142][T13511] team_slave_1: entered promiscuous mode [ 666.588435][T10082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 666.598404][T13511] macsec1: entered promiscuous mode [ 666.604058][T10082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 666.615238][T13511] team0: entered promiscuous mode [ 666.623478][T10082] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 666.633066][T10082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.643345][T10082] usb 7-1: Product: syz [ 666.648646][T13511] team0: left promiscuous mode [ 666.653554][T10082] usb 7-1: Manufacturer: syz [ 666.662786][T10082] usb 7-1: SerialNumber: syz [ 666.667916][T13511] team_slave_0: left promiscuous mode [ 666.673397][T13511] team_slave_1: left promiscuous mode [ 666.686720][ T5185] Dev loop8: unable to read RDB block 7 [ 666.689680][T10082] usb 7-1: config 0 descriptor?? [ 666.693846][ T5185] loop8: unable to read partition table [ 666.707335][ T5185] loop8: partition table beyond EOD, truncated [ 666.787653][T13516] syz.8.1889 (13516): drop_caches: 2 [ 666.831538][T13516] syz.8.1889 (13516): drop_caches: 2 [ 666.937560][T10082] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 667.115918][T13505] FAULT_INJECTION: forcing a failure. [ 667.115918][T13505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.199982][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.6.1884 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 667.200012][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.200024][T13505] Call Trace: [ 667.200031][T13505] [ 667.200038][T13505] dump_stack_lvl+0x16c/0x1f0 [ 667.200070][T13505] should_fail_ex+0x512/0x640 [ 667.200099][T13505] _copy_to_user+0x32/0xd0 [ 667.200128][T13505] simple_read_from_buffer+0xcb/0x170 [ 667.200158][T13505] proc_fail_nth_read+0x197/0x270 [ 667.200187][T13505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.200216][T13505] ? rw_verify_area+0xcf/0x680 [ 667.200239][T13505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.200266][T13505] vfs_read+0x1e1/0xc70 [ 667.200296][T13505] ? __pfx___mutex_lock+0x10/0x10 [ 667.200322][T13505] ? __pfx_vfs_read+0x10/0x10 [ 667.200356][T13505] ? __fget_files+0x20e/0x3c0 [ 667.200382][T13505] ksys_read+0x12a/0x240 [ 667.200408][T13505] ? __pfx_ksys_read+0x10/0x10 [ 667.200443][T13505] do_syscall_64+0xcd/0x260 [ 667.200471][T13505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.200489][T13505] RIP: 0033:0x7f38c478d37c [ 667.200503][T13505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 667.200520][T13505] RSP: 002b:00007f38c568e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.200540][T13505] RAX: ffffffffffffffda RBX: 00007f38c49b5fa0 RCX: 00007f38c478d37c [ 667.200552][T13505] RDX: 000000000000000f RSI: 00007f38c568e0a0 RDI: 0000000000000006 [ 667.200563][T13505] RBP: 00007f38c568e090 R08: 0000000000000000 R09: 00007f38c568d987 [ 667.200574][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.200585][T13505] R13: 0000000000000000 R14: 00007f38c49b5fa0 R15: 00007ffdb6f4fad8 [ 667.200611][T13505] [ 667.618954][T13524] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 668.109826][T12426] usb 7-1: USB disconnect, device number 28 [ 669.243821][T13539] xt_hashlimit: size too large, truncated to 1048576 [ 670.740822][T13567] team_slave_0: entered promiscuous mode [ 670.746665][T13567] team_slave_1: entered promiscuous mode [ 670.771642][T13567] macsec1: entered promiscuous mode [ 670.777006][T13567] team0: entered promiscuous mode [ 670.789971][T13567] team0: left promiscuous mode [ 670.796206][T13567] team_slave_0: left promiscuous mode [ 670.801745][T13567] team_slave_1: left promiscuous mode [ 670.871469][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 671.137754][ T24] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 671.187199][ T24] usb 6-1: config 2 has no interface number 0 [ 671.222545][ T24] usb 6-1: config 2 interface 86 has no altsetting 0 [ 671.305732][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 671.369173][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.378642][ T24] usb 6-1: Product: syz [ 671.387236][ T24] usb 6-1: Manufacturer: syz [ 671.400401][ T24] usb 6-1: SerialNumber: syz [ 671.780239][ T24] usb-storage 6-1:2.86: USB Mass Storage device detected [ 672.321163][ T24] option 6-1:2.86: GSM modem (1-port) converter detected [ 672.967245][ T24] usb 6-1: USB disconnect, device number 48 [ 672.981932][ T24] option 6-1:2.86: device disconnected [ 674.546586][T13616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13616 comm=syz.6.1916 [ 674.761557][T10082] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 675.792446][T10082] usb 9-1: Using ep0 maxpacket: 16 [ 675.811926][T10082] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 675.825484][T10082] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.850379][T10082] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 675.863532][T10082] usb 9-1: config 0 interface 0 has no altsetting 0 [ 675.870277][T10082] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 675.880152][T10082] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.902415][T10082] usb 9-1: config 0 descriptor?? [ 676.141483][ T24] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 676.293080][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 676.302250][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.312128][ T24] usb 3-1: config 0 descriptor?? [ 676.324538][T10082] hid-alps 0003:044E:120B.001D: item fetching failed at offset 0/3 [ 676.334269][T10082] hid-alps 0003:044E:120B.001D: parse failed [ 676.340377][T10082] hid-alps 0003:044E:120B.001D: probe with driver hid-alps failed with error -22 [ 676.361508][ T1168] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 676.391884][ T5863] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 676.513009][ T1168] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 676.521128][ T1168] usb 6-1: config 2 has no interface number 0 [ 676.527874][ T1168] usb 6-1: config 2 interface 86 has no altsetting 0 [ 676.579515][ T5863] usb 7-1: config 2 has an invalid interface number: 86 but max is 0 [ 676.622742][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 676.636005][ T1168] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 676.682524][ T5863] usb 7-1: config 2 has no interface number 0 [ 676.705889][ T1168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.761468][ T5863] usb 7-1: config 2 interface 86 has no altsetting 0 [ 676.771341][ T1168] usb 6-1: Product: syz [ 676.776782][ T1168] usb 6-1: Manufacturer: syz [ 676.782055][ T1168] usb 6-1: SerialNumber: syz [ 676.890396][ T5863] usb 7-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 677.171812][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.194982][ T24] usb 9-1: USB disconnect, device number 21 [ 677.230610][ T5863] usb 7-1: Product: syz [ 677.244471][ T5863] usb 7-1: Manufacturer: syz [ 677.244800][T12426] usb 3-1: USB disconnect, device number 67 [ 677.263799][ T5863] usb 7-1: SerialNumber: syz [ 677.395711][T13630] bond_slave_0: entered promiscuous mode [ 677.401448][T13630] bond_slave_1: entered promiscuous mode [ 677.408482][T13630] macsec1: entered promiscuous mode [ 677.413971][T13630] bond0: entered promiscuous mode [ 677.421790][T13630] bond0: left promiscuous mode [ 677.427065][T13630] bond_slave_0: left promiscuous mode [ 677.432549][T13630] bond_slave_1: left promiscuous mode [ 677.515685][ T5863] usb-storage 7-1:2.86: USB Mass Storage device detected [ 677.532492][ T1168] usb-storage 6-1:2.86: USB Mass Storage device detected [ 677.564456][ T5863] option 7-1:2.86: GSM modem (1-port) converter detected [ 677.576125][ T1168] option 6-1:2.86: GSM modem (1-port) converter detected [ 677.589489][ T5863] usb 7-1: USB disconnect, device number 29 [ 677.610885][ T5863] option 7-1:2.86: device disconnected [ 677.622977][ T1168] usb 6-1: USB disconnect, device number 49 [ 677.635129][ T1168] option 6-1:2.86: device disconnected [ 678.201824][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 678.414466][ T1168] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 678.521732][T13654] FAULT_INJECTION: forcing a failure. [ 678.521732][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 678.538972][T13654] CPU: 1 UID: 0 PID: 13654 Comm: syz.5.1930 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 678.538999][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 678.539009][T13654] Call Trace: [ 678.539016][T13654] [ 678.539024][T13654] dump_stack_lvl+0x16c/0x1f0 [ 678.539053][T13654] should_fail_ex+0x512/0x640 [ 678.539077][T13654] ? fs_reclaim_acquire+0xae/0x150 [ 678.539103][T13654] ? tomoyo_encode2+0x100/0x3e0 [ 678.539127][T13654] should_failslab+0xc2/0x120 [ 678.539147][T13654] __kmalloc_noprof+0xd2/0x510 [ 678.539165][T13654] ? d_absolute_path+0x136/0x1a0 [ 678.539191][T13654] tomoyo_encode2+0x100/0x3e0 [ 678.539220][T13654] tomoyo_encode+0x29/0x50 [ 678.539243][T13654] tomoyo_realpath_from_path+0x18f/0x6e0 [ 678.539277][T13654] tomoyo_path_number_perm+0x245/0x580 [ 678.539298][T13654] ? tomoyo_path_number_perm+0x237/0x580 [ 678.539323][T13654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 678.539347][T13654] ? find_held_lock+0x2b/0x80 [ 678.539393][T13654] ? find_held_lock+0x2b/0x80 [ 678.539412][T13654] ? hook_file_ioctl_common+0x145/0x410 [ 678.539438][T13654] ? __fget_files+0x20e/0x3c0 [ 678.539460][T13654] security_file_ioctl+0x9b/0x240 [ 678.539487][T13654] __x64_sys_ioctl+0xb7/0x200 [ 678.539513][T13654] do_syscall_64+0xcd/0x260 [ 678.539540][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.539558][T13654] RIP: 0033:0x7f3d41b8e969 [ 678.539576][T13654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.539594][T13654] RSP: 002b:00007f3d3f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.539618][T13654] RAX: ffffffffffffffda RBX: 00007f3d41db6080 RCX: 00007f3d41b8e969 [ 678.539630][T13654] RDX: 0000200000000080 RSI: 0000000000005414 RDI: 0000000000000004 [ 678.539641][T13654] RBP: 00007f3d3f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 678.539652][T13654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.539662][T13654] R13: 0000000000000000 R14: 00007f3d41db6080 R15: 00007fff977c9e28 [ 678.539687][T13654] [ 678.539718][T13654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.591473][ T1168] usb 9-1: Using ep0 maxpacket: 16 [ 678.621648][ T30] audit: type=1400 audit(1747224163.549:1090): avc: denied { ioctl } for pid=13650 comm="syz.5.1930" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 678.653663][ T1168] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 678.657034][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 678.665322][ T1168] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.668982][ T24] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 678.673825][ T1168] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.677407][ T24] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.713646][ T1168] usb 9-1: config 0 interface 0 has no altsetting 0 [ 678.742303][ T24] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.872256][ T1168] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 678.886137][ T1168] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.934743][ T1168] usb 9-1: config 0 descriptor?? [ 680.059676][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.066512][ T24] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 680.075788][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.089739][ T24] usb 3-1: config 0 descriptor?? [ 680.136825][ T1168] hid-alps 0003:044E:120B.001E: item fetching failed at offset 0/3 [ 680.150192][ T1168] hid-alps 0003:044E:120B.001E: parse failed [ 680.611037][ T24] hid-alps 0003:044E:120B.001F: item fetching failed at offset 0/3 [ 680.662625][ T24] hid-alps 0003:044E:120B.001F: parse failed [ 680.685778][ T24] hid-alps 0003:044E:120B.001F: probe with driver hid-alps failed with error -22 [ 681.712089][ T1168] hid-alps 0003:044E:120B.001E: probe with driver hid-alps failed with error -22 [ 681.799017][ T24] usb 3-1: USB disconnect, device number 68 [ 681.913298][T13680] FAULT_INJECTION: forcing a failure. [ 681.913298][T13680] name failslab, interval 1, probability 0, space 0, times 0 [ 681.930965][T13680] CPU: 0 UID: 0 PID: 13680 Comm: syz.7.1937 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 681.930992][T13680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.931003][T13680] Call Trace: [ 681.931010][T13680] [ 681.931017][T13680] dump_stack_lvl+0x16c/0x1f0 [ 681.931047][T13680] should_fail_ex+0x512/0x640 [ 681.931071][T13680] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 681.931091][T13680] should_failslab+0xc2/0x120 [ 681.931111][T13680] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 681.931129][T13680] ? d_instantiate+0x77/0x90 [ 681.931148][T13680] ? alloc_empty_file+0x55/0x1e0 [ 681.931172][T13680] alloc_empty_file+0x55/0x1e0 [ 681.931193][T13680] alloc_file_pseudo+0x13a/0x230 [ 681.931215][T13680] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 681.931245][T13680] __anon_inode_getfile+0xf7/0x370 [ 681.931267][T13680] anon_inode_getfd+0x52/0xb0 [ 681.931286][T13680] __x64_sys_fsopen+0x18b/0x240 [ 681.931308][T13680] do_syscall_64+0xcd/0x260 [ 681.931340][T13680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.931359][T13680] RIP: 0033:0x7f316358e969 [ 681.931376][T13680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.931391][T13680] RSP: 002b:00007f31643d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 681.931408][T13680] RAX: ffffffffffffffda RBX: 00007f31637b5fa0 RCX: 00007f316358e969 [ 681.931419][T13680] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240 [ 681.931429][T13680] RBP: 00007f31643d4090 R08: 0000000000000000 R09: 0000000000000000 [ 681.931439][T13680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.931449][T13680] R13: 0000000000000001 R14: 00007f31637b5fa0 R15: 00007fffa73d3da8 [ 681.931472][T13680] [ 682.271204][ T1168] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 683.343148][ T1168] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 683.357387][ T1168] usb 6-1: config 2 has no interface number 0 [ 683.369424][ T1168] usb 6-1: config 2 interface 86 has no altsetting 0 [ 683.399412][ T1168] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 683.411970][ T1168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.420068][ T1168] usb 6-1: Product: syz [ 683.425073][ T1168] usb 6-1: Manufacturer: syz [ 683.429708][ T1168] usb 6-1: SerialNumber: syz [ 683.490539][T12426] usb 9-1: USB disconnect, device number 22 [ 683.672031][ T1168] usb-storage 6-1:2.86: USB Mass Storage device detected [ 683.869786][ T30] audit: type=1326 audit(1747224168.799:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4d8e969 code=0x7ffc0000 [ 684.001734][T13704] FAULT_INJECTION: forcing a failure. [ 684.001734][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.015960][T13704] CPU: 0 UID: 0 PID: 13704 Comm: syz.8.1944 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 684.015986][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.015997][T13704] Call Trace: [ 684.016004][T13704] [ 684.016012][T13704] dump_stack_lvl+0x16c/0x1f0 [ 684.016042][T13704] should_fail_ex+0x512/0x640 [ 684.016069][T13704] _copy_to_user+0x32/0xd0 [ 684.016097][T13704] snd_pcm_oss_read2+0x294/0x410 [ 684.016126][T13704] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 684.016154][T13704] ? snd_pcm_oss_read+0x3a8/0x760 [ 684.016183][T13704] snd_pcm_oss_read+0x5d3/0x760 [ 684.016213][T13704] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 684.016241][T13704] vfs_read+0x1e1/0xc70 [ 684.016274][T13704] ? __pfx_vfs_read+0x10/0x10 [ 684.016298][T13704] ? find_held_lock+0x2b/0x80 [ 684.016322][T13704] ? __fget_files+0x204/0x3c0 [ 684.016344][T13704] ? __fget_files+0x20e/0x3c0 [ 684.016369][T13704] ksys_read+0x12a/0x240 [ 684.016395][T13704] ? __pfx_ksys_read+0x10/0x10 [ 684.016429][T13704] do_syscall_64+0xcd/0x260 [ 684.016459][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.016478][T13704] RIP: 0033:0x7efdc578e969 [ 684.016498][T13704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.016516][T13704] RSP: 002b:00007efdc666a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.016534][T13704] RAX: ffffffffffffffda RBX: 00007efdc59b6080 RCX: 00007efdc578e969 [ 684.016546][T13704] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000006 [ 684.016557][T13704] RBP: 00007efdc666a090 R08: 0000000000000000 R09: 0000000000000000 [ 684.016567][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.016578][T13704] R13: 0000000000000000 R14: 00007efdc59b6080 R15: 00007ffc60c70298 [ 684.016603][T13704] [ 684.422745][ T30] audit: type=1326 audit(1747224168.799:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e4d8d2d0 code=0x7ffc0000 [ 684.450220][ T1168] option 6-1:2.86: GSM modem (1-port) converter detected [ 684.474694][ T1168] usb 6-1: USB disconnect, device number 50 [ 684.490788][ T1168] option 6-1:2.86: device disconnected [ 684.551853][ T5863] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 684.630314][ T30] audit: type=1326 audit(1747224168.799:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 684.817078][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.891600][ T5863] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 684.922882][ T30] audit: type=1326 audit(1747224168.799:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 684.926808][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.946983][ T30] audit: type=1326 audit(1747224168.809:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 684.979857][ T30] audit: type=1326 audit(1747224168.809:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 685.003282][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.028647][ T30] audit: type=1326 audit(1747224169.359:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 685.052110][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.465911][ T5863] usb 3-1: Product: syz [ 685.471125][ T5863] usb 3-1: Manufacturer: syz [ 685.475795][ T5863] usb 3-1: SerialNumber: syz [ 685.482684][ T5863] usb 3-1: config 0 descriptor?? [ 685.487896][ T30] audit: type=1326 audit(1747224169.449:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 685.490839][ T5863] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 685.521038][ T30] audit: type=1326 audit(1747224169.529:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 685.542620][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.833921][ T5863] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 685.922579][ T30] audit: type=1326 audit(1747224169.529:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e4d8e56b code=0x7ffc0000 [ 686.423960][ T972] libceph: connect (1)[c::]:6789 error -101 [ 686.430104][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 686.474054][ T972] libceph: connect (1)[c::]:6789 error -101 [ 686.480196][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 686.821468][ T5863] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 686.871896][ T972] libceph: connect (1)[c::]:6789 error -101 [ 686.890409][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 686.981474][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 687.352714][ T5863] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 687.380487][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.404515][ T5863] usb 6-1: Product: syz [ 687.418552][ T5863] usb 6-1: Manufacturer: syz [ 687.423735][T13699] ceph: No mds server is up or the cluster is laggy [ 687.433891][ T5863] usb 6-1: SerialNumber: syz [ 687.434521][ T972] libceph: connect (1)[c::]:6789 error -101 [ 687.459720][ T5863] usb 6-1: config 0 descriptor?? [ 687.466880][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 687.487062][ T5863] gspca_main: se401-2.14.0 probing 047d:5003 [ 687.614895][T13744] program syz.7.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.645718][ T972] usb 3-1: USB disconnect, device number 69 [ 687.801542][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 687.975436][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.996143][ T24] usb 9-1: config 0 has no interfaces? [ 688.056503][ T24] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 688.071289][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.397098][ T972] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 688.422839][ T24] usb 9-1: config 0 descriptor?? [ 688.494477][ T5863] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 688.510810][ T5863] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 688.550489][ T5863] usb 6-1: USB disconnect, device number 51 [ 688.568863][ T972] usb 3-1: config 2 has an invalid interface number: 86 but max is 0 [ 688.602059][ T972] usb 3-1: config 2 has no interface number 0 [ 688.628555][ T972] usb 3-1: config 2 interface 86 has no altsetting 0 [ 688.671745][ T972] usb 3-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 688.679817][ T1168] usb 9-1: USB disconnect, device number 23 [ 688.686777][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.686843][ T972] usb 3-1: Product: syz [ 688.686896][ T972] usb 3-1: Manufacturer: syz [ 688.686946][ T972] usb 3-1: SerialNumber: syz [ 689.038061][ T972] usb-storage 3-1:2.86: USB Mass Storage device detected [ 689.064296][T13755] FAULT_INJECTION: forcing a failure. [ 689.064296][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 689.079865][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.6.1957 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 689.079890][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.079900][T13755] Call Trace: [ 689.079907][T13755] [ 689.079913][T13755] dump_stack_lvl+0x16c/0x1f0 [ 689.079941][T13755] should_fail_ex+0x512/0x640 [ 689.079963][T13755] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 689.079984][T13755] should_failslab+0xc2/0x120 [ 689.080002][T13755] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 689.080018][T13755] ? __alloc_skb+0x2b2/0x380 [ 689.080039][T13755] __alloc_skb+0x2b2/0x380 [ 689.080057][T13755] ? __pfx___alloc_skb+0x10/0x10 [ 689.080077][T13755] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 689.080103][T13755] netlink_alloc_large_skb+0x69/0x130 [ 689.080126][T13755] netlink_sendmsg+0x6a1/0xdd0 [ 689.080150][T13755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.080179][T13755] ____sys_sendmsg+0xa98/0xc70 [ 689.080203][T13755] ? copy_msghdr_from_user+0x10a/0x160 [ 689.080222][T13755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.080255][T13755] ___sys_sendmsg+0x134/0x1d0 [ 689.080275][T13755] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.080323][T13755] __sys_sendmsg+0x16d/0x220 [ 689.080341][T13755] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.080367][T13755] ? rcu_is_watching+0x12/0xc0 [ 689.080394][T13755] do_syscall_64+0xcd/0x260 [ 689.080419][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.080436][T13755] RIP: 0033:0x7f38c478e969 [ 689.080449][T13755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.080466][T13755] RSP: 002b:00007f38c568e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.080482][T13755] RAX: ffffffffffffffda RBX: 00007f38c49b5fa0 RCX: 00007f38c478e969 [ 689.080493][T13755] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 689.080503][T13755] RBP: 00007f38c568e090 R08: 0000000000000000 R09: 0000000000000000 [ 689.080513][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.080522][T13755] R13: 0000000000000000 R14: 00007f38c49b5fa0 R15: 00007ffdb6f4fad8 [ 689.080551][T13755] [ 689.358312][ T972] option 3-1:2.86: GSM modem (1-port) converter detected [ 689.417547][ T972] usb 3-1: USB disconnect, device number 70 [ 689.426587][ T972] option 3-1:2.86: device disconnected [ 691.585673][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1969'. [ 691.597670][T13791] Lens B: ================= START STATUS ================= [ 691.605562][T13791] Lens B: Focus, Absolute: 0 [ 691.611522][T13791] Lens B: ================== END STATUS ================== [ 691.718977][T13793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.381774][ T972] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 693.474179][T13809] /dev/nullb0: Can't open blockdev [ 693.543677][ T972] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.581527][ T972] usb 9-1: config 0 has no interfaces? [ 693.599023][ T972] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 693.628499][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.662374][ T972] usb 9-1: config 0 descriptor?? [ 694.376435][ T972] usb 9-1: USB disconnect, device number 24 [ 694.533000][T13821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13821 comm=syz.7.1977 [ 694.956642][T12426] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 695.290704][T12426] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 695.368461][T12426] usb 6-1: config 2 has no interface number 0 [ 695.388281][T12426] usb 6-1: config 2 interface 86 has no altsetting 0 [ 695.403423][T12426] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 695.419175][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.437512][T12426] usb 6-1: Product: syz [ 695.507874][T12426] usb 6-1: Manufacturer: syz [ 695.512825][T12426] usb 6-1: SerialNumber: syz [ 695.628803][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1984'. [ 695.766259][T12426] usb-storage 6-1:2.86: USB Mass Storage device detected [ 695.790631][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.806404][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.815165][T10082] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.858419][T12426] option 6-1:2.86: GSM modem (1-port) converter detected [ 695.873712][T12426] usb 6-1: USB disconnect, device number 52 [ 695.881009][T12426] option 6-1:2.86: device disconnected [ 695.891528][ T5863] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 695.921654][T10082] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.051789][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 696.067057][ T5863] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 696.098590][ T5863] usb 3-1: config 179 has no interface number 0 [ 696.121485][ T5863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 696.161458][ T5863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 696.185308][ T5863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 696.200077][ T5863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 696.228966][ T5863] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 696.250266][ T5863] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 696.314522][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.341864][T13836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 696.527682][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 696.527699][ T30] audit: type=1326 audit(1747224181.469:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 696.585431][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.784403][T12426] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 696.826695][ T30] audit: type=1326 audit(1747224181.469:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 696.850482][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.336505][ T30] audit: type=1326 audit(1747224181.469:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38c478d2d0 code=0x7ffc0000 [ 697.491171][ T30] audit: type=1326 audit(1747224181.469:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 697.514687][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.672829][T12426] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.890042][ T30] audit: type=1326 audit(1747224181.469:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 697.934681][T12426] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 697.984772][T13873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13873 comm=syz.8.1991 [ 697.990063][ T30] audit: type=1326 audit(1747224181.469:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 698.021441][T12426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.034953][T12426] usb 7-1: Product: syz [ 698.046352][T12426] usb 7-1: Manufacturer: syz [ 698.055540][T12426] usb 7-1: SerialNumber: syz [ 698.068260][ T30] audit: type=1326 audit(1747224181.469:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 698.287068][T12426] usb 7-1: config 0 descriptor?? [ 698.444018][T10082] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input30 [ 698.445981][T12426] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 698.470920][ T30] audit: type=1326 audit(1747224181.589:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 698.529755][T12426] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 698.591680][ T30] audit: type=1326 audit(1747224181.659:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 698.591943][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 698.615056][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.615386][ T30] audit: type=1326 audit(1747224181.749:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 698.906416][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 699.001649][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 699.164012][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.179766][ T9] usb 6-1: config 0 has no interfaces? [ 699.200083][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 699.230285][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.251235][ T9] usb 6-1: config 0 descriptor?? [ 699.257692][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 699.268829][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 699.554943][T12426] usb 6-1: USB disconnect, device number 53 [ 699.582817][T13860] ceph: No mds server is up or the cluster is laggy [ 699.781513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.833466][ T9] libceph: connect (1)[c::]:6789 error -101 [ 699.839511][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 699.975244][ T972] usb 7-1: USB disconnect, device number 30 [ 700.048007][T13893] veth0: entered promiscuous mode [ 700.055121][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1997'. [ 700.115666][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 700.123987][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 700.132462][ T5863] usb 3-1: USB disconnect, device number 71 [ 700.139251][ T5863] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 700.161607][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 700.209193][T13892] veth0: left promiscuous mode [ 700.321805][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 700.341681][ T9] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 700.409840][ T9] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.476369][ T9] usb 9-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.567047][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 700.608940][ T9] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 700.671553][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.782571][ T9] usb 9-1: config 0 descriptor?? [ 701.267164][ T9] hid-alps 0003:044E:120B.0020: item fetching failed at offset 0/3 [ 701.279745][ T9] hid-alps 0003:044E:120B.0020: parse failed [ 701.359948][ T9] hid-alps 0003:044E:120B.0020: probe with driver hid-alps failed with error -22 [ 701.711029][T13909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13909 comm=syz.5.2003 [ 701.741758][ T5863] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 701.927431][T13914] nbd: must specify a size in bytes for the device [ 702.333708][T12426] usb 9-1: USB disconnect, device number 25 [ 702.727925][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 702.734518][ T5863] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 702.745899][ T5863] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.756175][ T5863] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.799454][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 702.811496][ T5863] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 702.923143][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.959136][ T5863] usb 3-1: config 0 descriptor?? [ 703.300098][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 703.300136][ T30] audit: type=1326 audit(1747224188.229:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 703.348716][ T30] audit: type=1326 audit(1747224188.229:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 703.372984][ T30] audit: type=1326 audit(1747224188.229:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdc578d2d0 code=0x7ffc0000 [ 703.652718][T10082] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 703.852577][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 703.881311][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 703.907686][ T5863] usb 3-1: USB disconnect, device number 72 [ 703.919338][ T30] audit: type=1326 audit(1747224188.229:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 703.947471][ T30] audit: type=1326 audit(1747224188.229:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.054652][ T30] audit: type=1326 audit(1747224188.229:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.078036][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.086394][ T30] audit: type=1326 audit(1747224188.229:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.625908][ T30] audit: type=1326 audit(1747224188.349:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.649299][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.655871][ T30] audit: type=1326 audit(1747224188.489:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.679225][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.711471][T10082] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.823847][T10082] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 704.845776][T10082] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.862732][ T30] audit: type=1326 audit(1747224188.809:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.8.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdc578e56b code=0x7ffc0000 [ 704.931963][T10082] usb 9-1: Product: syz [ 704.939289][T13948] netlink: 'syz.5.2012': attribute type 4 has an invalid length. [ 704.947562][T10082] usb 9-1: Manufacturer: syz [ 704.954975][T10082] usb 9-1: SerialNumber: syz [ 704.976423][T10082] usb 9-1: config 0 descriptor?? [ 704.988317][T10082] ims_pcu 9-1:0.0: Missing CDC union descriptor [ 704.995687][T13951] netlink: 'syz.5.2012': attribute type 4 has an invalid length. [ 705.007196][T10082] ims_pcu 9-1:0.0: probe with driver ims_pcu failed with error -22 [ 705.121501][ T972] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 705.451509][T12426] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 705.511003][ T972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.615521][ T972] usb 7-1: config 0 has no interfaces? [ 705.622898][ T972] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.635090][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.635973][ T9] libceph: connect (1)[c::]:6789 error -101 [ 705.652632][ T972] usb 7-1: config 0 descriptor?? [ 705.658258][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 705.698404][T12426] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 705.713927][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.725242][T12426] usb 6-1: Product: syz [ 705.729545][T12426] usb 6-1: Manufacturer: syz [ 705.737981][T12426] usb 6-1: SerialNumber: syz [ 705.751338][T12426] usb 6-1: config 0 descriptor?? [ 705.904473][ T9] usb 7-1: USB disconnect, device number 31 [ 705.975775][T13964] xt_hashlimit: size too large, truncated to 1048576 [ 706.309783][T10082] libceph: connect (1)[c::]:6789 error -101 [ 706.332201][T10082] libceph: mon0 (1)[c::]:6789 connect error [ 706.701771][T13926] ceph: No mds server is up or the cluster is laggy [ 706.845084][ T972] usb 9-1: USB disconnect, device number 26 [ 707.062064][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 707.298110][T12426] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 707.426231][T12426] asix 6-1:0.0: probe with driver asix failed with error -71 [ 707.535823][T12426] usb 6-1: USB disconnect, device number 54 [ 707.588368][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 707.682241][T13986] FAULT_INJECTION: forcing a failure. [ 707.682241][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.695556][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.8.2021 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 707.695581][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 707.695592][T13986] Call Trace: [ 707.695599][T13986] [ 707.695606][T13986] dump_stack_lvl+0x16c/0x1f0 [ 707.695636][T13986] should_fail_ex+0x512/0x640 [ 707.695665][T13986] _copy_from_user+0x2e/0xd0 [ 707.695693][T13986] inet6_ioctl+0x232/0x2b0 [ 707.695713][T13986] ? __pfx_inet6_ioctl+0x10/0x10 [ 707.695743][T13986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.695766][T13986] sock_do_ioctl+0x118/0x280 [ 707.695792][T13986] ? __pfx_sock_do_ioctl+0x10/0x10 [ 707.695822][T13986] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 707.695852][T13986] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 707.695882][T13986] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 707.695916][T13986] sock_ioctl+0x227/0x6b0 [ 707.695942][T13986] ? __pfx_sock_ioctl+0x10/0x10 [ 707.695965][T13986] ? hook_file_ioctl_common+0x145/0x410 [ 707.695992][T13986] ? selinux_file_ioctl+0x180/0x270 [ 707.696023][T13986] ? selinux_file_ioctl+0xb4/0x270 [ 707.696053][T13986] ? __pfx_sock_ioctl+0x10/0x10 [ 707.696080][T13986] __x64_sys_ioctl+0x193/0x200 [ 707.696107][T13986] do_syscall_64+0xcd/0x260 [ 707.696136][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.696154][T13986] RIP: 0033:0x7efdc578e969 [ 707.696170][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.696187][T13986] RSP: 002b:00007efdc66ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.696205][T13986] RAX: ffffffffffffffda RBX: 00007efdc59b6080 RCX: 00007efdc578e969 [ 707.696217][T13986] RDX: 00002000000005c0 RSI: 000000000000890b RDI: 0000000000000007 [ 707.696228][T13986] RBP: 00007efdc66ab090 R08: 0000000000000000 R09: 0000000000000000 [ 707.696239][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.696250][T13986] R13: 0000000000000000 R14: 00007efdc59b6080 R15: 00007ffc60c70298 [ 707.696274][T13986] [ 707.908555][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.183684][ T9] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 708.393320][ T9] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.411541][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.646204][ T9] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.771466][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.778154][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 708.854282][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.880384][T13994] input: syz1 as /devices/virtual/input/input31 [ 708.912829][ T9] usb 3-1: config 0 descriptor?? [ 709.543556][ T9] hid-alps 0003:044E:120B.0021: item fetching failed at offset 0/3 [ 709.570849][ T9] hid-alps 0003:044E:120B.0021: parse failed [ 709.581512][T12426] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 709.581717][ T9] hid-alps 0003:044E:120B.0021: probe with driver hid-alps failed with error -22 [ 710.065670][T14008] bridge0: port 3(batadv0) entered blocking state [ 710.072524][T14008] bridge0: port 3(batadv0) entered disabled state [ 710.079461][T14008] batadv0: entered allmulticast mode [ 710.090339][T14008] batadv0: entered promiscuous mode [ 710.097173][T14008] batman_adv: batadv0: Local translation table size (144) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 710.112153][T14008] bridge0: port 3(batadv0) entered blocking state [ 710.118712][T14008] bridge0: port 3(batadv0) entered forwarding state [ 710.374799][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 710.374817][ T30] audit: type=1400 audit(1747224194.999:1268): avc: granted { setsecparam } for pid=14001 comm="syz.7.2025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 710.471793][T12426] usb 7-1: Using ep0 maxpacket: 16 [ 710.476013][ T7176] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 710.478262][T12426] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 710.487146][ T7176] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 710.881771][ T30] audit: type=1326 audit(1747224195.809:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316358e969 code=0x7ffc0000 [ 710.901351][T12426] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.940132][ T30] audit: type=1326 audit(1747224195.809:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316358e969 code=0x7ffc0000 [ 710.963674][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.017995][ T5824] udevd[5824]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 711.039127][T12426] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.142153][ T30] audit: type=1326 audit(1747224195.809:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f316358d2d0 code=0x7ffc0000 [ 711.165666][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.165683][T12426] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.165718][T12426] usb 7-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 711.165739][T12426] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.173724][T12426] usb 7-1: config 0 descriptor?? [ 711.247575][T14021] xt_hashlimit: size too large, truncated to 1048576 [ 711.293313][ T30] audit: type=1326 audit(1747224195.809:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316358e56b code=0x7ffc0000 [ 711.440197][ T30] audit: type=1326 audit(1747224195.809:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316358e56b code=0x7ffc0000 [ 711.463640][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.491621][ T972] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 711.504958][ T30] audit: type=1326 audit(1747224195.809:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316358e56b code=0x7ffc0000 [ 711.540540][ T30] audit: type=1326 audit(1747224195.809:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.7.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316358e56b code=0x7ffc0000 [ 711.563992][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.616259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.685352][ T972] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.740956][ T972] usb 9-1: config 0 has no interfaces? [ 712.000265][ T972] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 712.016925][T12426] usbhid 7-1:0.0: can't add hid device: -71 [ 712.025661][T12426] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 712.034097][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.062488][T12426] usb 7-1: USB disconnect, device number 32 [ 712.073609][ T972] usb 9-1: config 0 descriptor?? [ 712.470521][T10082] usb 9-1: USB disconnect, device number 27 [ 713.921518][ T5863] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 714.154295][ T972] usb 3-1: USB disconnect, device number 73 [ 714.341769][ T5863] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 714.355227][T14048] nbd: must specify a size in bytes for the device [ 715.130899][ T5863] usb 7-1: config 0 has no interface number 0 [ 715.142703][ T5863] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 715.158231][ T5863] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 715.167523][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.175564][ T5863] usb 7-1: Product: syz [ 715.181819][ T5863] usb 7-1: Manufacturer: syz [ 715.186405][ T5863] usb 7-1: SerialNumber: syz [ 715.234213][ T5863] usb 7-1: config 0 descriptor?? [ 715.252489][T14039] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 715.346404][ T5863] usb-storage 7-1:0.20: USB Mass Storage device detected [ 715.505791][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.514571][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.002112][ T5863] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 716.014110][ T5863] scsi host1: usb-storage 7-1:0.20 [ 716.047285][T14064] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2038'. [ 716.089544][ T30] audit: type=1400 audit(1747224201.029:1276): avc: denied { setopt } for pid=14063 comm="syz.7.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 716.109243][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.258029][T14062] usb 7-1: reset full-speed USB device number 33 using dummy_hcd [ 718.498238][T14092] usb usb8: usbfs: process 14092 (syz.2.2043) did not claim interface 0 before use [ 718.991696][ T58] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 719.167073][ T972] usb 7-1: USB disconnect, device number 33 [ 719.177896][ T58] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.189402][ T58] usb 9-1: config 0 has no interfaces? [ 719.209853][ T58] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 719.233974][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.265299][ T58] usb 9-1: config 0 descriptor?? [ 719.396315][ T30] audit: type=1326 audit(1747224204.299:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 719.429303][ T30] audit: type=1326 audit(1747224204.299:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 719.453845][ T30] audit: type=1326 audit(1747224204.299:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38c478d2d0 code=0x7ffc0000 [ 719.485280][ T58] usb 9-1: USB disconnect, device number 28 [ 719.510289][ T30] audit: type=1326 audit(1747224204.299:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 719.535489][ T30] audit: type=1326 audit(1747224204.299:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 719.561489][ T30] audit: type=1326 audit(1747224204.309:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 719.591605][ T30] audit: type=1326 audit(1747224204.309:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 721.374524][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2053'. [ 721.522992][ T30] audit: type=1326 audit(1747224206.449:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 721.631528][ T972] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 721.961095][ T30] audit: type=1326 audit(1747224206.519:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 722.202620][ T30] audit: type=1326 audit(1747224206.689:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 722.275653][ T30] audit: type=1326 audit(1747224206.699:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 722.378808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.466377][ T30] audit: type=1326 audit(1747224206.699:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 722.778224][ T30] audit: type=1326 audit(1747224207.099:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 722.988355][ T30] audit: type=1326 audit(1747224207.099:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 723.012834][ T30] audit: type=1326 audit(1747224207.109:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 723.036416][ T972] usb 7-1: unable to read config index 0 descriptor/all [ 723.041917][ T30] audit: type=1326 audit(1747224207.119:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 723.044849][ T972] usb 7-1: can't read configurations, error -71 [ 723.078464][ T30] audit: type=1326 audit(1747224207.219:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14106 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 724.411526][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 724.930981][ T972] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 726.052529][ T972] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.102735][ T972] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 726.127756][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.159437][ T972] usb 9-1: Product: syz [ 726.169879][ T972] usb 9-1: Manufacturer: syz [ 726.180175][ T972] usb 9-1: SerialNumber: syz [ 726.194965][ T972] usb 9-1: config 0 descriptor?? [ 726.206390][ T972] ims_pcu 9-1:0.0: Missing CDC union descriptor [ 726.232030][ T972] ims_pcu 9-1:0.0: probe with driver ims_pcu failed with error -22 [ 726.562154][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 726.562192][ T30] audit: type=1326 audit(1747224211.499:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.716419][ T30] audit: type=1326 audit(1747224211.539:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.727331][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 726.769665][ T30] audit: type=1326 audit(1747224211.549:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.803323][ T30] audit: type=1326 audit(1747224211.559:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.827101][ T30] audit: type=1326 audit(1747224211.559:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.860723][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 726.870934][ T30] audit: type=1326 audit(1747224211.559:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.898912][ T30] audit: type=1326 audit(1747224211.569:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 726.923124][ T30] audit: type=1326 audit(1747224211.589:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc578e969 code=0x7ffc0000 [ 727.030842][ T30] audit: type=1326 audit(1747224211.609:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdc578d2d0 code=0x7ffc0000 [ 727.078483][ T30] audit: type=1326 audit(1747224211.609:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efdc5790197 code=0x7ffc0000 [ 727.153294][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 727.180735][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 727.895077][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 727.901146][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 727.911689][T14165] ceph: No mds server is up or the cluster is laggy [ 728.801694][ T972] usb 9-1: USB disconnect, device number 29 [ 728.839666][T14232] devpts: Bad value for 'max' [ 728.910756][T14236] bridge0: port 4(veth0_to_bridge) entered blocking state [ 728.942475][T14236] bridge0: port 4(veth0_to_bridge) entered disabled state [ 728.949845][T14236] veth0_to_bridge: entered allmulticast mode [ 729.008864][T14236] veth0_to_bridge: entered promiscuous mode [ 729.063820][T14236] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.081870][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 729.232042][ T972] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 729.329531][T14236] bridge0: port 4(veth0_to_bridge) entered blocking state [ 729.336910][T14236] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 729.486253][ T972] usb 9-1: Using ep0 maxpacket: 8 [ 729.522739][ T972] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 729.569619][ T972] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 729.597025][ T972] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 729.646982][ T972] usb 9-1: Product: syz [ 729.671318][ T972] usb 9-1: Manufacturer: syz [ 729.707397][ T972] usb 9-1: SerialNumber: syz [ 729.769105][ T972] usb 9-1: config 0 descriptor?? [ 729.934649][ T972] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 730.552329][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 730.564840][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 730.584787][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 730.643014][ T972] gspca_zc3xx: reg_w_i err -110 [ 730.655947][ T9] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 730.681936][ T9] usb 3-1: Product: syz [ 730.686134][ T9] usb 3-1: Manufacturer: syz [ 730.701968][ T9] usb 3-1: SerialNumber: syz [ 730.732889][ T9] usb 3-1: config 0 descriptor?? [ 730.751633][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 731.325578][T14231] FAULT_INJECTION: forcing a failure. [ 731.325578][T14231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.340526][T14231] CPU: 1 UID: 0 PID: 14231 Comm: syz.2.2082 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 731.340557][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.340568][T14231] Call Trace: [ 731.340575][T14231] [ 731.340582][T14231] dump_stack_lvl+0x16c/0x1f0 [ 731.340613][T14231] should_fail_ex+0x512/0x640 [ 731.340642][T14231] should_fail_alloc_page+0xe7/0x130 [ 731.340663][T14231] prepare_alloc_pages+0x3c2/0x610 [ 731.340692][T14231] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 731.340721][T14231] ? __lock_acquire+0xaa4/0x1ba0 [ 731.340751][T14231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 731.340786][T14231] ? mas_next_slot+0x12d3/0x21b0 [ 731.340811][T14231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 731.340833][T14231] ? policy_nodemask+0xea/0x4e0 [ 731.340856][T14231] alloc_pages_mpol+0x1fb/0x550 [ 731.340878][T14231] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 731.340898][T14231] ? validate_mm+0x40a/0x570 [ 731.340930][T14231] alloc_pages_noprof+0x131/0x390 [ 731.340955][T14231] pte_alloc_one+0x19/0x380 [ 731.340979][T14231] __pte_alloc+0x6d/0x3c0 [ 731.341000][T14231] ? __pfx___pte_alloc+0x10/0x10 [ 731.341029][T14231] do_pte_missing+0x2925/0x3fb0 [ 731.341055][T14231] ? mtree_range_walk+0x718/0xc00 [ 731.341079][T14231] ? find_held_lock+0x2b/0x80 [ 731.341104][T14231] __handle_mm_fault+0x103d/0x2a40 [ 731.341139][T14231] ? __pfx___handle_mm_fault+0x10/0x10 [ 731.341165][T14231] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.341210][T14231] handle_mm_fault+0x3fe/0xad0 [ 731.341242][T14231] __get_user_pages+0x771/0x36f0 [ 731.341275][T14231] ? __pfx_mt_find+0x10/0x10 [ 731.341302][T14231] ? __pfx___get_user_pages+0x10/0x10 [ 731.341337][T14231] populate_vma_page_range+0x278/0x3a0 [ 731.341363][T14231] ? __pfx_populate_vma_page_range+0x10/0x10 [ 731.341387][T14231] ? __pfx_find_vma_intersection+0x10/0x10 [ 731.341411][T14231] ? do_mmap+0x69c/0x11b0 [ 731.341438][T14231] __mm_populate+0x1d8/0x380 [ 731.341464][T14231] ? __pfx___mm_populate+0x10/0x10 [ 731.341490][T14231] ? up_write+0x1b2/0x520 [ 731.341510][T14231] vm_mmap_pgoff+0x362/0x450 [ 731.341536][T14231] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 731.341560][T14231] ? __fget_files+0x20e/0x3c0 [ 731.341583][T14231] ksys_mmap_pgoff+0x7d/0x5c0 [ 731.341605][T14231] ? __pfx_ksys_write+0x10/0x10 [ 731.341629][T14231] ? rcu_is_watching+0x12/0xc0 [ 731.341652][T14231] __x64_sys_mmap+0x125/0x190 [ 731.341673][T14231] do_syscall_64+0xcd/0x260 [ 731.341699][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.341716][T14231] RIP: 0033:0x7fd6e4d8e969 [ 731.341731][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.341747][T14231] RSP: 002b:00007fd6e5ce1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 731.341764][T14231] RAX: ffffffffffffffda RBX: 00007fd6e4fb5fa0 RCX: 00007fd6e4d8e969 [ 731.341776][T14231] RDX: 0000000001000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 731.341788][T14231] RBP: 00007fd6e5ce1090 R08: ffffffffffffffff R09: 0000000000002000 [ 731.341799][T14231] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 731.341811][T14231] R13: 0000000000000000 R14: 00007fd6e4fb5fa0 R15: 00007ffcbd7dd298 [ 731.341836][T14231] [ 731.670404][ T9] gspca_zc3xx: reg_w_i err -110 [ 731.761454][ T972] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 731.767870][ T972] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 732.003432][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2093'. [ 732.281521][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 732.292446][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 732.337509][ T9] usb 3-1: USB disconnect, device number 74 [ 732.355859][ T5863] usb 9-1: USB disconnect, device number 30 [ 732.454481][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 732.454492][ T30] audit: type=1326 audit(1747224217.399:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 732.749000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.757363][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.772619][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.786972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.795202][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.809871][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.824361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.832651][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.847088][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 732.861471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.933420][ T5863] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 733.112431][ T30] audit: type=1326 audit(1747224217.429:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c478e969 code=0x7ffc0000 [ 733.175480][ T972] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 734.157042][ T30] audit: type=1326 audit(1747224217.429:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38c478d2d0 code=0x7ffc0000 [ 734.304027][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.090614][ T5863] usb 7-1: string descriptor 0 read error: -71 [ 736.825687][ T30] audit: type=1326 audit(1747224217.429:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 737.273051][ T30] audit: type=1326 audit(1747224217.429:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 737.751470][ C1] net_ratelimit: 49557 callbacks suppressed [ 737.751490][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.771901][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.786224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.794455][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.808888][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.823216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.831470][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.845916][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 737.860227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.868474][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 738.044367][ T30] audit: type=1326 audit(1747224217.509:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 740.720833][ T5863] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 740.773016][ T972] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 1.5a [ 740.805082][ T972] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 741.223440][ T972] usb 6-1: config 0 descriptor?? [ 741.242809][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.267182][ T972] usb 6-1: can't set config #0, error -71 [ 741.364104][ T30] audit: type=1326 audit(1747224217.509:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 741.442791][ T972] usb 6-1: USB disconnect, device number 55 [ 741.451299][ T5863] usb 7-1: config 0 descriptor?? [ 741.477553][ T5863] usb 7-1: can't set config #0, error -71 [ 741.795671][ T30] audit: type=1326 audit(1747224217.629:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 742.281561][ T5863] usb 7-1: USB disconnect, device number 36 [ 742.761471][ C1] net_ratelimit: 55541 callbacks suppressed [ 742.761484][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.781847][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.796182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.804396][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.818826][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.833148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.841334][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.855804][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 742.870114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.878315][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 744.915377][T14298] 9pnet_fd: Insufficient options for proto=fd [ 745.839447][ T30] audit: type=1326 audit(1747224217.819:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 747.306760][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.771397][ C1] net_ratelimit: 58483 callbacks suppressed [ 747.771418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.771537][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.777479][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.785561][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.799987][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.814116][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.828341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.842579][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.856959][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 747.864994][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 750.641371][ C0] sched: DL replenish lagged too much [ 752.781384][ C0] net_ratelimit: 62004 callbacks suppressed [ 752.781405][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.781538][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.787538][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.801744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.815969][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.830292][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.838300][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.852723][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.866853][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 752.881089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.092721][ T30] audit: type=1326 audit(1747224219.099:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 757.056909][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 757.791433][ C0] net_ratelimit: 61762 callbacks suppressed [ 757.791453][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.791501][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.797653][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.811808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.826065][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.840415][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.848420][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.862825][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.877046][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 757.891253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.035637][ T30] audit: type=1326 audit(1747224219.099:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 762.801382][ C1] net_ratelimit: 59997 callbacks suppressed [ 762.801403][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.801450][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.808036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.822306][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.836713][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.844717][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.858900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.873126][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.887452][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 762.895463][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.811399][ C1] net_ratelimit: 62178 callbacks suppressed [ 767.811421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.811487][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.817466][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.825562][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.839978][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.854136][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.868348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.882601][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.896942][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 767.905000][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 770.978117][ T30] audit: type=1326 audit(1747224219.099:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 772.821405][ C0] net_ratelimit: 61009 callbacks suppressed [ 772.821426][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.821458][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.827559][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.841753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.855999][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.870372][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.878407][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.892595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.906842][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 772.921124][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.831407][ C1] net_ratelimit: 61333 callbacks suppressed [ 777.831427][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.831518][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.837449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.851741][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.866162][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.874227][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.888646][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.902827][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 777.916981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.931284][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.841433][ C1] net_ratelimit: 62078 callbacks suppressed [ 782.841451][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.841539][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.847471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.861787][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.876166][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.884172][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.898370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.912906][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.926909][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 782.934938][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 786.560293][ T30] audit: type=1326 audit(1747224219.169:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c478e56b code=0x7ffc0000 [ 787.851373][ C0] net_ratelimit: 59614 callbacks suppressed [ 787.851394][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.851517][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.857537][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.871758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.886405][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.900424][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.908493][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.922665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.936895][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 787.951206][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.861449][ C1] net_ratelimit: 63860 callbacks suppressed [ 792.861472][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.861549][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.867509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.881812][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.896173][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.904239][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.918444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.932691][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.946973][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 792.955014][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.871378][ C1] net_ratelimit: 65525 callbacks suppressed [ 797.871399][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.871594][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.877435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.891739][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.906048][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.914115][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.928698][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.942744][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 797.956947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.971227][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.881363][ C1] net_ratelimit: 65393 callbacks suppressed [ 802.881383][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.881721][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.887562][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.901804][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.915988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.930239][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.944621][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.952641][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 802.966819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.981089][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.891413][ C1] net_ratelimit: 64140 callbacks suppressed [ 807.891433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.891511][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.897500][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.905602][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.919990][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.934188][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.948490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.962836][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.977165][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 807.985205][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 808.362365][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.901406][ C0] net_ratelimit: 64551 callbacks suppressed [ 812.901428][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.901455][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.907583][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.921768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.936039][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.950504][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.958537][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.972922][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 812.987087][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 813.001283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.911446][ C0] net_ratelimit: 65199 callbacks suppressed [ 817.911464][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.911484][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.917608][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.931815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.946062][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.960391][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.968469][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 817.982625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.996877][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 818.011166][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.921379][ C1] net_ratelimit: 66865 callbacks suppressed [ 822.921399][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.921568][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.927423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.941745][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.956030][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.964076][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.978442][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 822.992631][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 823.006848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.021089][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 823.617307][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 827.931358][ C1] net_ratelimit: 66558 callbacks suppressed [ 827.931377][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 827.931627][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 827.938045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.952296][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 827.966759][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 827.974695][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 827.988855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.003105][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 828.017389][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 828.025446][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 832.941382][ C1] net_ratelimit: 66505 callbacks suppressed [ 832.941404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.941526][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 832.947681][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 832.955744][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 832.969843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.984080][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 832.998366][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 833.006405][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 833.020783][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 833.034985][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 837.951370][ C1] net_ratelimit: 67045 callbacks suppressed [ 837.951390][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 837.951467][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 837.957493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.971721][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 837.986165][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 837.994136][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 838.008294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.022567][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 838.036836][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 838.044876][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 842.961378][ C1] net_ratelimit: 67243 callbacks suppressed [ 842.961398][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 842.961551][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 842.967427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.981752][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 842.996032][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 843.004067][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 843.018429][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 843.032614][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 843.046821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.061062][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 847.971387][ C1] net_ratelimit: 66848 callbacks suppressed [ 847.971410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.971766][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 847.977568][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 847.986148][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 848.000532][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 848.014698][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 848.028902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.043185][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 848.057479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 848.065496][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 852.981400][ C1] net_ratelimit: 66505 callbacks suppressed [ 852.981420][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 852.981512][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 852.987449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.001744][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 853.016069][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 853.024084][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 853.038450][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 853.052649][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 853.066844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.081102][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 857.991399][ C1] net_ratelimit: 66897 callbacks suppressed [ 857.991419][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 857.991758][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 857.997445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.011756][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 858.026085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 858.034113][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 858.048364][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 858.060347][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 858.074685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.088846][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 863.001369][ C1] net_ratelimit: 67223 callbacks suppressed [ 863.001389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 863.001397][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 863.001519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.007425][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 863.019463][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 863.033786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.045753][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 863.060003][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 863.074074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.082190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.011440][ C0] net_ratelimit: 62089 callbacks suppressed [ 868.011460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.011483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.017545][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 868.029611][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 868.037732][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 868.051779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.065973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.080342][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 868.088378][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 868.100396][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 871.508339][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.021398][ C0] net_ratelimit: 58441 callbacks suppressed [ 873.021420][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 873.021468][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 873.027715][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 873.041787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.055998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.070367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 873.078413][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 873.090282][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 873.102405][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 873.116668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.031338][ C0] net_ratelimit: 51630 callbacks suppressed [ 878.031358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.031602][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 878.037432][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 878.049421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.063715][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 878.077950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 878.085881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.100217][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 878.112140][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 878.124162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.041366][ C1] net_ratelimit: 49459 callbacks suppressed [ 883.041387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.041418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.047430][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 883.059421][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 883.071454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.085678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.099957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 883.107943][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 883.119887][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 883.131968][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 888.051361][ C1] net_ratelimit: 50985 callbacks suppressed [ 888.051381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 888.051558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.057433][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 888.069411][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 888.081483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.095748][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 888.110108][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 888.117917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.132230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.146452][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 888.231314][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 888.238283][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14299/1:b..l [ 888.246820][ C0] rcu: (detected by 0, t=10503 jiffies, g=59553, q=384 ncpus=2) [ 888.254548][ C0] task:syz.7.2104 state:R running task stack:27432 pid:14299 tgid:14299 ppid:8667 task_flags:0x400040 flags:0x00004006 [ 888.269334][ C0] Call Trace: [ 888.272629][ C0] [ 888.275568][ C0] __schedule+0x116f/0x5de0 [ 888.280106][ C0] ? __pfx___schedule+0x10/0x10 [ 888.284976][ C0] ? do_syscall_64+0xcd/0x260 [ 888.289633][ C0] ? arch_stack_walk+0x85/0x100 [ 888.294467][ C0] ? mark_held_locks+0x49/0x80 [ 888.299226][ C0] preempt_schedule_irq+0x51/0x90 [ 888.304242][ C0] irqentry_exit+0x36/0x90 [ 888.308648][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 888.314601][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 888.319776][ C0] Code: e9 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 02 d8 ec 0e 0f 82 74 02 00 00 8b 35 9a 07 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 d9 e8 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 888.339377][ C0] RSP: 0018:ffffc900047774b8 EFLAGS: 00000206 [ 888.345431][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bfc00 RCX: 0000000009f25c20 [ 888.353408][ C0] RDX: 0000000000000000 RSI: ffffffff8dbbd24b RDI: ffffffff8bf48920 [ 888.361384][ C0] RBP: 0000000000000002 R08: f72bc34f02f19e52 R09: 0000000000000000 [ 888.369333][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 888.377278][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 888.385234][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 888.390234][ C0] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 888.396290][ C0] ? mas_alloc_nodes+0x2f1/0x8b0 [ 888.401207][ C0] ? mas_node_count_gfp+0x105/0x130 [ 888.406379][ C0] ? mas_preallocate+0x53e/0xcd0 [ 888.411289][ C0] __update_page_owner_free_handle.constprop.0+0x4d/0x470 [ 888.418370][ C0] ? __update_page_owner_free_handle.constprop.0+0x3c/0x470 [ 888.425651][ C0] __reset_page_owner+0x93/0x1a0 [ 888.430561][ C0] __free_frozen_pages+0x69d/0xff0 [ 888.435652][ C0] __put_partials+0x16d/0x1c0 [ 888.440319][ C0] qlist_free_all+0x4e/0x120 [ 888.444892][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 888.450330][ C0] __kasan_slab_alloc+0x69/0x90 [ 888.455154][ C0] kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 888.461060][ C0] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 888.466707][ C0] ? mas_alloc_nodes+0x18b/0x8b0 [ 888.471632][ C0] ? mas_alloc_nodes+0x2f1/0x8b0 [ 888.476546][ C0] mas_alloc_nodes+0x2f1/0x8b0 [ 888.481287][ C0] mas_node_count_gfp+0x105/0x130 [ 888.486288][ C0] mas_preallocate+0x53e/0xcd0 [ 888.491024][ C0] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 888.497066][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 888.502327][ C0] ? anon_vma_name+0x75/0x100 [ 888.506982][ C0] __split_vma+0x33b/0x1030 [ 888.511466][ C0] ? __pfx___split_vma+0x10/0x10 [ 888.516388][ C0] vma_modify+0x3b4/0x510 [ 888.520704][ C0] vma_modify_flags+0x212/0x2d0 [ 888.525528][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 888.530879][ C0] mprotect_fixup+0x2b3/0xb10 [ 888.535531][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 888.540717][ C0] ? selinux_file_mprotect+0x15b/0x600 [ 888.546168][ C0] do_mprotect_pkey+0x9ca/0xd50 [ 888.550992][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 888.556344][ C0] ? rcu_is_watching+0x12/0xc0 [ 888.561086][ C0] __x64_sys_mprotect+0x78/0xc0 [ 888.565907][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 888.571082][ C0] do_syscall_64+0xcd/0x260 [ 888.575563][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.581427][ C0] RIP: 0033:0x7f316358ea27 [ 888.585819][ C0] RSP: 002b:00007fffa73d3d48 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 888.594244][ C0] RAX: ffffffffffffffda RBX: 00007f31643b36c0 RCX: 00007f316358ea27 [ 888.602196][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f3164394000 [ 888.610151][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 888.618107][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffa73d3ea0 [ 888.626066][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 888.634040][ C0] [ 893.061413][ C1] net_ratelimit: 49567 callbacks suppressed [ 893.061432][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 893.061472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.067456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.081737][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 893.093765][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 893.101860][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 893.116152][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 893.130209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.144547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.158762][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 898.071389][ C1] net_ratelimit: 53724 callbacks suppressed [ 898.071409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.071502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.077510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:e3:66:eb:2e:05, vlan:0) [ 898.085569][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 898.097444][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:e3:66:eb:2e:05 [ 898.109553][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 898.123769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.137887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.152353][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 898.160252][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c