last executing test programs: 42m49.138690911s ago: executing program 0 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00'}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) syz_usb_control_io$hid(r0, 0x0, 0x0) 42m45.479221243s ago: executing program 0 (id=27): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 42m44.736477464s ago: executing program 0 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec0}], 0x1}, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r6, 0x0) bind$alg(r6, 0x0, 0x0) write(r6, 0x0, 0x0) 42m42.593210259s ago: executing program 0 (id=33): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r4 = getpgid(r1) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x2e0, 0x0, 0x180, 0x378, 0x378, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@broadcast, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x36, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) unlink(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') socket(0x11, 0x800000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 42m40.388913108s ago: executing program 0 (id=37): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f0000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00'}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) syz_usb_control_io$hid(r0, 0x0, 0x0) 42m33.092223544s ago: executing program 0 (id=55): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00', 0x4e4}, {0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8}, 0xffffffffffffffff, {[0xfff, 0x6, 0x401, 0x1, 0x8000, 0x2a1, 0xad26, 0x7]}}, 0x5c) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)="7982982143054ef8e69f967f520f9cee6e312d486543772fda10e24990c273e6b26e2655dffa456f53e85fb3ef986e7b8f6d9b9e3f5a27e10a7afbf28f062c4418304b53d11ccd", 0xce4, r1}, 0x38) 42m17.421133008s ago: executing program 32 (id=55): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x3, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00', 0x4e4}, {0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8}, 0xffffffffffffffff, {[0xfff, 0x6, 0x401, 0x1, 0x8000, 0x2a1, 0xad26, 0x7]}}, 0x5c) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)="7982982143054ef8e69f967f520f9cee6e312d486543772fda10e24990c273e6b26e2655dffa456f53e85fb3ef986e7b8f6d9b9e3f5a27e10a7afbf28f062c4418304b53d11ccd", 0xce4, r1}, 0x38) 41m40.724513711s ago: executing program 4 (id=156): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) unshare(0x8000000) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r3) 41m39.634803443s ago: executing program 4 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7080030c686377369efa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x30b}, 0x14}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x78, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {0xb4c}, @device_a, @device_a, @random="2d08ef617d40"}, 0x0, @random=0x3b24, 0x0, @val, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x44) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffff9, 0x80000001, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r12, 0x4010641c, &(0x7f0000000280)={0x0, &(0x7f0000000380)=""/135}) r13 = syz_usb_connect$cdc_ncm(0x2, 0x7b, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1120832fc1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xd3, 0x9567, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x217, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x72}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x23, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xda, 0x5}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x81, 0x1, 0x10, 0xff, 0xba}, 0x2a, &(0x7f00000004c0)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "97dd9d8a25aa2a85cc0afafa0c0bc2f3"}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x3, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x7, 0xf801}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$cdc_ncm(r13, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x20, 0x23, 0x43, {0x43, 0x23, "3d580fb9729a3bcff257dd6e0f0e5df6d640488f94cb9557e10e6e118dceefad964c349592d9478484ba9e0f16f8ada501074e4c099c15732810964b02ea28b409"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x0, 0x0, 0xd2, "9e38eb2fed333afc246acda99f170a524df54db9311d839f104055fa3056b2d5b6f6ce193c339c6f8fe1bbd8ce6789f8f4442100ad567e2b6ee259cb63eea105fa4ab51786917f7ebe6f79d3c05076d77b78107989d609486affa1834037154b0a3d5fea583c870fc67630656f0f54ed1745d9f5f862e939a1245827efdc384ff37b6a3348398d17a513a875b5c64acaaf8bf5f1a41fa51a1dbe0772c27d3bd7a143602473d512d7f334c06e0ff0a36ed295c499559423ff09b9433554ba91d0722ff80c62fddc3d53cb04cd93ff54fe0c26"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xda}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0xf, 0x5, 0x14f, 0xfff, 0x3, 0x4, 0xfff9, 0x4, 0x80, 0xf27d, 0x6, 0xf66}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000a40)={0x20, 0x89, 0x2, 0x1}}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) 41m35.796850806s ago: executing program 4 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @local, 0x2}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) 41m33.186746436s ago: executing program 4 (id=176): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r3) 41m31.655020733s ago: executing program 4 (id=179): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400004efda76b00000000000000000004000080"], 0x14}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) getegid() r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0x80dc5521, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mount$tmpfs(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x20080, &(0x7f0000000300)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x6d, 0x35]}}, {@noswap}, {@usrquota_block_hardlimit}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, 'net/ip_tables_matches\x00'}}, {@smackfshat}, {@smackfsfloor={'smackfsfloor', 0x3d, 'autofs\x00'}}]}) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 41m31.10042948s ago: executing program 4 (id=183): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r3) 41m15.688797331s ago: executing program 33 (id=183): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r3) 40m24.832619371s ago: executing program 2 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xffc3, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x220}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) 40m23.924528747s ago: executing program 2 (id=362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f00000002c0)="d2", 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) (fail_nth: 8) 40m23.381037384s ago: executing program 2 (id=363): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r1 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xd0f3a97f57f86bc5) r2 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x42000) ioctl$CEC_ADAP_G_LOG_ADDRS(r2, 0x805c6103, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @private0, 0x2}, 0x1c) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002240)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@remote}}, &(0x7f0000002340)=0xe8) sendmmsg$unix(r7, &(0x7f00000024c0)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="b8fb975ca66d725a", 0x8}, {&(0x7f0000000380)="a7c7996cabe2494c05b2c9c769e6203cbc58e2d2e29ca9b6e1922f9080011fb5a5779506e58a06fa000bf8e15bbd3d22cc", 0x31}, {&(0x7f00000003c0)="e19540ec27a3fdd410b051116b4176770559df552d94f5ef16310d1f7561ab1c3ff2b445856cb66bf954a3443bc6bbc515b503e03ef418a4e327dd4690be964f5877602e8a2e9e3e8453f86c6f551bc4bcbfdbd4bf6cf1ac699b0ef124a6933fc5012433bf1b6cffb5bf00747f264d55d1d5ac495dcd532bf73bd8748cc622db", 0x80}, {&(0x7f0000000440)="a9128195dd32f44c608c122043616832c407c6f4ed4d6cda0bffdca8cbdcb38d5038e0b053affcbb86b29e046495edd155f88230953859e1b585d7c784b83ff3a8c2b369c01fd5f7bd9b5bd7ed0f9ba8f6b131152bf332801d92e2ee728171e709ef554c89c3b782c662365f3eba78b36f96c872e2015ed404e7c72f55d128ace3e6eb89256b7362d2a8e36b22114679079907eacdc5bdeb7e0186bd9eee6ac32c920557135896e7d52e04", 0xab}, {&(0x7f0000000540)="d88e5b4e9737cb1ce52af1aa7bd0ede43cbb81bf93c71085bd441d1115850c6de0e2cf20b323076405a5fecb430c9c6796450c2de160e31d0377e6d812caf25560b64a1f5a45173905447a850a152e6c2da095e73d3d21c25a3e96ee332a581a3befb9f54153038dd21ecb40d7e9afea7c05f657a8451837e3caff09fa43c26c7e0df54991966288bc4f4300468927857fee01b15ab70491c9db", 0x9a}, {&(0x7f0000000600)="8cc1ceb1e8a6fe81f5e838a87efa724deb76932c6cd19cc7ceca5271c2205fbfc13349ff350db0cbed83cbe8f0509041ea00e4dcdb02927492e5eafaa48d45696f924807cc0b782ef789b5432836ecaa1f73db0cded5ad077a44d33dee93459af3688137b7c9de5ccdc1fa79d2a42e10d74dd0438f6fee7e28b7cd3c9bd0694081b677eb", 0x84}], 0x6, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r3, r1, r2, r2, r5, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r5, r0, r1, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}], 0x120, 0x40}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)="16542fe324017350043a84bb4612ec95bd7fa0e3dfc4cb5fb7add6e750ed1394e97d5e39f86928dab8e7562748d0c69459d56e7b95a1ae5954664e6a098e4acc0e8679ff0cdf0a534064248076c19189ca9ffa7560597d68f49efb438a4a89c8764a62836c4bedfaeab3c913e67a0cc31c157cc589cf6bc47eaa74914cb58743f9be893bbee4a243fabb177daa7e9d20897ba23181d9ab88af9223eb631428f3ea99690e2235abf8bdb6873f7231ad7ba9ddbfd59b85637e852a8b175e3dad324c6bdca62cbc0724254e8fae", 0xcc}], 0x1, &(0x7f0000000c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r4, 0xffffffffffffffff]}}], 0x28, 0x40090}}, {{&(0x7f0000000c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000004780)="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", 0x1000}, {&(0x7f0000000d00)="dcd2b81041260b011073b8096a8bff4c83d0747af0819d27e0f617bb778067125e6bdd36225c22c7e3c2e967824bb89e29eda71e24db0ecd3f31ff10064e4a7a446d7e8446a0b528c5d76de0bbce29058a1f3e2e3d3b9daae61e6781707c4cae89b030ba27ffda8653a6bdce3c1ac5ed6232c805e48f6481191d3699901c88816373c137e3d924e9c242e01c1240dcae37b86bfef51264ce5c8d8b3038a3b567cb123edc37a51693975ca0393dda1bad7e671837c6469735b480402ac26263f712586a654d30deec6b239ea4ef5e1f10a7b4fb41385fc7fc4f2c0e4d0c", 0xdd}, {&(0x7f0000000e00)="ad410cfd4cd1f4a65d84dfda39af004032fbd777a980e15c67b4b4166623e4a7e3857ce03daf879b72c87b8cfe0f9589e98a119f6ae6910f1e175c935f8d04d1e355e31d9ecf0cefff129a97beb59e4d9c9f7cb8da3eca28c23bcf7945b1379e25ddb3900b309f9f640de161e288d14876e3ea1683a739b88301357a00f48b73e9b4dc697475be94268bb08608c0a27b3aeaf20ec1dc40695f8acc1661fa9e359d5fce2591d2987a3299d930562d5654c9ea1828d8feb460b38d2e687eee94f5ad4f476bbe7659ab7b01ad2de2b86724ce42cc892984e216b9aa69827a9360725def2e7581e09b407637295720da8f418f4208230960", 0xf6}, {&(0x7f0000000f00)="af7582cf3efdbe118f4c210da680866e4073c2dff3d25db93b758e88715beea446ea7b30d5c7202586244e8a830a6e60b8232e1697a90771e7c095c6a02ca942db501111d61a8ca9119950a928557a041c2c585bee0203410e4756fb3741bc4dc60ad98bc372c4447f4b", 0x6a}, {&(0x7f0000000f80)}], 0x5, &(0x7f0000002380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r9, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r8, r4]}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, r10, 0xee01}}}], 0x108, 0x4004}}], 0x3, 0x40000000) 40m21.65962991s ago: executing program 2 (id=366): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfe, {0xd, 0xd, './file0/file0', './file0/file0'}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) sendfile(r5, r0, &(0x7f0000000540)=0xfffffffffffffffa, 0x6260) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r8}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r9, 0x401070cd, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 40m20.308721429s ago: executing program 2 (id=371): setfsgid(0xee01) setfsgid(0xee01) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006600)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000006740)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x200) socket$nl_route(0x10, 0x3, 0x0) lstat(0x0, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x873, &(0x7f0000000080)={0x0, 0xc1c3, 0x80, 0x2, 0x1}, 0x0, 0x0) 40m19.349558524s ago: executing program 2 (id=375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000002c0)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0x4000}, r7}}, 0x48) 40m19.029963765s ago: executing program 34 (id=375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000002c0)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0x4000}, r7}}, 0x48) 39m2.130038524s ago: executing program 6 (id=589): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) unshare(0x8000000) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r2) 39m0.199982987s ago: executing program 6 (id=594): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x165201, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capget(&(0x7f0000000300)={0x20080522}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) write$nbd(r0, 0x0, 0x40) 38m56.585080253s ago: executing program 7 (id=602): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000002c0)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0x4000}, r7}}, 0x48) 38m54.531771526s ago: executing program 7 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @local, 0x2}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) 38m52.291266566s ago: executing program 6 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r6, 0x8000, 0x1) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) socket$inet6_tcp(0xa, 0x1, 0x0) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80080400) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000008e00000008000300", @ANYRES32=r7, @ANYBLOB="7ccb49712c5b20bac700edc30c46ffb90a68c6e486ccd005177449ebf2a2d935cdfe40c5a117"], 0x1c}}, 0x0) 38m52.149186511s ago: executing program 7 (id=611): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f7500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38m50.235427979s ago: executing program 6 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x80, @broadcast}, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x407ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x2, &(0x7f0000000040)='source', 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00009a0000508500"/21], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x78) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xb3, "9b2f26e100abbd9974f38b41eece5062ca45b93e4b7c68089c65dfe126ee64cd917464aa721b1f4be053c87e67b27e833b8700472b1a4939a7de893d0977f8be75e7c6ba0c94f4245803d95f42577c01ea0ae01e5235c73803c5393c10aa4013a5b5db02dbc262f4d973eb3ef8ba30557abf28f530a9a24b8804ab779f93eab3365dadfc903d31fe14910defee4a2d7c31381076a14dc9047a62d3aed914fd889b909fbfdae5d149642a9223fccbbfd9536871"}, &(0x7f00000000c0)=0xbb) 38m49.288584185s ago: executing program 7 (id=617): socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) unshare(0x8000000) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) close(r2) 38m48.876582264s ago: executing program 6 (id=621): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x423f}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x8d04d52fd63cb9dc, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) socket(0x11, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3}, &(0x7f0000000180)=""/84, 0x54, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x6, 0x1, {0x8, 0x0, 0x9, 0xfd, 0x0, 0xfd, 0x7}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xffffff47}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x0, 0x5, {0x1, 0x79}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) socket$rxrpc(0x21, 0x2, 0xa) 38m46.755913559s ago: executing program 7 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getrlimit(0x8, &(0x7f0000000100)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000"], 0x88}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @multicast1}}]}, 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000000000000000000000851000000200000040000000000000009500007b842963af9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d2023300802b00010802110000"], 0x2f0}}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f020}) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) 38m44.601955654s ago: executing program 6 (id=628): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f7500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 38m44.137854555s ago: executing program 7 (id=629): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f7500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38m28.961932486s ago: executing program 35 (id=629): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f7500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38m28.661834549s ago: executing program 36 (id=628): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61121800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f7500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 11.536511243s ago: executing program 9 (id=7440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03316844268cb89e14d2d881", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2f0cc1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) listen(0xffffffffffffffff, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x2c, 0x2, 0x0, "444900e1b0faa9b00600"}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000300)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$packet(r2, &(0x7f00000002c0)="03000300000000000000ab5d71acedd7c9560385dcb188a8", 0x29, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, "73035a7a0000000000001700", "ff7734156b726d230d88dc29f2689271b3ed008e"}) fcntl$dupfd(r1, 0x0, r1) 10.63259034s ago: executing program 9 (id=7444): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000400000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000f92400"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xf, &(0x7f0000000ec0)={0xfffffffffffffffc, 0x5}, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x773, 0x677, 0x8, 0x3eb, 0x2, 0x80, 0x5c000000, 0x5}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x50, 0x0}, @name="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"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(r1, 0x0, 0x0) 9.330197552s ago: executing program 3 (id=7449): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4018004}, 0x20000081) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "ca00"}) io_uring_enter(r1, 0x30bb, 0xe850, 0x29, 0x0, 0x0) r4 = io_uring_setup(0x6248, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x354}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') keyctl$set_reqkey_keyring(0xe, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 8.434846789s ago: executing program 3 (id=7453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="1806810000000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = socket$inet_sctp(0x2, 0x400000000001, 0x84) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) listen(r6, 0xda8c) 8.297957282s ago: executing program 1 (id=7454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0x12}}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, &(0x7f0000000280), r4, 0x0, 0x800, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a004000008a47e6c71f"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c11000000000067aa44e7804bc32200000000"], 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES64=r4], 0x3b) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}]}]}]}, 0x44}}, 0x40080) 7.468490069s ago: executing program 3 (id=7456): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000002410c0000000013"], 0x34}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x7}, 0x8) lseek(r4, 0x8ce, 0x1) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000380"], 0x34}}, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x22020600) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file1'}, 0xb) (async) setns(r11, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) (async) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000380)={0xa, 0x4e20, 0x1000000080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000000b000000fe"], 0x18}, 0x40) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000180)={0xfffffffffffffffa, 0x4, 0x5, 0xffff, 0xfffffe64}) 7.455648335s ago: executing program 9 (id=7457): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x8000005, 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000011000004000200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000050010000d00000007002200954aae00"], 0x30}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, 0x0, 0x0) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5c}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) 7.22408621s ago: executing program 3 (id=7459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) alarm(0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002c40), 0x0, 0x4000040) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x898, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "1bf60057eca23bcc3aecf3aad2bf99286b231c144dc20e2072fadb9d1c72b59c6047e5ad7560a3d6272dc24ece8460fe1ac5a556eea5bc4707de484315f668a70990bb093c67a901a875a61fcca822846179323ec99089696155a22c95efa53e1d9427227514dcdc58060616df812d19b63310e1a028abda51b9d41d8c46eaa2d73c6bd217d2c0e8f19e0ed2adfef4db8c4f2906fa00479211a35487143e98177fd7c099e6c8"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'crc32-generic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c0}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&%!\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '})!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'crc32-generic\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "343cbc7738ade673e23367966b1b7bbb23bf3b9076ce253257ee9cc8c4bbd5b9c5cc134b40275b4406c93b0628956fe652294e7c3944748d702a2ed23f61ed4922326c4c8fa1a3bfeaf01da534cf43f0daa5ded99922b4b09bdee5c793901a2a86cb359f020e3b97a9c936b4376a4e976a0fea6cc72f9fab6b36d6d424ca8295c1211c7fdacf4a8b03baef06dbdc67005213b030d9399b6de300fbf7b1dfa72c2926e1b0a19ebff4ea5fd19e04abb8389452bfebf763c241"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "afe7ebb1e7f12f9b68156488a57450b40e726910424be8f0860b89fe82dbdee133dbb7289736178c79"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "fc54cb915d1a53f6b3ab220e82575fcd47ffd72f25216093f0cadee9c4c517db9eb58e21d6757b1e8db553c84d15111bc6ddd013daee824f23cd127432439bf1b0d4106abd167cbf94b7042a8c739c8f5e1f467b53317b970a214d34611afdbdf9377825c20e83e6b3"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "2686df8025b0f4b782a2cfaef6857d5495"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x88}, @ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "690462fe13a023f22d7753a5d65c9560d7ed11608cf53fc252762daa274b8c55e85e661298aa8136296404a4ba24878a59c12f87b574948cdc4ddacb1ee2e6b02593894a2a3b52f663647c3a7155766d74b22a24d8f9744d8091c748454b79fc780d6c63ac7273048c4d5b924cf0d927839dd1bf089c19e6176f9d24fb1fb7381c7c64f564516d96a9b882e77ac8767d9b55b56790a6a5"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',/\xb5-&}^@+)]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'crc32-generic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')(\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7bcf}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*[^'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^)}#\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':@/+(#,^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28a6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc753}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\xad\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6bb}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "adaa40a01e19467987bd8bb29c3e0054bd03dca309fa0cad39f85d6b5fbab0961b34f769803d95b4daf137b797deb50ed4fe441eeba7ccc551470f8c33316f384c40759ba98132f06ba0d539c51599428917dd0a8d5b355a5e9cdff8193b16343464b3fd0c5c79e0d0911c0f79a6f95304b3b2db8930b8b686a9c3828a5f6c5bfb2bbe3691def570f08fdcfdb44e5fd08e3ec2210d14db2042449ac63b1ccd386083f4e033eb0465005b690f4892d9e6603b88b90aba6ea34f6195939012914e6f8272bc04843084b68f4cb7c1ddc586860a52"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\'\\/://.$.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "2595"}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400a000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={r7, 0x2cb5}, 0x8) syz_usb_connect(0x4, 0xc09, &(0x7f00000013c0)=ANY=[], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r9}, 0x7f, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0xfe, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x210}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x190c, r10, &(0x7f0000000080)="cdef40a498c0397541acc79882a48a54ed566e72521fb01f1742f2c2ab248cfd80fbc86e48758192a13f1393448b40c0d5a8cb52b17936f85356394aaa39470334e454eb501fcca2ab2011fbff41dc50884bacbef09d62321b2964cbd03efb71f0d6b70f6bb7e4fd20f527fdac6ce44a99e1fd85407372786493d3055dd201669838aecfc9cf23bd44abd49c", 0x8c, 0x3}]) r11 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) 6.248315944s ago: executing program 1 (id=7460): eventfd(0x20000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) socket(0x10, 0x80002, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@hyper}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x30080, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x9362, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r1, 0x2) io_setup(0x8, &(0x7f0000000780)) 4.702246755s ago: executing program 9 (id=7461): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x0, 0xe, 0x10000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) pipe(0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x101, 0x7f, 0xffffffffffffffff, 0xfb0}) r1 = socket(0x0, 0x2, 0x7ffffffb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) close(r0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "67271c", 0x0, "aea70a"}}}}}}, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000), 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000a8011a80a40102803c00018008"], 0x1c8}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ff0f0000040000000300000000510000", @ANYRES32, @ANYBLOB="6b0f000100061000"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0400000005000000020000000d00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) 4.151580449s ago: executing program 8 (id=7463): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x212540, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.150839993s ago: executing program 3 (id=7464): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xb3, 0xf5, 0x6, 0x10, 0xccd, 0x38, 0xb529, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x5a, 0x42, 0xa4}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002800400120005000b000700000008000100", @ANYRES32, @ANYBLOB="0500080000000000080004000004000006001100", @ANYRES32], 0x7c}, 0x1, 0x8}, 0x0) 3.002025539s ago: executing program 9 (id=7466): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c9097"]}]}, 0x118}], 0x1}, 0x0) 2.697368368s ago: executing program 5 (id=7467): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0xf00, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}}], 0x2, 0x0) 2.614874371s ago: executing program 9 (id=7468): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000400000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000f92400"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xf, &(0x7f0000000ec0)={0xfffffffffffffffc, 0x5}, 0x0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x773, 0x677, 0x8, 0x3eb, 0x2, 0x80, 0x5c000000, 0x5}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x50, 0x0}, @name="fb41d0bccf751a0046c50e2c9d5552e4e556499e39cacaf9f03a1a9467e9b51ccb457ef7ce9abc7fe03af496ff80bb548428563d69d839869323b9fa1108daea698ceba38a1bd7680ffeee4f104da9dcfdf21f51feecfb505161309ffe71772da089dad4e773734455322d7ee92d3c9b08de4d49dc2db3e0721c4259b9cfde2634b85a447cc0199eb9dad7c70482e1591d2e92f0ce7d522703d29d0244114e4643557bd58b8c7b4db792b0d830fb80677f4938bb722da1624ee444eec7dc100efa7a4f9357346a2945fb56815b27378a4095feb395e45c9c2f6fe7c082ea8e4b7cd66106469bf166c721acb4c1369c2ab3aecdc4fa2e85b382f9350e28bf059c2d8c42982d176c72066a5be9cde486e805cdd19c368a7de425fc347fecbe09ad1aa668158290f0fb406b84ec2d9059954c658bf755be9fa196efdac11b40879f66b4a1a72550657a652c99ed108e39468113cb2ae00d43771aaf99c7c72a2014fe394ae10251d82365f8eb73571bf0c1d443b1cf76b7319e18e2fbcf21e8099d9e47709c580d6e25ec39f9ded643855fb9e16eea85e74263898510248d06fef434fe2890b29e0a68aa2071c4d89b74b5a66fe252824923e4b1eb544e42735f52f0ac1889a1bee6abb0013a89f88096e9a67f1e7491e8af0ccbf930bf9992fac3eb188ce38f57fa995f5b486e25005b1d527400bcbe73fe19ddcd1e48a1e587e81207912a054a0359a19927baf13c49c529f2e06b3a1fa2d7d427e5292d517b647656283384923bcaa8081194252f1aebfeaba627350c61b2802b4c9010f5eb3f7071b2ae51eac7524412c184bfa55b4bf97afe34e32aa9c10aefa0a3fcd9db348752d09b9ffb0e8a3c29dc361d1a0f066a47d883accd4bc95e7f8d525c0d37bc06523a806a333711d80d79fb50dc3c8dc5f485da7592930148a6330be6b02deeeca484f8065c50516278d5217136e3fce6534f277dadef5bc9dbc070354fc9143e8044cac5f68e7917de6a3e7c7f0e68303df6f4b7549e58c8f25af459d6a6caa201c49a34aa8769e7a2c035417aeb18f17e085a61e27efd6bfd5e8d7f74479e73cd4a8b493ac1b6ac8ea54f44214d06324bc30457a7ac523ee688ee97024b433f788538a0a548e7d22aa9405165dbbbfa7509bd18e02e6a398fc8937eb47b97c160b2edc3277229d32de00ec7ac1f9fee3d35adddd69d4a4c7920e943c44288d83b122b4c509db02c66d86e8782c1e10259ee06251cdf338670a8c8f526c729add35d5b149cc88b34e36cbbe3b6a38421924a8f3e09d4ce00b3cf943bd77ca342679cab2adb0df82ee294439a1ff6af02b7cf65064ad36a01fb409c4b924ae1363035527855d15454b54f178b26119d58f04fba81f695a75c12ae8b26851cacb0a1d94e0125798b91c1d03137df3660ac10ec4982770d11eff8c74d3c406e1f17190ebaf96b4a281eddc23629f429ee0e561fccd56c1e72a200dce8c2a3733db34ad564c23e525c53786f816f2debf2c35ded162150b214e103ea42d24b28c7d48658991412798ec682feee94dad1cd0bc11c7060c1404ff6f27581f44e9532a780683bf7e02f3ee4733412268d8a6b7ab9a74c4aee2772d8119006bf03e738382a8d729860e6873b9704cef81011c6d553fa9367764f49b781737cb0cff613f5d4419b7a065b19e0c1378e3a9623751d409c7fd6d49c18e8ce85901d76547d01d2526f6014d41094de325db75a98b5290eb4e120c31e2fd4e208ab25c3e217f09270baedb9076eb4d50efe686313e2a1357b4ee19527c231c5cdb7e165ce22053009f3a5d2c86f8ac41938841f3c557366418c68e8c71404de4df886f209676e5220e4c363e536500d3e5967d00ca47aaa3f8cb960961a4fad6dc95816f88df387f822c1a8b99ab7a2392bbcbe641945dde1b97b9310e58c240f7e62dc79449a554d65ab2178ecdd9b41b9a34155c77d6a84bfe2a3326e256d62cb1471d1c9e400f147f293d6fa9c8152e16b9abfe1ad42e8a552c7cb2017042b838373a7d3268740bebbd99f2276978f3b28d06fe5512b821e711750a79301ab7b537c1efbb12f6be8cf7385c97ec13d0d12de5756d7efd9778b40485a813da628837f844588876ac97ee84f5313409eeb62c84804aa3a22aec3c1870821836a49d6e407554a3de1a529ee8e55a4c50967d7d814d0dad4960f3d793dca6bca6164cbce017286a8b9b9e13a3d1cc953f6d91e978f6158be0ca2db580a4249fe9965df847dbc4554f840b133ec28dc20dfa5a88f76a49ee0d07b99cebaa9927ef0756b2bde7b335498da24c6bb2ec34e5b38738bca879aba2222d2ca941aecba84035d177f081252cf47fd350086e694eed1f8ff639527d1171297a5a8b7fe87c4252d9361936805dcfdb8cc5692a216f2bf5e5440b39543f8a17ffb299515eb188489bd021665b96679fea156341ac713d209dde799b4587cb6d7f6e55ddb0ec7fc10fa179081646271d872c884f1860b9e3895465999831bd13fcd3106d486bc4fba59db3dd9ebd69cb41eda68c95912a4dff95a2496e6bdb77ac60676242a5626dd2b5616a32d43f6241189d1a89d2818bf64842b813b8ad97dff6a11fed2ff1b9d01af7ff4c878fa5be2c6bf1757fd01c8f2661ef2c0a3dad6d8f61deda9d7c00a76b27bd5a8d3764e623e446dabb77495a88151e274e001c3ecdac00d1147e12a7cf339d9ba9fe586b800e4282b14ebd46abbfab251de89a894504f33545d47e7f18d571c20f3d8bb513f5f5937b381e491ada77149bf5790c9b2e3b7b295549bd798db09e2a9a3c3f8e8073156a5bcc6de858080ea79481d310f7ba27c922843daa6cb99a5a06f4aadf082df2ef03397cfdcc4d26909b539a493df881c098e12e0686ce1da41d6abdff0a79e64c1e51f293e2d695b0a47b405c66d6975d46521fef50b5401cf8c2aff9085386137690535822d067ca4cf366c6b0a0e4ec5ab9744aa0cb2eb0509c2cc537d529dbd62e3e50559ba16773cbbe2eae84382a0d3e6d048b05cd366cdc8642e9be3f711ae981f468c506bb810ef8b2caa0fce108243971a08fa9c2ec23b0108a41403ea6579badd4bf7e65d7a3e91fa49e3c190f36f5126014fab9290bc94bd2c7013f906d65d962c37ed9b8da775fad1dd49ad1fadc20de0fb0924e41e4cf7753212ea08df665f33952b057c6e5713d5c2b55a03d345e797d25031777e1eb7f610904e8b28a76fcd9db1b83814f264ef09a3531dc6f96344caae66c2818f3635f67adc67e35293feb0da7bc1d2d5740693b7e84ba32240a3e6d0d408e80b3ae1357d47dd420897a964d1b8a683105c6b94005e48631cc5049168ee7d42fef05d901aedfe41dd9d4390cdbd45d7f4d327040eec78bbbf23de4590b32c5b964ab441552780cc41f4de97198be093cfdb52c53a1defdaee36eab99362dc22785dd54837e7d0e6c7c29b448575abc2a5130776141e8766283ad11370e0b85d045012a0e0c359e5d67019c1f2866869b3b2abd647d3047c88d96bd40b63e9efe6ba687d94bd42c72e14f055dc0ae8d0f90c048779f31585d29f38ee34118c346e3c3b00d6a12e6d8e409ae8b1d9d90bce6eeb4a6ed8357cb5fe8cee9089738a5352bd26bc2437ae74a0d48e8906f78b3473ede88bcf783f7c2d9ce0597e3fb9badca65c3973ae2a29a2c18e6019f23af887dc5ec7a68bb8e9d4314f0540025374933c998433f6173fe0986d9b1d2722d5de797a9aa9ffdeaa4a7f1dd2a36824c79c718cc6f40ca2f9ed8c3a4fd868312104b42a16ba487ec14d49e066a6b5df245413b3fda323245d1b3c665e6298488d836b230de37f1490d47586498e3778152365a43476026d6c82f4e88bac9c9a47ed949441b3a9292d87ccec28bf4ecc974e96a2e8f66c23c31529d78c1c53751c90c9368d1700dae1370f8c849e46e9d89d210871de6dcf621e971f4bae4f1d2fb71ffc91c9117f94908f467a42966ec8fbdefe4374ae9312e23679891d30e985252f07d3dbd1fabc559cddb26d254383a9a500d294aede9eafc3c8e6d5ec96cd909e5bb63d46f412c07511bfd79710f1ee986cac52ce3228b771e2083e55f5b8639cdfeda1faef7a84aa46d45d9fb7580bd5f356028c5272a8fb599993763e99ce2f287411982ee39dd45c0e58c1736b02393272f4fd51166bb21a980d29c63c8fe8131245063fea61ada455dca49739eb1386110c255db2d46443438e652b4c3c277490ac31c2904bc8859cb70733e5fc2ee9bbc180ea1e0b1ee67708531ea8e913d0c0d7d05a59adcfbc39693eccd2f1d8011e5dfec89c7d7b94012f60ecfcdf133527f9459609343107ff030b546e4158ffbfeaafe7efad5181cce3ab492074d225d247f0376c7eb742dd730d16a3eda2c4c516a2000eacaa79e89b3d1e5087301ef4e819817dd79df8d9720a5ad3089175fde4aad534aca926eb99e3657edd380645e1cf8331b4a5026c7bc8a8477689590424506e904f12344dcbe8d32a46f360c2ce4108800e8954d7d94d301b3f2a699b233bc1d1a42b34760192b9fb476101d8fdace62548bbb75b9b619d5978296c47085d462082cf48c27cfe7a76b265ad2f11ebcfa731f237e7acb32dc7bdc8ed689c4f2baf1d85175e04e82938992645a30340413867eb858c2de87772bb9d1173e3fc2d7696142d1fd2b1cc4f3e15e6e59d718f9c1203c42339a8750f618448ab2966b218fe1dbdb49c9e534102d699b36914dc6ebc9a7a401baf4397b616ba1b3e6bb34c9656445e31e929a76d242fdcc5f084371e382e172e8416bb7190a2fd61b87c9f14f6e8a6298f3912f205223e0e643e65c3f323698107ac605cdb7c7bf375e266682e2e209c654dcd777d5d35d61f0cc32d2cc5a2720f6b7dcf46c6f571ace0b743d76f2ac4701ac0b99be1a6e2174e8146b6ea0b0d1184a793b40d54a630d49d972ac3f5b0901901f658160e41f8d8cacbc9a3a5613457854ba6bcafbc635d78a28b8ccb5dea4cfbf7e63dff00ca32c9847994702078542c72cb9839a15557adea828492b6f424075bcfaf577922e68f233a6909c46aebb762c526f20afa2463015547538865f4b236d614f4ddecf7fde084b974bccf845070eb925a335432e88da312829439572dab86d691ec99c5611b528fad9dfdbb1a7f6e428dda8e8d01b2b23a5e781a81f6cfa7b79c42f7c1b0d11cf6ecb27efe7b6af2c50dedf554ecb745c00614ca27203282adc46c2ae1611daa0ba22db3083b703b4274d8d62eb86ea61560df905ff3aeee3bae0ef22ab7553bb0e1351e4323522f98c651b84bfa2a6da184ef739061e09af9ee23296189429a963ebe59d8908b4f5c3b5eb08827ddff176f8d355f9d79ac688af1c4e36c01f76365198e068c266182603bc29cd6f4b8f09502d9739c8d73a496e6877b9f68a1de20f3544d9d30c716b8b5c042695e6cfde5083ee09d1d10f438ddd9a25656383cf406b62db27b243eb044099c1482f8e3bd5de5071d77b68f969b758c9ad412303f6b0bac13cbbcfab98e1a0f5b754972625f694cfa2f6553dfff692a9f0577d67307ee2ae37a1753e003f410c0cd8ed1928b06bf005203a52e21ca6411863185dbb65861de36ed9eeb30207777b761093d8b575b755fa01708645c0e4cf19dbd43e5f64cd18350eb9c668b923fad3ee2da716e313528746da62a901d0fee4ed6228b9bd3ec3d5d"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 2.614477333s ago: executing program 8 (id=7469): r0 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x120) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.54923912s ago: executing program 1 (id=7470): r0 = eventfd(0x20000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) socket(0x10, 0x80002, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x30080, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x9362, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.496576737s ago: executing program 5 (id=7471): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x8000005, 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000011000004000200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000050010000d00000007002200954aae00"], 0x30}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, 0x0, 0x0) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5c}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) 2.438639776s ago: executing program 5 (id=7472): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000e00)={0x8, {"85f080884e142b266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb69e6f4048f2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778681ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659e506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b560300020000000000005131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217f03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa812a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7f453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c931302a2723110851d1abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc1677e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe65701000000000000000742153111b15e484d8ffebe47ce0a78a41e470a451216ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d158607883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca89db0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7f6ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb03cadc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x16d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000001f40)=[{{0x0, 0xa00, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], 0x10}}], 0x1, 0xa1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x2d, 0x430200) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x1400000000000004, 0x42442) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r7) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xaceab) socket$inet6(0xa, 0x3, 0x1) pipe(&(0x7f0000000140)) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) 2.360029751s ago: executing program 8 (id=7473): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000001840)) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000001880)={0x0, 0xaa, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0xfffffffc, 0x0, [0x0], [], [], [0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffec]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80, 0x8080) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000180)={0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r8}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 1.665629252s ago: executing program 8 (id=7474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x100}) fanotify_init(0x4, 0x800) 1.486314903s ago: executing program 5 (id=7475): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2284, &(0x7f0000000040)) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000a80)) 1.399649691s ago: executing program 8 (id=7476): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x0, 0xe, 0x10000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) pipe(0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x101, 0x7f, 0xffffffffffffffff, 0xfb0}) r1 = socket(0x0, 0x2, 0x7ffffffb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) close(r0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "67271c", 0x0, "aea70a"}}}}}}, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000), 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000a8011a80a40102803c00018008"], 0x1c8}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ff0f0000040000000300000000510000", @ANYRES32, @ANYBLOB="6b0f000100061000"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0400000005000000020000000d00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) 1.292446515s ago: executing program 1 (id=7477): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84400) socket$igmp6(0xa, 0x3, 0x2) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0xa0410) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4010) openat$cgroup_type(r5, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 936.62749ms ago: executing program 5 (id=7478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400cc0000000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}}, 0x0) (fail_nth: 9) 936.175388ms ago: executing program 3 (id=7479): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @dev}}) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) getdents(r1, &(0x7f0000000140)=""/30, 0x1e) getdents64(r1, &(0x7f0000000280)=""/100, 0x64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r3 = socket$kcm(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) rmdir(&(0x7f0000000200)='./file0/file0/..\x00') syz_fuse_handle_req(r4, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea0600000000ea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098d42e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17500000000000000003ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a19c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae57121e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb06003cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd00", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x12, 0x0, 0x0, {0x7, 0x21, 0x2, 0x460c81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) 890.263574ms ago: executing program 1 (id=7480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x8, 0x2aa164) syz_open_dev$sndmidi(&(0x7f0000000040), 0x200, 0x20500) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0e00"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x80184132, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) 75.816505ms ago: executing program 1 (id=7481): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00000008000300"/18, @ANYRES32=r2, @ANYBLOB="060066008e8800000a00060008021100000100001c00330008010000080211000000080211000001ffffffffffffe0ff"], 0x4c}}, 0x0) 75.344131ms ago: executing program 8 (id=7482): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x8000005, 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000011000004000200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000050010000d00000007002200954aae00"], 0x30}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, 0x0, 0x0) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5c}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) 0s ago: executing program 5 (id=7483): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@union={0x0, 0x2f, 0x0, 0xd}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x17, 0x7}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/248, 0x47, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='sys_enter\x00', r2}, 0x18) getdents64(0xffffffffffffffff, &(0x7f0000001d00)=""/4096, 0x1000) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x8000, 0x4) r4 = socket(0x28, 0x5, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000500), &(0x7f0000000540)=@v2={0x2000000, [{0x1, 0x7}, {0x8, 0x7}]}, 0x14, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a40)={0x12b4, 0x1, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{}, 0x5, 0x4, 0xc000, 0xc, 0x1e, 'syz1\x00', "ccc893ffd27c06399d566fd5d676524dcb0586745f5982220e4cb678278c06cf", "04462ecbf4842234aaa9c987311a85c23213e6b4f13137cd81938728b26503f4", [{0x0, 0x4, {0x1, 0x3ff}}, {0x0, 0x3, {0x3, 0x7}}, {0x2, 0x8001, {0x3, 0x100}}, {0x2, 0x7, {0x0, 0x22a8}}, {0x5, 0x77, {0x1, 0x4}}, {0x6, 0x1000, {0x3, 0x3}}, {0x5, 0x9, {0x2, 0x9}}, {0x1, 0xab0, {0x3, 0x79}}, {0x2, 0x3576, {0x2, 0xd}}, {0x7f, 0xd4, {0x3, 0x18}}, {0x7, 0x9, {0x1, 0x1000}}, {0xba7, 0x8, {0x0, 0x3}}, {0x7, 0x8, {0x3, 0x200}}, {0x7, 0x7, {0x1, 0x3f5}}, {0x0, 0x5, {0x2, 0x20000}}, {0x1, 0x9, {0x2, 0xfffffffa}}, {0x3ff, 0x2, {0x2, 0x7}}, {0x8, 0x5, {0x1, 0x9}}, {0xd, 0x4, {0x2, 0x6}}, {0x9, 0xe6a, {0x2, 0x5}}, {0x0, 0xfffe, {0x0, 0x5}}, {0xfff9, 0x7ac7, {0x1, 0x80000001}}, {0x77, 0x4, {0x0, 0x8f16}}, {0x3, 0x9, {0x0, 0xc}}, {0xa188, 0x7fff, {0x3, 0xa4e}}, {0x8000, 0x0, {0x1, 0x3ff}}, {0xa, 0x4, {0x2, 0xe0d}}, {0x7, 0x7, {0x0, 0x7fff}}, {0xff, 0x2, {0x3, 0x9}}, {0x3, 0x0, {0x3, 0x6}}, {0x0, 0x6, {0x2, 0x2}}, {0x40, 0x5, {0x0, 0x9d6}}, {0x1, 0x8, {0x1, 0xa}}, {0xd, 0x27, {0x3, 0x3ff}}, {0x4, 0x881, {0x3, 0x77}}, {0x6, 0xfc4, {0x3, 0xffffffff}}, {0x51, 0x8000, {0x0, 0x9a}}, {0x0, 0x9, {0x0, 0x7}}, {0x200, 0x2, {0x0, 0x8}}, {0x5, 0x9, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x3, 0x2, 0x2, 0x9, 0xe, 'syz0\x00', "1108d3a741b2a578dc59e8395b8ac13237547749f1353d8c17bd1eaf7b782633", "c0ce527c86ff2e42f0ede12664ece807e0b0c80a96afba702e803a0c28b55712", [{0x4, 0x605b, {0x3, 0x7fffffff}}, {0xa, 0x6cc6, {0x2, 0xffffffc0}}, {0x3, 0x8000, {0x0, 0x4e000000}}, {0x8, 0x8, {0x0, 0x1}}, {0xe85f, 0x200, {0x1}}, {0x3, 0xa, {0x1, 0xff}}, {0x1c5d, 0x6, {0x2, 0x9}}, {0x200, 0x4, {0x0, 0x3}}, {0xfffd, 0x1ff, {0x2, 0x2}}, {0xa, 0x4, {0x0, 0xd}}, {0x6e, 0xd, {0x0, 0x8}}, {0x78, 0x8, {0x1, 0x1}}, {0x9, 0x4, {0x0, 0x9}}, {0x3, 0x0, {0x0, 0xa48}}, {0x1ff, 0x0, {0x0, 0xfffffffa}}, {0xff, 0x3, {0x0, 0x2}}, {0x5, 0x6, {0x3, 0x1}}, {0x2, 0x1b7a, {0x0, 0xfffffff8}}, {0x8, 0x4, {0x1, 0xff}}, {0x6, 0x4, {0x0, 0x3}}, {0x6, 0x6, {0x0, 0x1f7a}}, {0x8, 0x101, {0x1, 0x9}}, {0x6, 0x3, {0x2, 0xff}}, {0x2, 0x7, {0x0, 0x7}}, {0x9, 0x8, {0x3, 0xc1fe}}, {0x0, 0xfff9, {0x1, 0x9}}, {0xfffc, 0x3, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x200}}, {0x9, 0x8, {0x1, 0x8e0}}, {0x3, 0x1, {0x1, 0xfffffffd}}, {0x7, 0x1, {0x3, 0x5}}, {0x401, 0x10, {0x0, 0x3}}, {0x1, 0x3, {0x1, 0x1ff}}, {0x7f, 0x8, {0x0, 0x2}}, {0x6, 0xfff, {0x3, 0x6}}, {0x9, 0x2, {0x0, 0x7}}, {0xc29, 0x63, {0x2, 0x4}}, {0x5, 0x6, {0x0, 0x81}}, {0x1f6, 0x16d9, {0x3, 0x40}}, {0x8, 0x6, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x6a40ede5}, 0x9, 0x3, 0x9, 0x9a, 0xc, 'syz0\x00', "6245a7f8d309a3ca1141093d08e0da7d2899e44d859c3285d772a7755dfd184e", "448648223f9c487fa95689d25f9c043fb81e1f7aabe62ab7c438f738b2f0a6cb", [{0x51, 0xf, {0x3, 0x7f}}, {0x6, 0x1, {0x3, 0x3}}, {0x2, 0x9, {0x0, 0xc}}, {0x2, 0x8, {0x1, 0xc761}}, {0x0, 0xbf8, {0x0, 0x7}}, {0x6, 0x6, {0x2, 0x1a}}, {0x6, 0x0, {0x1, 0x19}}, {0x7, 0x8, {0x3, 0x8}}, {0x0, 0x4, {0x3, 0xa}}, {0x1, 0x0, {0x3, 0x4}}, {0x5, 0xff, {0x1}}, {0x8, 0xc51, {0x1, 0x9}}, {0x3, 0x7}, {0x3, 0x9, {0x2, 0x2}}, {0x1, 0x98ea, {0x2, 0x8}}, {0x5, 0x4, {0x2, 0x7}}, {0x42, 0xc, {0x0, 0x95}}, {0x2, 0x25a7}, {0x0, 0x2, {0x0, 0xdc}}, {0x8, 0xfffc, {0x3, 0x6}}, {0x6, 0x40, {0x1, 0xf7}}, {0xfffb, 0x3, {0x2, 0xfffffffd}}, {0x7, 0x4, {0x3, 0x7}}, {0x3, 0x7ff, {0x3, 0x5}}, {0x6a5, 0xd, {0x2, 0x9}}, {0x795c, 0x6, {0x2, 0x2}}, {0x5, 0xd9, {0x2, 0x1}}, {0x8, 0xdaae, {0x0, 0x6}}, {0x0, 0x800, {0x3, 0xe}}, {0x1ff, 0x5, {0x0, 0x2}}, {0x0, 0xa, {0x2, 0xdb70}}, {0x7fff, 0x3ff, {0x0, 0x7}}, {0x3740, 0xffff, {0x3, 0x23e}}, {0xb, 0x7, {0x3, 0xf3a91c0f}}, {0x1000, 0x7, {0x3, 0x4}}, {0x3, 0x3, {0x1, 0x9}}, {0x8, 0x3, {0x1, 0x9}}, {0x800, 0x800, {0x0, 0x2639}}, {0x94e6, 0x0, {0x0, 0xc}}, {0x94, 0x7, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0xaab}, 0x6, 0x40, 0xffff, 0xf2, 0xe, 'syz1\x00', "3c0454257803ff9e860dfbba78636d3ae03a8bd150a4fc6ca322682c996f5267", "8950220f0ff74c7b7239b1f52b3857331ff8f08562c01038c9ac47e8d5f86c11", [{0x0, 0x7fff, {0x2, 0x9}}, {0x401, 0x7, {0x0, 0x7}}, {0x3ab1, 0x5, {0x0, 0xa1d2}}, {0x42, 0x9, {0x2, 0xb}}, {0x8, 0xfa, {0x1, 0x3}}, {0x7, 0x1, {0x0, 0x4}}, {0xf, 0x4, {0x0, 0x3}}, {0x2, 0xffff, {0x3, 0x9}}, {0x4, 0x6, {0x2, 0x80}}, {0x6, 0xe3d, {0x0, 0x8}}, {0x8, 0x4, {0x3, 0x4}}, {0xe38, 0x1000, {0x1, 0x4}}, {0xd, 0x7ff, {0x0, 0x5}}, {0xedcf, 0xff, {0x3, 0x3}}, {0x7, 0x1, {0x2, 0x458e}}, {0x6cec, 0x4cbd, {0x3, 0x6}}, {0xa, 0x4, {0x0, 0x6}}, {0x1, 0x4, {0x1, 0x5}}, {0x5, 0x1, {0x1, 0x8}}, {0x0, 0x0, {0x2, 0x9}}, {0x2, 0x2, {0x2, 0x2}}, {0x104, 0x9, {0x0, 0x6}}, {0x4, 0xfff, {0x2, 0xf6e3}}, {0x6, 0x1000, {0x3, 0xffff}}, {0x8, 0x1ff, {0x2, 0x4}}, {0x0, 0x5e, {0x0, 0x7}}, {0x5, 0x7, {0x0, 0x2}}, {0x6, 0x400, {0x1, 0x355}}, {0x0, 0x2, {0x1, 0xfffffffd}}, {0x1, 0x7, {0x2, 0x7d}}, {0x25, 0x6, {0x1, 0x7}}, {0x0, 0x6, {0x1, 0x9}}, {0x101, 0x0, {0x2, 0x8}}, {0x1, 0x4, {0x2, 0x10}}, {0x2878, 0x2, {0x2, 0x4}}, {0x3, 0x2, {0x2, 0x1ff}}, {0x6, 0x4, {0x0, 0x6}}, {0x8, 0x100, {0x2, 0x935}}, {0x6, 0x2, {0x2, 0x23}}, {0x3, 0x8, {0x2, 0x4a}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x8, 0xf, 0x80, 0x4, 0x28, 'syz0\x00', "f756a691e23b06ffc3a10c40f0befe76347be0466a6ff2ebcd0ee6378cdfdf35", "5a3b4f77875f40a1f04e38a2d1dabacabe813fd22bed78de8e5a55e9b04aa80c", [{0x0, 0x8000, {0x0, 0x3}}, {0x0, 0x8, {0x2, 0x9}}, {0xd1b, 0x401, {0x3, 0xfffffffd}}, {0x0, 0xffff, {0x3, 0xa64f}}, {0x7, 0x8001, {0x3, 0xfffffffb}}, {0xffff, 0x1ff, {0x3, 0x6fe49e80}}, {0x8, 0x3, {0x2, 0x400}}, {0x4, 0x76, {0x0, 0x401}}, {0x7f, 0x400, {0x3, 0x4}}, {0x5, 0x9, {0x1, 0x4}}, {0x2, 0x9, {0x3, 0x3}}, {0x12db, 0x9bb1, {0x3, 0x1}}, {0x75cb, 0x3, {0x1, 0x7}}, {0x5, 0xfff, {0x0, 0x80}}, {0x6, 0x3, {0x0, 0x2}}, {0x9, 0x7, {0x2, 0x400}}, {0x2, 0x6, {0x2, 0xfffffffe}}, {0x7fff, 0x6, {0x2}}, {0x0, 0x101, {0x1, 0x3}}, {0x6, 0x3b4, {0x3, 0x78}}, {0x6, 0x5b39, {0x0, 0x73}}, {0x3, 0x2bf, {0x1, 0x9}}, {0x8, 0x7ff, {0x3, 0xff}}, {0x7, 0xe9, {0x3, 0x2}}, {0x2, 0x71, {0x1, 0x8}}, {0x4400, 0x8, {0x0, 0x2}}, {0x2, 0x1000}, {0x5, 0x7f, {0x3, 0xffff2cbd}}, {0x1, 0x0, {0x3, 0x7fff}}, {0x3, 0x7, {0x1, 0x1ff}}, {0x6, 0x6, {0x2, 0x7}}, {0x6, 0x57c, {0x3, 0xa}}, {0x2, 0xfffb, {0x1, 0x4}}, {0x7, 0xb22, {0x0, 0x9}}, {0x2, 0x4, {0x3, 0x3}}, {0x6, 0xffff, {0x2, 0x2}}, {0x6, 0x3, {0x0, 0x1}}, {0x2, 0x2, {0x3, 0x9}}, {0x69b5, 0xd, {0x1, 0x46a5}}, {0x725, 0x5, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x2, 0x1, 0xfb1d, 0x8, 0xb, 'syz0\x00', "a83b1e6dc6cb18ea70b72f7ddf206693d82130f9b340697014f11d6d0fec6ae1", "d9bcdd9001c0fa0f8ca535e4939b7763a73a0ec1c021334010edc05817381e9f", [{0x2, 0x8, {0x3, 0x498}}, {0x40, 0xbc, {0x3, 0xfffffffb}}, {0xf001, 0x7, {0x0, 0x1c0000}}, {0x3, 0x2, {0x0, 0xffff0136}}, {0x9, 0x5, {0x0, 0x2}}, {0x8, 0x8, {0x3, 0x80}}, {0x7b, 0xa, {0x3, 0x9}}, {0x40, 0x6, {0x0, 0xfffffffa}}, {0x9, 0x8, {0x0, 0x7}}, {0x2, 0x7, {0x0, 0x80}}, {0x8, 0x9, {0x2, 0xfffffff9}}, {0x0, 0x8f51, {0x8d134236e8834d6f, 0x8}}, {0x2, 0x80, {0x1, 0x1}}, {0x8, 0x1000, {0x1, 0x2}}, {0x8, 0xffff, {0x0, 0x5}}, {0xffff, 0x2, {0x0, 0x8}}, {0x2, 0x4000, {0x1, 0x1}}, {0x0, 0x1, {0x0, 0x10001}}, {0x4, 0x7, {0x3, 0x5}}, {0x1f26, 0x9, {0x1, 0x8}}, {0x5, 0x1, {0x2}}, {0x0, 0x3, {0x1}}, {0x400, 0x0, {0x0, 0x6}}, {0x4, 0x0, {0x0, 0xff}}, {0xcc, 0x4, {0x0, 0x7}}, {0x6, 0x80, {0x1, 0x6c82}}, {0x1, 0x0, {0x2, 0x5}}, {0x9, 0x3, {0x2, 0x1}}, {0x7, 0x7, {0x1, 0x2}}, {0x3, 0xde, {0x1, 0x5}}, {0xfffe, 0x4, {0xf3f62fd0c10b9f21, 0x10001}}, {0x8, 0xfc01, {0x1, 0x99}}, {0x5, 0x9, {0x2, 0x3}}, {0xc, 0x2, {0x1, 0x224}}, {0x4, 0x8000, {0x2, 0x80}}, {0x4, 0x7, {0x1, 0x5}}, {0x5, 0x7, {0x0, 0x7}}, {0x1aa, 0xffff, {0x3, 0xe0}}, {0x10, 0x8, {0x1, 0xfffffffa}}, {0x3, 0x80, {0x2, 0x11737609}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x7f, 0x3, 0x9, 0x9, 0x5, 'syz1\x00', "0dd2b205bb94871a217e936d90137d2f4e076b6bb603958e26422beea7c6dc0a", "0c03e881c069f82759a4dce965cd4a4c5a3b416d576323bd2199173b3638c50e", [{0xfff3, 0xd47, {0x0, 0x7}}, {0x8, 0xbbb, {0x0, 0x5}}, {0x8, 0x8, {0x3, 0xfffffff9}}, {0x401, 0x7, {0x3, 0x5}}, {0x3, 0x8, {0x1, 0x2}}, {0x5, 0x9, {0x2}}, {0x9, 0xd2, {0x1}}, {0x7, 0x8001, {0x3, 0x8}}, {0x2, 0x8, {0x3, 0x4}}, {0x9, 0x800, {0x3, 0x80}}, {0x9a9a, 0x0, {0x2, 0x3}}, {0x5, 0xffff, {0x2, 0xd}}, {0x400, 0xe01, {0x2, 0x8}}, {0x0, 0xff, {0x0, 0x200}}, {0x1, 0x2, {0x1, 0xfff}}, {0x6, 0x8, {0x0, 0x5}}, {0x5, 0xd956, {0x1, 0x1afa}}, {0x4, 0xfff, {0x2, 0xfffffff8}}, {0x840a, 0x400, {0x2, 0x101}}, {0x7, 0x0, {0x1, 0x7ff}}, {0xb94, 0x5, {0x2, 0x100}}, {0xffff, 0x3, {0x2}}, {0xbc6f, 0x8, {0x0, 0x3}}, {0x3, 0x4, {0x1, 0x3}}, {0x2c76, 0x40, {0x3, 0x5}}, {0x1, 0x100, {0x0, 0x4}}, {0x3, 0x4, {0x2, 0xdae9}}, {0x7, 0xd7bf, {0x3, 0x1}}, {0x9, 0x3, {0x1, 0x5}}, {0x1, 0x5, {0x1, 0x1}}, {0x9, 0x6, {0x1, 0x9}}, {0x7fa, 0x2, {0x2, 0x8}}, {0x4, 0x7d6b, {0x2, 0x8425}}, {0x200, 0x6, {0x0, 0x8000}}, {0x4, 0x2, {0x0, 0x9}}, {0x1, 0x9, {0x2, 0xfffffffa}}, {0x9, 0x4, {0x0, 0x6}}, {0x9, 0x1ff, {0x3, 0x8}}, {0x2000, 0x5, {0x1, 0x7fff}}, {0x2, 0x4000, {0x1, 0x4eb12db0}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x4c, 0xb3, 0x2, 0xeaa1, 0x18, 'syz1\x00', "2dac87224325305b618086cf8aabd07a473264186a5faf3f97364aa3f60bcc0c", "b8019a096eb902be09490eb599f28df002cdc4ffc33ea9748aafb83913948155", [{0x8, 0x1, {0x0, 0x6}}, {0x2, 0x2, {0x2, 0x1}}, {0x5, 0x1, {0x2, 0x7}}, {0x7, 0x2, {0x0, 0x5}}, {0xa, 0x8001, {0x3}}, {0x2, 0x80, {0x2, 0xfffffffb}}, {0x7, 0xfff0, {0x2, 0x4}}, {0xe, 0x6, {0x0, 0x5}}, {0x2, 0x9, {0x0, 0x8c}}, {0x1, 0x8, {0x3, 0x7}}, {0x8, 0x9, {0x1, 0x22}}, {0x1aa4, 0x9, {0x2, 0x3}}, {0x100, 0x1, {0x1, 0x8000}}, {0x8, 0xe4, {0x2, 0xafe}}, {0x9, 0xb, {0x3, 0x1}}, {0x3c9a, 0xb, {0x1, 0xdf}}, {0x3, 0x66, {0x2, 0x3}}, {0x0, 0x271, {0x0, 0x8}}, {0xff, 0x0, {0x0, 0x5}}, {0x3, 0x4, {0x2, 0xdc}}, {0x800, 0x80, {0x3, 0xfffffffe}}, {0x8, 0x40, {0x3, 0xf}}, {0x2, 0x3, {0x2, 0x81a}}, {0x10, 0x9, {0x3, 0x52}}, {0x101, 0xc, {0x3}}, {0x9, 0xf61, {0x2, 0x3}}, {0x9, 0x8, {0x2, 0xb28d}}, {0x10, 0x9, {0x2, 0x7998}}, {0x5c, 0x8, {0x0, 0x6bce}}, {0x10, 0x9, {0x3, 0x5}}, {0x7f, 0x8, {0x2, 0x4}}, {0xd6, 0x5, {0x2, 0x2264}}, {0x7ff, 0x2, {0x1, 0xffff}}, {0x6, 0xc, {0x2, 0x3}}, {0x3, 0x9, {0x3, 0x9}}, {0x8, 0xffff, {0x3, 0x7}}, {0x1ff, 0x3, {0x2, 0xfffffff7}}, {0x6, 0x175, {0x3, 0x9}}, {0xd, 0x4, {0x3, 0x5}}, {0x9, 0x7, {0x1, 0x81}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x48041}, 0x4000000) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x5453, 0x0) capset(0x0, 0x0) accept4$rose(r0, &(0x7f0000000640)=@short={0xb, @remote, @default, 0x1, @bcast}, &(0x7f0000000700)=0x1c, 0x80000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_newaddr={0x4c, 0x14, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x84, 0xfe, r10}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x129, 0x80000000, 0x8}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008814}, 0x41) kernel console output (not intermixed with test programs): uetooth: hci2: Opcode 0x0c03 failed: -110 [ 2453.453566][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2453.974505][ T1328] Invalid ELF header magic: != ELF [ 2453.985562][ T29] audit: type=1804 audit(1732637334.786:3444): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6816" name="/newroot/171/bus/bus" dev="overlay" ino=995 res=1 errno=0 [ 2454.387844][ T1325] mkiss: ax0: crc mode is auto. [ 2454.467990][ T1334] netlink: 'syz.3.6819': attribute type 2 has an invalid length. [ 2454.612203][ T1335] mkiss: ax0: crc mode is auto. [ 2454.977554][ T5892] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2455.618162][ T29] audit: type=1400 audit(1732637336.526:3445): avc: denied { read } for pid=1346 comm="syz.1.6823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2455.630409][ T5892] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2455.649887][ T5892] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2455.660308][ T5892] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2455.669925][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.758158][ T1339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2455.811743][ T5892] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2456.179108][ T1356] netlink: 'syz.3.6824': attribute type 7 has an invalid length. [ 2456.186910][ T1356] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6824'. [ 2456.275148][T32605] usb 6-1: USB disconnect, device number 123 [ 2456.337551][ T5892] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 2456.512368][ T5892] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.524079][ T5892] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2456.757523][ T5892] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2456.766702][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.220340][ T5892] usb 10-1: USB disconnect, device number 119 [ 2459.517901][ T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2459.697467][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 2459.740412][ T967] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2459.749889][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.810848][ T967] usb 2-1: Product: syz [ 2459.826573][ T967] usb 2-1: Manufacturer: syz [ 2459.867736][ T967] usb 2-1: SerialNumber: syz [ 2459.898581][ T967] usb 2-1: config 0 descriptor?? [ 2459.908802][ T967] gspca_main: se401-2.14.0 probing 047d:5003 [ 2459.961414][ T1384] netlink: 'syz.8.6832': attribute type 2 has an invalid length. [ 2460.409754][ T1366] delete_channel: no stack [ 2460.561466][ T967] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 2460.597743][ T29] audit: type=1400 audit(1732637341.456:3446): avc: denied { view } for pid=1368 comm="syz.1.6828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2460.618212][ T967] usb 2-1: USB disconnect, device number 8 [ 2460.866436][ T1401] Invalid ELF header magic: != ELF [ 2460.871781][T18250] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 2461.037765][T18250] usb 9-1: Using ep0 maxpacket: 8 [ 2461.049118][T18250] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2461.062395][T18250] usb 9-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 2461.073302][T18250] usb 9-1: config 0 has no interface number 0 [ 2461.081309][T18250] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 243, changing to 11 [ 2461.104913][T18250] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 42326, setting to 1024 [ 2461.124882][T18250] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2461.167475][T18250] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2461.187292][T18250] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2461.196819][T18250] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2461.217421][T18250] usb 9-1: Product: syz [ 2461.227301][T18250] usb 9-1: SerialNumber: syz [ 2461.234739][T18250] usb 9-1: config 0 descriptor?? [ 2461.500972][T18250] input: syz (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input55 [ 2462.228880][ T1415] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 2463.637917][ T684] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2463.779580][ T967] usb 9-1: USB disconnect, device number 111 [ 2463.866624][ T684] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2463.877352][ T684] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2463.886596][ T684] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2464.207526][ T684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.363150][ T1452] FAULT_INJECTION: forcing a failure. [ 2464.363150][ T1452] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.376660][ T1452] CPU: 0 UID: 0 PID: 1452 Comm: syz.8.6851 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2464.387027][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2464.397067][ T1452] Call Trace: [ 2464.400363][ T1452] [ 2464.403271][ T1452] dump_stack_lvl+0x16c/0x1f0 [ 2464.407933][ T1452] should_fail_ex+0x497/0x5b0 [ 2464.412614][ T1452] ? fs_reclaim_acquire+0xae/0x150 [ 2464.417760][ T1452] should_failslab+0xc2/0x120 [ 2464.422433][ T1452] __kmalloc_noprof+0xcb/0x510 [ 2464.427188][ T1452] ? __pfx_lock_release+0x10/0x10 [ 2464.429676][ T1451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6852'. [ 2464.432214][ T1452] ? trace_lock_acquire+0x146/0x1e0 [ 2464.446256][ T1452] tomoyo_encode2+0x100/0x3e0 [ 2464.450964][ T1452] tomoyo_encode+0x29/0x50 [ 2464.455429][ T1452] tomoyo_mount_acl+0x145/0x880 [ 2464.460315][ T1452] ? hlock_class+0x4e/0x130 [ 2464.464854][ T1452] ? __lock_acquire+0x15a9/0x3c40 [ 2464.469933][ T1452] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 2464.472906][ T1451] batman_adv: batadv1: Adding interface: netdevsim0 [ 2464.475326][ T1452] ? __pfx___lock_acquire+0x10/0x10 [ 2464.475358][ T1452] ? stack_trace_save+0x95/0xd0 [ 2464.491932][ T1452] ? __pfx_lock_release+0x10/0x10 [ 2464.496976][ T1452] ? trace_lock_acquire+0x146/0x1e0 [ 2464.502163][ T1452] ? tomoyo_mount_permission+0x149/0x420 [ 2464.507801][ T1452] ? lock_acquire+0x2f/0xb0 [ 2464.512287][ T1452] ? tomoyo_mount_permission+0x149/0x420 [ 2464.517911][ T1452] tomoyo_mount_permission+0x16e/0x420 [ 2464.523357][ T1452] ? tomoyo_mount_permission+0x149/0x420 [ 2464.528975][ T1452] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 2464.534951][ T1452] ? get_current_fs_domain+0x184/0x1f0 [ 2464.540403][ T1452] security_sb_mount+0x9b/0x260 [ 2464.545239][ T1452] path_mount+0x129/0x1f20 [ 2464.549645][ T1452] ? kmem_cache_free+0x152/0x4c0 [ 2464.554572][ T1452] ? __pfx_path_mount+0x10/0x10 [ 2464.559415][ T1452] ? putname+0x13c/0x180 [ 2464.563646][ T1452] __x64_sys_mount+0x294/0x320 [ 2464.568399][ T1452] ? __pfx___x64_sys_mount+0x10/0x10 [ 2464.573677][ T1452] do_syscall_64+0xcd/0x250 [ 2464.578185][ T1452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2464.584071][ T1452] RIP: 0033:0x7f551437e819 [ 2464.588471][ T1452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.608067][ T1452] RSP: 002b:00007f5515187038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2464.616462][ T1452] RAX: ffffffffffffffda RBX: 00007f5514535fa0 RCX: 00007f551437e819 [ 2464.624416][ T1452] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000000 [ 2464.632372][ T1452] RBP: 00007f5515187090 R08: 00000000200001c0 R09: 0000000000000000 [ 2464.640330][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2464.648300][ T1452] R13: 0000000000000000 R14: 00007f5514535fa0 R15: 00007fff485f3178 [ 2464.656454][ T1452] [ 2464.659610][ C0] vkms_vblank_simulate: vblank timer overrun [ 2464.666818][ T1451] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.692428][ C0] vkms_vblank_simulate: vblank timer overrun [ 2464.700110][ T1451] batman_adv: batadv1: Interface activated: netdevsim0 [ 2464.835314][ T9468] usb 6-1: USB disconnect, device number 124 [ 2464.857076][ T1460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6857'. [ 2464.860894][ T1458] FAULT_INJECTION: forcing a failure. [ 2464.860894][ T1458] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.879486][ T1458] CPU: 0 UID: 0 PID: 1458 Comm: syz.8.6855 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2464.889841][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2464.899916][ T1458] Call Trace: [ 2464.903283][ T1458] [ 2464.906216][ T1458] dump_stack_lvl+0x16c/0x1f0 [ 2464.910918][ T1458] should_fail_ex+0x497/0x5b0 [ 2464.915627][ T1458] ? fs_reclaim_acquire+0xae/0x150 [ 2464.920759][ T1458] should_failslab+0xc2/0x120 [ 2464.925551][ T1458] __kmalloc_cache_noprof+0x68/0x410 [ 2464.930874][ T1458] alloc_pipe_info+0x10e/0x590 [ 2464.935656][ T1458] splice_direct_to_actor+0x793/0xa40 [ 2464.941075][ T1458] ? __pfx_direct_splice_actor+0x10/0x10 [ 2464.946730][ T1458] ? inode_has_perm+0x16f/0x1d0 [ 2464.951594][ T1458] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2464.957513][ T1458] ? __pfx_file_has_perm+0x10/0x10 [ 2464.962651][ T1458] do_splice_direct+0x178/0x250 [ 2464.967645][ T1458] ? __pfx_do_splice_direct+0x10/0x10 [ 2464.973058][ T1458] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2464.978984][ T1458] ? bpf_lsm_file_permission+0x9/0x10 [ 2464.984385][ T1458] ? security_file_permission+0x71/0x210 [ 2464.984597][ T1469] syz.1.6856 (1469): /proc/1469/oom_adj is deprecated, please use /proc/1469/oom_score_adj instead. [ 2464.990031][ T1458] do_sendfile+0xaed/0xe30 [ 2464.990066][ T1458] ? __pfx_do_sendfile+0x10/0x10 [ 2464.990090][ T1458] ? __fget_files+0x206/0x3a0 [ 2464.990114][ T1458] __x64_sys_sendfile64+0x1da/0x220 [ 2464.990132][ T1458] ? ksys_write+0x1ba/0x250 [ 2464.990149][ T1458] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2464.990176][ T1458] do_syscall_64+0xcd/0x250 [ 2464.990202][ T1458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2464.990226][ T1458] RIP: 0033:0x7f551437e819 [ 2464.990243][ T1458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.990260][ T1458] RSP: 002b:00007f5515187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2464.990281][ T1458] RAX: ffffffffffffffda RBX: 00007f5514535fa0 RCX: 00007f551437e819 [ 2464.990294][ T1458] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000d [ 2464.990306][ T1458] RBP: 00007f5515187090 R08: 0000000000000000 R09: 0000000000000000 [ 2464.990321][ T1458] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 2464.990332][ T1458] R13: 0000000000000000 R14: 00007f5514535fa0 R15: 00007fff485f3178 [ 2464.990356][ T1458] [ 2464.990413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2466.114343][ T1483] veth1_to_team: entered promiscuous mode [ 2466.130702][ T1483] veth1_to_team: left promiscuous mode [ 2467.004714][ T1474] delete_channel: no stack [ 2467.117636][ T684] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 2467.293982][ T684] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2467.322627][ T684] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2467.394411][ T29] audit: type=1400 audit(1732637348.296:3447): avc: denied { create } for pid=1488 comm="syz.9.6865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2467.416327][ T684] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2467.426533][ T684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.454317][ T1481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2467.454587][ T1491] overlay: ./file0 is not a directory [ 2467.463641][ T684] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2467.738819][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.968244][T18250] usb 9-1: USB disconnect, device number 112 [ 2468.638274][ T29] audit: type=1400 audit(1732637349.016:3448): avc: denied { mounton } for pid=1494 comm="syz.1.6868" path="mnt:[4026533125]" dev="nsfs" ino=4026533125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2470.107667][ T1447] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2470.288801][ T1447] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2470.298046][ T1447] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2470.317901][ T1447] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2470.335017][ T1447] usb 4-1: config 1 has no interface number 1 [ 2470.358164][ T1447] usb 4-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2470.369465][ T1447] usb 4-1: config 1 interface 2 has no altsetting 1 [ 2470.386090][ T1447] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2470.397819][ T1447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.413172][ T1447] usb 4-1: Product: syz [ 2470.418426][ T1447] usb 4-1: Manufacturer: syz [ 2470.423145][ T1447] usb 4-1: SerialNumber: syz [ 2470.527685][ T29] audit: type=1400 audit(1732637351.416:3449): avc: denied { connect } for pid=1531 comm="syz.8.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2470.600156][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.608758][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.623302][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.632272][ T1513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.648759][ T1513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2470.676546][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.707405][ T1447] usb 4-1: 2:2 : no or invalid class specific endpoint descriptor [ 2470.719300][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.727979][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.737860][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.753499][ T1447] usb 4-1: USB disconnect, device number 33 [ 2470.759723][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.767127][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.788886][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.793303][ T1537] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6880'. [ 2470.801486][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.814698][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.822256][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.827518][T18250] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2470.830007][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.846221][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.854252][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.863936][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.871664][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.879672][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.887481][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.895069][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.906331][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2470.914064][ T684] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2471.016458][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2471.024688][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2471.029252][T18250] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2471.032460][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2471.044657][T18250] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2471.049997][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2471.070284][T18250] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2471.105271][T18250] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2471.146256][T18250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.288349][T18250] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2471.343552][T18250] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2471.874912][ T646] usb 2-1: USB disconnect, device number 9 [ 2471.970789][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.015214][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.022706][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.030817][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.038439][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.047187][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.054650][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.062208][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.069712][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.077136][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.084620][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.092189][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.099704][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.107117][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.114948][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.122415][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.129880][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.137290][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.145277][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.153311][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.160921][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.168381][ T967] hid-generic 0000:0000:0003.0021: unknown main item tag 0x0 [ 2472.227573][ T967] hid-generic 0000:0000:0003.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2472.270740][ T29] audit: type=1400 audit(1732637353.176:3450): avc: denied { append } for pid=1551 comm="syz.5.6884" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2472.276699][ T1552] binder: 1551:1552 ioctl c0306201 20000080 returned -14 [ 2472.875848][ T1552] binder: 1551:1552 ioctl c0306201 20000480 returned -14 [ 2473.087511][ T29] audit: type=1400 audit(1732637353.956:3451): avc: denied { mount } for pid=1544 comm="syz.3.6882" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2473.196676][ T684] usb 9-1: config 0 has no interfaces? [ 2473.202259][ T684] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2473.211372][ T684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.237619][T18250] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 2473.248210][ T684] usb 9-1: config 0 descriptor?? [ 2473.266180][ T29] audit: type=1400 audit(1732637354.166:3452): avc: denied { unmount } for pid=30790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2473.286379][ C0] vkms_vblank_simulate: vblank timer overrun [ 2473.329728][ T1561] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 2473.342113][ T1560] FAULT_INJECTION: forcing a failure. [ 2473.342113][ T1560] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.355386][ T29] audit: type=1400 audit(1732637354.256:3453): avc: denied { relabelto } for pid=1559 comm="syz.3.6886" name="bus" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 2473.377739][T18250] usb 6-1: device descriptor read/64, error -71 [ 2473.396001][ T1560] CPU: 0 UID: 0 PID: 1560 Comm: syz.9.6887 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2473.406449][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2473.416492][ T1560] Call Trace: [ 2473.419771][ T1560] [ 2473.422725][ T1560] dump_stack_lvl+0x16c/0x1f0 [ 2473.427391][ T1560] should_fail_ex+0x497/0x5b0 [ 2473.432054][ T1560] ? fs_reclaim_acquire+0xae/0x150 [ 2473.437147][ T1560] should_failslab+0xc2/0x120 [ 2473.441808][ T1560] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 2473.447604][ T1560] ? __alloc_skb+0x2b1/0x380 [ 2473.452187][ T1560] __alloc_skb+0x2b1/0x380 [ 2473.456597][ T1560] ? __pfx___alloc_skb+0x10/0x10 [ 2473.461524][ T1560] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2473.467495][ T1560] netlink_alloc_large_skb+0x69/0x130 [ 2473.472853][ T1560] netlink_sendmsg+0x689/0xd70 [ 2473.477615][ T1560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2473.482907][ T1560] ____sys_sendmsg+0xaaf/0xc90 [ 2473.487657][ T1560] ? copy_msghdr_from_user+0x10b/0x160 [ 2473.493104][ T1560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2473.498385][ T1560] ___sys_sendmsg+0x135/0x1e0 [ 2473.503046][ T1560] ? __pfx____sys_sendmsg+0x10/0x10 [ 2473.508243][ T1560] ? __pfx_lock_release+0x10/0x10 [ 2473.513252][ T1560] ? trace_lock_acquire+0x146/0x1e0 [ 2473.518546][ T1560] ? __fget_files+0x206/0x3a0 [ 2473.523215][ T1560] __sys_sendmsg+0x16e/0x220 [ 2473.527790][ T1560] ? __pfx___sys_sendmsg+0x10/0x10 [ 2473.532893][ T1560] do_syscall_64+0xcd/0x250 [ 2473.537385][ T1560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2473.543264][ T1560] RIP: 0033:0x7fd0c3f7e819 [ 2473.547660][ T1560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2473.567251][ T1560] RSP: 002b:00007fd0c4d3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2473.575646][ T1560] RAX: ffffffffffffffda RBX: 00007fd0c4135fa0 RCX: 00007fd0c3f7e819 [ 2473.583603][ T1560] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 2473.591560][ T1560] RBP: 00007fd0c4d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2473.599533][ T1560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2473.607494][ T1560] R13: 0000000000000000 R14: 00007fd0c4135fa0 R15: 00007ffd6618b938 [ 2473.615802][ T1560] [ 2473.618923][ C0] vkms_vblank_simulate: vblank timer overrun [ 2473.625650][ T29] audit: type=1400 audit(1732637354.256:3454): avc: denied { associate } for pid=1559 comm="syz.3.6886" name="bus" dev="tmpfs" ino=876 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 2473.692983][ T684] usb 9-1: USB disconnect, device number 113 [ 2473.858105][T18250] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 2473.860119][ T1570] lo speed is unknown, defaulting to 1000 [ 2473.888398][ T1550] delete_channel: no stack [ 2474.057921][T18250] usb 6-1: device descriptor read/64, error -71 [ 2474.250241][T18250] usb usb6-port1: attempt power cycle [ 2474.557439][ T684] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2474.597413][T18250] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 2474.617979][T18250] usb 6-1: device descriptor read/8, error -71 [ 2474.729013][ T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2474.764442][ T684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2474.788221][ T684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2474.853034][ T684] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2474.858753][T18250] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 2474.868013][ T684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.904532][ T684] usb 4-1: config 0 descriptor?? [ 2474.920635][T18250] usb 6-1: device descriptor read/8, error -71 [ 2474.947564][ T9468] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 2475.037819][T18250] usb usb6-port1: unable to enumerate USB device [ 2475.119395][ T9468] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2475.135721][ T9468] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2475.156668][ T9468] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2475.177780][ T9468] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.188536][ T1590] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2475.210024][ T9468] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2475.229178][ T1592] netlink: 'syz.1.6897': attribute type 2 has an invalid length. [ 2475.349120][ T1596] batadv_slave_1: entered promiscuous mode [ 2475.362269][ T1596] batadv_slave_1: left promiscuous mode [ 2475.494032][ T684] acrux 0003:1A34:0802.0022: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 2475.513698][ T684] acrux 0003:1A34:0802.0022: no inputs found [ 2475.520128][ T684] acrux 0003:1A34:0802.0022: Failed to enable force feedback support, error: -19 [ 2475.586505][ T9468] usb 10-1: USB disconnect, device number 120 [ 2476.027421][ T9468] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2476.353317][ T9468] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2476.364291][ T9468] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2476.375938][ T9468] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2476.406245][ T9468] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2476.416124][ T9468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.458036][T18250] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2476.520200][ T9468] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2476.560506][ T9468] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2476.639972][T18250] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2476.655366][T18250] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2476.667883][T18250] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2476.682315][T18250] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.695416][ T1604] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2476.758763][ T9468] usb 2-1: USB disconnect, device number 10 [ 2476.780508][T18250] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2476.887084][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6905'. [ 2476.900682][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6905'. [ 2477.715919][ T25] usb 9-1: USB disconnect, device number 114 [ 2477.915456][ T684] usb 4-1: USB disconnect, device number 34 [ 2477.932930][ T1604] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 2477.939496][ T1604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2477.947794][ T1621] vhci_hcd: connection closed [ 2477.948264][ T1604] vhci_hcd vhci_hcd.0: Device attached [ 2478.012617][ T1609] delete_channel: no stack [ 2478.237497][ T69] vhci_hcd: stop threads [ 2478.292439][ T69] vhci_hcd: release socket [ 2478.320508][ T69] vhci_hcd: disconnect device [ 2478.367488][T18250] vhci_hcd: vhci_device speed not set [ 2479.222322][ T1638] netlink: 'syz.8.6909': attribute type 2 has an invalid length. [ 2479.322166][ T1620] delete_channel: no stack [ 2479.589767][ T1646] FAULT_INJECTION: forcing a failure. [ 2479.589767][ T1646] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.602523][ T1646] CPU: 1 UID: 0 PID: 1646 Comm: syz.3.6910 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2479.612856][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2479.622919][ T1646] Call Trace: [ 2479.626199][ T1646] [ 2479.629132][ T1646] dump_stack_lvl+0x16c/0x1f0 [ 2479.633814][ T1646] should_fail_ex+0x497/0x5b0 [ 2479.638499][ T1646] ? fs_reclaim_acquire+0xae/0x150 [ 2479.643611][ T1646] should_failslab+0xc2/0x120 [ 2479.648291][ T1646] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 2479.654105][ T1646] ? __alloc_skb+0x2b1/0x380 [ 2479.658709][ T1646] __alloc_skb+0x2b1/0x380 [ 2479.663132][ T1646] ? __pfx___alloc_skb+0x10/0x10 [ 2479.668088][ T1646] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2479.674077][ T1646] netlink_alloc_large_skb+0x69/0x130 [ 2479.679460][ T1646] netlink_sendmsg+0x689/0xd70 [ 2479.684233][ T1646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2479.689550][ T1646] ____sys_sendmsg+0xaaf/0xc90 [ 2479.694314][ T1646] ? copy_msghdr_from_user+0x10b/0x160 [ 2479.699783][ T1646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2479.705084][ T1646] ___sys_sendmsg+0x135/0x1e0 [ 2479.709762][ T1646] ? __pfx____sys_sendmsg+0x10/0x10 [ 2479.714975][ T1646] ? __pfx_lock_release+0x10/0x10 [ 2479.719999][ T1646] ? trace_lock_acquire+0x146/0x1e0 [ 2479.725218][ T1646] ? __fget_files+0x206/0x3a0 [ 2479.729905][ T1646] __sys_sendmsg+0x16e/0x220 [ 2479.734495][ T1646] ? __pfx___sys_sendmsg+0x10/0x10 [ 2479.739621][ T1646] do_syscall_64+0xcd/0x250 [ 2479.744131][ T1646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2479.750029][ T1646] RIP: 0033:0x7f098b17e819 [ 2479.754439][ T1646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2479.774068][ T1646] RSP: 002b:00007f098bee1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2479.782492][ T1646] RAX: ffffffffffffffda RBX: 00007f098b336160 RCX: 00007f098b17e819 [ 2479.790466][ T1646] RDX: 0000000000044094 RSI: 0000000020002780 RDI: 0000000000000003 [ 2479.798446][ T1646] RBP: 00007f098bee1090 R08: 0000000000000000 R09: 0000000000000000 [ 2479.806410][ T1646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2479.814383][ T1646] R13: 0000000000000000 R14: 00007f098b336160 R15: 00007ffd4298d528 [ 2479.822353][ T1646] [ 2480.897468][ T25] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 2481.079179][ T9539] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2481.303340][ T25] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2481.365291][ T25] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2481.376397][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2481.385486][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2481.396553][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2481.414130][ T25] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2481.423986][ T25] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2481.435316][ T25] usb 9-1: Product: syz [ 2481.444916][ T25] usb 9-1: Manufacturer: syz [ 2481.469662][ T9539] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2481.485151][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 2481.490722][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 2481.504458][ T9539] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2481.530116][ T25] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2481.534772][ T9539] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2481.558346][ T25] cdc_wdm 9-1:1.0: Unknown control protocol [ 2481.565467][ T9539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.596057][ T1657] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2481.605730][ T9539] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2481.967468][ T9539] usb 4-1: USB disconnect, device number 35 [ 2482.177418][ T1673] netlink: 'syz.1.6920': attribute type 27 has an invalid length. [ 2482.368857][T18250] usb 9-1: USB disconnect, device number 115 [ 2483.189903][ T1673] bond0: (slave bond_slave_0): Releasing backup interface [ 2483.252415][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6921'. [ 2483.427520][ T1447] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 2483.592365][ T1447] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2483.615658][ T1447] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2483.636109][ T1447] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2483.648134][ T1447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.674966][ T1680] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2483.694080][ T1447] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2484.510792][T18250] usb 10-1: USB disconnect, device number 121 [ 2484.553016][ T1708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6931'. [ 2484.564744][ T1656] delete_channel: no stack [ 2484.588451][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'. [ 2484.802973][ T29] audit: type=1400 audit(1732637365.706:3455): avc: denied { name_bind } for pid=1716 comm="syz.1.6934" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2484.846496][ T29] audit: type=1400 audit(1732637365.706:3456): avc: denied { node_bind } for pid=1716 comm="syz.1.6934" saddr=fe80::44 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2484.868709][ C1] vkms_vblank_simulate: vblank timer overrun [ 2485.027490][ T9468] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 2485.180125][ T9468] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2485.190249][ T9468] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 2485.206756][ T9468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.228983][ T9468] usb 9-1: config 0 descriptor?? [ 2485.579077][ T1730] SELinux: policydb magic number 0xff8c does not match expected magic number 0xf97cff8c [ 2485.589292][ T1730] SELinux: failed to load policy [ 2486.226877][ T1713] delete_channel: no stack [ 2486.281090][ T9468] aquacomputer_d5next 0003:0C70:F014.0023: item fetching failed at offset 2/5 [ 2486.290474][ T9468] aquacomputer_d5next 0003:0C70:F014.0023: probe with driver aquacomputer_d5next failed with error -22 [ 2486.332091][ T29] audit: type=1400 audit(1732637367.236:3457): avc: denied { map } for pid=1732 comm="syz.9.6938" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2486.356166][ C1] vkms_vblank_simulate: vblank timer overrun [ 2486.373093][ T29] audit: type=1400 audit(1732637367.266:3458): avc: denied { execute } for pid=1732 comm="syz.9.6938" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2486.398034][ T1735] FAULT_INJECTION: forcing a failure. [ 2486.398034][ T1735] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.398064][ T1735] CPU: 0 UID: 0 PID: 1735 Comm: syz.5.6937 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2486.398085][ T1735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2486.398096][ T1735] Call Trace: [ 2486.398102][ T1735] [ 2486.437252][ T1735] dump_stack_lvl+0x16c/0x1f0 [ 2486.441966][ T1735] should_fail_ex+0x497/0x5b0 [ 2486.446662][ T1735] ? fs_reclaim_acquire+0xae/0x150 [ 2486.451792][ T1735] should_failslab+0xc2/0x120 [ 2486.456496][ T1735] __kmalloc_cache_noprof+0x68/0x410 [ 2486.461798][ T1735] netlbl_cipsov4_add+0x3b7/0x2450 [ 2486.466904][ T1735] ? __nla_parse+0x40/0x60 [ 2486.471308][ T1735] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 2486.476841][ T1735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2486.484210][ T1735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2486.491586][ T1735] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2486.497127][ T1735] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2486.503193][ T1735] ? bpf_lsm_capable+0x9/0x10 [ 2486.507852][ T1735] ? security_capable+0x7e/0x260 [ 2486.512777][ T1735] genl_rcv_msg+0x565/0x800 [ 2486.517272][ T1735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.522287][ T1735] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 2486.527820][ T1735] ? __pfx___lock_acquire+0x10/0x10 [ 2486.533005][ T1735] netlink_rcv_skb+0x16b/0x440 [ 2486.537759][ T1735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.542774][ T1735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2486.548057][ T1735] ? down_read+0xc9/0x330 [ 2486.552376][ T1735] ? __pfx_down_read+0x10/0x10 [ 2486.557128][ T1735] ? netlink_deliver_tap+0x1ae/0xd30 [ 2486.562400][ T1735] genl_rcv+0x28/0x40 [ 2486.566370][ T1735] netlink_unicast+0x53c/0x7f0 [ 2486.571136][ T1735] ? __pfx_netlink_unicast+0x10/0x10 [ 2486.576413][ T1735] netlink_sendmsg+0x8b8/0xd70 [ 2486.581170][ T1735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.586456][ T1735] ____sys_sendmsg+0xaaf/0xc90 [ 2486.591208][ T1735] ? copy_msghdr_from_user+0x10b/0x160 [ 2486.596657][ T1735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2486.601957][ T1735] ___sys_sendmsg+0x135/0x1e0 [ 2486.606619][ T1735] ? __pfx____sys_sendmsg+0x10/0x10 [ 2486.611912][ T1735] ? __pfx_lock_release+0x10/0x10 [ 2486.616922][ T1735] ? trace_lock_acquire+0x146/0x1e0 [ 2486.622120][ T1735] ? __fget_files+0x206/0x3a0 [ 2486.626784][ T1735] __sys_sendmsg+0x16e/0x220 [ 2486.631357][ T1735] ? __pfx___sys_sendmsg+0x10/0x10 [ 2486.636461][ T1735] do_syscall_64+0xcd/0x250 [ 2486.640951][ T1735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.646828][ T1735] RIP: 0033:0x7f6016b7e819 [ 2486.651227][ T1735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2486.670818][ T1735] RSP: 002b:00007f60179f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2486.679214][ T1735] RAX: ffffffffffffffda RBX: 00007f6016d35fa0 RCX: 00007f6016b7e819 [ 2486.687172][ T1735] RDX: 0000000000040080 RSI: 0000000020000580 RDI: 0000000000000004 [ 2486.695128][ T1735] RBP: 00007f60179f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2486.703093][ T1735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2486.711046][ T1735] R13: 0000000000000000 R14: 00007f6016d35fa0 R15: 00007ffed171a248 [ 2486.719010][ T1735] [ 2486.730134][ T1731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2486.738801][ T1731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2486.748683][ T1731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2486.757225][ T1731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2486.873589][ T1739] vivid-007: disconnect [ 2486.896559][ T1736] vivid-007: reconnect [ 2487.362869][ T967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2488.386191][T18250] usb 9-1: USB disconnect, device number 116 [ 2488.465590][ T1755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6944'. [ 2488.475048][ T967] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2488.484454][ T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.492597][ T967] usb 6-1: Product: syz [ 2488.496753][ T967] usb 6-1: Manufacturer: syz [ 2488.501422][ T967] usb 6-1: SerialNumber: syz [ 2488.507525][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 2488.536608][ T967] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2488.554946][ T684] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2488.746659][ T1762] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 2488.862035][ T29] audit: type=1400 audit(1732637369.686:3459): avc: denied { ioctl } for pid=1761 comm="syz.9.6947" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2488.987862][ T967] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2489.137535][ T1447] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 2489.185944][ T967] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2489.197455][ T967] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2489.217998][ T967] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2489.227805][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.301416][ T1768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2489.314357][ T967] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2489.342568][ T1447] usb 9-1: Using ep0 maxpacket: 8 [ 2489.353028][ T1447] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2489.371365][ T1773] FAULT_INJECTION: forcing a failure. [ 2489.371365][ T1773] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.377755][ T1447] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.392620][ T1447] usb 9-1: Product: syz [ 2489.396899][ T1447] usb 9-1: Manufacturer: syz [ 2489.401615][ T1447] usb 9-1: SerialNumber: syz [ 2489.408598][ T1447] usb 9-1: config 0 descriptor?? [ 2489.410635][ T1773] CPU: 0 UID: 0 PID: 1773 Comm: syz.9.6951 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2489.415983][ T1447] gspca_main: se401-2.14.0 probing 047d:5003 [ 2489.423835][ T1773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2489.423854][ T1773] Call Trace: [ 2489.423861][ T1773] [ 2489.423869][ T1773] dump_stack_lvl+0x16c/0x1f0 [ 2489.423897][ T1773] should_fail_ex+0x497/0x5b0 [ 2489.423921][ T1773] ? fs_reclaim_acquire+0xae/0x150 [ 2489.423939][ T1773] should_failslab+0xc2/0x120 [ 2489.423959][ T1773] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 2489.423978][ T1773] ? __alloc_skb+0x2b1/0x380 [ 2489.424003][ T1773] __alloc_skb+0x2b1/0x380 [ 2489.424026][ T1773] ? __pfx___alloc_skb+0x10/0x10 [ 2489.424050][ T1773] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2489.424077][ T1773] netlink_alloc_large_skb+0x69/0x130 [ 2489.496292][ T1773] netlink_sendmsg+0x689/0xd70 [ 2489.501059][ T1773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2489.506338][ T1773] ____sys_sendmsg+0xaaf/0xc90 [ 2489.511088][ T1773] ? copy_msghdr_from_user+0x10b/0x160 [ 2489.516537][ T1773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2489.521818][ T1773] ___sys_sendmsg+0x135/0x1e0 [ 2489.526478][ T1773] ? __pfx____sys_sendmsg+0x10/0x10 [ 2489.531680][ T1773] ? __pfx_lock_release+0x10/0x10 [ 2489.536689][ T1773] ? trace_lock_acquire+0x146/0x1e0 [ 2489.541882][ T1773] ? __fget_files+0x206/0x3a0 [ 2489.546545][ T1773] __sys_sendmsg+0x16e/0x220 [ 2489.551120][ T1773] ? __pfx___sys_sendmsg+0x10/0x10 [ 2489.556224][ T1773] do_syscall_64+0xcd/0x250 [ 2489.560720][ T1773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2489.566603][ T1773] RIP: 0033:0x7fd0c3f7e819 [ 2489.571006][ T1773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2489.590601][ T1773] RSP: 002b:00007fd0c4d3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2489.599001][ T1773] RAX: ffffffffffffffda RBX: 00007fd0c4135fa0 RCX: 00007fd0c3f7e819 [ 2489.606954][ T1773] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2489.614916][ T1773] RBP: 00007fd0c4d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2489.622881][ T1773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2489.630837][ T1773] R13: 0000000000000000 R14: 00007fd0c4135fa0 R15: 00007ffd6618b938 [ 2489.638801][ T1773] [ 2489.697914][ T967] usb 6-1: USB disconnect, device number 3 [ 2489.718095][ T9468] usb 4-1: USB disconnect, device number 36 [ 2489.780406][ T29] audit: type=1400 audit(1732637370.676:3460): avc: denied { ioctl } for pid=1776 comm="syz.1.6953" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2490.531537][ T1447] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input56 [ 2490.541096][ T684] usb 6-1: Service connection timeout for: 256 [ 2490.547418][ T684] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2490.555841][ T684] ath9k_htc: Failed to initialize the device [ 2490.563097][ T967] usb 6-1: ath9k_htc: USB layer deinitialized [ 2490.573535][ T1447] usb 9-1: USB disconnect, device number 117 [ 2490.628587][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2491.522730][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 2491.536587][ T25] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 2491.544908][ T25] usb 2-1: config 0 has no interface number 1 [ 2491.552141][ T25] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2491.561330][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.602930][ T1792] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 2491.731205][ T1782] delete_channel: no stack [ 2491.799652][ T25] usb 2-1: config 0 descriptor?? [ 2491.964414][ T1795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6958'. [ 2491.974843][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6958'. [ 2491.988749][ T25] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 2491.997545][ T25] usb 2-1: unknown number of interfaces: 2 [ 2492.757466][ T25] usb 2-1: USB disconnect, device number 11 [ 2492.777455][ T1807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2493.211930][ T1815] netlink: 'syz.9.6962': attribute type 2 has an invalid length. [ 2493.536750][ T29] audit: type=1400 audit(1732637374.436:3461): avc: denied { write } for pid=1819 comm="syz.9.6966" path="socket:[123240]" dev="sockfs" ino=123240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2494.048166][ T29] audit: type=1400 audit(1732637374.946:3462): avc: denied { bind } for pid=1829 comm="syz.1.6967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2494.099537][ T1832] vivid-007: disconnect [ 2494.114890][ T1822] vivid-007: reconnect [ 2495.210257][ T9468] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2495.270778][ T1843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6971'. [ 2495.884528][ T1843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6971'. [ 2496.036891][ T9468] usb 2-1: Using ep0 maxpacket: 8 [ 2496.103983][ T9468] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 73, changing to 10 [ 2496.117593][ T9468] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2496.125887][ T9468] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 2496.135150][ T9468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2496.645927][ T9468] usb 2-1: Product: ᇠ[ 2496.650689][ T9468] usb 2-1: Manufacturer: ֵቇꈤ飊땚߼횈䘥㻩觀沩촤ᡚæ›è¡•ë‰ˆê–©ë•²×§à¯¢â¢“ꞓꙌ竱ဂ곪ꌩૈԃᙂçˆä ¸å¥Öžà±»í–”ã£ã‡©ã™ˆá‘‚鰜妽áŸç¨ê¦„஺뉔 [ 2496.668537][ T9468] usb 2-1: SerialNumber: ቶᵦ喻鸷ᆖ‌ᑄ熅챎竗鼌㘅윘ᎉ쉒欰䠂蚤臾蛦픦ïŽè³› [ 2496.879997][ T29] audit: type=1400 audit(1732637377.786:3463): avc: denied { map } for pid=1850 comm="syz.9.6972" path="socket:[124216]" dev="sockfs" ino=124216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2496.970590][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2497.147934][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 2497.289101][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2497.329002][ T25] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2497.351120][ T25] usb 6-1: can't read configurations, error -71 [ 2497.612308][ T9468] usbhid 2-1:1.0: can't add hid device: -71 [ 2497.618770][ T9468] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2497.629548][ T9468] usb 2-1: USB disconnect, device number 12 [ 2497.898086][ T9539] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 2498.317690][ T9539] usb 10-1: Using ep0 maxpacket: 8 [ 2498.322208][ T1876] pimreg: entered allmulticast mode [ 2498.333082][ T9539] usb 10-1: config 0 has an invalid interface number: 238 but max is 0 [ 2498.342664][ T9539] usb 10-1: config 0 has no interface number 0 [ 2498.348996][ T9468] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 2498.359201][ T9539] usb 10-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 2498.367990][ T1877] pimreg: left allmulticast mode [ 2498.368569][ T9539] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.383293][ T9539] usb 10-1: config 0 descriptor?? [ 2498.509507][ T9468] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.547670][ T9468] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2498.594197][ T9539] usb 10-1: USB disconnect, device number 122 [ 2498.612659][ T9468] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2498.642010][ T9468] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2498.651977][ T9468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.667647][ T9468] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2498.675085][ T9468] usb 9-1: invalid MIDI out EP 0 [ 2498.716679][ T9468] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2499.384542][ T9468] usb 9-1: USB disconnect, device number 118 [ 2500.998330][ T1903] netlink: 'syz.5.6984': attribute type 2 has an invalid length. [ 2501.017767][T30084] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2501.110961][ T1906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6986'. [ 2501.122021][ T1906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6986'. [ 2501.237473][ T9468] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 2502.062726][ T1869] delete_channel: no stack [ 2502.258435][ T29] audit: type=1400 audit(1732637383.146:3464): avc: denied { ioctl } for pid=1917 comm="syz.3.6990" path="socket:[124301]" dev="sockfs" ino=124301 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2502.379575][ T29] audit: type=1400 audit(1732637383.286:3465): avc: denied { accept } for pid=1917 comm="syz.3.6990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2502.466223][ T1923] FAULT_INJECTION: forcing a failure. [ 2502.466223][ T1923] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.487711][ T1923] CPU: 0 UID: 0 PID: 1923 Comm: syz.1.6989 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2502.498079][ T1923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2502.508120][ T1923] Call Trace: [ 2502.511381][ T1923] [ 2502.514302][ T1923] dump_stack_lvl+0x16c/0x1f0 [ 2502.518981][ T1923] should_fail_ex+0x497/0x5b0 [ 2502.523640][ T1923] ? fs_reclaim_acquire+0xae/0x150 [ 2502.528725][ T1923] should_failslab+0xc2/0x120 [ 2502.533380][ T1923] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 2502.538727][ T1923] ? alloc_empty_file+0x73/0x1e0 [ 2502.543643][ T1923] alloc_empty_file+0x73/0x1e0 [ 2502.548920][ T1923] path_openat+0xe1/0x2d60 [ 2502.553345][ T1923] ? hlock_class+0x4e/0x130 [ 2502.557863][ T1923] ? __lock_acquire+0x15a9/0x3c40 [ 2502.562897][ T1923] ? __pfx_path_openat+0x10/0x10 [ 2502.567816][ T1923] ? __pfx___lock_acquire+0x10/0x10 [ 2502.572999][ T1923] ? lock_acquire.part.0+0x11b/0x380 [ 2502.578283][ T1923] ? find_held_lock+0x2d/0x110 [ 2502.583047][ T1923] do_filp_open+0x20c/0x470 [ 2502.587540][ T1923] ? __pfx_do_filp_open+0x10/0x10 [ 2502.592571][ T1923] ? find_held_lock+0x2d/0x110 [ 2502.597455][ T1923] ? alloc_fd+0x41f/0x760 [ 2502.601794][ T1923] do_sys_openat2+0x17a/0x1e0 [ 2502.606466][ T1923] ? __pfx_do_sys_openat2+0x10/0x10 [ 2502.611681][ T1923] ? __fget_files+0x206/0x3a0 [ 2502.616364][ T1923] __x64_sys_openat+0x175/0x210 [ 2502.621229][ T1923] ? __pfx___x64_sys_openat+0x10/0x10 [ 2502.626606][ T1923] ? ksys_write+0x1ba/0x250 [ 2502.631121][ T1923] do_syscall_64+0xcd/0x250 [ 2502.635640][ T1923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2502.641543][ T1923] RIP: 0033:0x7f8b4477e819 [ 2502.645959][ T1923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2502.665588][ T1923] RSP: 002b:00007f8b454f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2502.674019][ T1923] RAX: ffffffffffffffda RBX: 00007f8b44935fa0 RCX: 00007f8b4477e819 [ 2502.682022][ T1923] RDX: 0000000000000000 RSI: 0000000020002a00 RDI: ffffffffffffff9c [ 2502.689992][ T1923] RBP: 00007f8b454f5090 R08: 0000000000000000 R09: 0000000000000000 [ 2502.697981][ T1923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2502.706060][ T1923] R13: 0000000000000000 R14: 00007f8b44935fa0 R15: 00007ffc42936038 [ 2502.714060][ T1923] [ 2503.747525][ T1937] Invalid ELF header magic: != ELF [ 2503.756603][ T29] audit: type=1804 audit(1732637384.026:3466): pid=1937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6993" name="/newroot/223/bus/bus" dev="overlay" ino=1288 res=1 errno=0 [ 2503.922541][ T29] audit: type=1400 audit(1732637384.826:3467): avc: denied { getopt } for pid=1941 comm="syz.9.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2503.967466][T30084] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2503.978756][ T29] audit: type=1326 audit(1732637384.856:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1941 comm="syz.9.6995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0c3f7e819 code=0x0 [ 2504.025338][ T1946] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 2504.067892][ T1946] audit: out of memory in audit_log_start [ 2504.108072][ T1951] netlink: 356 bytes leftover after parsing attributes in process `syz.9.6998'. [ 2504.118960][T30084] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 2504.147412][T30084] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2504.278906][ T967] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2504.437656][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2504.445074][ T967] usb 2-1: too many configurations: 141, using maximum allowed: 8 [ 2504.449046][T30084] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2504.458855][ T967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2504.468961][ T967] usb 2-1: can't read configurations, error -61 [ 2504.471670][T30084] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 2504.557399][T30084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.578307][T30084] usb 4-1: config 0 descriptor?? [ 2504.598074][ T967] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2504.768225][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2504.781178][ T967] usb 2-1: too many configurations: 141, using maximum allowed: 8 [ 2504.818074][ T967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2504.836210][ T967] usb 2-1: can't read configurations, error -61 [ 2504.867381][ T967] usb usb2-port1: attempt power cycle [ 2504.995017][T30084] pantherlord 0003:0810:0002.0024: unknown main item tag 0x0 [ 2505.038374][T30084] pantherlord 0003:0810:0002.0024: unknown main item tag 0x0 [ 2505.072615][T30084] pantherlord 0003:0810:0002.0024: unknown main item tag 0x0 [ 2505.129332][T30084] pantherlord 0003:0810:0002.0024: unknown main item tag 0x0 [ 2505.172045][T30084] pantherlord 0003:0810:0002.0024: hidraw0: USB HID v74.2b Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 2505.241363][T30084] pantherlord 0003:0810:0002.0024: no output reports found [ 2505.257504][ T967] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2505.283441][T30084] usb 4-1: USB disconnect, device number 38 [ 2505.306752][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2505.354074][ T967] usb 2-1: too many configurations: 141, using maximum allowed: 8 [ 2505.383276][ T967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2505.416102][ T967] usb 2-1: can't read configurations, error -61 [ 2505.626488][ T967] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2505.697784][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2505.708661][ T967] usb 2-1: too many configurations: 141, using maximum allowed: 8 [ 2505.757737][ T967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2505.765329][ T967] usb 2-1: can't read configurations, error -61 [ 2505.822409][ T967] usb usb2-port1: unable to enumerate USB device [ 2506.557562][ T967] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2506.707429][T30084] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2506.717520][ T967] usb 6-1: Using ep0 maxpacket: 16 [ 2506.728774][ T967] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2506.747407][ T967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2506.759115][ T967] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2506.776777][ T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.797412][ T967] usb 6-1: Product: syz [ 2506.801686][ T967] usb 6-1: Manufacturer: syz [ 2506.806289][ T967] usb 6-1: SerialNumber: syz [ 2506.857781][T30084] usb 9-1: Using ep0 maxpacket: 8 [ 2506.897836][T30084] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2506.927782][T30084] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2506.936121][T30084] usb 9-1: can't read configurations, error -71 [ 2507.023967][ T967] usb 6-1: 0:2 : does not exist [ 2507.058994][ T967] usb 6-1: USB disconnect, device number 6 [ 2507.942432][ T1996] fuse: Unknown parameter 'user_i00000000000000000000' [ 2509.070429][ T2021] sd 0:0:1:0: device reset [ 2510.333539][ T2034] netlink: 'syz.8.7022': attribute type 7 has an invalid length. [ 2510.342089][ T2034] netlink: 244 bytes leftover after parsing attributes in process `syz.8.7022'. [ 2510.389215][ T29] audit: type=1400 audit(1732637391.296:3469): avc: denied { setopt } for pid=2037 comm="syz.1.7024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2511.172301][ T2042] lo speed is unknown, defaulting to 1000 [ 2511.358056][ T9539] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2511.537372][ T9539] usb 6-1: Using ep0 maxpacket: 8 [ 2511.545452][ T9539] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2511.554903][ T9539] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2511.564639][ T9539] usb 6-1: can't read configurations, error -71 [ 2511.693714][ T2052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2511.967598][ T967] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2512.482253][ T967] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2512.501440][ T967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2512.511638][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2512.527431][ T967] usb 4-1: Product: syz [ 2512.535887][ T967] usb 4-1: Manufacturer: syz [ 2512.544286][ T967] usb 4-1: SerialNumber: syz [ 2512.609047][ T2052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2512.646438][ T2042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2512.754098][ T2068] input: syz1 as /devices/virtual/input/input57 [ 2512.840717][ T967] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2512.887065][ T967] usb 4-1: USB disconnect, device number 39 [ 2513.489865][ T967] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2513.702521][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 2513.730182][ T967] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 2513.754519][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2513.774778][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2513.968414][ T2080] netlink: 'syz.1.7037': attribute type 7 has an invalid length. [ 2513.976163][ T2080] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7037'. [ 2513.989310][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2514.019362][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.068259][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 2514.116794][ T967] usb 4-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 2514.172723][ T967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2514.200299][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.228410][ T2052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2514.477739][ T967] usb 4-1: usb_control_msg returned -71 [ 2514.489468][ T967] usbtmc 4-1:16.0: can't read capabilities [ 2514.747606][ T967] usb 4-1: USB disconnect, device number 40 [ 2514.869708][T21726] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 2516.857807][ T2107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2517.288957][ T2107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2517.468592][ T2107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2517.486596][T21726] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 2517.554452][ T2107] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 2517.949357][ T2107] batman_adv: batadv1: Removing interface: netdevsim0 [ 2517.973982][ T2107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.281014][ T2107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.300896][ T2107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.314350][ T2107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.332721][ T2107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2518.391596][T21726] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 2518.941116][T21726] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2518.951764][T21726] Bluetooth: hci3: Injecting HCI hardware error event [ 2518.974571][T17865] Bluetooth: hci3: hardware error 0x00 [ 2520.377671][ T646] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 2521.236004][T17865] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2521.302180][ T646] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2521.310513][ T646] usb 2-1: config 0 has no interface number 0 [ 2521.316604][ T646] usb 2-1: config 0 interface 2 has no altsetting 0 [ 2521.325152][ T646] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=81.4d [ 2521.334588][ T646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.342986][ T646] usb 2-1: Product: syz [ 2521.347157][ T646] usb 2-1: Manufacturer: syz [ 2521.351988][ T646] usb 2-1: SerialNumber: syz [ 2521.358350][ T646] usb 2-1: config 0 descriptor?? [ 2521.366755][ T646] snd-usb-caiaq 2-1:0.2: can't set alt interface. [ 2521.373305][ T646] usb 2-1: unable to init card! (ret=-5) [ 2521.390334][ T646] snd-usb-caiaq 2-1:0.2: probe with driver snd-usb-caiaq failed with error -5 [ 2521.517602][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2521.611938][ T2156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.621457][ T2156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2522.205048][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 2522.238826][ T25] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 2522.247254][ T25] usb 4-1: config 0 has no interface number 0 [ 2522.985333][ T25] usb 4-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=1e.b2 [ 2522.994521][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.164097][ T25] usb 4-1: Product: syz [ 2523.342621][ T25] usb 4-1: Manufacturer: syz [ 2523.350757][ T25] usb 4-1: SerialNumber: syz [ 2523.374936][ T25] usb 4-1: config 0 descriptor?? [ 2523.389746][ T25] usb 4-1: can't set config #0, error -71 [ 2523.403786][ T25] usb 4-1: USB disconnect, device number 41 [ 2525.024658][ T684] usb 2-1: USB disconnect, device number 17 [ 2526.372921][ T29] audit: type=1400 audit(1732637407.256:3470): avc: denied { accept } for pid=2216 comm="syz.8.7077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2526.452507][T17865] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2526.463808][T17865] CPU: 1 UID: 0 PID: 17865 Comm: kworker/u9:1 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2526.474427][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2526.484497][T17865] Workqueue: hci4 hci_rx_work [ 2526.489197][T17865] Call Trace: [ 2526.492498][T17865] [ 2526.495426][T17865] dump_stack_lvl+0x16c/0x1f0 [ 2526.500098][T17865] sysfs_warn_dup+0x7f/0xa0 [ 2526.504595][T17865] sysfs_create_dir_ns+0x24d/0x2b0 [ 2526.509713][T17865] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2526.515427][T17865] ? sysfs_create_dir_ns+0x4/0x2b0 [ 2526.520527][T17865] kobject_add_internal+0x2c8/0x990 [ 2526.525742][T17865] kobject_add+0x16f/0x240 [ 2526.530142][T17865] ? __pfx_kobject_add+0x10/0x10 [ 2526.535063][T17865] ? kobject_put+0xab/0x5a0 [ 2526.539552][T17865] device_add+0x289/0x1a70 [ 2526.543952][T17865] ? __pfx_dev_set_name+0x10/0x10 [ 2526.548959][T17865] ? __pfx_device_add+0x10/0x10 [ 2526.553792][T17865] ? mgmt_send_event_skb+0x2f2/0x460 [ 2526.559072][T17865] hci_conn_add_sysfs+0x17e/0x230 [ 2526.564084][T17865] le_conn_complete_evt+0x1077/0x1d60 [ 2526.569468][T17865] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2526.575198][T17865] ? __mutex_lock+0x30d/0xa60 [ 2526.579897][T17865] hci_le_conn_complete_evt+0x23c/0x370 [ 2526.585444][T17865] hci_le_meta_evt+0x2e2/0x5d0 [ 2526.590221][T17865] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2526.596288][T17865] hci_event_packet+0x666/0x1180 [ 2526.601221][T17865] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2526.606497][T17865] ? __pfx_hci_event_packet+0x10/0x10 [ 2526.611854][T17865] ? kcov_remote_start+0x3df/0x6e0 [ 2526.616960][T17865] hci_rx_work+0x2c5/0x16b0 [ 2526.621483][T17865] ? process_one_work+0x921/0x1ba0 [ 2526.626589][T17865] process_one_work+0x9c5/0x1ba0 [ 2526.631519][T17865] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2526.637229][T17865] ? __pfx_process_one_work+0x10/0x10 [ 2526.642580][T17865] ? rcu_is_watching+0x12/0xc0 [ 2526.647341][T17865] ? assign_work+0x1a0/0x250 [ 2526.651926][T17865] worker_thread+0x6c8/0xf00 [ 2526.656504][T17865] ? __pfx_worker_thread+0x10/0x10 [ 2526.661592][T17865] kthread+0x2c1/0x3a0 [ 2526.665641][T17865] ? _raw_spin_unlock_irq+0x23/0x50 [ 2526.670819][T17865] ? __pfx_kthread+0x10/0x10 [ 2526.675392][T17865] ret_from_fork+0x45/0x80 [ 2526.679792][T17865] ? __pfx_kthread+0x10/0x10 [ 2526.684376][T17865] ret_from_fork_asm+0x1a/0x30 [ 2526.689162][T17865] [ 2526.695597][T17865] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2526.710801][T17865] Bluetooth: hci4: failed to register connection device [ 2527.063229][ T2225] FAULT_INJECTION: forcing a failure. [ 2527.063229][ T2225] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.150880][ T2225] CPU: 1 UID: 0 PID: 2225 Comm: syz.3.7078 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2527.161270][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2527.171349][ T2225] Call Trace: [ 2527.174634][ T2225] [ 2527.177572][ T2225] dump_stack_lvl+0x16c/0x1f0 [ 2527.182262][ T2225] should_fail_ex+0x497/0x5b0 [ 2527.186949][ T2225] ? fs_reclaim_acquire+0xae/0x150 [ 2527.192080][ T2225] should_failslab+0xc2/0x120 [ 2527.196772][ T2225] __kmalloc_cache_noprof+0x68/0x410 [ 2527.202180][ T2225] ? __pfx_cma_listen_handler+0x10/0x10 [ 2527.207747][ T2225] __rdma_create_id+0x5b/0x630 [ 2527.212526][ T2225] cma_listen_on_dev+0x20e/0x810 [ 2527.217477][ T2225] rdma_listen+0x98c/0xe20 [ 2527.221901][ T2225] ? do_raw_spin_unlock+0x172/0x230 [ 2527.227112][ T2225] ? __pfx_rdma_listen+0x10/0x10 [ 2527.232062][ T2225] ? __pfx_ucma_get_ctx+0x10/0x10 [ 2527.237091][ T2225] ? __might_fault+0xe3/0x190 [ 2527.241769][ T2225] ucma_listen+0x174/0x220 [ 2527.246164][ T2225] ? __pfx_ucma_listen+0x10/0x10 [ 2527.251080][ T2225] ? __pfx_ucma_listen+0x10/0x10 [ 2527.255998][ T2225] ucma_write+0x1f9/0x330 [ 2527.260320][ T2225] ? __pfx_ucma_write+0x10/0x10 [ 2527.265179][ T2225] ? bpf_lsm_file_permission+0x9/0x10 [ 2527.270546][ T2225] ? security_file_permission+0x71/0x210 [ 2527.276169][ T2225] ? __pfx_ucma_write+0x10/0x10 [ 2527.281000][ T2225] vfs_writev+0x6da/0xdd0 [ 2527.285304][ T2225] ? find_held_lock+0x2d/0x110 [ 2527.290065][ T2225] ? __pfx_vfs_writev+0x10/0x10 [ 2527.294890][ T2225] ? find_held_lock+0x2d/0x110 [ 2527.299642][ T2225] ? __pfx_lock_release+0x10/0x10 [ 2527.304654][ T2225] ? trace_lock_acquire+0x146/0x1e0 [ 2527.309838][ T2225] ? __fget_files+0x206/0x3a0 [ 2527.314588][ T2225] ? do_writev+0x297/0x340 [ 2527.318992][ T2225] do_writev+0x297/0x340 [ 2527.323234][ T2225] ? __pfx_do_writev+0x10/0x10 [ 2527.327991][ T2225] do_syscall_64+0xcd/0x250 [ 2527.332490][ T2225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2527.338370][ T2225] RIP: 0033:0x7f098b17e819 [ 2527.342780][ T2225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2527.362376][ T2225] RSP: 002b:00007f098bf23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2527.370783][ T2225] RAX: ffffffffffffffda RBX: 00007f098b335fa0 RCX: 00007f098b17e819 [ 2527.378742][ T2225] RDX: 0000000000000003 RSI: 0000000020000000 RDI: 0000000000000003 [ 2527.386869][ T2225] RBP: 00007f098bf23090 R08: 0000000000000000 R09: 0000000000000000 [ 2527.394823][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2527.402776][ T2225] R13: 0000000000000000 R14: 00007f098b335fa0 R15: 00007ffd4298d528 [ 2527.410743][ T2225] [ 2527.893940][ T2223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.958503][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.030802][ T2223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.214430][ T2223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.638936][ T2223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2532.904118][ T2223] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.007787][T21726] Bluetooth: hci4: command 0x0406 tx timeout [ 2533.066652][ T2223] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.089870][ T2223] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.392944][T17865] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 2533.428292][ T2223] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2534.668758][ T2302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7098'. [ 2534.690099][ T2302] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7098'. [ 2535.439033][ T2302] netlink: 'syz.1.7098': attribute type 6 has an invalid length. [ 2536.028856][ T2302] netlink: 'syz.1.7098': attribute type 5 has an invalid length. [ 2536.045158][ T2302] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7098'. [ 2536.195554][ T2316] input: syz1 as /devices/virtual/input/input58 [ 2536.469694][T21726] Bluetooth: hci4: command 0x0406 tx timeout [ 2537.313478][ T2332] netlink: 'syz.8.7106': attribute type 2 has an invalid length. [ 2537.475997][T17865] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2537.485342][T17865] Bluetooth: hci4: Injecting HCI hardware error event [ 2537.496338][T17865] Bluetooth: hci4: hardware error 0x00 [ 2539.659036][T17865] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2541.491501][ T2377] netlink: 'syz.1.7119': attribute type 2 has an invalid length. [ 2541.660621][ T2382] fuse: Unknown parameter '0x0000000000000003' [ 2542.707543][ T1447] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2543.051474][ T1447] usb 9-1: Using ep0 maxpacket: 8 [ 2543.061551][ T1447] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2543.072417][ T1447] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2543.106499][ T1447] usb 9-1: can't read configurations, error -71 [ 2543.571065][ T2409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7126'. [ 2543.581312][ T2409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7126'. [ 2546.046567][ T2442] input: syz1 as /devices/virtual/input/input59 [ 2546.244943][ T2445] overlayfs: failed to resolve './file1': -2 [ 2546.414488][ T2447] Invalid ELF header magic: != ELF [ 2548.830801][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7140'. [ 2548.846761][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7140'. [ 2549.020624][ T2488] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7139'. [ 2551.561032][ T2508] input: syz0 as /devices/virtual/input/input60 [ 2551.771638][ T2521] input: syz1 as /devices/virtual/input/input61 [ 2553.332677][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7154'. [ 2553.464719][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7154'. [ 2553.537985][ T29] audit: type=1804 audit(1732637434.426:3471): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.7155" name="/newroot/241/bus/bus" dev="overlay" ino=1372 res=1 errno=0 [ 2553.570977][ T2554] Invalid ELF header magic: != ELF [ 2555.597461][ T967] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2555.690260][ T2581] netlink: 'syz.5.7158': attribute type 7 has an invalid length. [ 2555.698133][ T2581] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7158'. [ 2555.847350][ T967] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2555.895928][ T967] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2556.121684][ T967] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2556.141361][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.164767][ T2574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2556.177465][ T967] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2556.341470][ T2586] input: syz1 as /devices/virtual/input/input62 [ 2556.425488][ T1447] usb 2-1: USB disconnect, device number 18 [ 2556.838946][ T2597] Bluetooth: (null): Invalid header checksum [ 2557.334310][ T772] Bluetooth: (null): Invalid header checksum [ 2557.576629][ T2573] delete_channel: no stack [ 2557.584531][ T772] Bluetooth: (null): Invalid header checksum [ 2557.607457][ T772] Bluetooth: (null): Invalid header checksum [ 2557.613653][ T772] Bluetooth: (null): Invalid header checksum [ 2557.667483][ T772] Bluetooth: (null): Invalid header checksum [ 2558.724558][ T2619] fuse: Unknown parameter '0x0000000000000003' [ 2558.841761][ T2621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7167'. [ 2558.851544][ T2621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7167'. [ 2560.497633][ T9468] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2560.649206][ T9468] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2560.694823][ T9468] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2560.736431][ T9468] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2560.745776][ T9468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.772806][ T2639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2560.820667][ T9468] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2560.927725][ T684] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 2561.077003][ T967] usb 4-1: USB disconnect, device number 42 [ 2561.181263][ T684] usb 9-1: Using ep0 maxpacket: 8 [ 2561.197432][ T684] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2561.225240][ T684] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2561.775130][ T684] usb 9-1: can't read configurations, error -71 [ 2561.961602][ T2633] delete_channel: no stack [ 2562.239190][ T2673] fuse: Unknown parameter 'fd0x0000000000000003' [ 2562.423387][ T2678] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7179'. [ 2565.321979][ T9468] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2565.777469][ T9468] usb 6-1: Using ep0 maxpacket: 32 [ 2565.796477][ T9468] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.807412][ T9468] usb 6-1: config 0 has no interfaces? [ 2565.812913][ T9468] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2565.832226][ T2727] fuse: Unknown parameter 'fd0x0000000000000003' [ 2565.838670][ T9468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.852842][ T9468] usb 6-1: config 0 descriptor?? [ 2566.257224][ T967] usb 6-1: USB disconnect, device number 9 [ 2566.294601][ T29] audit: type=1400 audit(1732637447.196:3472): avc: denied { watch watch_reads } for pid=2719 comm="syz.8.7188" path="/proc/298" dev="proc" ino=126711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2566.412217][ T2737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7193'. [ 2566.427016][ T2737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7193'. [ 2566.557463][ T9468] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2566.712737][ T9468] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2566.743895][ T9468] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2566.762424][ T9468] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2566.787670][ T9468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.819031][ T2735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2566.849271][ T9468] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2568.089014][ T2753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7194'. [ 2568.200669][ T9468] usb 4-1: USB disconnect, device number 43 [ 2568.665160][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7199'. [ 2569.657060][ T2743] delete_channel: no stack [ 2569.797587][ T29] audit: type=1400 audit(1732637450.666:3473): avc: denied { append } for pid=2771 comm="syz.1.7200" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2570.075785][ T2777] fuse: Unknown parameter 'fd0x0000000000000003' [ 2571.028163][ T2787] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7204'. [ 2571.048496][ T2787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7204'. [ 2571.476960][ T2794] netlink: 'syz.8.7205': attribute type 2 has an invalid length. [ 2571.623626][ T2735] delete_channel: no stack [ 2572.675044][ T2820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7211'. [ 2572.687768][ T2820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7211'. [ 2572.800651][ T646] usb 10-1: new full-speed USB device number 124 using dummy_hcd [ 2573.494301][ T646] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2573.507355][ T646] usb 10-1: can't read configurations, error -71 [ 2574.187649][ T684] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2574.191107][ T2847] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7216'. [ 2574.260041][ T2847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7216'. [ 2574.377524][ T684] usb 2-1: Using ep0 maxpacket: 8 [ 2574.385382][ T684] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2574.394551][ T684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.402675][ T684] usb 2-1: Product: syz [ 2574.417425][ T684] usb 2-1: Manufacturer: syz [ 2574.422989][ T684] usb 2-1: SerialNumber: syz [ 2574.457129][ T684] usb 2-1: config 0 descriptor?? [ 2574.803018][ T684] gspca_main: se401-2.14.0 probing 047d:5003 [ 2575.047547][ T9468] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2575.199003][ T9468] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2575.217602][ T9468] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2575.251455][ T9468] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2575.563782][ T9468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.577552][ T684] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 2575.586132][ T2857] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2575.605889][ T9468] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2575.635201][ T684] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 2575.659360][ T684] usb 2-1: USB disconnect, device number 19 [ 2575.831100][ T9468] usb 6-1: USB disconnect, device number 10 [ 2576.133191][ T2874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7223'. [ 2576.146022][ T2874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7223'. [ 2577.945119][ T9539] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 2578.217644][ T9539] usb 10-1: Using ep0 maxpacket: 16 [ 2578.241452][ T9539] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2578.291612][ T9539] usb 10-1: can't read configurations, error -61 [ 2578.630605][ T9539] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 2578.967975][ T2882] delete_channel: no stack [ 2579.193101][ T967] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2579.327424][ T29] audit: type=1400 audit(1732637461.200:3474): avc: denied { create } for pid=2907 comm="syz.1.7230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2579.447514][ T29] audit: type=1400 audit(1732637461.200:3475): avc: denied { ioctl } for pid=2907 comm="syz.1.7230" path="socket:[126923]" dev="sockfs" ino=126923 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2579.597583][ T9539] usb 10-1: Using ep0 maxpacket: 16 [ 2579.605684][ T9539] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2579.613784][ T9539] usb 10-1: can't read configurations, error -61 [ 2579.627726][ T9539] usb usb10-port1: attempt power cycle [ 2579.815466][ T1447] hid (null): global environment stack underflow [ 2579.822655][ T1447] hid (null): unknown global tag 0xd [ 2579.830184][ T29] audit: type=1400 audit(1732637461.720:3476): avc: denied { ioctl } for pid=2921 comm="syz.8.7234" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2579.838747][ T1447] hid-generic 0005:0004:0003.0025: global environment stack underflow [ 2579.878777][ T1447] hid-generic 0005:0004:0003.0025: item 0 4 1 11 parsing failed [ 2579.890084][ T1447] hid-generic 0005:0004:0003.0025: probe with driver hid-generic failed with error -22 [ 2579.928277][ T29] audit: type=1400 audit(1732637461.810:3477): avc: denied { ioctl } for pid=2921 comm="syz.8.7234" path="socket:[126938]" dev="sockfs" ino=126938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2579.954954][ T29] audit: type=1400 audit(1732637461.810:3478): avc: denied { accept } for pid=2921 comm="syz.8.7234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2579.987760][ T9539] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2580.028079][ T9539] usb 10-1: Using ep0 maxpacket: 16 [ 2580.044263][ T9539] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2580.052180][ T9539] usb 10-1: can't read configurations, error -61 [ 2580.238731][ T9539] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2580.282161][ T9539] usb 10-1: Using ep0 maxpacket: 16 [ 2580.292660][ T9539] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2580.301342][ T9539] usb 10-1: can't read configurations, error -61 [ 2580.322625][ T9539] usb usb10-port1: unable to enumerate USB device [ 2580.513780][ T29] audit: type=1400 audit(1732637462.420:3479): avc: denied { read } for pid=2936 comm="syz.1.7238" name="/" dev="configfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2580.543973][ T29] audit: type=1400 audit(1732637462.420:3480): avc: denied { open } for pid=2936 comm="syz.1.7238" path="/281/file0" dev="configfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2581.074133][ T2942] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7240'. [ 2581.121714][ T2942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7240'. [ 2581.227884][ T967] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2581.397442][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2581.403275][ T967] usb 2-1: too many configurations: 201, using maximum allowed: 8 [ 2581.424499][ T967] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2581.457400][ T967] usb 2-1: can't read configurations, error -61 [ 2582.582206][ T967] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2583.237616][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 2583.246451][ T967] usb 2-1: too many configurations: 201, using maximum allowed: 8 [ 2583.354521][ T2966] sd 0:0:1:0: device reset [ 2583.888981][ T967] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2583.900890][ T967] usb 2-1: can't read configurations, error -71 [ 2583.937538][ T967] usb usb2-port1: attempt power cycle [ 2584.458658][ T2979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7252'. [ 2584.468807][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7252'. [ 2585.047754][ T967] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2585.092055][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 2585.114547][ T967] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2585.124043][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.132300][ T967] usb 2-1: Product: syz [ 2585.136673][ T967] usb 2-1: Manufacturer: syz [ 2585.141450][ T967] usb 2-1: SerialNumber: syz [ 2585.158626][ T967] usb 2-1: config 0 descriptor?? [ 2585.210946][ T967] gspca_main: se401-2.14.0 probing 047d:5003 [ 2585.634395][ T967] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 2585.642682][ T967] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 2585.703314][ T967] usb 2-1: USB disconnect, device number 23 [ 2585.780670][ T3007] overlayfs: invalid origin (0000007900ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2586.917880][ T3023] netlink: 'syz.8.7265': attribute type 2 has an invalid length. [ 2586.956190][ T3024] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7264'. [ 2586.992792][ T3024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7264'. [ 2586.995535][ T3028] ieee802154 phy1 wpan1: encryption failed: -22 [ 2587.610092][ C1] Unknown status report in ack skb [ 2587.750258][ T3047] netlink: 356 bytes leftover after parsing attributes in process `syz.1.7274'. [ 2588.438045][ T9539] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2588.737383][ T9539] usb 4-1: Using ep0 maxpacket: 8 [ 2588.759578][ T9539] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2588.800822][ T9539] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2588.815985][ T9539] usb 4-1: can't read configurations, error -71 [ 2589.037457][ T646] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2589.187940][ T646] usb 10-1: Using ep0 maxpacket: 8 [ 2589.212119][ T646] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2589.241917][ T646] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2589.259906][ T646] usb 10-1: can't read configurations, error -71 [ 2589.848610][ T3077] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7281'. [ 2589.900713][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7281'. [ 2589.937531][ T9539] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2590.227507][ T9539] usb 4-1: Using ep0 maxpacket: 32 [ 2590.274133][ T9539] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2590.376218][ T9539] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2590.407594][ T9539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2590.420230][ T9539] usb 4-1: config 1 has no interface number 0 [ 2590.426311][ T9539] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2590.437473][ T9539] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2590.450659][ T9539] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2590.459897][ T9539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.537524][ T9539] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2591.041269][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.659824][ T9539] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2592.668056][ T967] usb 4-1: USB disconnect, device number 45 [ 2592.675121][ T967] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2593.148958][ T3122] sd 0:0:1:0: device reset [ 2593.592424][T22531] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2593.797716][T22531] usb 10-1: Using ep0 maxpacket: 8 [ 2593.816307][T22531] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2593.885223][T22531] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2593.893169][T22531] usb 10-1: can't read configurations, error -71 [ 2594.014769][ T3129] netlink: 'syz.1.7294': attribute type 2 has an invalid length. [ 2601.595582][T22531] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2602.351629][T22531] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2602.371376][T22531] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2602.383148][T22531] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2602.409299][T22531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.431185][T22531] usb 6-1: config 0 descriptor?? [ 2602.672798][T22531] Bluetooth: Can't get state to change to load ram patch err [ 2602.688965][T22531] Bluetooth: Loading patch file failed [ 2602.703228][T22531] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 2602.731452][T22531] usb 6-1: USB disconnect, device number 11 [ 2603.342942][ T3231] netlink: 'syz.5.7327': attribute type 2 has an invalid length. [ 2603.532327][ T3235] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 2603.561986][ T29] audit: type=1400 audit(1732637485.470:3481): avc: denied { relabelto } for pid=3234 comm="syz.8.7329" name="file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 2603.589023][ C1] vkms_vblank_simulate: vblank timer overrun [ 2603.617622][ T29] audit: type=1400 audit(1732637485.470:3482): avc: denied { associate } for pid=3234 comm="syz.8.7329" name="file0" dev="tmpfs" ino=673 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 2603.669916][ T29] audit: type=1400 audit(1732637485.570:3483): avc: denied { unlink } for pid=828 comm="syz-executor" name="file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 2603.931892][ T29] audit: type=1400 audit(1732637485.840:3484): avc: denied { setopt } for pid=3242 comm="syz.1.7332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2604.246925][ T3252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7334'. [ 2604.267779][ T3252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7334'. [ 2605.487469][ T29] audit: type=1400 audit(1732637487.370:3485): avc: denied { relabelto } for pid=3236 comm="syz.5.7330" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 2605.589028][ T29] audit: type=1400 audit(1732637487.370:3486): avc: denied { associate } for pid=3236 comm="syz.5.7330" name="vcs" dev="devtmpfs" ino=14 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 2605.892944][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7341'. [ 2605.904475][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7341'. [ 2606.084957][ T9539] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2606.989800][ T9539] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2607.001036][ T9539] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2607.011477][ T9539] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2607.020873][ T9539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.063062][ T3273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2607.099750][ T9539] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2607.610451][T22531] usb 6-1: USB disconnect, device number 12 [ 2609.962616][ T3316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2610.551551][ T3304] delete_channel: no stack [ 2610.990721][ T967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2611.177890][ T967] usb 6-1: device descriptor read/64, error -71 [ 2611.447982][ T967] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2612.167724][ T967] usb 6-1: device descriptor read/64, error -71 [ 2612.327943][ T967] usb usb6-port1: attempt power cycle [ 2612.687766][ T967] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2612.880528][ T967] usb 6-1: device descriptor read/8, error -71 [ 2613.347390][ T967] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2613.388916][ T967] usb 6-1: device descriptor read/8, error -71 [ 2613.518416][ T967] usb usb6-port1: unable to enumerate USB device [ 2614.657579][ T9468] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 2615.828468][ T9468] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2615.840377][ T9468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 2615.877788][ T9468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64 [ 2615.889752][ T9468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2615.915148][ T9468] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2615.924492][ T9468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2615.932839][ T9468] usb 10-1: Product: syz [ 2615.937096][ T9468] usb 10-1: Manufacturer: syz [ 2615.942070][ T9468] usb 10-1: SerialNumber: syz [ 2615.988706][ T9468] usb 10-1: config 0 descriptor?? [ 2618.829647][ T9539] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2618.901927][T30084] usb 10-1: USB disconnect, device number 8 [ 2619.011801][ T3452] gfs2: not a GFS2 filesystem [ 2619.387399][ T9539] usb 4-1: Using ep0 maxpacket: 8 [ 2619.397470][ T9539] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2619.406576][ T9539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.424657][ T9539] usb 4-1: Product: syz [ 2619.433099][ T9539] usb 4-1: Manufacturer: syz [ 2619.442304][ T9539] usb 4-1: SerialNumber: syz [ 2619.469883][ T9539] usb 4-1: config 0 descriptor?? [ 2619.479181][ T9539] gspca_main: se401-2.14.0 probing 047d:5003 [ 2620.383448][ T9539] gspca_se401: ExtraFeatures: 116 [ 2620.393043][ T9539] gspca_se401: Too many frame sizes [ 2620.530300][ T3482] FAULT_INJECTION: forcing a failure. [ 2620.530300][ T3482] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.534075][ T29] audit: type=1400 audit(1732637502.440:3487): avc: denied { shutdown } for pid=3479 comm="syz.8.7393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2620.543633][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.9.7394 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2620.567551][ T3480] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7393'. [ 2620.573314][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2620.573332][ T3482] Call Trace: [ 2620.573339][ T3482] [ 2620.573348][ T3482] dump_stack_lvl+0x16c/0x1f0 [ 2620.603237][ T3482] should_fail_ex+0x497/0x5b0 [ 2620.607910][ T3482] ? fs_reclaim_acquire+0xae/0x150 [ 2620.613027][ T3482] should_failslab+0xc2/0x120 [ 2620.617716][ T3482] __kmalloc_node_noprof+0xd1/0x510 [ 2620.622915][ T3482] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 2620.628371][ T3482] __kvmalloc_node_noprof+0xad/0x1a0 [ 2620.633657][ T3482] ? __pfx_ppp_setup+0x10/0x10 [ 2620.638412][ T3482] alloc_netdev_mqs+0xbbc/0x1510 [ 2620.643351][ T3482] rtnl_create_link+0xc10/0xfa0 [ 2620.648196][ T3482] ? nla_strscpy+0x140/0x190 [ 2620.652789][ T3482] rtnl_newlink+0xa93/0x1c50 [ 2620.657391][ T3482] ? __pfx_rtnl_newlink+0x10/0x10 [ 2620.662413][ T3482] ? __pfx___lock_acquire+0x10/0x10 [ 2620.667603][ T3482] ? cred_has_capability.isra.0+0x192/0x2f0 [ 2620.673493][ T3482] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 2620.679726][ T3482] ? find_held_lock+0x2d/0x110 [ 2620.684495][ T3482] ? __pfx_rtnl_newlink+0x10/0x10 [ 2620.689510][ T3482] rtnetlink_rcv_msg+0x95b/0xea0 [ 2620.694449][ T3482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2620.699912][ T3482] netlink_rcv_skb+0x16b/0x440 [ 2620.704693][ T3482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2620.710173][ T3482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2620.715472][ T3482] ? netlink_deliver_tap+0x1ae/0xd30 [ 2620.720758][ T3482] netlink_unicast+0x53c/0x7f0 [ 2620.725540][ T3482] ? __pfx_netlink_unicast+0x10/0x10 [ 2620.730853][ T3482] netlink_sendmsg+0x8b8/0xd70 [ 2620.735636][ T3482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2620.740932][ T3482] ____sys_sendmsg+0xaaf/0xc90 [ 2620.745710][ T3482] ? copy_msghdr_from_user+0x10b/0x160 [ 2620.751167][ T3482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2620.756465][ T3482] ___sys_sendmsg+0x135/0x1e0 [ 2620.761133][ T3482] ? __pfx____sys_sendmsg+0x10/0x10 [ 2620.766341][ T3482] ? __pfx_lock_release+0x10/0x10 [ 2620.771359][ T3482] ? trace_lock_acquire+0x146/0x1e0 [ 2620.776573][ T3482] ? __fget_files+0x206/0x3a0 [ 2620.781249][ T3482] __sys_sendmsg+0x16e/0x220 [ 2620.785840][ T3482] ? __pfx___sys_sendmsg+0x10/0x10 [ 2620.790962][ T3482] do_syscall_64+0xcd/0x250 [ 2620.795470][ T3482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2620.801357][ T3482] RIP: 0033:0x7fd0c3f7e819 [ 2620.805771][ T3482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2620.825461][ T3482] RSP: 002b:00007fd0c4d3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2620.827610][ T9539] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2620.833950][ T3482] RAX: ffffffffffffffda RBX: 00007fd0c4135fa0 RCX: 00007fd0c3f7e819 [ 2620.833971][ T3482] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 2620.833981][ T3482] RBP: 00007fd0c4d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2620.833991][ T3482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2620.834001][ T3482] R13: 0000000000000000 R14: 00007fd0c4135fa0 R15: 00007ffd6618b938 [ 2620.834025][ T3482] [ 2620.834054][ C1] vkms_vblank_simulate: vblank timer overrun [ 2620.893648][T30084] usb 4-1: USB disconnect, device number 46 [ 2621.027595][ T9539] usb 9-1: device descriptor read/64, error -71 [ 2621.327597][ T9539] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 2621.490953][ T9539] usb 9-1: device descriptor read/64, error -71 [ 2621.608263][ T9539] usb usb9-port1: attempt power cycle [ 2621.947560][ T9539] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 2622.400093][ T9539] usb 9-1: device descriptor read/8, error -71 [ 2622.439358][ T1447] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2622.547612][T22531] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2622.607437][ T1447] usb 4-1: Using ep0 maxpacket: 16 [ 2622.616346][ T1447] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2622.625882][ T1447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.634592][ T1447] usb 4-1: Product: syz [ 2622.637475][ T9539] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2622.639308][ T1447] usb 4-1: Manufacturer: syz [ 2622.651589][ T1447] usb 4-1: SerialNumber: syz [ 2622.657894][ T1447] usb 4-1: config 0 descriptor?? [ 2622.664954][ T1447] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 2622.668507][ T9539] usb 9-1: device descriptor read/8, error -71 [ 2622.710388][T22531] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2622.722046][T22531] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2622.732120][T22531] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2622.741506][T22531] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.752248][ T3499] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2622.793867][T22531] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2622.800539][ T9539] usb usb9-port1: unable to enumerate USB device [ 2622.807531][ T9468] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 2623.010028][ T9468] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 2623.019504][ T9468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.021897][T22531] usb 10-1: USB disconnect, device number 9 [ 2623.038051][ T9468] usb 6-1: Product: syz [ 2623.042246][ T9468] usb 6-1: Manufacturer: syz [ 2623.046853][ T9468] usb 6-1: SerialNumber: syz [ 2623.066557][ T1447] usb 4-1: clie_3_5_startup: get interface number failed: -32 [ 2623.075062][ T9468] usb 6-1: config 0 descriptor?? [ 2623.079810][ T1447] visor 4-1:0.0: probe with driver visor failed with error -32 [ 2623.082424][ T9468] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now attached [ 2623.100204][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7406'. [ 2623.305861][T22531] usb 6-1: USB disconnect, device number 17 [ 2623.312908][T22531] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now disconnected [ 2623.418215][ T29] audit: type=1400 audit(1732637505.330:3488): avc: denied { create } for pid=3494 comm="syz.3.7397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2623.447608][ T9468] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2623.617567][ T9468] usb 2-1: Using ep0 maxpacket: 32 [ 2623.628747][ T9468] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2623.660101][ T9468] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2623.752162][ T9468] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2623.852815][ T9468] usb 2-1: config 1 has no interface number 0 [ 2623.975015][ T9468] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2624.025022][ T9468] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2624.047640][ T9468] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2624.056816][ T9468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.070829][ T9468] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2624.111442][ T3523] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7409'. [ 2624.304861][T22531] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2624.589782][T22531] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2624.602603][T22531] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2624.624081][T22531] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2624.642978][T22531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.651975][ T3528] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7410'. [ 2624.664056][ T3521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2624.674395][T22531] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2624.797934][ T9468] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 2625.178395][ T1447] usb 6-1: USB disconnect, device number 18 [ 2625.190572][ T9539] usb 4-1: USB disconnect, device number 47 [ 2625.220019][ T29] audit: type=1400 audit(1732637507.120:3489): avc: denied { unlink } for pid=30790 comm="syz-executor" name="file0" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2625.260685][T22531] usb 2-1: USB disconnect, device number 24 [ 2625.267159][T22531] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2625.328673][ T3519] delete_channel: no stack [ 2626.008079][T21860] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2626.018176][ T3547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7416'. [ 2626.037476][ T3547] FAULT_INJECTION: forcing a failure. [ 2626.037476][ T3547] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.067358][ T3547] CPU: 0 UID: 0 PID: 3547 Comm: syz.1.7416 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2626.077731][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2626.087790][ T3547] Call Trace: [ 2626.091072][ T3547] [ 2626.094001][ T3547] dump_stack_lvl+0x16c/0x1f0 [ 2626.098682][ T3547] should_fail_ex+0x497/0x5b0 [ 2626.103368][ T3547] ? fs_reclaim_acquire+0xae/0x150 [ 2626.108466][ T3547] should_failslab+0xc2/0x120 [ 2626.113131][ T3547] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 2626.118922][ T3547] ? __alloc_skb+0x2b1/0x380 [ 2626.123506][ T3547] __alloc_skb+0x2b1/0x380 [ 2626.127913][ T3547] ? __pfx___alloc_skb+0x10/0x10 [ 2626.132853][ T3547] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 2626.137975][ T3547] netlink_ack+0x164/0xb90 [ 2626.142501][ T3547] netlink_rcv_skb+0x348/0x440 [ 2626.147276][ T3547] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2626.152739][ T3547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2626.158051][ T3547] ? netlink_deliver_tap+0x1ae/0xd30 [ 2626.163332][ T3547] netlink_unicast+0x53c/0x7f0 [ 2626.168090][ T3547] ? __pfx_netlink_unicast+0x10/0x10 [ 2626.173384][ T3547] netlink_sendmsg+0x8b8/0xd70 [ 2626.178143][ T3547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2626.183422][ T3547] ____sys_sendmsg+0xaaf/0xc90 [ 2626.188173][ T3547] ? copy_msghdr_from_user+0x10b/0x160 [ 2626.193662][ T3547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2626.198962][ T3547] ___sys_sendmsg+0x135/0x1e0 [ 2626.203647][ T3547] ? __pfx____sys_sendmsg+0x10/0x10 [ 2626.208855][ T3547] ? __pfx_lock_release+0x10/0x10 [ 2626.213868][ T3547] ? trace_lock_acquire+0x146/0x1e0 [ 2626.219068][ T3547] ? __fget_files+0x206/0x3a0 [ 2626.223741][ T3547] __sys_sendmsg+0x16e/0x220 [ 2626.228323][ T3547] ? __pfx___sys_sendmsg+0x10/0x10 [ 2626.233431][ T3547] do_syscall_64+0xcd/0x250 [ 2626.237923][ T3547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2626.243804][ T3547] RIP: 0033:0x7f8b4477e819 [ 2626.248203][ T3547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2626.267801][ T3547] RSP: 002b:00007f8b454f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2626.276212][ T3547] RAX: ffffffffffffffda RBX: 00007f8b44935fa0 RCX: 00007f8b4477e819 [ 2626.284171][ T3547] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 2626.292146][ T3547] RBP: 00007f8b454f5090 R08: 0000000000000000 R09: 0000000000000000 [ 2626.300117][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2626.308073][ T3547] R13: 0000000000000000 R14: 00007f8b44935fa0 R15: 00007ffc42936038 [ 2626.316040][ T3547] [ 2626.406598][T21860] usb 10-1: Using ep0 maxpacket: 8 [ 2626.420251][T21860] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2626.465991][T21860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.477431][T21860] usb 10-1: Product: syz [ 2626.481737][T21860] usb 10-1: Manufacturer: syz [ 2626.486424][T21860] usb 10-1: SerialNumber: syz [ 2626.494901][T21860] usb 10-1: config 0 descriptor?? [ 2626.502115][T21860] gspca_main: se401-2.14.0 probing 047d:5003 [ 2626.519927][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7418'. [ 2626.811356][ T3555] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7420'. [ 2627.436365][T21860] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 2627.443788][T21860] se401 10-1:0.0: probe with driver se401 failed with error -71 [ 2627.507854][T21860] usb 10-1: USB disconnect, device number 10 [ 2627.562555][ T3567] sctp: [Deprecated]: syz.3.7421 (pid 3567) Use of int in max_burst socket option deprecated. [ 2627.562555][ T3567] Use struct sctp_assoc_value instead [ 2627.791349][ T3542] delete_channel: no stack [ 2627.889815][ T3571] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7423'. [ 2628.298374][ T3584] overlayfs: missing 'lowerdir' [ 2628.485160][ T3588] Invalid ELF header magic: != ELF [ 2629.464254][ T29] audit: type=1400 audit(1732637511.230:3490): avc: denied { mounton } for pid=3595 comm="syz.1.7430" path="/proc/1104/task" dev="proc" ino=131293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2629.678416][ T29] audit: type=1400 audit(1732637511.450:3491): avc: denied { listen } for pid=3593 comm="syz.3.7429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2629.699289][ T29] audit: type=1400 audit(1732637511.450:3492): avc: denied { connect } for pid=3593 comm="syz.3.7429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2629.917529][T22531] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2630.417412][T22531] usb 2-1: Using ep0 maxpacket: 32 [ 2630.431131][T22531] usb 2-1: config 0 has no interfaces? [ 2630.963492][T22531] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2630.973395][T22531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.983809][T22531] usb 2-1: config 0 descriptor?? [ 2631.208485][T22531] usb 2-1: USB disconnect, device number 25 [ 2632.282566][ T3636] sd 0:0:1:0: device reset [ 2633.218138][T21860] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2633.297792][ T1447] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2633.537347][T21860] usb 2-1: Using ep0 maxpacket: 16 [ 2633.549188][T21860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2633.566210][T21860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2633.583883][T21860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2633.597473][ T1447] usb 10-1: Using ep0 maxpacket: 32 [ 2633.608421][T21860] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2633.609035][ T1447] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 2633.797344][T21860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.812253][T21860] usb 2-1: config 0 descriptor?? [ 2633.926495][ T1447] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2633.966726][ T1447] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2634.007332][ T1447] usb 10-1: config 1 has no interface number 0 [ 2634.017795][ T1447] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2634.033097][ T1447] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2634.107628][ T1447] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2634.117475][ T1447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.160012][ T1447] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 2634.330548][T21860] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 2634.434531][T21860] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0026/input/input70 [ 2634.477188][T21860] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2634.554141][ T3642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2634.562945][ T3642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2634.568233][ T3662] nfs: Unknown parameter 'no' [ 2634.572720][ T29] audit: type=1400 audit(1732637516.480:3493): avc: denied { create } for pid=3640 comm="syz.1.7442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 2634.595560][ C0] vkms_vblank_simulate: vblank timer overrun [ 2634.718306][T21860] usb 2-1: USB disconnect, device number 26 [ 2634.744118][ T1447] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 2634.761567][ T29] audit: type=1400 audit(1732637516.660:3494): avc: denied { append } for pid=3666 comm="syz.5.7452" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2635.059721][ T1447] usb 10-1: USB disconnect, device number 11 [ 2635.059861][ T3668] trusted_key: syz.5.7452 sent an empty control message without MSG_MORE. [ 2635.080737][ T1447] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 2637.415836][ T3696] overlayfs: missing 'workdir' [ 2638.437494][ T3700] Invalid ELF header magic: != ELF [ 2639.494707][ T3705] netlink: 356 bytes leftover after parsing attributes in process `syz.9.7461'. [ 2640.990808][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7466'. [ 2641.107395][T21860] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2641.301828][ T1447] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2641.388495][ T29] audit: type=1400 audit(1732637523.300:3495): avc: denied { ioctl } for pid=3739 comm="syz.8.7473" path="socket:[130704]" dev="sockfs" ino=130704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2641.408104][T21860] usb 4-1: Using ep0 maxpacket: 16 [ 2641.458564][T21860] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 2641.466909][T21860] usb 4-1: config 0 has no interface number 0 [ 2641.474892][T21860] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=b5.29 [ 2641.484586][T21860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.496815][T21860] usb 4-1: Product: syz [ 2641.501677][T21860] usb 4-1: Manufacturer: syz [ 2641.506579][T21860] usb 4-1: SerialNumber: syz [ 2641.589038][T21860] usb 4-1: config 0 descriptor?? [ 2641.604270][ T29] audit: type=1400 audit(1732637523.460:3496): avc: denied { append } for pid=3737 comm="syz.5.7472" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2641.627799][ C0] vkms_vblank_simulate: vblank timer overrun [ 2641.771520][T21860] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 2641.909074][T21860] dvb-usb: bulk message failed: -22 (2/0) [ 2641.982876][T21860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2641.987537][ T1447] usb 10-1: Using ep0 maxpacket: 32 [ 2641.992767][T21860] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 2642.007429][T21860] usb 4-1: media controller created [ 2642.010439][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7464'. [ 2642.022382][T21860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2642.026421][ T1447] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 2642.035982][T21860] dvb-usb: bulk message failed: -22 (1/0) [ 2642.045101][T21860] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 2642.056320][ T3710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7464'. [ 2642.057315][ T1447] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2642.077931][ T3710] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2642.094449][T21860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 2642.106693][T21860] dvb-usb: schedule remote query interval to 50 msecs. [ 2642.134657][ T1447] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2642.154114][ T1447] usb 10-1: config 1 has no interface number 0 [ 2642.179370][T21860] dvb-usb: bulk message failed: -22 (2/0) [ 2642.185142][T21860] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 2642.199211][T21860] usb 4-1: USB disconnect, device number 48 [ 2642.221698][ T1447] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2642.251146][T21860] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 2642.251889][ T1447] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2642.361250][ T1447] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2642.371005][ T1447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.423358][ T1447] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 2642.742880][ T3758] netlink: 356 bytes leftover after parsing attributes in process `syz.8.7476'. [ 2643.090952][ T1447] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 2643.128092][ T3762] FAULT_INJECTION: forcing a failure. [ 2643.128092][ T3762] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.203999][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.5.7478 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2643.214386][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2643.224461][ T3762] Call Trace: [ 2643.227746][ T3762] [ 2643.230676][ T3762] dump_stack_lvl+0x16c/0x1f0 [ 2643.235363][ T3762] should_fail_ex+0x497/0x5b0 [ 2643.240033][ T3762] should_failslab+0xc2/0x120 [ 2643.244715][ T3762] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 2643.250092][ T3762] ? skb_clone+0x190/0x3f0 [ 2643.254512][ T3762] skb_clone+0x190/0x3f0 [ 2643.258771][ T3762] netlink_deliver_tap+0xabd/0xd30 [ 2643.263907][ T3762] netlink_unicast+0x6b4/0x7f0 [ 2643.268686][ T3762] ? __pfx_netlink_unicast+0x10/0x10 [ 2643.273984][ T3762] netlink_ack+0x6a8/0xb90 [ 2643.278406][ T3762] netlink_rcv_skb+0x348/0x440 [ 2643.283175][ T3762] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2643.288635][ T3762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2643.293957][ T3762] ? bpf_lsm_capable+0x9/0x10 [ 2643.298626][ T3762] ? security_capable+0x7e/0x260 [ 2643.303569][ T3762] ? ns_capable+0xd7/0x110 [ 2643.308006][ T3762] nfnetlink_rcv+0x1b4/0x430 [ 2643.312615][ T3762] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2643.317742][ T3762] ? rcu_is_watching+0x12/0xc0 [ 2643.322517][ T3762] netlink_unicast+0x53c/0x7f0 [ 2643.327277][ T3762] ? __pfx_netlink_unicast+0x10/0x10 [ 2643.332567][ T3762] netlink_sendmsg+0x8b8/0xd70 [ 2643.337340][ T3762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2643.342631][ T3762] ____sys_sendmsg+0xaaf/0xc90 [ 2643.347423][ T3762] ? copy_msghdr_from_user+0x10b/0x160 [ 2643.352890][ T3762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2643.358206][ T3762] ___sys_sendmsg+0x135/0x1e0 [ 2643.362898][ T3762] ? __pfx____sys_sendmsg+0x10/0x10 [ 2643.368126][ T3762] ? __pfx_lock_release+0x10/0x10 [ 2643.373203][ T3762] ? trace_lock_acquire+0x146/0x1e0 [ 2643.378433][ T3762] ? __fget_files+0x206/0x3a0 [ 2643.383132][ T3762] __sys_sendmsg+0x16e/0x220 [ 2643.387822][ T3762] ? __pfx___sys_sendmsg+0x10/0x10 [ 2643.392922][ T3762] do_syscall_64+0xcd/0x250 [ 2643.397432][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2643.403328][ T3762] RIP: 0033:0x7f6016b7e819 [ 2643.407748][ T3762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2643.427364][ T3762] RSP: 002b:00007f60179f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2643.435800][ T3762] RAX: ffffffffffffffda RBX: 00007f6016d35fa0 RCX: 00007f6016b7e819 [ 2643.443795][ T3762] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2643.451763][ T3762] RBP: 00007f60179f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2643.459741][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2643.467722][ T3762] R13: 0000000000000000 R14: 00007f6016d35fa0 R15: 00007ffed171a248 [ 2643.475714][ T3762] [ 2643.478860][ C0] vkms_vblank_simulate: vblank timer overrun [ 2643.488006][T21860] usb 10-1: USB disconnect, device number 12 [ 2643.504109][T21860] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 2643.514574][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state [ 2643.524347][ T3765] bridge0: port 1(ªªªªª») entered disabled state [ 2643.548735][ T3765] bridge0: entered allmulticast mode [ 2643.556519][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 2643.563658][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2643.570978][ T3768] bridge0: port 1(ªªªªª») entered blocking state [ 2643.577450][ T3768] bridge0: port 1(ªªªªª») entered forwarding state [ 2643.595740][ T3768] bridge0: entered promiscuous mode [ 2748.707231][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2748.714220][ C0] rcu: 1-...!: (2 ticks this GP) idle=9204/1/0x4000000000000000 softirq=154096/154099 fqs=1 [ 2748.726283][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P927/1:b..l P3769/1:b..l [ 2748.735258][ C0] rcu: (detected by 0, t=10502 jiffies, g=159705, q=163 ncpus=2) [ 2748.743059][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2748.743084][ C1] NMI backtrace for cpu 1 [ 2748.743093][ C1] CPU: 1 UID: 0 PID: 3774 Comm: syz.5.7483 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2748.743109][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2748.743116][ C1] RIP: 0010:rb_next+0x2a/0x130 [ 2748.743136][ C1] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 41 54 48 c1 ea 03 55 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 f8 00 00 00 <48> 8b 2b 48 39 eb 0f 84 ae 00 00 00 48 8d 7b 08 48 b8 00 00 00 00 [ 2748.743149][ C1] RSP: 0018:ffffc90000a18da8 EFLAGS: 00000046 [ 2748.743161][ C1] RAX: dffffc0000000000 RBX: ffff888029a74340 RCX: ffffffff8b1fcef0 [ 2748.743170][ C1] RDX: 1ffff1100534e868 RSI: ffffffff8b1fcf80 RDI: ffff888029a74340 [ 2748.743179][ C1] RBP: ffff8880b872cb50 R08: 0000000000000006 R09: 0000000000000001 [ 2748.743188][ C1] R10: ffff888029a74340 R11: 0000000000000003 R12: ffff8880b872cb58 [ 2748.743197][ C1] R13: 0000000000000000 R14: ffff8880b872ca00 R15: 0000000000000000 [ 2748.743205][ C1] FS: 00007f60179f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2748.743220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2748.743230][ C1] CR2: 000000110c2ef087 CR3: 0000000042cc4000 CR4: 00000000003526f0 [ 2748.743239][ C1] Call Trace: [ 2748.743245][ C1] [ 2748.743252][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2748.743272][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2748.743286][ C1] ? nmi_handle+0x1a7/0x5c0 [ 2748.743302][ C1] ? rb_next+0x2a/0x130 [ 2748.743316][ C1] ? default_do_nmi+0x6a/0x160 [ 2748.743335][ C1] ? exc_nmi+0x170/0x1e0 [ 2748.743358][ C1] ? end_repeat_nmi+0xf/0x53 [ 2748.743376][ C1] ? timerqueue_del+0x40/0x150 [ 2748.743394][ C1] ? timerqueue_del+0xd0/0x150 [ 2748.743411][ C1] ? rb_next+0x2a/0x130 [ 2748.743425][ C1] ? rb_next+0x2a/0x130 [ 2748.743439][ C1] ? rb_next+0x2a/0x130 [ 2748.743454][ C1] [ 2748.743458][ C1] [ 2748.743463][ C1] timerqueue_del+0xd8/0x150 [ 2748.743481][ C1] __remove_hrtimer+0x99/0x290 [ 2748.743500][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2748.743513][ C1] __hrtimer_run_queues+0x50b/0xae0 [ 2748.743532][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2748.743548][ C1] ? read_tsc+0x9/0x20 [ 2748.743568][ C1] hrtimer_interrupt+0x392/0x8e0 [ 2748.743589][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2748.743605][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2748.743620][ C1] [ 2748.743624][ C1] [ 2748.743629][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2748.743646][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 2748.743661][ C1] Code: b8 ff ff ff ff 65 0f c1 05 50 12 97 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 2748.743674][ C1] RSP: 0018:ffffc9000cd27600 EFLAGS: 00000206 [ 2748.743684][ C1] RAX: 0000000000000046 RBX: 1ffff920019a4ec1 RCX: ffffffff816a831e [ 2748.743693][ C1] RDX: 0000000000000001 RSI: ffffffff8b6ce1e0 RDI: ffffffff8bd1d600 [ 2748.743702][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd01ad [ 2748.743711][ C1] R10: ffffffff96e80d6f R11: 0000000000000001 R12: 0000000000000000 [ 2748.743719][ C1] R13: ffff88807e1087e8 R14: 0000000000000000 R15: 0000000000000000 [ 2748.743730][ C1] ? hlock_class+0x4e/0x130 [ 2748.743751][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2748.743766][ C1] ? rcu_is_watching+0x12/0xc0 [ 2748.743783][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 2748.743801][ C1] ? validate_mm+0x201/0x530 [ 2748.743817][ C1] ? lock_acquire+0x2f/0xb0 [ 2748.743830][ C1] ? validate_mm+0x201/0x530 [ 2748.743846][ C1] down_read+0x9a/0x330 [ 2748.743861][ C1] ? validate_mm+0x201/0x530 [ 2748.743875][ C1] ? __pfx_down_read+0x10/0x10 [ 2748.743894][ C1] validate_mm+0x201/0x530 [ 2748.743910][ C1] ? __pfx_validate_mm+0x10/0x10 [ 2748.743924][ C1] ? mark_held_locks+0x9f/0xe0 [ 2748.743940][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2748.743958][ C1] ? percpu_counter_add_batch+0xb5/0x1e0 [ 2748.743977][ C1] vms_complete_munmap_vmas+0x604/0x980 [ 2748.743995][ C1] __mmap_region+0xadb/0x2670 [ 2748.744013][ C1] ? __pfx___mmap_region+0x10/0x10 [ 2748.744029][ C1] ? hlock_class+0x4e/0x130 [ 2748.744045][ C1] ? mark_lock+0xb5/0xc60 [ 2748.744060][ C1] ? __pfx___schedule+0x10/0x10 [ 2748.744087][ C1] ? mm_get_unmapped_area+0x95/0xe0 [ 2748.744107][ C1] ? shmem_get_unmapped_area+0x183/0xa20 [ 2748.744124][ C1] ? cap_mmap_addr+0x53/0x320 [ 2748.744139][ C1] mmap_region+0x127/0x320 [ 2748.744154][ C1] do_mmap+0xc00/0xfc0 [ 2748.744168][ C1] vm_mmap_pgoff+0x1ba/0x360 [ 2748.744185][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2748.744200][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 2748.744213][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 2748.744227][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 2748.744240][ C1] ? rcu_is_watching+0x12/0xc0 [ 2748.744258][ C1] __x64_sys_mmap+0x125/0x190 [ 2748.744273][ C1] do_syscall_64+0xcd/0x250 [ 2748.744304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2748.744320][ C1] RIP: 0033:0x7f6016b7e819 [ 2748.744332][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2748.744349][ C1] RSP: 002b:00007f60179f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2748.744362][ C1] RAX: ffffffffffffffda RBX: 00007f6016d35fa0 RCX: 00007f6016b7e819 [ 2748.744370][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 2748.744379][ C1] RBP: 00007f6016bf175e R08: ffffffffffffffff R09: 0000000000000000 [ 2748.744388][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 2748.744396][ C1] R13: 0000000000000000 R14: 00007f6016d35fa0 R15: 00007ffed171a248 [ 2748.744409][ C1] [ 2748.745079][ C0] task:syz.1.7481 state:R running task stack:28000 pid:3769 tgid:3769 ppid:29925 flags:0x00004000 [ 2749.319953][ C0] Call Trace: [ 2749.323227][ C0] [ 2749.326159][ C0] __schedule+0xe58/0x5ad0 [ 2749.330581][ C0] ? print_usage_bug.part.0+0x560/0x560 [ 2749.336123][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2749.341330][ C0] ? __pfx___schedule+0x10/0x10 [ 2749.346175][ C0] ? mark_held_locks+0x9f/0xe0 [ 2749.350940][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2749.356139][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 2749.361508][ C0] preempt_schedule_common+0x44/0xc0 [ 2749.366793][ C0] preempt_schedule_thunk+0x1a/0x30 [ 2749.371993][ C0] _raw_spin_unlock+0x3e/0x50 [ 2749.376750][ C0] unmap_page_range+0xb87/0x3d60 [ 2749.381701][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2749.387069][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 2749.392015][ C0] unmap_single_vma+0x194/0x2b0 [ 2749.396864][ C0] unmap_vmas+0x22f/0x490 [ 2749.401192][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2749.406042][ C0] ? __pfx_lock_release+0x10/0x10 [ 2749.411066][ C0] ? lock_acquire+0x2f/0xb0 [ 2749.415562][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 2749.420594][ C0] exit_mmap+0x1c6/0xb30 [ 2749.424838][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2749.429605][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2749.434384][ C0] __mmput+0x12a/0x480 [ 2749.438454][ C0] mmput+0x62/0x70 [ 2749.442174][ C0] do_exit+0x9bf/0x2d70 [ 2749.446343][ C0] ? __pfx_do_exit+0x10/0x10 [ 2749.450934][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 2749.456310][ C0] do_group_exit+0xd3/0x2a0 [ 2749.460820][ C0] __x64_sys_exit_group+0x3e/0x50 [ 2749.465845][ C0] x64_sys_call+0x151f/0x1720 [ 2749.470526][ C0] do_syscall_64+0xcd/0x250 [ 2749.475032][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2749.480926][ C0] RIP: 0033:0x7f8b4477e819 [ 2749.485338][ C0] RSP: 002b:00007ffc429363a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2749.493746][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b4477e819 [ 2749.501722][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2749.509708][ C0] RBP: 00007ffc429363fc R08: 00007ffc4293648f R09: 0000000000285621 [ 2749.517682][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 2749.525664][ C0] R13: 0000000000285621 R14: 0000000000285345 R15: 00007ffc42936450 [ 2749.533645][ C0] [ 2749.536658][ C0] task:kworker/u8:13 state:R running task stack:23952 pid:927 tgid:927 ppid:2 flags:0x00004000 [ 2749.548495][ C0] Workqueue: bat_events batadv_nc_worker [ 2749.554138][ C0] Call Trace: [ 2749.557408][ C0] [ 2749.560360][ C0] __schedule+0xe58/0x5ad0 [ 2749.564802][ C0] ? mark_lock+0xb5/0xc60 [ 2749.569156][ C0] ? __pfx___schedule+0x10/0x10 [ 2749.574010][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2749.578785][ C0] ? mark_held_locks+0x9f/0xe0 [ 2749.583549][ C0] preempt_schedule_irq+0x51/0x90 [ 2749.588573][ C0] irqentry_exit+0x36/0x90 [ 2749.592985][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2749.598964][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 2749.604858][ C0] Code: b8 ff ff ff ff 65 0f c1 05 50 12 97 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 2749.624462][ C0] RSP: 0018:ffffc90003767aa8 EFLAGS: 00000206 [ 2749.630531][ C0] RAX: 0000000000000046 RBX: 1ffff920006ecf56 RCX: 000000005b74dafa [ 2749.638496][ C0] RDX: 0000000000000001 RSI: ffffffff8b6ce1e0 RDI: ffffffff8bd1d600 [ 2749.646461][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd0198 [ 2749.654424][ C0] R10: ffffffff96e80cc7 R11: 0000000000000002 R12: 0000000000000000 [ 2749.662396][ C0] R13: ffffffff8e1bba80 R14: 0000000000000000 R15: 0000000000000000 [ 2749.670379][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2749.676016][ C0] ? rcu_is_watching+0x12/0xc0 [ 2749.680781][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 2749.685979][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2749.691092][ C0] ? lock_acquire+0x2f/0xb0 [ 2749.695588][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2749.700701][ C0] batadv_nc_worker+0x16a/0x1060 [ 2749.705638][ C0] ? batadv_nc_worker+0x164/0x1060 [ 2749.710756][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2749.716131][ C0] ? rcu_is_watching+0x12/0xc0 [ 2749.720894][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 2749.726094][ C0] ? process_one_work+0x921/0x1ba0 [ 2749.731201][ C0] ? lock_acquire+0x2f/0xb0 [ 2749.735697][ C0] ? process_one_work+0x921/0x1ba0 [ 2749.740806][ C0] process_one_work+0x9c5/0x1ba0 [ 2749.745750][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2749.751121][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2749.756486][ C0] ? rcu_is_watching+0x12/0xc0 [ 2749.761258][ C0] ? assign_work+0x1a0/0x250 [ 2749.765844][ C0] worker_thread+0x6c8/0xf00 [ 2749.770438][ C0] ? __kthread_parkme+0x148/0x220 [ 2749.775465][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2749.780573][ C0] kthread+0x2c1/0x3a0 [ 2749.784658][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2749.789875][ C0] ? __pfx_kthread+0x10/0x10 [ 2749.794479][ C0] ret_from_fork+0x45/0x80 [ 2749.798893][ C0] ? __pfx_kthread+0x10/0x10 [ 2749.803484][ C0] ret_from_fork_asm+0x1a/0x30 [ 2749.808264][ C0] [ 2749.811294][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g159705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2749.822589][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2749.832638][ C0] rcu: RCU grace-period kthread stack dump: [ 2749.838540][ C0] task:rcu_preempt state:R running task stack:27248 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2749.850306][ C0] Call Trace: [ 2749.853582][ C0] [ 2749.856512][ C0] __schedule+0xe58/0x5ad0 [ 2749.860933][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2749.866145][ C0] ? __pfx___schedule+0x10/0x10 [ 2749.870993][ C0] ? schedule+0x298/0x350 [ 2749.875318][ C0] ? __pfx_lock_release+0x10/0x10 [ 2749.880344][ C0] ? lock_acquire+0x2f/0xb0 [ 2749.884844][ C0] ? schedule+0x1fd/0x350 [ 2749.889176][ C0] schedule+0xe7/0x350 [ 2749.893241][ C0] schedule_timeout+0x124/0x280 [ 2749.898092][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2749.903470][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2749.908762][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2749.914567][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 2749.920042][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2749.924807][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2749.930090][ C0] ? rcu_gp_init+0xc82/0x1630 [ 2749.934852][ C0] ? lock_acquire+0x2f/0xb0 [ 2749.939348][ C0] ? finish_swait+0xc5/0x280 [ 2749.943936][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2749.949754][ C0] rcu_gp_kthread+0x271/0x380 [ 2749.954431][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2749.959646][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2749.964841][ C0] ? __kthread_parkme+0x148/0x220 [ 2749.969867][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2749.975061][ C0] kthread+0x2c1/0x3a0 [ 2749.979129][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2749.984324][ C0] ? __pfx_kthread+0x10/0x10 [ 2749.988915][ C0] ret_from_fork+0x45/0x80 [ 2749.993325][ C0] ? __pfx_kthread+0x10/0x10 [ 2749.997916][ C0] ret_from_fork_asm+0x1a/0x30 [ 2750.002693][ C0] [ 2750.005704][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2750.012014][ C0] CPU: 0 UID: 0 PID: 772 Comm: kworker/u8:11 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2750.022505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2750.032592][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2750.039097][ C0] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 2750.045771][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 2a 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 2750.065375][ C0] RSP: 0018:ffffc9000c8af998 EFLAGS: 00000293 [ 2750.071440][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff8182b59c [ 2750.079408][ C0] RDX: ffff88804bf1c880 RSI: ffffffff8182b576 RDI: 0000000000000005 [ 2750.087372][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2750.095332][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949 [ 2750.103317][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 2750.111302][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2750.120235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2750.126817][ C0] CR2: 0000001b2ea1eff8 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 2750.134786][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2750.142749][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2750.150716][ C0] Call Trace: [ 2750.153994][ C0] [ 2750.156833][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 2750.163168][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2750.168367][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 2750.173836][ C0] ? timekeeping_advance+0x70a/0xa60 [ 2750.179115][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2750.184761][ C0] ? __asan_memcpy+0x3c/0x60 [ 2750.189354][ C0] ? rcu_is_watching+0x12/0xc0 [ 2750.194122][ C0] ? update_process_times+0x178/0x2d0 [ 2750.199498][ C0] ? __pfx_update_process_times+0x10/0x10 [ 2750.205216][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2750.210678][ C0] ? update_wall_time+0x1c/0x40 [ 2750.215530][ C0] ? tick_nohz_handler+0x376/0x530 [ 2750.220666][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2750.226131][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 2750.231514][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2750.237233][ C0] ? read_tsc+0x9/0x20 [ 2750.241313][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 2750.246458][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2750.252614][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2750.258416][ C0] [ 2750.261347][ C0] [ 2750.264296][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2750.270457][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 2750.276525][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 2750.282599][ C0] ? smp_call_function_many_cond+0x458/0x1300 [ 2750.288665][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 2750.294738][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2750.299769][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 2750.304794][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 2750.309909][ C0] text_poke_bp_batch+0x22b/0x760 [ 2750.314940][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 2750.320486][ C0] ? __jump_label_patch+0x1db/0x400 [ 2750.325695][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2750.331947][ C0] text_poke_finish+0x30/0x40 [ 2750.336626][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2750.342613][ C0] jump_label_update+0x1d7/0x400 [ 2750.347558][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 2750.353465][ C0] static_key_enable+0x1a/0x20 [ 2750.358229][ C0] toggle_allocation_gate+0xfc/0x260 [ 2750.363512][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2750.369404][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 2750.374620][ C0] ? process_one_work+0x921/0x1ba0 [ 2750.379732][ C0] ? lock_acquire+0x2f/0xb0 [ 2750.384233][ C0] ? process_one_work+0x921/0x1ba0 [ 2750.389375][ C0] process_one_work+0x9c5/0x1ba0 [ 2750.394323][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2750.399952][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2750.405323][ C0] ? rcu_is_watching+0x12/0xc0 [ 2750.410094][ C0] ? assign_work+0x1a0/0x250 [ 2750.414684][ C0] worker_thread+0x6c8/0xf00 [ 2750.419279][ C0] ? __kthread_parkme+0x148/0x220 [ 2750.424305][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2750.429411][ C0] kthread+0x2c1/0x3a0 [ 2750.433478][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2750.438676][ C0] ? __pfx_kthread+0x10/0x10 [ 2750.443272][ C0] ret_from_fork+0x45/0x80 [ 2750.447683][ C0] ? __pfx_kthread+0x10/0x10 [ 2750.452275][ C0] ret_from_fork_asm+0x1a/0x30 [ 2750.457054][ C0]