last executing test programs: 13m5.97416664s ago: executing program 32 (id=149): ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0xf3cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x898c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffbf9f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabc3], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8c1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) unshare(0xc040400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)={0xd0, 0x2a, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x8, 0x4a, 0x0, 0x1, [@nested={0x4, 0x93}]}, @typed={0x32, 0x7a, 0x0, 0x0, @binary="84af0276078a844d62cc147d13a3ed7958f27f3567b00e0e93aa749af7b47a892e5f755436686bb284e2d238fb45"}, @typed={0x8, 0x113, 0x0, 0x0, @uid}, @nested={0x7c, 0xf5, 0x0, 0x1, [@generic="5fba92f13a2094dde515482a01961a1fb10355128b0eed0dcbc7cae20d1c03303e9dd3c86ed1d7ca1ae77431193ebf748f87ac60d30833daa43bb7e1954b15442c5cfb48f4fe60ce6afb098bdaeda458c4fb7226dced1998fae83cb149b5f448c53d5e1cf36c4d898d392a455b810029", @typed={0x8, 0xf5, 0x0, 0x0, @uid}]}]}, 0xd0}, {&(0x7f0000001000)={0x1c0, 0x3d, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0x9e, 0x5a, 0x0, 0x1, [@nested={0x4, 0xf5}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@remote}, @generic="94152449d1421f987add5f1e0cffa28bb378322f8aa7229b9d699a31eaf1980de73a859b3558a4d93b410fe895c5a96f493b0b3300876e36882a78d3ae765b18f82776e83e8e492cd446418e0bc4779a445ab8f1f0374c133b1e3eee386f8982e00063508c7bdd96a9451d74fb8128a00f3b0f473d00da3576eb67927be0f70bed2fdd65a0042a319b1d5a3dc887"]}, @generic="4f40c0df7a884dfaf0272fca482a2baa53e8b0cd1de3dc25ec575b82430c082a2dec744b6a9ef48b46fa96b5b1176924e87d65d07de38c3ea4b8e3833d6f97842749624163103a0be795b3676bffcd578769c0fbab3db6b7b65d70e73901ff97b6694737b4ce2496b7", @generic="ad26df5b3e55ddeedd9e8d1d3c4581e35c43be0888717b0c4b3787e0b5a3225a2196e2b20c6e5ddff082ac44d610ec60154e5430b6794d131f3ce0794db382e3337bf97b561dc20ac076f1be7844d81d2801a0db7b32121ab05a6f8ea9c21534b1bc6d3a91a64bc402c79af584ea999b2bf79a9fbd7262177afb700eca1c47ba91309b35849b639ba5d6a5fa84b5018ce9d3452590a19b44514c20af4f549638913dcfa94b"]}, 0x1c0}, {&(0x7f00000011c0)={0x1a4, 0x37, 0x500, 0x70bd2a, 0x25dfdbff, "", [@nested={0x4, 0x1f}, @nested={0x40, 0x129, 0x0, 0x1, [@nested={0x4, 0x90}, @generic, @generic="f79de3ebc12556f0951802d55f8a9c776011a647ee238957e8c594b2638967fc18776a5fb5a8091314e2fd24f0ca49128d751807aa2704d6"]}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x7}, @nested={0x148, 0xc1, 0x0, 0x1, [@generic="229de66bfc635a04768ac10efce0eec3d26c334d4a721e9acb8df810787c8e4b4ec8ace3ebf8e2b342e92d9cf985e61cf880d5b193cff8614b9e5989e306d4748b90f69d639bbcf2d2ecc61da95470dfcefab45fbb83b4d9cd708b92da2c74c6efda934a2fbfe0987198", @generic="5f904de2d808f9b49e1bb903d0b56021660aae606fca6c3084bfe6f8ae74f82a76d1cb46e6256280b478daf50627837fa785af061805fba1a813f65179dfd8233ec057a64b2b1ca38be04eb109a4017cdced7485196b92c6a44c85f2b18c18159de35b4a647bf28be495dd3bdd983448b8ccc580626062ce39d7d85a6abb610fbe9429a014b53faac703e612f76b74d9da26c78515cca5260f636ef43a4608ab75eed110d0c3c6c7", @nested={0x4, 0x4c}, @generic="b0f155d2e49aa616c47ff02e1fb1a56f5f8f96f8664093326cd9e0d095d27d0dcf2ae1494945756bda390331b956"]}]}, 0x1a4}, {&(0x7f0000001380)={0x13c, 0x16, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xc, 0x24, 0x0, 0x1, [@nested={0x4, 0x119}, @nested={0x4, 0x14b}]}, @generic="2023819d8519f3af2cd25730b96a871155141f46524833cffc1ce89756d5a4ed0670b9613306f9e69db95f3bae3dbc7ff907bef3b60e8b029c4d03e201b352d267850e83498709e9d9dc51cf7f8e663ca701e7631f7732ad3972c39d9ab93604abd62ee59309fb3799972a920dee3647abefa7384e5c0af1ddfb2710b2430538b5aa5d18c49ef1700aa0359937bfde3ea518ec9b5d3c630d364a617278c27fcbebeb45cd1a9b7f6767c96617c29f29bb0fb36e51", @nested={0x6b, 0x95, 0x0, 0x1, [@nested={0x4, 0xcb}, @nested={0x4, 0x12b}, @generic="98cae66bb6304446c75ad08154ec8e4477b0cf3d52a88482fa6774a814890f58012b4942aabdbe637290d25d1b2907af2c43600ee25e8f03015ea7f31048bb2e6e648efbcc0b9075ee3bea2385abd92d75a796ebf77ce28694858577089bb0"]}]}, 0x13c}, {&(0x7f0000003700)={0x1278, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@generic="310042df169c070ee69f1fb85c3f8bc8983b624afafc500ebdb748bc8e40e255afb17a16965cf84b3aca39f766621493a379e752bda85ce931d93bd4cc5404b08cc3a4741ce0f585d0a6f430d3b7adc1d446fc56a44556012f2a59149108dd1c566c672ca122aadac52d6bc800f38769c8c3378777fb", @generic="2c0e74ceabacb703f1440caab283320ecc99be3b8d9966229a18acf57797196b7e72966175acb1371a7a60a707db8063f02897fdc64f79e8a0acbbd648c9f6630be0e599b7ceee4ea8bebadea48572ff965106ad8cf2c860ccaba402dea250a6fab1", @nested={0x1030, 0x97, 0x0, 0x1, [@typed={0x14, 0x111, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="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", @nested={0x4, 0x9e}]}, @typed={0x22, 0x89, 0x0, 0x0, @binary="f7913a56e91b7e38e159e7304d1927013d78afa044b4c0aad951493312c5"}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@remote}, @nested={0x54, 0xb7, 0x0, 0x1, [@typed={0x50, 0x19, 0x0, 0x0, @binary="996c47a86bbf219b41ca709b86d43f32b7bdeb9ce0afd0a04b8408cdb80f2de5879294d64f04557ff90ac37e89f4d33a673df352d86706654446157f2bcfb6fde974e793b15113437e23e7a6"}]}, @generic="853e520217163c81aaf2d280830068378b9db1ff56de2352c278f4226d6859eaba283300062142ffd4cf6e3a9c4ad1f22280d91c10fa006021dd4f05bcf2125217397383e49f325b5daf77781c55020008df10590d4b48e472069e096878dbaa48d5fa22a4f21adb2fb76a32efbac1b2ba1f659ddc394c4744c45677f8d012e3c7ec55749dad176b2b3c71fe227429978dce80f49eacb9c2ec9d4b009ca1df607cd609cc184c11b7c77f5bbf2a1427bef453d7ae1c5273888bafa28877e63d1f8d4eeaaf187bcbb7dcb2e794d0956412cd"]}, 0x1278}, {&(0x7f0000000600)={0xc4, 0x1b, 0x2, 0x70bd29, 0x25dfdbff, "", [@typed={0x83, 0xbd, 0x0, 0x0, @binary="f337afe2d1b756e142f59fb332a052c544ce7ea182703215030d17460b77df669282cbd97c621544bf594391a7dc76eadb20e8611a2702a5ce025b1a91905b10491f5b47f40e1aeda8b89a857f49795fb6777691d4c8f54c927dd14a873dbcc534b8aef279e5d5b0d3bd5bf8f4f8c8b49c8dbf49f6fc32b12d520e79820913"}, @typed={0x10, 0x5c, 0x0, 0x0, @str='/dev/video#\x00'}, @nested={0x18, 0x132, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0x90b}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd}]}, 0xc4}, {&(0x7f00000014c0)={0x120, 0x2b, 0x2, 0x70bd28, 0x25dfdbfd, "", [@generic="2aee1e616483046e68699b25fb2d7488813acd386c6eaa0707737e6e238c164d3d9847f24eb0f0b3fbf3c704bc571c435a33739f99ecc5ed4264e430a765213eec2029127f4bb72fcd5a3a012185319e8293cbd585364ce98370d400dd0bef86af9a4dd6f46a02b4bac0997fcf58cfd7d6394175be7eb86ebe66de906e7b9ba0c3eebe1c7e33e30e4a56fe576085fe08414c80ce06ce2e8b029f9ec48be443c33eb77c809ca53bd1bbdb6860d0acebabd113c8413683735dcaa2217b12b11510a915cbc930167d57d27ed07619e70fee6fc5187781f79e4e1ee8f7e7eeff9c8db3edce68584a196c71769970bae8271f1d1fc8052e3e511fb9a62ae72178", @nested={0x10, 0x14a, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @pid}, @nested={0x4, 0xe1}]}]}, 0x120}], 0x7, &(0x7f0000006c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x80}, 0x4040000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 12m7.019412815s ago: executing program 33 (id=281): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x24020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x1f, 0x0, 0x0, 0x0) 11m42.100142573s ago: executing program 34 (id=407): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000240)=0xfffff001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 10m42.975060575s ago: executing program 35 (id=537): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 9m38.405877398s ago: executing program 36 (id=677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r2}) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_open_dev$sg(&(0x7f0000000200), 0xcedd, 0x0) recvmsg$unix(r3, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040004) close(0xffffffffffffffff) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x184b00, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(r6, 0x40187014, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xa9, 0x0, 0xf1, 0x1}) r7 = socket$igmp6(0xa, 0x3, 0x2) getpeername(r7, &(0x7f00000000c0)=@l2, &(0x7f0000000040)=0x80) 9m34.901908658s ago: executing program 37 (id=690): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x80000000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x2, 0x37c, 0x80, 0x0, 0xd}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000001c0)=0x60, 0x800) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x20}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000200), &(0x7f0000000300)=0x60, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 7m5.103160588s ago: executing program 9 (id=1108): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x722) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000040), 0x880) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r7, 0x80503d01, &(0x7f00000001c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000380)={0x8, r8}) 7m4.614661743s ago: executing program 9 (id=1110): io_setup(0x4, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r1, 0x8b22, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x36, &(0x7f00000002c0)=0x480000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x28000600) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400c42, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080), 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7m2.63454292s ago: executing program 9 (id=1119): syz_usb_connect(0x4, 0x21e, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) prlimit64(r0, 0x8, &(0x7f0000000180)={0x7fffffffffffffff}, &(0x7f00000001c0)) clock_adjtime(0x7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000002000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e0001000000000000000000000000e60008"], 0x358}}, 0x0) 7m1.645014474s ago: executing program 38 (id=1122): r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x9, 0xe65, 0x0, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0xfffffff9, 0x9, 0xfffffff8, 0x0, 0x68, 0x0, 0x10, 0x4, {0x7, 0x24}, 0x6, 0x7f}}) r1 = memfd_secret(0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x3}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x30044005}, 0x80) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$sg(&(0x7f0000000300), 0x1d9, 0x46000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000340)={0x5, 0x4}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)=0x2) getdents64(r1, &(0x7f00000003c0)=""/40, 0x28) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x6, 0x400}) bind$llc(r1, &(0x7f00000004c0)={0x1a, 0x204, 0x8, 0x8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000500), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05c58fb18dd7ef4b62a374ac0e6744c0267d1aa607986716ef5a068e7eec"}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xfd}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @remote, [0xff000000, 0xffffff00, 0xff, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff000000], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {}, 0x0, 0x5, 0x2, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "ca44", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x34, 0x1, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = open(&(0x7f0000000b00)='./file0\x00', 0x200001, 0xa0) ioctl(r5, 0x99d5, &(0x7f0000000b40)="a9f4649fd02fffb20673d52bf64e0f184272ca7cc614a0ef45ad43165ec177") r7 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r7, &(0x7f0000000b80)=@known='trusted.syz\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000bc0)={0x0, 'syz_tun\x00'}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmstat\x00', 0x0, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000c40)) preadv(r6, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/158, 0x9e}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/108, 0x6c}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/18, 0x12}, {&(0x7f0000000f00)=""/247, 0xf7}], 0x6, 0x9a85, 0x80000001) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000d) 6m59.503180639s ago: executing program 9 (id=1127): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x2b, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_idx={0x18, 0x2}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x2c, &(0x7f0000000500)=""/44, 0x40f00, 0x5, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x1, 0x8}, 0x10, r5, 0x0, 0x3, 0x0, &(0x7f0000000b00)=[{0x1, 0x1, 0xf, 0x1}, {0x5, 0x2, 0xa, 0x2}, {0x3, 0x4, 0xd, 0xa}], 0x10, 0x9, @void, @value}, 0x94) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/power/mem_sleep', 0x400, 0x116) (rerun: 64) fremovexattr(r6, &(0x7f0000001f80)=@random={'user.', '/dev/autofs\x00'}) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/nfsfs\x00') (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1c60}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xf, &(0x7f00000001c0)=""/15, 0x40f00, 0x4, '\x00', r1, @cgroup_sock=0xc, r2, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xa, 0x7fff, 0x4}, 0x10, r5, r6, 0x8, &(0x7f0000000600)=[r7, r8], &(0x7f0000000640)=[{0x5, 0x1, 0xd, 0x1}, {0x2, 0x5, 0xd}, {0x5, 0x2, 0x5, 0x7}, {0x0, 0x4, 0xc, 0x6}, {0x1, 0x3, 0x7}, {0x4, 0x5, 0x10, 0x8}, {0x4, 0x4, 0xffff7fff, 0xa}, {0x5, 0x4, 0x2, 0xb}], 0x10, 0xfffffff7, @void, @value}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) r9 = open(&(0x7f0000000140)='./file0\x00', 0x80080, 0x2c) (rerun: 32) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r9, &(0x7f0000000200)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000100)='./file1\x00', r11, &(0x7f0000000140)='./file0\x00', 0x1) 6m59.166382527s ago: executing program 9 (id=1128): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x3c, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 6m58.200941841s ago: executing program 9 (id=1130): io_setup(0x4, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="12030500", 0x4, 0x4, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r3, 0x0) sched_setaffinity(0x0, 0x36, &(0x7f00000002c0)=0x480000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) listen(r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6m42.291304961s ago: executing program 39 (id=1130): io_setup(0x4, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="12030500", 0x4, 0x4, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r3, 0x0) sched_setaffinity(0x0, 0x36, &(0x7f00000002c0)=0x480000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) listen(r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m22.934991844s ago: executing program 3 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xff}]}, 0x34}}, 0x4008010) 4m22.785792701s ago: executing program 3 (id=1747): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) 4m22.669486172s ago: executing program 2 (id=1748): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'bridge0\x00'}) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0xe7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x4}, 0x20) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x4) r3 = syz_io_uring_setup(0x2394, &(0x7f0000000200)={0x0, 0xb470, 0x200, 0x2, 0x1fa, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x402983, 0x1) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x402983, 0x1) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x10000, 0x106, 0x1}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r5, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', r6, 0x0, 0x1, {0x0, r7}}) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r5, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', r6, 0x0, 0x1, {0x0, r7}}) socket$qrtr(0x2a, 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0xc081) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0xfb37, {{0x2b, 0x4, 0x0, 0x33, 0xac, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @multicast2, {[@generic={0x44, 0x2}, @lsrr={0x83, 0x2b, 0xa8, [@rand_addr=0x64010101, @empty, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @multicast1, @loopback, @remote]}, @rr={0x7, 0x1f, 0x74, [@private=0xa010100, @rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x1b}]}, @end, @noop, @lsrr={0x83, 0xb, 0xa2, [@local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x9, [{@remote, 0x9}, {@multicast2, 0xff}, {@empty}]}, @ssrr={0x89, 0x1f, 0xe, [@local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0xfb37, {{0x2b, 0x4, 0x0, 0x33, 0xac, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @multicast2, {[@generic={0x44, 0x2}, @lsrr={0x83, 0x2b, 0xa8, [@rand_addr=0x64010101, @empty, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @multicast1, @loopback, @remote]}, @rr={0x7, 0x1f, 0x74, [@private=0xa010100, @rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x1b}]}, @end, @noop, @lsrr={0x83, 0xb, 0xa2, [@local, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x9, [{@remote, 0x9}, {@multicast2, 0xff}, {@empty}]}, @ssrr={0x89, 0x1f, 0xe, [@local, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @end]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', r10, r0, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RCREATE(r0, &(0x7f0000000840)={0x18, 0x73, 0x2, {{0x10, 0x3, 0x8}, 0x60}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048045}, 0x14000001) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048045}, 0x14000001) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000980)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000a00)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000a00)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000a40)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r5, 0xc01064c4, &(0x7f0000000ac0)={&(0x7f0000000a80)=[r11, 0x0, 0x0, 0x0, 0x0, r12, 0x0, r13, r14], 0x9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r0, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r9, 0x3, &(0x7f0000000b80)=0x79f) 4m22.633620952s ago: executing program 3 (id=1749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x48, r5, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m21.786106907s ago: executing program 2 (id=1752): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0xec9d6000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0xd, &(0x7f00000000c0)}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208"], 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, 'tR#\x16_\x83h\xb5\xe8\x06\xf2\x8cCD0\x9bN\x14\xb7\xdd?\x13\x13Yl\xe9\x16\x05f;'}, {0x20, 'xt'}]}, 0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0)=0x9, 0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="6320433a2a207200908aed3e35b55652e5c43b567b315df1b17d3696231ae47b76b64e706cf826fabf86629cff0bc561bc0ec53e96f72f02c87c1851c03082e945de2a152e9ff4c1d081c4db5086f64eb7a43bf00fbcf777358d3b9da666e54882fe8c0845a2315251f47c0ba8214d421acef52957e1feee184edcdb1c04746b53043e495e7bffd177233d2678e9980aa9532574f621"], 0x8) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='ext4_da_reserve_space\x00', r3, 0x0, 0x7f57b29c}, 0x18) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000580)={'U+'}, 0x16, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m20.859423038s ago: executing program 3 (id=1754): mkdir(&(0x7f0000000100)='./file0\x00', 0x134) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x800400, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m20.132595718s ago: executing program 3 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xff}]}, 0x34}}, 0x4008010) 4m19.906621563s ago: executing program 3 (id=1760): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m18.239979222s ago: executing program 2 (id=1766): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18) 4m17.000036917s ago: executing program 2 (id=1772): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="70c2", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"], 0x18}}], 0x2, 0x6404c080) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private0}]}, 0x44}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r3, 0x0, &(0x7f0000000480)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @broadcast}, &(0x7f0000000540)=0xc) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x148, r9, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004000}, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000005200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x20, 0x7, 0x1, 0x0, "fa7288b303412ba0f2743c578fda19dfc75ef47e4a7b230fcc388e11"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x701, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x610, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5f0, 0x3, 0x0, 0x1, [{0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x97, 0x6, 0x1, 0x0, "cc8654c78d7f25fc30f1fdfc137cd57ea96cc286eb5c664ad28d5600debb6ee57922fba42c26ed414a7768c6d01a8a2c11bf28ca3e2e77d45ecd793f06d73c0698e9b9c3ec1d36b28072cd64ee7aa5a95194645de5648ba934dc5ddd7093b5afc0d03e86fde0496118b8409565ff877793fcea4b99ec84b079703c8ce5418ef87ae7c9b3a363fc9007c2a795e4e308bc2412a3"}, @NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "755072cd486269074409e13edcc5fd6ae1bd8bff143c95374bcad978cd8346d7c0ec658a81898c499bd99af4ac4cf765f4b1fa5f64dc7b502ffe5989a4fdf338f3285aa4573937ec6c9a74c4fae5002899c047f7a2b4a214d56a640c509906b8dd05a1678c19832e3f8f34ab2ac06a59bbe37fc2e0dc6021f76c8e8c6214532c5eb344847e59eb6e8ae054420576a64ada140cbdec18f1ce9f6b6a4fb1449bc2dc69b62860"}, @NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "f18984ffa97cb434aafbb80861d2c7211ec26725f276e8f91795371828de47bc6af48dae5cf6a19d9e1dbe174496aa8a52cefc353fa9fe3e328f43906758a9affdefb42fcf4981b74e9ba27a6849c08678fd4e5f7333571fc7524baaf1c3a0c30491a54f178f33b3849737d1e2c1e22ce6fc858f1001ed2820309030250d306d3ed36d9d8c1839d8fb35cb2cbe4ae098c51c897a9728bdb1192bb6ed2b20d62b26138ebe40ee9be3585b7a628d5e0eb11c89c0"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x138, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "5696a6bd2f8535c5e721e27cdc5b95a048f1b3ef9d394c2be16ca199c8a983d96fff4cc933b29ce44a2d8765a3458806c645546e0d89f22e30c9277703fa8302c072f329baea698e57b0c283fc3976810cd0ee52ec1e4fb3652106f2bd77c101fa9f133bae063d81e3ae3bb11082173fb9bc70bc97cc9d4665fb10c4886b434f6c5ba68720845cbc2d6ed520bebde7845b3d5467f739f9701bc361aefdc919e6af07d7272b6d396d022c8823e96244687557df"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5ed9}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "5bf8baf89d2874e6df2527c06edc675f22ceb23824bffc48b5b2c8d579a9085c65aa230acbb975f0e62e057686baa11e6392ac5bc69301310f8e4f939120fae7caf8ce26c107205cad0b0269f4fa8a34f36e23b43204e44595d3256ef7a4d2e713f3ab28a96273ef86dfa0e826da772d5265679bd318bae8301d91dbc0a9955c0a934266407b7c9345814e9c84e7fba904a2c5bc8263083c4a88c0695844e402fa27c7697d6e2e3173990fc8608705f632"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf2}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xa8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x3f, 0x3, "2c3393354a600b97294946b532a7c1bdbba9db83c0e238600d282e1f43413b81c0d580f295d66e074069846ad38894fbd023cafd9acfa2de9606a9"}, @NFTA_MATCH_INFO={0x1d, 0x3, "1dc899359140ef300332ac20765450a03b5a45f254600055e9"}]}}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfd}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4c, 0x7, 0x1, 0x0, "2655dd787a195af79b83d7952bf2ade112a3b1be6ec66a5bb99c6e4ac236f6817ce547046cdefdcda6c03cdf09046bf5f4bcff09c6eb96f1451e6b1cc3bf313e668cfe26ee88f7e6"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x2018, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ff0, 0x3, 0x0, 0x1, [{0x404, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb8, 0x6, 0x1, 0x0, "35a57f2277e73a3563517ac3faaec687c4a9b5a4e993629e4f4c92911c61b0236ace7a5a4d8497417bbbda7c0eedea49e18f11fd4c6db0d3afaf366071842a044d66f59556397668a78ee75de119df7a334a8657c0c0c1a579fa50b4f66f0f74aefe1186122bae1709f41e9a4e6f01ff3312658e9f06cd4a0861f2fc311ae57eb34040edc7c5238948fc9ee708cf1bfb625ff79632ceaa86055a784210411d8586f76dd5cc499edd82ecdfc1881970928c0de03c"}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "5ba9f7fb9d6a9115fb13d762f4b318eef540eb250ba0881a1aae38b4accd607cfc7df8c8e6813d8112a0c33b8cfdfd619b1962cdcfb90a6b0c9b9485728412667f4105c6787764d63da879413fb79ba5cdbf23e97e8bcb15ce4559b12000e19047d625aef3ee9b9170785acea8f7efe7031686b2ee97e3ba77760ad3e7898e08f5ad09e9c0d909b6d5303d002e6fc59d6e1e2b0d509081fee26fe2781f515db10ee6ad04a42d8db3f293a407d8e1e6f8503db49dea6d463798dece0f670b0e7edd2c015419a06f592a797a9b5b5491e4a5381b5455e49243c15df334861b0473b609c8b843c964"}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x114, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x51}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}, {0x150c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x17c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x60, 0x1, "addbf7de9291de0ba49df1c1e5d759bb06173f87fea6ea526bf14031e531879afdf4aed414e43d9d50373e2d2d79d4971d7af45a4789b14c107b7b77496ecfeaba37424c96bac1f858fcde17ae33a75189308971c76d86958dbe7554"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x1194, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "3cb3518ec10d9f2b2cc1703fa6873cd13f45846f834d939914837c1569e5741379a2ae710018cb07752575212454ada3ef61eac8993bfcf59239b73d3b4cf2b9d51fa272f8460b2264f5524909f2a528cce9752a00e23aba76047d80cdf2f82cc10f20c20f7b74d7aa085802c485598712d70292f46bd6e906b6a24aa40de70114f40b3ded19d613f474ecb78249ce84f401b2ee54e97ff2d73a9a526c028c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x198, 0xb, 0x0, 0x1, [{0xa0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x90, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x27}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_REDIR_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "7b0dea3d8279e428565dde089c216626b8b378e416e7919ed1c4a73d20bae66d00aad637895aedaad7ba9ce8abab7363e4abbcab32a3784940821765ac8425bb75d0"}]}]}, {0x4}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "11f4795038dd4574ab2d671e0270fdcb34e3288fabd9a3f94ba8a2d3c52792f225bc597c00e0e61629da0b33666deb1ebee689147a590e64afe571a44df2a75e6406f54650b84c5fbcac68194963a19474f1fc73595bff4d1ff1d8ac199fa690b1f6290ab0e8fa097a2b4509a6f4b68d1e78dd2e3e479081e707a54c56da8bb3ed70de0735ec1ab10dc4724d804e049e65c626f65a6167f59b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "c2a719f89f487ce719759c39324ac58f99011bedce13c919438445f3972376841dde096964e1b36a638736e323dfb0dcb1f96cddd0e23144bbce8cbd0df4bd517d8e2d80301d501e5e58bc8e621bd3df65da2291b07c682abb5294074de7c4278fe5468cc71a6b2db6ada7355a9431cc6916f442c90b521f1145067aafd51c13fe2c6eb48ed52acc830a3ca903ada2d4cf2c16197cd743844ac069b6dfbc14e1d8d8723ea38dfd48ccc66257058078d072a9690fa1140440c73003cf395a0ad5a9112948b9c7a3a2baed691df405ef6518c5fa1fda"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0x79, 0x1, "0701c6c4069c2407ee5c009080ce21f881c2b4260f1457e2acc8b9fa898c34016d6e3cdbda57f7a3b47dbb624424449d9790478b753971e24fc602ab3cb85b281fd0a8125634fac4cd470e5885c50a9c3a12adaaca8a69f9eb91d0c4056dd5c5b5bf97158e32e411370260f6b0b60229270779e8f4"}, @NFTA_DATA_VALUE={0xca, 0x1, "bd7e06b1397e1288bdcac9eae3aec75ffc307561409484db57edf09edc40b85ecb5fdc781d919a41bbbbb3abd079262cd9ea4204de243d6f515fbb5930d965474c324d7fe7ffcd9f6b312e091021579953799535c2284517b5482a5f1a13de4834431b09580b4c467d56441eaccfee9ace888f6e5dd591da222d374830d2b6ca3be056935bdca9c7942aec5d0e48ea5e981e4ae2efefdc786f1fb61a035ef7c0c74e1c4f6ee38daaf925cd25a4a86f6a74b281f4cde5685440af5c27a171dfed6fed19e6ecb7"}, @NFTA_DATA_VALUE={0x56, 0x1, "e67f88f84c70cb515c440d9fbcdc6f787e09c0df31ce0ae2e8a5a4768f5d34edf02fceb4b074e11fcf3292907946d3edb29df40f55b401339156a837973812a06ea7d053e2905d6b8b5b10c20426f4853d78"}]}]}, {0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "1aee5b82960b4eaf9f28f4d95d387f861d4ba1c6cff23699f0aacf2a456e5855fb841b12871f44c9932e07b33066639457a554ca9b6432269ce07a69b18c0a38c07c507b6be292b07dca282aeb209fe2d64e78c7fdc120a29de765bf9955cf4c8400b3f06bd50a2de06968b7f041585e0bd1a558007767db09506000f00364aa5acb85a3b4179ab8e9c83d3ca8e38d3d6e6e6ad03e76a2305956537af99fcb219e33add0a9f5f034a97c909aec858a5c0422183920b95285870e9a0ccbf53f5834"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2838}, 0x1, 0x0, 0x0, 0x48080}, 0x20008000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m13.762848457s ago: executing program 2 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x8004) 4m13.514241386s ago: executing program 2 (id=1784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 4m4.510490824s ago: executing program 40 (id=1760): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3m58.203038089s ago: executing program 41 (id=1784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 3m14.386454416s ago: executing program 6 (id=1988): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, 0x0) r4 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=@bridge_dellink={0x20, 0x11, 0x282934b81112e93f, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x20008, 0x60}}, 0x20}}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m8.337622933s ago: executing program 6 (id=2006): syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400}}) 3m7.908120539s ago: executing program 6 (id=2009): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="766e26a33bc0cdda59ad04b59dbe8f13b2982d74aaa8c53c3028c7f13b84b5d5ad102d1509b96a4650ad2ea4db90386723d1be06b6f35df5f77ee4dc32056448c9fa594f3eb11dcd3c5b7498d6", &(0x7f0000000080)=""/165}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x100, 0x8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x8000000000000000}) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x13, 0x2, @tid=r0}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) fdatasync(r3) r4 = socket$inet(0x2, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000003c0), 0x4) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/98, 0x62) r6 = accept4$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c, 0x400) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0xa881, 0x1ab, 0x20}, 0x18) mknodat$null(r7, &(0x7f0000000580)='./file0\x00', 0x200, 0x103) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f00000029c0)=0x0, &(0x7f0000002a00), &(0x7f0000002a40)) getresgid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)=0x0) stat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000003000)=[0xee01, 0x0, 0xee01, 0xffffffffffffffff]) syz_fuse_handle_req(r8, &(0x7f0000000600)="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", 0x2000, &(0x7f0000003180)={&(0x7f0000002600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffffa207240c, 0x3ff, 0x7fff, 0x1, 0x101, 0x0, 0x0, 0x10, 0x5}}, &(0x7f0000002680)={0x18, 0x0, 0x10001, {0x2}}, &(0x7f00000026c0)={0x18, 0x0, 0x7, {0x1}}, &(0x7f0000002700)={0x18, 0xfffffffffffffff5, 0x1, {0x5}}, &(0x7f0000002740)={0x18, 0x0, 0x101, {0xa40}}, &(0x7f0000002780)={0x28, 0x0, 0x10000, {{0xeb67, 0x4, 0x0, r0}}}, &(0x7f00000027c0)={0x60, 0x0, 0x6, {{0x5, 0x6, 0x8, 0x7, 0x3, 0x1, 0x7ff, 0x3}}}, &(0x7f0000002840)={0x18, 0x0, 0xfd0e, {0x9}}, &(0x7f0000002880)={0x16, 0x0, 0xfffffffffffffe01, {'vcan0\x00'}}, &(0x7f00000028c0)={0x20, 0x0, 0x1e, {0x0, 0x1}}, &(0x7f0000002a80)={0x78, 0x0, 0x7, {0x9, 0x100, 0x0, {0x3, 0xb7fd, 0x8, 0x9, 0x8, 0x4, 0x8, 0x2, 0x200000, 0x8000, 0x2, r9, r10, 0x7fff, 0xffffffff}}}, &(0x7f0000002b00)={0x90, 0xfffffffffffffffe, 0x2c000000, {0x3, 0x2, 0x6, 0x1, 0xff, 0x7d9f, {0x4, 0x100000000, 0x8, 0x0, 0x1, 0x8e, 0x6, 0x137, 0x100, 0xc000, 0x4, r1, 0xee01, 0x8, 0x8}}}, &(0x7f0000002bc0)={0x30, 0x0, 0x4, [{0x5, 0x1ff, 0x6, 0x10001, '.\'@\\@]'}]}, &(0x7f0000002cc0)={0x158, 0x0, 0x8000, [{{0x5, 0x0, 0x8e, 0xd3ccd40, 0xfffffffb, 0x0, {0x6, 0x2, 0xfffffffffffffff7, 0x6, 0x1, 0x8, 0xffff, 0x7ff, 0x80, 0xa000, 0x6, r1, r11, 0xaa, 0x3}}, {0x6, 0x4, 0x1, 0x9, '&'}}, {{0x2, 0x3, 0xb424, 0x100000000, 0x800, 0x122d30d3, {0x5, 0x4, 0x6, 0x9, 0xccb0, 0x10001, 0xff, 0x1, 0x3, 0x6000, 0x0, r1, 0xffffffffffffffff, 0xff, 0x6}}, {0x1, 0x5, 0xb, 0x180000, '/dev/ttyS3\x00'}}]}, &(0x7f0000002f00)={0xa0, 0x60e85c099f07e238, 0x3c, {{0x6, 0x2, 0x9, 0x7c6d6af3, 0x9, 0x4, {0x1, 0x1, 0xb, 0x400, 0x44, 0x2, 0x9e4, 0x9, 0xd, 0xa000, 0x8, r1, r12, 0x7, 0x44a7}}, {0x0, 0x18}}}, &(0x7f0000002fc0)={0x20, 0xfffffffffffffffe, 0x7fffffff, {0x3bec, 0x4, 0xe8a, 0xf}}, &(0x7f0000003040)={0x130, 0xfffffffffffffff5, 0xffffffffffff8001, {0x4, 0x40, 0x0, '\x00', {0x2000, 0x9, 0xf, 0x3, r1, r13, 0x1000, '\x00', 0xe, 0x7f, 0x80000001, 0x5, {0x8000, 0x9}, {0x3fe000000000, 0x80}, {0xad84, 0x401}, {0xe8, 0x7}, 0xfffffff7, 0x81, 0x7fffffff, 0x5}}}}) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4720, &(0x7f0000003240)={0x0, 0x6192, 0x200, 0x0, 0xd4}, &(0x7f00000032c0), &(0x7f0000003300)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000003340)=@IORING_OP_FADVISE={0x18, 0x7b, 0x0, @fd=r6, 0x2, 0x0, 0x9, 0x3, 0x0, {0x0, r16}}) syz_emit_vhci(&(0x7f0000003380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_create_chan_rsp={{0xd, 0x37, 0x8}, {0x0, 0x401, 0x89, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x200, 0x6, 0xfff, 0x5}}]}}, 0x21) socket$igmp6(0xa, 0x3, 0x2) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r17, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x365, 0x77}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x51) 3m4.928551516s ago: executing program 6 (id=2016): syz_usb_connect(0x4, 0x21e, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) prlimit64(r0, 0x8, &(0x7f0000000180)={0x7fffffffffffffff}, &(0x7f00000001c0)) clock_adjtime(0x7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58030000170001000000000000000000e00000020000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000040000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000000000000000000000000000000000000000000014000d00ac1e0001000000000000000000000000e60008"], 0x358}}, 0x0) 3m1.762508226s ago: executing program 6 (id=2025): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 3m1.596926887s ago: executing program 6 (id=2026): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10101, 0x0, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7a98, 0xfff5, 0x0, 0x0, 0x0) 2m45.605696883s ago: executing program 42 (id=2026): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10101, 0x0, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7a98, 0xfff5, 0x0, 0x0, 0x0) 2m1.017900941s ago: executing program 5 (id=2204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m0.356344073s ago: executing program 5 (id=2206): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18) 2m0.041566983s ago: executing program 5 (id=2210): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0x6, 0x89f1, 0xd0042, 0x5}) 1m58.189239842s ago: executing program 5 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000140)={0x0, 0xc3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.586631889s ago: executing program 5 (id=2218): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) r5 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400500142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m56.751308588s ago: executing program 5 (id=2220): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18) 1m41.558933447s ago: executing program 43 (id=2220): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18) 9.118254861s ago: executing program 1 (id=2593): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="3e0483007e6c"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) syz_open_procfs(r5, &(0x7f0000000040)='syscall\x00') 9.02683028s ago: executing program 1 (id=2594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x7, 0x0, 0x0) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623139384e5821a070c0002000b09007a151b08d91ea32a9000830404380006e53f152f867b1637e0d816ee9e70739ecd8ccfc57e3d27"], 0x0}, 0x0) 8.100975135s ago: executing program 8 (id=2597): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 7.98300032s ago: executing program 0 (id=2598): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.909724231s ago: executing program 8 (id=2599): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.178585874s ago: executing program 4 (id=2600): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200001, 0xa4) mmap(&(0x7f0000c7c000/0x1000)=nil, 0x1000, 0x100000a, 0x30, r0, 0x3e8a2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.669501609s ago: executing program 8 (id=2601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010002000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="08000100000000001800168014000180100006006a0000000700004049"], 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendto$inet(r4, &(0x7f0000002640)="01a5", 0x2, 0x0, 0x0, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x80, 0x180) splice(r4, 0x0, r3, 0x0, 0x2, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b83e9340215820051075090102030109021b0001000000000904000001a092d10009050f000000000050c1ec9efeb49e8b74692387e5659dc4d5877eb6145679db17052a4e5a2327500ce8bdb8fae0c3fcfcb4eb9d07edf06f7a3798"], 0x0) 6.600395064s ago: executing program 0 (id=2602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000000000000000000018226a8000000000000000"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r1, @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000005000000080000040000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3], 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac05650200000000000109022400464eb372090400000103000000093100000001220b"], 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000879133b6e1bf34280000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000c00080008000800010000000c0015"], 0xe0}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000ac75d0b7e23bd100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r12}, 0x10) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(r7, 0x400448e0, &(0x7f00000003c0)) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000900)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00100b2446de4975743ffa2fa9ceb735f5920000000b11f108907c5d4da4d964"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00a20700000017e4a145df2549"], 0x0}, 0x0) 6.534554864s ago: executing program 1 (id=2603): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 6.251794032s ago: executing program 1 (id=2604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040435581070000000000010902240001000000000904000001030000000921000059e8ae5da0510001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x7, {0x7, 0x0, "6469a00e32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.251221762s ago: executing program 4 (id=2605): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x6, 0x75c, [0x200006c0, 0x0, 0x0, 0x2000078e, 0x2000091c], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x15, 0x6558, 'team_slave_0\x00', 'virt_wifi0\x00', 'geneve0\x00', 'hsr0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x49c891a489fa9b51, 0x8, 0x884c, 'veth0_to_team\x00', 'veth1_to_batadv\x00', 'team0\x00', 'veth1_to_hsr\x00', @empty, [0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x126, 0x15e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x8, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8c99, 'syz1\x00', {0x101}}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x0, 0x6003, 'wlan1\x00', 'wlan0\x00', 'wg2\x00', 'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff], 0xa6, 0xde, 0x126, [@realm={{'realm\x00', 0x0, 0x10}, {{0x0, 0x5, 0x1}}}], [@snat={'snat\x00', 0x10, {{@random="3064debc3315", 0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3e, 0x38, {0x6}}}}}, {0x5, 0x5d, 0x9100, 'dvmrp0\x00', 'bond0\x00', 'virt_wifi0\x00', 'gretap0\x00', @local, [0x0, 0xff, 0x7f, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x9e, 0xd6, 0x10e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4, 0x1}}}], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x53, 0x6558, 'wlan1\x00', 'virt_wifi0\x00', 'hsr0\x00', 'veth0\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@random="ed2c5c7a5c26", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@random="f79ed4b41655", 0xffffffffffffffff}}}}, {0x3, 0x20, 0x9100, 'veth0_to_batadv\x00', 'pimreg1\x00', 'nicvf0\x00', 'sit0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0x156, 0x18e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x5}, {0xffffffffffff0001}], 0x2}}}, @time={{'time\x00', 0x0, 0x18}, {{0x6, 0x4, 0xc4c1, 0x539c, 0x7f, 0x1, 0x2}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0xffffffffffffffff}}}}]}]}, 0x7d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/172, 0xac}], 0x1}, 0x2}, {{&(0x7f0000000e40), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000ec0)=""/188, 0xbc}, {&(0x7f0000000f80)=""/90, 0x5a}], 0x2, &(0x7f0000001000)=""/155, 0x9b}, 0x2}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000001140)=""/136, 0x88}, {&(0x7f0000001200)=""/242, 0xf2}, {&(0x7f0000001300)=""/160, 0xa0}], 0x4, &(0x7f00000013c0)=""/98, 0x62}, 0x401}], 0x3, 0x40000162, &(0x7f0000001540)={r6, r7+60000000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [], 0x5c}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="0a0006000802110000000000080037"], 0x30}, 0x1, 0x0, 0x0, 0x4820}, 0x10) 6.16810704s ago: executing program 7 (id=2606): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x480c5) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040800) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000080)=@sg0, r4, &(0x7f00000000c0)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x23, 0x3, 0x200) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e9, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x75, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.030586386s ago: executing program 7 (id=2607): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@ipv6_newaddrlabel={0x8c, 0x48, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x8c}}, 0x0) 5.978334516s ago: executing program 7 (id=2608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r2}) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) write(r3, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000200), 0xcedd, 0x0) recvmsg$unix(r3, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) 5.221194569s ago: executing program 4 (id=2609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) open$dir(0x0, 0x200040, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000dc0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 4.626330454s ago: executing program 4 (id=2610): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89", 0x48, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000104000000010000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c6176650000000014000580060002000000"], 0x4c}}, 0x0) 4.625532339s ago: executing program 7 (id=2611): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "938cf3fc369253f6c31ab8a62012db893ae37c70e2b4ae9b7cc8f53f44a1d64d426b6e36a16da6080753966dd39648e33865e1f3259c9bcda3fc1d8ef001771531148cc0df2efe5cc45892c8c80489788c38b7b8f9ae4bd8f3435dd6eda5d3ed21fe2d8fe437ae289ea1f308446a2d5fa64547048053fbe56286f8cfc80a913c93740c650ec2d0663c9e27193f60b92994d1da8cf7e42ac30ac647b860d4c58c251127868ea2bafb871891eac93d55d7459afd5b1393f3af29f8683deaecf670918d4f5c4a6bba97b693ae31de8af809ddccdd4143d11cd0e6086e7a8478a6bd4f1f984ee212434152e26ee421360c5e29402924805a1c349a3d178188e477e2deba4ff55e728843b10f42d23d2eeecadc1ca843a24678f12e8f3b86d4f25f00f3b472a596d40c5abb20b1d6195a43284df1aa0da4bf404cc148e873e8a1d00e27c82c9b9d031baf6b7d17dfea9caccc08e3e8f1684b6ea3b5d73c6416b5e40957026c10a618e11a9adb059257223a780fc6d2ddeb29df729c3f792830b2ba0e9b0603380585c8f5f4fe32d2ac0d081f4cd6f96a49cc0a70da1ff9c52c92b7f4f9ce79a44d3727e1dd7600df3c7ff6ab0e45700248fd98dacb2e0007be069a61bbc32ff45b96e2d88d4afebcc0b45ba77709dbca8060823424eaa4465b1fbedd11b2795c89515b7cdaaf39d579907421d3d7d8d585f05f7f2cacf63a8dd19531aa911a001a7ac049a3fcf57814d8728ccd79a5d8bced288064ced56db8dd1b7d6f46ac447ddb40588b12484782882f6bf4d840334eec55495038e0a106f3dcb2981b12cc0e99b3e78f5a408a071bdb359641b6223568a78f8662fd927c8ac84058fce01f84bc4132bd6e7e5c76f23f1eecd4724fc555b45de2901b49342e707ce47efd734b9232e6c532ad4cbf7996f2737cf929d4a1536bf2128d23d323233934d897d9994728cec96ce8c1c9b50b432db1867352980f1a253a4dee85106d17a93bd55439f625377bbe374472ec6641a603c8af48577c455f8519c7c751f1ef1c836eea8d50c6bfd34b03e3a6144852aeec3e7040b3156643216799a93e1c9a32fa5d677740ebe697be97c078e3a9dacba8ec2d930d2ae9420c39e0650b4904191cd5ef447784de1413ffb3f7b1e7f8494d88ef1699ab2761fa8dccc029457f8a8c272246922da82bbf1d01d8125105f3c23f93272bcd4d25a7dcc96e7efdbaf0e5361494bdac589ec8343bc06b55a55c003f8266fcad6fc2f9f5524fd5f232d25f790923d1af6f7d946734a47756bd6e8e8ca1338bdff32faea695ee8f87bebaa018962cf050bee90af177c080ef2c1c1dca002407ebdea605d0fe77adbe63459ac22d8b33b2a9f62acda410c0887cde7c19c17e1969c276f4e667f72cfa0147aa3bcd35114d71439158c6d4cf713dc515eeb8b697c1a1decd112f755d08422127908ba76795f2dc4301a419a0e92adfa2fca664101ab61598c555c61244649efb9d48c476e6b73340c8fa95c1b3c00df5e75650c7aca8c9b85a5ad2b68ef8aac2a91141711686d69bcf065d344b18566361ad12a5115a5522f9aad36d43fc960ec25a0de875714a1a20f0a1e10bca3495bdf201bd3d11277336ec19dce8c4ec0945bc5ea65538820a4178da7f40e60a1392c7f5791b00a85e366d28802aefd8815b9b3ae6736e4e6f38adb0cac41dff70c24dffd37fd721e79c6e0188c04828fc3c4ebc653aa84d246246f1b6ccaa37b8e987823f90953a117401d2803d6dfbdbf06453b0002ff42441a5e08e1e6e7e40d3106e887d3f83d0b52be9f809a5155dee87ffdf658a0dc78fdae481a136f4a79ae224b681ba2d293187b486b89266b5f7369d894795744cdc37412c53eb6866abe59f40bb453c4d07904c86b0cf437ce074a716867ff4cc9b006e1b093de4e933e9c556d759a83e3579457acf7d13b4cad9edfd8ca919ece2718d7d480fa5833c566738d1b87d84fa86fcebe625e70a84026a859b512526272e9e00d4321274f95b560acdb63210d701a21ffecb733236d859232146bfc5600e7f79861eb1181482c6083498162a38a72cae84b5033585570bac2c1da055225dda572e1d49687fa24b6ad5fca14376b11be3e89f09b0c10d5932af0e29a1461879293eacfc877c23ef32a32fdd9ab93034684cd90e96d70000bf47664a754875acd92525c3e05d138feabe0c90dec60688a3e4e7d0b6d52615d76078e5face42483d02960f8076754f064cbe895bb3d4633c2e9b96a333e0f6edb2fed79513dc5fbec376e53134960b68b8654c05fc115e775e2a657474db505b49b49daae24e1a2ea5af200f5a2fea07b4a141de41a984d2e2e60a42cc00cc4def05f8467e8f47afabf41acf60d5c9162e64097f81fae42cf97ff5bb863bcd6d90a35102163435ed38552fd5df487e6b7d7669b870347cc2761c2c7473226b3c7a7eb3361bda893779b84ac128861448be5491d6423c39c31c1a278e25dd49a1a25707e2bc51305ccaf3b39c78b7867433576c5f0e6e98a318172d5722b70a62a1f29e16486afaf9864b4ad1e4d6d47f96684de7e449fe6c214d22ff2e1978c9930b30f224b7bc554d1c9fba3e5866a66c9a8a59fca0c385aafe71ffe4ca264f3540e2cb00946282aaacdb69b3a268742c35cf8cc0fdd56864d9d3d4b8347671f3c52cdce0e19200ad52d200579991d21676dece3196d4d2c10c641746f7b9329c29ed1e1683d6d8bd4a4cb5286c4187932c5300d7cb16f87fef70fa4307ec50962231a580f015ed69de6828a44c92a4c739e2877b5baf046b4c09f9aecd460a1596624c2afeb1c4d11ba068cada5a3cf4f702adbd17c5705d61c2cfc3920cb09ae37ab805e03d0ef52e8f20ea7ce71758d567dee35e712e283e26e975d2daa8bbf21dcd6d8de81fc1c93042dae9bf3ffbb71cd7be74187eaf8980cf29ef83019d36be7045bea02c8a6bb6a1a27a844dc6354ea7a4409aa5f557cc61c7978a16b5953cd17175c90131a685ee22d4fdca7e13db9cfb35fdaf5cb943b36ab461afda77ab17026cd6fa8e27b931e8481f347d84a3f2e2698477e77e08a7276d70f24afb70ac1179d3d768d08cdb8d95fe05f02684a1f37abf047353ee80951f59f3866ac167dd3689d96e6520a5914f70a4b5e3282db6df677418ce52dd03f5a7db5964e3c4d5958a54b38b5c642998d5fbab5775a4f5aed193abdc5d6d6897284942ed3e813d04c67164773023a48da93a15a463fcb2ea0d368debe9155cb7e978bbaad77e13194caa8357130632f33e571f24ab8e01ea505f3bed3ea364452639bdaeee38b247ac9137f94aa9563e3841552e0c01ac7e82bd46b1f9db7eec1c26a5ce180af8d49d6599a8f445184e0cbe6d22f54a400a18e2185ffea8a52d379ebc1d292306f62f83faa68a288a3e33f718275e906100d9f848b027e84a6011b340ae77c8a99fbed293873846ff8d14dc8dd4546d4dd4ff7ed5dacf70a5b4e43445d3f2853656fc6ab14fbda122fe93862955f68265b29fedb34239d9da08c06469e1bf080f49df15c6eacfaa7695c7be513733145ba9684c6018a3a25ce2ca712498768b28cc868fdef89185daaa1fbb7696ee154c53fd4660d572732a90dd3f5d464ae3ecc8d87614f6148e62ee5cb1b29d3153dac21eb7f68d51c2d378fd53ee8270d58cb3ae227adc56097ebf821b31c05cab4f77b809f2f9c80e3b62efd325d0e612e1e98d77ebd6d2e358660374fc0cacfc696903c5a3bf916917f2f6c8b08bef62d82829daac48a1d991656c3256d9f5e7981f75de0d7b76b4180d40d02dd697a34e022d6363fe52ca63cfaed8e88e551b094444b32a60e8ffde8aa3c972c9a5c6e217d531255bc9f245a27e63472170edbb33055823f502285584ae6dfed46df9ee3cad2d146c732121f93c3ee80dd4a17193c1c793cf91f617e78811b9c2e4448e2f81d11cecf331375ae7bb98a83a6906e7d1f9e3cc7827a5339da52637fecb4cd62d6cab817b04c29b349222857401c2543cf04567d3178309c9b515956106e96416d24252f27a5aa874a9ab632666835e475afed84abfa0a708c508704199b016e91c81231c6c9be59c047788cc99fcef201b63d5eb2e9b42dfbe1ed48bc016b513871cb6c5c35d554a16ed5c19f14d288865c8eaec061fb89f2ae04511a72f44b1acd75824ccf2504f95fe3ad74422d0bf74145ddad0b67ff554a601994eefa6aadd5c1ea5014deb4811eb6713e5d0faf9ee9024036f1f7c413a81714476e4eab7ffffae1d8c66897bc6955c64cef9c835f5de3c55be8233ad7cec5fd67e403066554ecb1691832bc315e60e2f31188dad56abec5d99e51c8e2d8f8a2e70c003528249a06e9b2638bac6fb1db9637decc3e1aee45b550c83009e74e18d834aa26903da14114aad4ac81bed48aabcb051b077ebe6f44e5d251a984221ef4f320aed25528f5e2469c0627f5bf6868eedae5c49f2f39647fd7824f94bc26bb961d466341177634d1cf7f3915b4f276582346c0a146e78983c5ba938985e31a6a4fb4a02421ef36ac5a2d3d0ea3df0611fe84ea4a6a066602ee1247466e54cb92daf48aa4ae7413237baf3f26153fd03b8f36c4d9ded88bcf344b3f99cdbcaec0efad5a53732fd95d48caf97147659dc9659c9c47b7562359aa75aa99c2d00b3d0272c98f43006b88d310c960b427be0c385e490b536caf41b27f435de8cd51249eebfd3b175dfa23c637fd64eff78e9a3c55c76774bc9c420d4a5b89b6816a89f2b1ad84e22067d4f49c1e9ac4883ff170c69fcd26c0b2931355c82ded18d39eb3122cd63de172ba944e1b3417c8bf5360303d0f1cbb70358076689b659c2d3641b1a07cb6df759e3310a477fc0c32e0d9ec5ac9ce58fe657e6ac0827bd5511ca9907af5c07e8d341b004549cbfc4b504ec5648db8cdd9411ce67dc412cd6a1780805cfc7c20d0145cae69cfc327e49a84ecaab7f3615dc75167911c6ec1313b8cc7a890462b1e6123e5ba055b5cd1714965f9d9023381d4d73b68fdc261e89214706a11c9f415586e93c59e4737123848f9b40f6cf01bd378386b397a5906a876d6340af5a3818e06439e09df272a50d43dd4ff7b5e4ff1e7d9e014793765dd45ac55b2495d82f4d9b9a3b1500361071d420f814a3e189b1fcc6ad4882c6c42f7e61b7c7e8fd8e54f54b43900e03a5c79987cebac078fc473772713e6fec4bf889864d716067dd3b12ce61a670bd3fbf28fcc9ec26c304dce3cf7e280c440ed076a1a0c1ad2f3c3120029a51d17906627b10f295505545f95b4846768b0ef7bff211a8d839b04754744dc3d2c7bbc44fd552f7c35d0a0a7969c4315e68ece01e0e82dc22e28332d368a8d461ee52964825d68ff77dfaee41bb77f3fe875c71135f99a2bc848dfdbf2044a0cdcd883d716febac4183ff6f37aa5ea23e312c9fd2cd39e528370139772b76e70794a9495df3ba002e38172c5d935dd5bc67de81a0e2e81482f54ab98bcd15b277a0700cb69d1f41d087ca73d7a745376815b407379d6d15291b5c6ebbbd92d2f0c3638949140e17ee92dd19b6492b29cf65204c94866c39439962b560c70ec070b658901154fffe993a2487b1e1cb69cabc195c6ad9014aebf3a4134d9dcc7cc7ac0c5c1a3a73730cccd761728da2e06bde0a6537844973d1ac7cfe8adb0e8ac3018045fbc3c203738f3d084ebafd041d949a1fe069dd1d65bab6ee3c83b043f22197f97ee4ba1fc1b2c9db188071cf92b7ff1c304fd43296e0503b9e461013b3c3"}) r3 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) write$vga_arbiter(r2, 0x0, 0x15) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc56eb4d42dbbf6c41786780df56e5be707e4c96e6d4e7719b506a0977b", 0xffeb}], 0x1}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 4.458567926s ago: executing program 4 (id=2612): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_usb_connect(0x3, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='%\x00\x00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x1a9a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_fscache}]}}) 3.592208849s ago: executing program 8 (id=2613): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.604623234s ago: executing program 0 (id=2614): openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0xb5e3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@local, 0x78, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x5e, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newchain={0x24, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {0xfff1, 0xfff2}, {0xf, 0xfff3}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x85bd, 0x4c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0xffff, {[@mss={0x2, 0x4, 0x8}]}}}}}}}, 0x0) 2.066494394s ago: executing program 1 (id=2615): syz_open_dev$vim2m(&(0x7f0000000000), 0xfdf, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e750000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) preadv(r9, &(0x7f0000000580)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {0x30, 0x0, 0x600}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x1}]}, 0x34}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) capget(0x0, &(0x7f0000000180)={0x1, 0xfffffdff, 0x3, 0x1, 0x40, 0x9}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 2.02935108s ago: executing program 8 (id=2616): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000000)="1b6b13f65453415b10b0b5e8e7cd7ea031b9c9fbf89ec17b6673f2af08fa6024ed4e7148a551e40d295b45c7df961079521ce0e02d049e586ef1e23f075c5f25f51ae05564a29e9994ab5f632d752225e841b1bd3d2f27df0bcc621b4a57606a7446", &(0x7f0000000200)=""/154, &(0x7f0000000400)="62fd2dba1360b0fc4b90431ddb1fbd718c250826ec57de43dd9db6fd6edbe3375fb64b98b16af46253207f05c65705f7486d3ee1bea9aff749f87b254cb773c72262191127364d9aba9160423aea8d8d4fd658cf3a17d90958e187b453d2e6ed022bd4a121b7dd60b9a0c9a0c6f2ea727ad9f35c7b2c6d09bc3c14b02316c6cadc2dc7cfaa768fba2f5c7c3e1c262aeeb7bf487e1add8a05bd205444ed1030fe43c675074a1f24d2a2312ee01e19b4e8a2905f277febb75b0fbc7c5019b9d35b8701e4f0a6466ed3d2bcf2dd0a5988adc7395e8cd2f0", &(0x7f0000000540)="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", 0x1, r3, 0x4}, 0x38) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 1.925618219s ago: executing program 0 (id=2617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x800c058}, 0x0) 1.80511376s ago: executing program 0 (id=2618): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@ipv6_newaddrlabel={0x8c, 0x48, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x8c}}, 0x0) 1.784077268s ago: executing program 0 (id=2619): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r5, 0x4601, 0x20000000) syz_usbip_server_init(0x3) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x22001}}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) ptrace$ARCH_SET_CPUID(0x1e, r9, 0x0, 0x1012) 1.045031955s ago: executing program 7 (id=2620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) open$dir(0x0, 0x200040, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000dc0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 858.459416ms ago: executing program 1 (id=2621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r2}) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) write(r3, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000200), 0xcedd, 0x0) recvmsg$unix(r3, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) 780.821589ms ago: executing program 8 (id=2622): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r0, &(0x7f0000000300)="0113", 0x2) creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x66726cd918c0249f}}, 0x50) 780.375428ms ago: executing program 4 (id=2623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0x6, 0x89f1, 0xd0042, 0x5}) 0s ago: executing program 7 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a0001000000ff7f00", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x800c058}, 0x0) kernel console output (not intermixed with test programs): ][T16573] ? ovl_iterate+0x10d4/0x21c0 [ 819.244638][T16573] ovl_iterate+0x1194/0x21c0 [ 819.244674][T16573] ? __lock_acquire+0x1397/0x2100 [ 819.244703][T16573] ? __pfx_ovl_iterate+0x10/0x10 [ 819.244738][T16573] ? __pfx_lock_acquire+0x10/0x10 [ 819.244762][T16573] ? __pfx___might_resched+0x10/0x10 [ 819.244796][T16573] ? __pfx_lock_acquire+0x10/0x10 [ 819.244824][T16573] ? down_write+0x18c/0x220 [ 819.244851][T16573] ? __pfx_down_write+0x10/0x10 [ 819.244871][T16573] ? vfs_write+0x730/0xd30 [ 819.244900][T16573] ? __pfx_ovl_iterate+0x10/0x10 [ 819.244918][T16573] wrap_directory_iterator+0x91/0xd0 [ 819.244946][T16573] iterate_dir+0x571/0x800 [ 819.244975][T16573] __se_sys_getdents+0x1fd/0x4e0 [ 819.245009][T16573] ? __pfx___se_sys_getdents+0x10/0x10 [ 819.245033][T16573] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 819.245052][T16573] ? __pfx_filldir+0x10/0x10 [ 819.245073][T16573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 819.245094][T16573] ? do_syscall_64+0x100/0x230 [ 819.245122][T16573] ? do_syscall_64+0xb6/0x230 [ 819.245150][T16573] do_syscall_64+0xf3/0x230 [ 819.245171][T16573] ? clear_bhb_loop+0x35/0x90 [ 819.245193][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.245218][T16573] RIP: 0033:0x7f080a97fed9 [ 819.245238][T16573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.245255][T16573] RSP: 002b:00007f080b7ee058 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 819.245278][T16573] RAX: ffffffffffffffda RBX: 00007f080ab45fa0 RCX: 00007f080a97fed9 [ 819.245293][T16573] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 819.245307][T16573] RBP: 00007f080b7ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 819.245321][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.245333][T16573] R13: 0000000000000000 R14: 00007f080ab45fa0 R15: 00007ffdad618008 [ 819.245363][T16573] [ 819.245473][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.269043][ T9] m920x_read = error: -19 [ 819.269066][ T9] dvb-usb: error -19 while querying for an remote control event. [ 819.433381][ T5901] m920x_read = error: -19 [ 819.433407][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 819.770079][ T5901] m920x_read = error: -19 [ 819.772765][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 819.942678][ T9] m920x_read = error: -19 [ 819.942698][ T9] dvb-usb: error -19 while querying for an remote control event. [ 820.093569][ T5943] m920x_read = error: -19 [ 820.093594][ T5943] dvb-usb: error -19 while querying for an remote control event. [ 820.203043][ T29] audit: type=1326 audit(1733688185.621:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.203401][ T29] audit: type=1326 audit(1733688185.621:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.203438][ T29] audit: type=1326 audit(1733688185.621:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.377722][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.387471][ T5901] m920x_read = error: -19 [ 820.395808][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 820.395809][ T29] audit: type=1326 audit(1733688185.621:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06e1d7e840 code=0x7ffc0000 [ 820.395843][ T29] audit: type=1326 audit(1733688185.621:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.417010][T16590] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2337'. [ 820.425219][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.463738][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 820.473202][ T29] audit: type=1326 audit(1733688185.621:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.494877][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.504669][ T29] audit: type=1326 audit(1733688185.621:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.526304][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.532751][ T29] audit: type=1326 audit(1733688185.621:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.554690][ T29] audit: type=1326 audit(1733688185.621:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.563510][ T5943] m920x_read = error: -19 [ 820.576318][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.577627][ T29] audit: type=1326 audit(1733688185.621:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f06e1d7fed9 code=0x7ffc0000 [ 820.609227][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.643218][ T5943] dvb-usb: error -19 while querying for an remote control event. [ 820.653622][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.660911][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.827928][ T5943] m920x_read = error: -19 [ 820.832301][ T5943] dvb-usb: error -19 while querying for an remote control event. [ 820.915140][ T5911] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 820.931920][T16602] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2340'. [ 821.661477][ T9] m920x_read = error: -19 [ 821.670110][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.729127][ T5911] usb 9-1: Using ep0 maxpacket: 32 [ 821.742330][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.753880][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.771259][ T5911] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 821.778418][T16604] overlayfs: upper fs does not support tmpfile. [ 821.795139][ T5911] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 821.813193][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.833443][ T9] m920x_read = error: -19 [ 821.839812][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.849667][ T5911] usb 9-1: config 0 descriptor?? [ 822.003720][ T9] m920x_read = error: -19 [ 822.011365][ T9] dvb-usb: error -19 while querying for an remote control event. [ 822.183558][ T9] m920x_read = error: -19 [ 822.188108][ T9] dvb-usb: error -19 while querying for an remote control event. [ 822.258055][T16614] FAULT_INJECTION: forcing a failure. [ 822.258055][T16614] name failslab, interval 1, probability 0, space 0, times 0 [ 822.276060][T16614] CPU: 0 UID: 0 PID: 16614 Comm: syz.4.2344 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 822.286862][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 822.296939][T16614] Call Trace: [ 822.300231][T16614] [ 822.303180][T16614] dump_stack_lvl+0x241/0x360 [ 822.307886][T16614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.313101][T16614] ? __pfx__printk+0x10/0x10 [ 822.317693][T16614] ? __kmalloc_noprof+0xb5/0x4c0 [ 822.322650][T16614] ? __pfx___might_resched+0x10/0x10 [ 822.327962][T16614] should_fail_ex+0x3b0/0x4e0 [ 822.332668][T16614] should_failslab+0xac/0x100 [ 822.337371][T16614] __kmalloc_noprof+0xdd/0x4c0 [ 822.342156][T16614] ? ovl_cache_entry_new+0x39/0x640 [ 822.347416][T16614] ovl_cache_entry_new+0x39/0x640 [ 822.352472][T16614] ? __up_read+0x2c2/0x6b0 [ 822.356898][T16614] ovl_fill_merge+0x416/0x830 [ 822.361602][T16614] ? __pfx_ovl_fill_merge+0x10/0x10 [ 822.366821][T16614] kernfs_fop_readdir+0x516/0x820 [ 822.371869][T16614] iterate_dir+0x571/0x800 [ 822.376307][T16614] ovl_dir_read+0xfe/0x570 [ 822.380752][T16614] ? ovl_path_next+0x23b/0x470 [ 822.385541][T16614] ovl_dir_read_merged+0x313/0x5e0 [ 822.390678][T16614] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 822.396338][T16614] ? __pfx_ovl_fill_merge+0x10/0x10 [ 822.401539][T16614] ? __kmalloc_cache_noprof+0x243/0x390 [ 822.407098][T16614] ? ovl_iterate+0x10d4/0x21c0 [ 822.411891][T16614] ovl_iterate+0x1194/0x21c0 [ 822.416477][T16614] ? __lock_acquire+0x1397/0x2100 [ 822.421511][T16614] ? __pfx_ovl_iterate+0x10/0x10 [ 822.426495][T16614] ? __pfx_lock_acquire+0x10/0x10 [ 822.431548][T16614] ? __pfx___might_resched+0x10/0x10 [ 822.436866][T16614] ? __pfx_lock_acquire+0x10/0x10 [ 822.441920][T16614] ? down_write+0x18c/0x220 [ 822.446432][T16614] ? __pfx_down_write+0x10/0x10 [ 822.451303][T16614] ? vfs_write+0x730/0xd30 [ 822.455736][T16614] ? __pfx_ovl_iterate+0x10/0x10 [ 822.460672][T16614] wrap_directory_iterator+0x91/0xd0 [ 822.465985][T16614] iterate_dir+0x571/0x800 [ 822.470427][T16614] __se_sys_getdents+0x1fd/0x4e0 [ 822.475385][T16614] ? __pfx___se_sys_getdents+0x10/0x10 [ 822.480867][T16614] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 822.486868][T16614] ? __pfx_filldir+0x10/0x10 [ 822.491466][T16614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.497799][T16614] ? do_syscall_64+0x100/0x230 [ 822.502571][T16614] ? do_syscall_64+0xb6/0x230 [ 822.507270][T16614] do_syscall_64+0xf3/0x230 [ 822.511795][T16614] ? clear_bhb_loop+0x35/0x90 [ 822.516483][T16614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.522396][T16614] RIP: 0033:0x7f06e1d7fed9 [ 822.526831][T16614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.546451][T16614] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 822.554889][T16614] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 822.562864][T16614] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 822.570845][T16614] RBP: 00007f06e2c3c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 822.578822][T16614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.586811][T16614] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 822.594813][T16614] [ 822.787918][T16615] ax25_connect(): syz.0.2343 uses autobind, please contact jreuter@yaina.de [ 823.217611][ T9] m920x_read = error: -19 [ 823.222107][ T9] dvb-usb: error -19 while querying for an remote control event. [ 823.246596][ T5911] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0019/input/input53 [ 823.268213][ T5911] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0019/input/input54 [ 823.329349][ T5911] kye 0003:0458:5011.0019: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 823.385275][ T5901] m920x_read = error: -19 [ 823.391996][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 823.491215][ T5911] usb 9-1: USB disconnect, device number 82 [ 823.653790][ T5901] m920x_read = error: -19 [ 823.658238][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 823.774377][T16622] loop8: detected capacity change from 0 to 7 [ 823.823558][ T5901] m920x_read = error: -19 [ 823.827917][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 823.837598][T16622] Dev loop8: unable to read RDB block 7 [ 823.855432][T16622] loop8: unable to read partition table [ 823.861395][T16622] loop8: partition table beyond EOD, truncated [ 823.868420][T16622] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 823.868420][T16622] U) failed (rc=-5) [ 824.420574][ T5901] m920x_read = error: -19 [ 824.425150][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 824.593607][ T9] m920x_read = error: -19 [ 824.601185][ T9] dvb-usb: error -19 while querying for an remote control event. [ 824.813426][ T5901] m920x_read = error: -19 [ 824.819769][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 824.893383][ T46] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 824.993394][ T5943] m920x_read = error: -19 [ 824.997870][ T5943] dvb-usb: error -19 while querying for an remote control event. [ 825.045544][ T46] usb 5-1: config 0 has no interfaces? [ 825.051152][ T46] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 825.166756][ T5901] m920x_read = error: -19 [ 825.171484][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 825.179778][ T9] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 825.201440][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.226053][ T46] usb 5-1: config 0 descriptor?? [ 825.313511][ T5901] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 825.349619][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 825.482294][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 825.593407][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 825.713637][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 825.811464][ T9] usb 9-1: Dual-Role OTG device on HNP port [ 825.840041][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.856773][ T9] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 825.894705][ T5943] m920x_read = error: -19 [ 825.899077][ T5943] dvb-usb: error -19 while querying for an remote control event. [ 825.917561][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.927003][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.965520][ T9] usb 9-1: Product: syz [ 825.976103][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.012929][ T9] usb 9-1: Manufacturer: syz [ 826.027398][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.050452][ T9] usb 9-1: SerialNumber: syz [ 826.065400][ T5901] usb 2-1: Product: syz [ 826.078450][ T9] usb 9-1: config 0 descriptor?? [ 826.094344][ T5901] usb 2-1: Manufacturer: syz [ 826.315968][T11235] m920x_read = error: -19 [ 826.320455][T11235] dvb-usb: error -19 while querying for an remote control event. [ 826.343612][ T5901] usb 2-1: SerialNumber: syz [ 826.350523][ T9] usb_ehset_test 9-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 826.800972][T11235] m920x_read = error: -19 [ 827.096442][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 827.144314][T11235] dvb-usb: error -19 while querying for an remote control event. [ 827.348752][T11235] usb 5-1: USB disconnect, device number 53 [ 827.368768][ T9] usb 9-1: USB disconnect, device number 83 [ 827.447888][T15667] m920x_read = error: -19 [ 827.469625][T15667] dvb-usb: error -19 while querying for an remote control event. [ 828.049452][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.061163][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.285720][ T5904] m920x_read = error: -19 [ 828.290504][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 828.501099][ T9] m920x_read = error: -19 [ 828.506930][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.585415][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.681130][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.091374][ T5904] m920x_read = error: -19 [ 829.095846][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 829.107177][ T5901] usb 2-1: 0:2 : does not exist [ 829.115259][ T5901] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 829.348615][ T5901] usb 2-1: USB disconnect, device number 41 [ 829.441574][T16679] FAULT_INJECTION: forcing a failure. [ 829.441574][T16679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.487908][T15667] m920x_read = error: -19 [ 829.492293][T15667] dvb-usb: error -19 while querying for an remote control event. [ 829.576419][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.0.2360 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 829.587207][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 829.597248][T16679] Call Trace: [ 829.600514][T16679] [ 829.603794][T16679] dump_stack_lvl+0x241/0x360 [ 829.608476][T16679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.613665][T16679] ? __pfx__printk+0x10/0x10 [ 829.618243][T16679] ? __pfx_lock_release+0x10/0x10 [ 829.623268][T16679] should_fail_ex+0x3b0/0x4e0 [ 829.627960][T16679] _copy_from_user+0x2f/0xc0 [ 829.632546][T16679] copy_msghdr_from_user+0xae/0x680 [ 829.637747][T16679] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 829.643561][T16679] ? __fget_files+0x2a/0x410 [ 829.648185][T16679] ? __fget_files+0x2a/0x410 [ 829.652805][T16679] __sys_sendmsg+0x209/0x350 [ 829.657419][T16679] ? __pfx_lock_release+0x10/0x10 [ 829.662471][T16679] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.667622][T16679] ? __pfx_vfs_write+0x10/0x10 [ 829.672439][T16679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 829.678791][T16679] ? do_syscall_64+0x100/0x230 [ 829.683594][T16679] ? do_syscall_64+0xb6/0x230 [ 829.688295][T16679] do_syscall_64+0xf3/0x230 [ 829.692823][T16679] ? clear_bhb_loop+0x35/0x90 [ 829.697516][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.703406][T16679] RIP: 0033:0x7f895337fed9 [ 829.707818][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.727421][T16679] RSP: 002b:00007f89540d8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.735857][T16679] RAX: ffffffffffffffda RBX: 00007f8953545fa0 RCX: 00007f895337fed9 [ 829.743848][T16679] RDX: 0000000000000010 RSI: 0000000020000680 RDI: 0000000000000003 [ 829.751839][T16679] RBP: 00007f89540d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 829.759834][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.767824][T16679] R13: 0000000000000000 R14: 00007f8953545fa0 R15: 00007fff587c6ee8 [ 829.772161][T16683] FAULT_INJECTION: forcing a failure. [ 829.772161][T16683] name failslab, interval 1, probability 0, space 0, times 0 [ 829.775810][T16679] [ 829.791775][T16683] CPU: 1 UID: 0 PID: 16683 Comm: syz.4.2363 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 829.792360][T15667] m920x_read = error: -19 [ 829.802535][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 829.802550][T16683] Call Trace: [ 829.802559][T16683] [ 829.802568][T16683] dump_stack_lvl+0x241/0x360 [ 829.802599][T16683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.802621][T16683] ? __pfx__printk+0x10/0x10 [ 829.807128][T15667] dvb-usb: error -19 while querying for an remote control event. [ 829.816978][T16683] ? __kmalloc_cache_noprof+0x48/0x390 [ 829.817004][T16683] ? __pfx___might_resched+0x10/0x10 [ 829.817036][T16683] should_fail_ex+0x3b0/0x4e0 [ 829.860746][T16683] should_failslab+0xac/0x100 [ 829.865430][T16683] __kmalloc_cache_noprof+0x70/0x390 [ 829.870716][T16683] ? __se_sys_mount+0x15a/0x3c0 [ 829.875562][T16683] ? memdup_user+0x9f/0xc0 [ 829.879979][T16683] __se_sys_mount+0x15a/0x3c0 [ 829.884653][T16683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 829.890630][T16683] ? __pfx___se_sys_mount+0x10/0x10 [ 829.895829][T16683] ? do_syscall_64+0x100/0x230 [ 829.900596][T16683] ? __x64_sys_mount+0x20/0xc0 [ 829.905360][T16683] do_syscall_64+0xf3/0x230 [ 829.909864][T16683] ? clear_bhb_loop+0x35/0x90 [ 829.914537][T16683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.920434][T16683] RIP: 0033:0x7f06e1d7fed9 [ 829.924845][T16683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.944449][T16683] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 829.952867][T16683] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 829.960839][T16683] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 829.968814][T16683] RBP: 00007f06e2c3c0a0 R08: 0000000020000480 R09: 0000000000000000 [ 829.976784][T16683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.984754][T16683] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 829.992732][T16683] [ 829.995837][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.164470][T16665] m920x_read = error: -19 [ 830.168883][T16665] dvb-usb: error -19 while querying for an remote control event. [ 830.350095][ T5901] m920x_read = error: -19 [ 830.354552][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 830.538428][T16665] m920x_read = error: -19 [ 830.542834][T16665] dvb-usb: error -19 while querying for an remote control event. [ 830.693979][ T46] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 830.885449][T16693] syzkaller0: entered promiscuous mode [ 830.912853][T16693] syzkaller0: entered allmulticast mode [ 830.953945][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 830.999130][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.111537][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.347323][T16665] m920x_read = error: -19 [ 831.351798][T16665] dvb-usb: error -19 while querying for an remote control event. [ 831.351937][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 831.466399][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 831.507215][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.514233][ T5901] m920x_read = error: -19 [ 831.523534][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 831.545824][ T46] usb 5-1: config 0 descriptor?? [ 831.723909][T16665] m920x_read = error: -19 [ 831.728299][T16665] dvb-usb: error -19 while querying for an remote control event. [ 831.896790][T16665] m920x_read = error: -19 [ 831.901179][T16665] dvb-usb: error -19 while querying for an remote control event. [ 831.981210][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001A/input/input55 [ 832.026422][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001A/input/input56 [ 832.063523][ T5901] m920x_read = error: -19 [ 832.064040][ T46] kye 0003:0458:5011.001A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 832.068116][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 832.214748][T16689] FAULT_INJECTION: forcing a failure. [ 832.214748][T16689] name failslab, interval 1, probability 0, space 0, times 0 [ 832.232588][T16689] CPU: 1 UID: 0 PID: 16689 Comm: syz.4.2364 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 832.243389][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 832.243484][ T5901] m920x_read = error: -19 [ 832.253438][T16689] Call Trace: [ 832.253461][T16689] [ 832.253471][T16689] dump_stack_lvl+0x241/0x360 [ 832.253504][T16689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.253527][T16689] ? __pfx__printk+0x10/0x10 [ 832.253552][T16689] ? fs_reclaim_acquire+0x93/0x130 [ 832.253585][T16689] ? __pfx___might_resched+0x10/0x10 [ 832.288851][T16689] should_fail_ex+0x3b0/0x4e0 [ 832.293534][T16689] should_failslab+0xac/0x100 [ 832.298213][T16689] __kmalloc_noprof+0xdd/0x4c0 [ 832.302976][T16689] ? tomoyo_encode+0x26f/0x540 [ 832.307745][T16689] tomoyo_encode+0x26f/0x540 [ 832.312341][T16689] tomoyo_realpath_from_path+0x59e/0x5e0 [ 832.317980][T16689] tomoyo_path_number_perm+0x236/0x860 [ 832.323443][T16689] ? __lock_acquire+0x1397/0x2100 [ 832.328465][T16689] ? tomoyo_path_number_perm+0x206/0x860 [ 832.334095][T16689] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 832.340099][T16689] ? __fget_files+0x2a/0x410 [ 832.344689][T16689] ? __fget_files+0x2a/0x410 [ 832.349281][T16689] security_file_ioctl+0xc6/0x2a0 [ 832.354304][T16689] __se_sys_ioctl+0x46/0x170 [ 832.358897][T16689] do_syscall_64+0xf3/0x230 [ 832.363403][T16689] ? clear_bhb_loop+0x35/0x90 [ 832.368073][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.373963][T16689] RIP: 0033:0x7f06e1d7fed9 [ 832.378374][T16689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.397987][T16689] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.406410][T16689] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 832.414382][T16689] RDX: 00000000200000c0 RSI: 00000000c018480b RDI: 0000000000000004 [ 832.422364][T16689] RBP: 00007f06e2c3c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 832.430338][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.438308][T16689] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 832.446290][T16689] [ 832.456466][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 832.494139][T16689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 832.639032][T16665] m920x_read = error: -19 [ 832.643696][T16665] dvb-usb: error -19 while querying for an remote control event. [ 832.804831][T15667] m920x_read = error: -19 [ 832.809346][T15667] dvb-usb: error -19 while querying for an remote control event. [ 832.976465][T15667] m920x_read = error: -19 [ 832.980880][T15667] dvb-usb: error -19 while querying for an remote control event. [ 833.067281][ C1] kye 0003:0458:5011.001A: usb_submit_urb(ctrl) failed: -1 [ 833.160536][T15667] m920x_read = error: -19 [ 833.165014][T15667] dvb-usb: error -19 while querying for an remote control event. [ 833.323420][T15667] m920x_read = error: -19 [ 833.339235][T15667] dvb-usb: error -19 while querying for an remote control event. [ 833.513865][T15667] m920x_read = error: -19 [ 833.521593][T15667] dvb-usb: error -19 while querying for an remote control event. [ 833.693423][ T5901] m920x_read = error: -19 [ 833.697811][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 833.893794][T16665] m920x_read = error: -19 [ 833.898668][T16665] dvb-usb: error -19 while querying for an remote control event. [ 833.915475][ T9161] usb 5-1: USB disconnect, device number 54 [ 834.617944][ T5901] m920x_read = error: -19 [ 834.622334][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 834.793965][ T5901] m920x_read = error: -19 [ 834.798315][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 834.970208][ T5901] m920x_read = error: -19 [ 834.974832][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 835.043475][ T9161] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 835.136300][ T5901] m920x_read = error: -19 [ 835.140689][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 835.203738][ T9161] usb 5-1: Using ep0 maxpacket: 8 [ 835.271450][ T9161] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 835.280972][ T9161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.290303][ T9161] usb 5-1: Product: syz [ 835.309437][ T5901] m920x_read = error: -19 [ 835.309524][ T9161] usb 5-1: Manufacturer: syz [ 835.313924][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 835.318618][ T9161] usb 5-1: SerialNumber: syz [ 835.349390][ T9161] usb 5-1: config 0 descriptor?? [ 835.490369][ T5901] m920x_read = error: -19 [ 835.494978][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 835.655425][ T5901] m920x_read = error: -19 [ 835.659814][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 835.853511][T15667] m920x_read = error: -19 [ 835.857900][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.030703][T15667] m920x_read = error: -19 [ 836.035155][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.194768][T15667] m920x_read = error: -19 [ 836.199153][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.363389][T15667] m920x_read = error: -19 [ 836.367775][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.533358][T15667] m920x_read = error: -19 [ 836.537742][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.703640][T15667] m920x_read = error: -19 [ 836.709820][T15667] dvb-usb: error -19 while querying for an remote control event. [ 836.873632][T15667] m920x_read = error: -19 [ 836.878150][T15667] dvb-usb: error -19 while querying for an remote control event. [ 837.043829][T15667] m920x_read = error: -19 [ 837.048387][T15667] dvb-usb: error -19 while querying for an remote control event. [ 837.213401][T15667] m920x_read = error: -19 [ 837.219349][T15667] dvb-usb: error -19 while querying for an remote control event. [ 837.383665][T15667] m920x_read = error: -19 [ 837.388323][T15667] dvb-usb: error -19 while querying for an remote control event. [ 837.553695][T15667] m920x_read = error: -19 [ 837.558303][T15667] dvb-usb: error -19 while querying for an remote control event. [ 837.723411][ T5901] m920x_read = error: -19 [ 837.727878][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 837.933799][ T9] m920x_read = error: -19 [ 837.940079][ T9] dvb-usb: error -19 while querying for an remote control event. [ 838.110693][ T9161] usb 5-1: USB disconnect, device number 55 [ 838.143426][ T9] m920x_read = error: -19 [ 838.153379][ T9] dvb-usb: error -19 while querying for an remote control event. [ 838.175855][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.189824][T16750] FAULT_INJECTION: forcing a failure. [ 838.189824][T16750] name failslab, interval 1, probability 0, space 0, times 0 [ 838.203008][T16750] CPU: 0 UID: 0 PID: 16750 Comm: syz.0.2382 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 838.213797][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 838.223879][T16750] Call Trace: [ 838.227175][T16750] [ 838.230126][T16750] dump_stack_lvl+0x241/0x360 [ 838.234831][T16750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.240059][T16750] ? __pfx__printk+0x10/0x10 [ 838.244675][T16750] ? __kmalloc_noprof+0xb5/0x4c0 [ 838.249628][T16750] ? __pfx___might_resched+0x10/0x10 [ 838.254943][T16750] should_fail_ex+0x3b0/0x4e0 [ 838.259654][T16750] should_failslab+0xac/0x100 [ 838.264355][T16750] __kmalloc_noprof+0xdd/0x4c0 [ 838.269134][T16750] ? io_alloc_async_data+0x7a/0x120 [ 838.274360][T16750] io_alloc_async_data+0x7a/0x120 [ 838.279405][T16750] io_msg_alloc_async+0x1b7/0x300 [ 838.284457][T16750] io_connect_prep+0x1b6/0x300 [ 838.289250][T16750] io_submit_sqes+0x94a/0x1d60 [ 838.294065][T16750] __se_sys_io_uring_enter+0x2c8/0x33b0 [ 838.299638][T16750] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 838.305552][T16750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 838.311205][T16750] ? sb_end_write+0xe9/0x1c0 [ 838.315810][T16750] ? vfs_write+0x730/0xd30 [ 838.320250][T16750] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 838.326249][T16750] ? __pfx_vfs_write+0x10/0x10 [ 838.331028][T16750] ? do_sys_openat2+0x17a/0x1d0 [ 838.335896][T16750] ? __pfx_do_sys_openat2+0x10/0x10 [ 838.341111][T16750] ? vm_mmap_pgoff+0x2c3/0x3d0 [ 838.345909][T16750] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 838.351932][T16750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 838.358288][T16750] ? do_syscall_64+0x100/0x230 [ 838.363079][T16750] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 838.368646][T16750] do_syscall_64+0xf3/0x230 [ 838.373167][T16750] ? clear_bhb_loop+0x35/0x90 [ 838.377858][T16750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.383769][T16750] RIP: 0033:0x7f895337fed9 [ 838.388201][T16750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.407822][T16750] RSP: 002b:00007f89540b7058 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 838.416256][T16750] RAX: ffffffffffffffda RBX: 00007f8953546080 RCX: 00007f895337fed9 [ 838.424240][T16750] RDX: 000000000000001f RSI: 00000000000047f9 RDI: 0000000000000007 [ 838.432224][T16750] RBP: 00007f89540b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 838.440206][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 838.448191][T16750] R13: 0000000000000000 R14: 00007f8953546080 R15: 00007fff587c6ee8 [ 838.456199][T16750] [ 838.659038][ T9] m920x_read = error: -19 [ 838.663654][ T9] dvb-usb: error -19 while querying for an remote control event. [ 838.835898][T14313] udevd[14313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.924233][T15667] m920x_read = error: -19 [ 838.935946][T15667] dvb-usb: error -19 while querying for an remote control event. [ 839.042332][T16764] loop8: detected capacity change from 0 to 7 [ 839.071528][T16764] Dev loop8: unable to read RDB block 7 [ 839.091950][T16764] loop8: unable to read partition table [ 839.126552][T16764] loop8: partition table beyond EOD, truncated [ 839.152301][T16764] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 839.152301][T16764] ) failed (rc=-5) [ 839.154007][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 839.175496][T15667] m920x_read = error: -19 [ 839.175518][T15667] dvb-usb: error -19 while querying for an remote control event. [ 839.333407][T15667] m920x_read = error: -19 [ 839.337800][T15667] dvb-usb: error -19 while querying for an remote control event. [ 840.025445][T15667] m920x_read = error: -19 [ 840.046891][T15667] dvb-usb: error -19 while querying for an remote control event. [ 840.158168][T16785] fuse: Bad value for 'fd' [ 840.162855][T16785] fuse: Bad value for 'fd' [ 840.210624][T16785] fuse: Bad value for 'fd' [ 840.223443][ T5901] m920x_read = error: -19 [ 840.227819][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 840.433598][ T5901] m920x_read = error: -19 [ 840.442633][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 840.613489][T15667] m920x_read = error: -19 [ 840.617847][T15667] dvb-usb: error -19 while querying for an remote control event. [ 841.423652][T15667] m920x_read = error: -19 [ 841.428113][T15667] dvb-usb: error -19 while querying for an remote control event. [ 841.634857][T15667] m920x_read = error: -19 [ 841.639248][T15667] dvb-usb: error -19 while querying for an remote control event. [ 841.828941][ T9] m920x_read = error: -19 [ 841.839057][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.193606][ T9] m920x_read = error: -19 [ 842.198342][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.344612][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 842.527522][ T5901] m920x_read = error: -19 [ 842.846055][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 842.869690][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2409'. [ 843.013622][ T9] m920x_read = error: -19 [ 843.018297][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.225997][ T9] m920x_read = error: -19 [ 843.230381][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.876446][ T9] m920x_read = error: -19 [ 843.880839][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.953470][ T5901] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 844.043600][T16853] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 844.053764][T15667] m920x_read = error: -19 [ 844.058124][T15667] dvb-usb: error -19 while querying for an remote control event. [ 844.101585][T16868] FAULT_INJECTION: forcing a failure. [ 844.101585][T16868] name failslab, interval 1, probability 0, space 0, times 0 [ 844.125562][ T5901] usb 9-1: device descriptor read/64, error -71 [ 844.142650][T16868] CPU: 1 UID: 0 PID: 16868 Comm: syz.4.2414 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 844.153445][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 844.163523][T16868] Call Trace: [ 844.166823][T16868] [ 844.169766][T16868] dump_stack_lvl+0x241/0x360 [ 844.174471][T16868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.179698][T16868] ? __pfx__printk+0x10/0x10 [ 844.184325][T16868] should_fail_ex+0x3b0/0x4e0 [ 844.189030][T16868] should_failslab+0xac/0x100 [ 844.193728][T16868] ? skb_clone+0x20c/0x390 [ 844.198163][T16868] kmem_cache_alloc_noprof+0x70/0x380 [ 844.203554][T16868] skb_clone+0x20c/0x390 [ 844.207822][T16868] __netlink_deliver_tap+0x3cc/0x7f0 [ 844.213123][T16868] ? netlink_deliver_tap+0x2e/0x1b0 [ 844.218315][T16868] netlink_deliver_tap+0x19d/0x1b0 [ 844.223431][T16868] netlink_unicast+0x7c4/0x990 [ 844.223611][ T9] m920x_read = error: -19 [ 844.228204][T16868] ? __pfx_netlink_unicast+0x10/0x10 [ 844.228233][T16868] ? __virt_addr_valid+0x183/0x530 [ 844.228257][T16868] ? __check_object_size+0x48e/0x900 [ 844.248229][T16868] netlink_sendmsg+0x8e4/0xcb0 [ 844.253009][T16868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.258300][T16868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.263583][T16868] __sock_sendmsg+0x221/0x270 [ 844.268263][T16868] ____sys_sendmsg+0x52a/0x7e0 [ 844.273031][T16868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.278312][T16868] ? __fget_files+0x2a/0x410 [ 844.282912][T16868] ? __sys_sendmmsg+0x392/0x720 [ 844.287773][T16868] ? __might_fault+0xaa/0x120 [ 844.292453][T16868] __sys_sendmmsg+0x36a/0x720 [ 844.297144][T16868] ? __pfx___sys_sendmmsg+0x10/0x10 [ 844.302353][T16868] ? __pfx_lock_release+0x10/0x10 [ 844.307389][T16868] ? kstrtouint_from_user+0x128/0x190 [ 844.312775][T16868] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 844.318670][T16868] ? ksys_write+0x22a/0x2b0 [ 844.323174][T16868] ? __pfx_lock_release+0x10/0x10 [ 844.328200][T16868] ? vfs_write+0x730/0xd30 [ 844.332620][T16868] ? __mutex_unlock_slowpath+0x21e/0x790 [ 844.338275][T16868] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 844.344255][T16868] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 844.350583][T16868] ? do_syscall_64+0x100/0x230 [ 844.355348][T16868] __x64_sys_sendmmsg+0xa0/0xb0 [ 844.360202][T16868] do_syscall_64+0xf3/0x230 [ 844.364718][T16868] ? clear_bhb_loop+0x35/0x90 [ 844.369399][T16868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.375295][T16868] RIP: 0033:0x7f06e1d7fed9 [ 844.379704][T16868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.399308][T16868] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.407723][T16868] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 844.415694][T16868] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 844.423660][T16868] RBP: 00007f06e2c3c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 844.431629][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.439592][T16868] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 844.447571][T16868] [ 844.457688][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.514083][ T5901] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 844.524300][T15667] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 844.723920][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2418'. [ 844.798850][ T5901] usb 9-1: device descriptor read/64, error -71 [ 844.806293][ T9] m920x_read = error: -19 [ 844.810799][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.816453][T16876] xfrm1: entered promiscuous mode [ 844.833399][T15667] usb 2-1: Using ep0 maxpacket: 16 [ 844.841052][T15667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.851382][T15667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 844.865211][T16876] xfrm1: entered allmulticast mode [ 844.887871][T15667] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 844.962476][ T5901] usb usb9-port1: attempt power cycle [ 845.521303][T16665] m920x_read = error: -19 [ 845.532564][T15667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.540713][T16665] dvb-usb: error -19 while querying for an remote control event. [ 845.563331][T15667] usb 2-1: Product: syz [ 845.567554][T15667] usb 2-1: Manufacturer: syz [ 845.572185][T15667] usb 2-1: SerialNumber: syz [ 845.712602][T15667] usb 2-1: config 0 descriptor?? [ 845.741117][T16665] m920x_read = error: -19 [ 845.745820][T16665] dvb-usb: error -19 while querying for an remote control event. [ 845.759561][T15667] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 845.767143][T15667] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -8) [ 846.006676][T16665] m920x_read = error: -19 [ 846.011334][T16665] dvb-usb: error -19 while querying for an remote control event. [ 846.063642][T15667] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 846.316463][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 846.334450][T15667] m920x_read = error: -19 [ 846.339047][T15667] dvb-usb: error -19 while querying for an remote control event. [ 846.854672][T15667] m920x_read = error: -19 [ 846.859081][T15667] dvb-usb: error -19 while querying for an remote control event. [ 846.969453][T16901] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2423'. [ 847.069800][T16665] m920x_read = error: -19 [ 847.074284][T16665] dvb-usb: error -19 while querying for an remote control event. [ 847.233807][ T9161] usb 2-1: USB disconnect, device number 42 [ 847.318173][T16665] m920x_read = error: -19 [ 847.333874][T16665] dvb-usb: error -19 while querying for an remote control event. [ 847.479268][T16907] bond0: (slave bond_slave_0): Releasing backup interface [ 847.539102][T16665] m920x_read = error: -19 [ 847.551957][T16665] dvb-usb: error -19 while querying for an remote control event. [ 847.752612][T16665] m920x_read = error: -19 [ 847.757285][T16665] dvb-usb: error -19 while querying for an remote control event. [ 847.814690][T16907] bond0: (slave bond_slave_1): Releasing backup interface [ 847.925731][T16665] m920x_read = error: -19 [ 847.930126][T16665] dvb-usb: error -19 while querying for an remote control event. [ 847.936743][T16907] team0: Port device team_slave_0 removed [ 848.009416][T16907] team0: Port device team_slave_1 removed [ 848.062176][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.085346][T16907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.106328][T16665] m920x_read = error: -19 [ 848.110811][T16665] dvb-usb: error -19 while querying for an remote control event. [ 848.124848][T16907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.150953][T16907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.283410][T16665] m920x_read = error: -19 [ 848.287861][T16665] dvb-usb: error -19 while querying for an remote control event. [ 848.474448][T16665] m920x_read = error: -19 [ 848.478837][T16665] dvb-usb: error -19 while querying for an remote control event. [ 848.499365][T16928] loop8: detected capacity change from 0 to 7 [ 848.515834][T16928] Dev loop8: unable to read RDB block 7 [ 848.559306][T16928] loop8: unable to read partition table [ 848.577875][T16928] loop8: partition table beyond EOD, truncated [ 848.614733][T16928] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 848.614733][T16928] ) failed (rc=-5) [ 848.663576][T15667] m920x_read = error: -19 [ 848.668095][T15667] dvb-usb: error -19 while querying for an remote control event. [ 848.702241][T16931] cgroup: Invalid name [ 848.873386][ T46] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 849.096321][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 849.141000][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.420902][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.482315][T15667] m920x_read = error: -19 [ 849.486805][T15667] dvb-usb: error -19 while querying for an remote control event. [ 849.505947][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 849.549261][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 849.568769][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.786898][T16665] m920x_read = error: -19 [ 849.791745][T16665] dvb-usb: error -19 while querying for an remote control event. [ 849.824270][T16938] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 849.953861][T15667] m920x_read = error: -19 [ 849.958300][T15667] dvb-usb: error -19 while querying for an remote control event. [ 850.023773][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2435'. [ 850.052350][ T46] usb 1-1: config 0 descriptor?? [ 850.133688][ T5901] m920x_read = error: -19 [ 850.205499][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 850.299645][T16955] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2437'. [ 850.673980][T15667] m920x_read = error: -19 [ 850.679032][T15667] dvb-usb: error -19 while querying for an remote control event. [ 850.884437][T16665] m920x_read = error: -19 [ 850.888819][T16665] dvb-usb: error -19 while querying for an remote control event. [ 851.086132][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001B/input/input57 [ 851.113608][T16665] m920x_read = error: -19 [ 851.116418][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001B/input/input58 [ 851.117958][T16665] dvb-usb: error -19 while querying for an remote control event. [ 851.149418][ T46] kye 0003:0458:5011.001B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 851.283490][ T5901] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 851.314861][T15667] m920x_read = error: -19 [ 851.319240][T15667] dvb-usb: error -19 while querying for an remote control event. [ 851.407058][T16960] x_tables: duplicate underflow at hook 1 [ 851.496900][T15667] m920x_read = error: -19 [ 851.501306][T15667] dvb-usb: error -19 while querying for an remote control event. [ 851.603711][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 851.618332][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 851.628939][ T5901] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 851.672440][T16665] m920x_read = error: -19 [ 851.676997][T16665] dvb-usb: error -19 while querying for an remote control event. [ 851.693499][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.774999][ T5901] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.40 [ 851.784880][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.792896][ T5901] usb 2-1: Product: syz [ 851.798314][ T5901] usb 2-1: Manufacturer: syz [ 851.802945][ T5901] usb 2-1: SerialNumber: syz [ 851.846871][T16665] m920x_read = error: -19 [ 851.851349][T16665] dvb-usb: error -19 while querying for an remote control event. [ 852.052775][T16665] m920x_read = error: -19 [ 852.122544][T16665] dvb-usb: error -19 while querying for an remote control event. [ 852.167420][ C1] kye 0003:0458:5011.001B: usb_submit_urb(ctrl) failed: -1 [ 852.326236][ T9161] usb 1-1: reset high-speed USB device number 84 using dummy_hcd [ 852.326546][T16665] m920x_read = error: -19 [ 852.351154][T16665] dvb-usb: error -19 while querying for an remote control event. [ 852.587704][T16665] m920x_read = error: -19 [ 852.592134][T16665] dvb-usb: error -19 while querying for an remote control event. [ 852.745959][ T9161] usb 1-1: device descriptor read/64, error -32 [ 852.753443][T15667] m920x_read = error: -19 [ 852.757824][T15667] dvb-usb: error -19 while querying for an remote control event. [ 852.904595][ T5901] gspca_main: spca501-2.14.0 probing 0000:0000 [ 852.920297][ T5901] gspca_spca501: reg write: error -71 [ 852.933143][ T5901] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 852.940636][T15667] m920x_read = error: -19 [ 852.945132][T15667] dvb-usb: error -19 while querying for an remote control event. [ 852.973365][ T5901] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 852.983415][ T9161] usb 1-1: reset high-speed USB device number 84 using dummy_hcd [ 852.992503][T16987] FAULT_INJECTION: forcing a failure. [ 852.992503][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 853.035551][ T5901] usb 2-1: 0:2 : does not exist [ 853.076198][T16987] CPU: 0 UID: 0 PID: 16987 Comm: syz.8.2445 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 853.087020][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 853.097091][T16987] Call Trace: [ 853.100380][T16987] [ 853.103316][T16987] dump_stack_lvl+0x241/0x360 [ 853.108007][T16987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.113211][T16987] ? __pfx__printk+0x10/0x10 [ 853.117811][T16987] ? fs_reclaim_acquire+0x93/0x130 [ 853.122920][T16987] ? __pfx___might_resched+0x10/0x10 [ 853.128209][T16987] should_fail_ex+0x3b0/0x4e0 [ 853.132888][T16987] should_failslab+0xac/0x100 [ 853.137565][T16987] __kmalloc_noprof+0xdd/0x4c0 [ 853.142329][T16987] ? tomoyo_encode+0x26f/0x540 [ 853.147098][T16987] tomoyo_encode+0x26f/0x540 [ 853.151689][T16987] tomoyo_mount_permission+0x53d/0xb80 [ 853.157153][T16987] ? tomoyo_mount_permission+0x298/0xb80 [ 853.162788][T16987] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 853.168797][T16987] ? hook_sb_mount+0x10b/0x420 [ 853.173561][T16987] ? security_sb_mount+0x22/0x2f0 [ 853.178588][T16987] security_sb_mount+0xe0/0x2f0 [ 853.183447][T16987] path_mount+0xb9/0xfa0 [ 853.187695][T16987] ? kmem_cache_free+0x195/0x410 [ 853.192632][T16987] ? user_path_at+0x44/0x60 [ 853.197144][T16987] __se_sys_mount+0x2d6/0x3c0 [ 853.201826][T16987] ? __pfx___se_sys_mount+0x10/0x10 [ 853.207025][T16987] ? do_syscall_64+0x100/0x230 [ 853.211791][T16987] ? __x64_sys_mount+0x20/0xc0 [ 853.216552][T16987] do_syscall_64+0xf3/0x230 [ 853.221060][T16987] ? clear_bhb_loop+0x35/0x90 [ 853.225748][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.231641][T16987] RIP: 0033:0x7fd1be97fed9 [ 853.236057][T16987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.255667][T16987] RSP: 002b:00007fd1bf756058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.264079][T16987] RAX: ffffffffffffffda RBX: 00007fd1beb46080 RCX: 00007fd1be97fed9 [ 853.272044][T16987] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 853.280009][T16987] RBP: 00007fd1bf7560a0 R08: 0000000020000480 R09: 0000000000000000 [ 853.287981][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.295949][T16987] R13: 0000000000000000 R14: 00007fd1beb46080 R15: 00007ffed67bf658 [ 853.303932][T16987] [ 853.309307][T15667] m920x_read = error: -19 [ 853.313726][T15667] dvb-usb: error -19 while querying for an remote control event. [ 853.337647][ T5901] usb 2-1: USB disconnect, device number 43 [ 853.366861][T16992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.475306][T15667] m920x_read = error: -19 [ 853.480009][T15667] dvb-usb: error -19 while querying for an remote control event. [ 853.554229][T14313] udevd[14313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.653711][T16665] m920x_read = error: -19 [ 853.658163][T16665] dvb-usb: error -19 while querying for an remote control event. [ 853.835662][T15667] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 853.975811][T16665] m920x_read = error: -19 [ 853.980177][T16665] dvb-usb: error -19 while querying for an remote control event. [ 854.223437][T15667] usb 5-1: Using ep0 maxpacket: 32 [ 854.246350][T15667] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 854.263527][T15667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.271556][T15667] usb 5-1: Product: syz [ 854.278972][T15667] usb 5-1: Manufacturer: syz [ 854.283650][T15667] usb 5-1: SerialNumber: syz [ 854.725510][ T46] usb 1-1: USB disconnect, device number 84 [ 854.966378][ T5901] m920x_read = error: -19 [ 854.970785][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 854.988598][T15667] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 855.171105][T16665] m920x_read = error: -19 [ 855.216856][T16665] dvb-usb: error -19 while querying for an remote control event. [ 855.233854][ T46] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 855.383918][T16665] m920x_read = error: -19 [ 855.388371][T16665] dvb-usb: error -19 while querying for an remote control event. [ 855.405954][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 855.414696][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 855.425688][ T46] usb 1-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 855.437053][ T46] usb 1-1: config 136 has 2 interfaces, different from the descriptor's value: 3 [ 855.483544][ T46] usb 1-1: config 136 has no interface number 1 [ 855.513466][ T46] usb 1-1: too many endpoints for config 136 interface 2 altsetting 12: 89, using maximum allowed: 30 [ 855.533515][ T5911] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 855.554908][ T46] usb 1-1: config 136 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 855.568299][ T46] usb 1-1: config 136 interface 2 has no altsetting 0 [ 855.568360][T16665] m920x_read = error: -19 [ 855.576977][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.598624][T16665] dvb-usb: error -19 while querying for an remote control event. [ 855.600372][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.625608][ T46] usb 1-1: Product: syz [ 855.629810][ T46] usb 1-1: Manufacturer: syz [ 855.645015][ T46] usb 1-1: SerialNumber: syz [ 855.733535][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 855.744177][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.757726][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.773284][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.774313][T16665] m920x_read = error: -19 [ 855.791356][T16665] dvb-usb: error -19 while querying for an remote control event. [ 855.798941][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 855.822375][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.838127][ T5911] usb 2-1: config 0 descriptor?? [ 855.963568][T16665] m920x_read = error: -19 [ 855.974459][T16665] dvb-usb: error -19 while querying for an remote control event. [ 856.019526][T15667] gspca_stk1135: reg_w 0x7 err -71 [ 856.027632][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.034635][T15667] gspca_stk1135: Sensor write failed [ 856.040207][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.047131][T15667] gspca_stk1135: Sensor write failed [ 856.052643][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.061352][T15667] gspca_stk1135: Sensor read failed [ 856.067318][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.092444][T15667] gspca_stk1135: Sensor read failed [ 856.110439][T15667] gspca_stk1135: Detected sensor type unknown (0x0) [ 856.118169][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.125532][T15667] gspca_stk1135: Sensor read failed [ 856.130940][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.138542][T15667] gspca_stk1135: Sensor read failed [ 856.146888][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.153449][T16665] m920x_read = error: -19 [ 856.158180][T16665] dvb-usb: error -19 while querying for an remote control event. [ 856.169589][T15667] gspca_stk1135: Sensor write failed [ 856.178651][T15667] gspca_stk1135: serial bus timeout: status=0x00 [ 856.193395][T15667] gspca_stk1135: Sensor write failed [ 856.206394][T15667] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 856.229947][T15667] usb 5-1: USB disconnect, device number 56 [ 856.333457][T16665] m920x_read = error: -19 [ 856.338199][T16665] dvb-usb: error -19 while querying for an remote control event. [ 856.384586][T17032] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 856.395430][ T5911] ryos 0003:1E7D:31CE.001C: unknown main item tag 0x0 [ 856.402346][ T5911] ryos 0003:1E7D:31CE.001C: unknown main item tag 0x0 [ 856.409512][ T5911] ryos 0003:1E7D:31CE.001C: unknown main item tag 0x0 [ 856.416468][ T5911] ryos 0003:1E7D:31CE.001C: unknown main item tag 0x0 [ 856.435907][ T5911] ryos 0003:1E7D:31CE.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 856.548657][ T5911] usb 2-1: USB disconnect, device number 44 [ 856.701436][T16665] m920x_read = error: -19 [ 856.705937][T16665] dvb-usb: error -19 while querying for an remote control event. [ 856.771218][T17035] FAULT_INJECTION: forcing a failure. [ 856.771218][T17035] name failslab, interval 1, probability 0, space 0, times 0 [ 856.786246][T17035] CPU: 1 UID: 0 PID: 17035 Comm: syz.4.2462 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 856.797062][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 856.807128][T17035] Call Trace: [ 856.810408][T17035] [ 856.813346][T17035] dump_stack_lvl+0x241/0x360 [ 856.818039][T17035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.823239][T17035] ? __pfx__printk+0x10/0x10 [ 856.827846][T17035] should_fail_ex+0x3b0/0x4e0 [ 856.832524][T17035] should_failslab+0xac/0x100 [ 856.837201][T17035] ? skb_clone+0x20c/0x390 [ 856.841617][T17035] kmem_cache_alloc_noprof+0x70/0x380 [ 856.846991][T17035] skb_clone+0x20c/0x390 [ 856.851238][T17035] __netlink_deliver_tap+0x3cc/0x7f0 [ 856.856532][T17035] ? netlink_deliver_tap+0x2e/0x1b0 [ 856.861728][T17035] netlink_deliver_tap+0x19d/0x1b0 [ 856.866837][T17035] netlink_unicast+0x7c4/0x990 [ 856.871613][T17035] ? __pfx_netlink_unicast+0x10/0x10 [ 856.876907][T17035] ? __virt_addr_valid+0x183/0x530 [ 856.882026][T17035] ? __check_object_size+0x48e/0x900 [ 856.887323][T17035] netlink_sendmsg+0x8e4/0xcb0 [ 856.892096][T17035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.897396][T17035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.902682][T17035] __sock_sendmsg+0x221/0x270 [ 856.907364][T17035] ____sys_sendmsg+0x52a/0x7e0 [ 856.912137][T17035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 856.917420][T17035] ? __fget_files+0x2a/0x410 [ 856.922015][T17035] ? __fget_files+0x2a/0x410 [ 856.926608][T17035] __sys_sendmsg+0x269/0x350 [ 856.931195][T17035] ? __pfx_lock_release+0x10/0x10 [ 856.936220][T17035] ? __pfx___sys_sendmsg+0x10/0x10 [ 856.941337][T17035] ? __pfx_vfs_write+0x10/0x10 [ 856.946124][T17035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 856.952449][T17035] ? do_syscall_64+0x100/0x230 [ 856.957217][T17035] ? do_syscall_64+0xb6/0x230 [ 856.961895][T17035] do_syscall_64+0xf3/0x230 [ 856.966402][T17035] ? clear_bhb_loop+0x35/0x90 [ 856.971078][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.976978][T17035] RIP: 0033:0x7f06e1d7fed9 [ 856.981391][T17035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.001006][T17035] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.009425][T17035] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 857.017395][T17035] RDX: 0000000000000010 RSI: 0000000020000680 RDI: 0000000000000003 [ 857.025362][T17035] RBP: 00007f06e2c3c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 857.033328][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.041293][T17035] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 857.049277][T17035] [ 857.052431][T15667] m920x_read = error: -19 [ 857.056887][T15667] dvb-usb: error -19 while querying for an remote control event. [ 857.153819][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.160860][ T46] usb 1-1: MIDIStreaming interface descriptor not found [ 857.223989][T15667] m920x_read = error: -19 [ 857.228378][T15667] dvb-usb: error -19 while querying for an remote control event. [ 857.253408][ T46] usb 1-1: USB disconnect, device number 85 [ 857.474620][T15667] m920x_read = error: -19 [ 857.523344][T15667] dvb-usb: error -19 while querying for an remote control event. [ 857.628072][T17044] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2464'. [ 857.777826][T14540] udevd[14540]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:136.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.963153][ T5904] m920x_read = error: -19 [ 857.967989][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 858.028601][T17049] loop8: detected capacity change from 0 to 7 [ 858.050333][T17049] Dev loop8: unable to read RDB block 7 [ 858.064325][T17049] loop8: unable to read partition table [ 858.073480][T17049] loop8: partition table beyond EOD, truncated [ 858.083106][T17049] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 858.083106][T17049] ) failed (rc=-5) [ 858.153219][ T5904] m920x_read = error: -19 [ 858.158417][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 858.342324][ T5904] m920x_read = error: -19 [ 858.353439][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 858.524085][ T5904] m920x_read = error: -19 [ 858.538000][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 859.179221][ T5904] m920x_read = error: -19 [ 859.183735][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 859.343523][ T5904] m920x_read = error: -19 [ 859.347930][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 859.424204][T17071] FAULT_INJECTION: forcing a failure. [ 859.424204][T17071] name failslab, interval 1, probability 0, space 0, times 0 [ 859.472303][T17071] CPU: 1 UID: 0 PID: 17071 Comm: syz.4.2474 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 859.483122][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 859.493190][T17071] Call Trace: [ 859.496479][T17071] [ 859.499422][T17071] dump_stack_lvl+0x241/0x360 [ 859.504131][T17071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.509360][T17071] ? __pfx__printk+0x10/0x10 [ 859.513960][T17071] ? __kmalloc_noprof+0xb5/0x4c0 [ 859.518914][T17071] ? __pfx___might_resched+0x10/0x10 [ 859.524220][T17071] should_fail_ex+0x3b0/0x4e0 [ 859.528920][T17071] should_failslab+0xac/0x100 [ 859.533617][T17071] __kmalloc_noprof+0xdd/0x4c0 [ 859.538388][T17071] ? cap_capable+0x1b4/0x250 [ 859.542977][T17071] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 859.549236][T17071] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 859.555325][T17071] genl_rcv_msg+0x802/0xec0 [ 859.559843][T17071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.564894][T17071] ? __pfx_lock_acquire+0x10/0x10 [ 859.569923][T17071] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 859.575297][T17071] ? __pfx_nl80211_remove_link_station+0x10/0x10 [ 859.581628][T17071] ? __pfx_nl80211_post_doit+0x10/0x10 [ 859.587089][T17071] ? __pfx___might_resched+0x10/0x10 [ 859.592387][T17071] netlink_rcv_skb+0x1e3/0x430 [ 859.597152][T17071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.602176][T17071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.607471][T17071] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 859.612935][T17071] genl_rcv+0x28/0x40 [ 859.616917][T17071] netlink_unicast+0x7f6/0x990 [ 859.621692][T17071] ? __pfx_netlink_unicast+0x10/0x10 [ 859.626979][T17071] ? __virt_addr_valid+0x183/0x530 [ 859.632089][T17071] ? __check_object_size+0x48e/0x900 [ 859.637374][T17071] netlink_sendmsg+0x8e4/0xcb0 [ 859.642145][T17071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.647440][T17071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.652725][T17071] __sock_sendmsg+0x221/0x270 [ 859.657425][T17071] ____sys_sendmsg+0x52a/0x7e0 [ 859.662207][T17071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.667760][T17071] ? __fget_files+0x2a/0x410 [ 859.672360][T17071] ? __fget_files+0x2a/0x410 [ 859.676962][T17071] __sys_sendmsg+0x269/0x350 [ 859.681559][T17071] ? __pfx_lock_release+0x10/0x10 [ 859.686588][T17071] ? __pfx___sys_sendmsg+0x10/0x10 [ 859.691708][T17071] ? __pfx_vfs_write+0x10/0x10 [ 859.696495][T17071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 859.702821][T17071] ? do_syscall_64+0x100/0x230 [ 859.707602][T17071] ? do_syscall_64+0xb6/0x230 [ 859.712281][T17071] do_syscall_64+0xf3/0x230 [ 859.716788][T17071] ? clear_bhb_loop+0x35/0x90 [ 859.721461][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.727359][T17071] RIP: 0033:0x7f06e1d7fed9 [ 859.731770][T17071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.751381][T17071] RSP: 002b:00007f06e2c3c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.759809][T17071] RAX: ffffffffffffffda RBX: 00007f06e1f45fa0 RCX: 00007f06e1d7fed9 [ 859.767792][T17071] RDX: 0000000000000010 RSI: 0000000020000680 RDI: 0000000000000003 [ 859.775761][T17071] RBP: 00007f06e2c3c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 859.783730][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.791697][T17071] R13: 0000000000000000 R14: 00007f06e1f45fa0 R15: 00007ffe7b60c9a8 [ 859.799679][T17071] [ 859.802886][ T5904] m920x_read = error: -19 [ 859.807355][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 859.974670][ T5904] m920x_read = error: -19 [ 859.979070][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 859.987905][T17077] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 860.239532][ T5904] m920x_read = error: -19 [ 860.245074][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 860.925946][T15667] m920x_read = error: -19 [ 860.934959][T15667] dvb-usb: error -19 while querying for an remote control event. [ 861.031829][T17092] loop8: detected capacity change from 0 to 7 [ 861.051716][T17092] Dev loop8: unable to read RDB block 7 [ 861.083808][T17092] loop8: unable to read partition table [ 861.089649][T17092] loop8: partition table beyond EOD, truncated [ 861.132247][T17092] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 861.132247][T17092] ) failed (rc=-5) [ 861.147093][T16665] m920x_read = error: -19 [ 861.177096][T16665] dvb-usb: error -19 while querying for an remote control event. [ 861.338151][T17100] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 861.366904][T15667] m920x_read = error: -19 [ 861.371969][T15667] dvb-usb: error -19 while querying for an remote control event. [ 862.172911][T17100] kvm: pic: non byte read [ 862.207399][T15667] m920x_read = error: -19 [ 862.211783][T15667] dvb-usb: error -19 while querying for an remote control event. [ 862.360173][T17115] veth1: entered promiscuous mode [ 862.362278][T17115] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 862.393635][T16665] m920x_read = error: -19 [ 862.393661][T16665] dvb-usb: error -19 while querying for an remote control event. [ 862.555480][T15667] m920x_read = error: -19 [ 862.568597][T15667] dvb-usb: error -19 while querying for an remote control event. [ 862.801261][T15667] m920x_read = error: -19 [ 862.808253][T15667] dvb-usb: error -19 while querying for an remote control event. [ 862.873506][T16665] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 863.146703][T15667] m920x_read = error: -19 [ 863.153946][T15667] dvb-usb: error -19 while querying for an remote control event. [ 863.180827][T16665] usb 2-1: Using ep0 maxpacket: 32 [ 863.385503][T16665] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 863.548151][T16665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.556800][T16665] usb 2-1: Product: syz [ 863.561014][T16665] usb 2-1: Manufacturer: syz [ 863.565733][T16665] usb 2-1: SerialNumber: syz [ 863.614578][T15667] m920x_read = error: -19 [ 863.618987][T15667] dvb-usb: error -19 while querying for an remote control event. [ 863.631018][T16665] usb 2-1: config 0 descriptor?? [ 863.783607][T15667] m920x_read = error: -19 [ 863.788018][T15667] dvb-usb: error -19 while querying for an remote control event. [ 863.937180][T17143] loop8: detected capacity change from 0 to 7 [ 863.963729][T17143] Dev loop8: unable to read RDB block 7 [ 863.984275][T15667] m920x_read = error: -19 [ 863.988777][T15667] dvb-usb: error -19 while querying for an remote control event. [ 864.002206][T17154] FAULT_INJECTION: forcing a failure. [ 864.002206][T17154] name failslab, interval 1, probability 0, space 0, times 0 [ 864.015384][T17143] loop8: unable to read partition table [ 864.023126][T17143] loop8: partition table beyond EOD, truncated [ 864.031182][T17154] CPU: 0 UID: 0 PID: 17154 Comm: syz.4.2498 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 864.041979][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 864.052057][T17154] Call Trace: [ 864.055369][T17154] [ 864.058323][T17154] dump_stack_lvl+0x241/0x360 [ 864.063041][T17154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.068273][T17154] ? __pfx__printk+0x10/0x10 [ 864.072888][T17154] ? __kmalloc_cache_noprof+0x48/0x390 [ 864.078377][T17154] ? __pfx___might_resched+0x10/0x10 [ 864.083700][T17154] should_fail_ex+0x3b0/0x4e0 [ 864.088404][T17154] should_failslab+0xac/0x100 [ 864.093113][T17154] __kmalloc_cache_noprof+0x70/0x390 [ 864.098431][T17154] ? ovl_init_fs_context+0x98/0x4f0 [ 864.103666][T17154] ovl_init_fs_context+0x98/0x4f0 [ 864.108726][T17154] alloc_fs_context+0x68a/0x800 [ 864.113615][T17154] do_new_mount+0x160/0xb40 [ 864.118154][T17154] ? __pfx_do_new_mount+0x10/0x10 [ 864.123212][T17154] __se_sys_mount+0x2d6/0x3c0 [ 864.127923][T17154] ? __pfx___se_sys_mount+0x10/0x10 [ 864.133153][T17154] ? do_syscall_64+0x100/0x230 [ 864.137954][T17154] ? __x64_sys_mount+0x20/0xc0 [ 864.142748][T17154] do_syscall_64+0xf3/0x230 [ 864.147285][T17154] ? clear_bhb_loop+0x35/0x90 [ 864.151991][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.157919][T17154] RIP: 0033:0x7f06e1d7fed9 [ 864.162361][T17154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.182042][T17154] RSP: 002b:00007f06e2c1b058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.190526][T17154] RAX: ffffffffffffffda RBX: 00007f06e1f46080 RCX: 00007f06e1d7fed9 [ 864.198529][T17154] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 864.206524][T17154] RBP: 00007f06e2c1b0a0 R08: 0000000020000480 R09: 0000000000000000 [ 864.214520][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.222527][T17154] R13: 0000000000000000 R14: 00007f06e1f46080 R15: 00007ffe7b60c9a8 [ 864.230546][T17154] [ 864.263432][T17143] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 864.263432][T17143] ) failed (rc=-5) [ 864.277270][ T5904] m920x_read = error: -19 [ 864.281683][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 864.490812][T15667] m920x_read = error: -19 [ 864.499724][T15667] dvb-usb: error -19 while querying for an remote control event. [ 864.587287][T17169] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 865.266050][T15667] m920x_read = error: -19 [ 865.270450][T15667] dvb-usb: error -19 while querying for an remote control event. [ 865.280915][T16665] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:42:e9:0e:59:64 [ 865.299882][T16665] rtl8150 2-1:0.0: eth13: rtl8150 is detected [ 865.307574][T16665] usb 2-1: USB disconnect, device number 45 [ 865.433398][T15667] m920x_read = error: -19 [ 865.437846][T15667] dvb-usb: error -19 while querying for an remote control event. [ 865.449639][T17185] kAFS: unable to lookup cell '' [ 865.460914][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2504'. [ 865.615027][ T5904] m920x_read = error: -19 [ 865.626098][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 865.774016][T17186] netlink: 'syz.8.2504': attribute type 32 has an invalid length. [ 865.823694][ T5901] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 866.022926][T16665] m920x_read = error: -19 [ 866.034121][T16665] dvb-usb: error -19 while querying for an remote control event. [ 866.173344][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 866.189552][ T5901] usb 1-1: config 197 has an invalid interface number: 204 but max is 0 [ 866.223522][ T5901] usb 1-1: config 197 contains an unexpected descriptor of type 0x2, skipping [ 866.232572][ T5901] usb 1-1: config 197 contains an unexpected descriptor of type 0x2, skipping [ 866.243711][T16665] m920x_read = error: -19 [ 866.248106][T16665] dvb-usb: error -19 while querying for an remote control event. [ 866.275633][ T5901] usb 1-1: config 197 has no interface number 0 [ 866.281975][ T5901] usb 1-1: config 197 interface 204 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 866.300845][T17197] dns_resolver: Unsupported content type (24) [ 866.343318][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 866.389285][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 866.444969][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 866.463394][T15667] m920x_read = error: -19 [ 866.467773][T15667] dvb-usb: error -19 while querying for an remote control event. [ 866.479825][ T5901] usb 1-1: config 197 interface 204 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 866.525836][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 866.552447][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 866.573960][ T5901] usb 1-1: config 197 interface 204 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 866.585126][ T5901] usb 1-1: config 197 interface 204 has no altsetting 0 [ 866.599806][ T5901] usb 1-1: New USB device found, idVendor=0499, idProduct=1011, bcdDevice=3a.4d [ 866.613763][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.621787][ T5901] usb 1-1: Product: syz [ 866.633519][T15667] m920x_read = error: -19 [ 866.637892][T15667] dvb-usb: error -19 while querying for an remote control event. [ 866.653313][ T5901] usb 1-1: Manufacturer: syz [ 866.657946][ T5901] usb 1-1: SerialNumber: syz [ 866.837974][ T5904] m920x_read = error: -19 [ 866.847018][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 866.887888][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.319676][T17209] loop8: detected capacity change from 0 to 7 [ 867.352857][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.362122][ T5904] m920x_read = error: -19 [ 867.363402][ T8273] Dev loop8: unable to read RDB block 7 [ 867.369312][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 867.396413][ T8273] loop8: unable to read partition table [ 867.422211][ T8273] loop8: partition table beyond EOD, truncated [ 867.435517][ T5901] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.449374][T17209] Dev loop8: unable to read RDB block 7 [ 867.455692][T17209] loop8: unable to read partition table [ 867.461631][T17209] loop8: partition table beyond EOD, truncated [ 867.473627][T17209] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 867.473627][T17209] ) failed (rc=-5) [ 867.520486][ T5901] snd-usb-audio 1-1:197.204: probe with driver snd-usb-audio failed with error -2 [ 867.533652][T16665] m920x_read = error: -19 [ 867.538026][T16665] dvb-usb: error -19 while querying for an remote control event. [ 867.585446][ T5901] usb 1-1: USB disconnect, device number 86 [ 867.734258][ T5904] m920x_read = error: -19 [ 867.738648][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 867.794772][T14313] udevd[14313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:197.204/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.913394][ T5904] m920x_read = error: -19 [ 867.917882][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 868.084417][ T5904] m920x_read = error: -19 [ 868.088806][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 868.138553][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 868.138569][ T29] audit: type=1326 audit(1733688233.561:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 868.214770][ T29] audit: type=1326 audit(1733688233.591:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 868.305681][ T29] audit: type=1326 audit(1733688233.591:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 868.360433][ T5904] m920x_read = error: -19 [ 868.365681][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 868.425540][ T29] audit: type=1326 audit(1733688233.591:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 868.447221][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.483998][T17235] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2518'. [ 868.540119][ T5904] m920x_read = error: -19 [ 868.544949][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 868.847553][ T5904] m920x_read = error: -19 [ 868.919112][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 868.993520][ T29] audit: type=1326 audit(1733688233.671:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.043373][ T29] audit: type=1326 audit(1733688233.671:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.104745][ T29] audit: type=1326 audit(1733688233.671:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.184481][ T5904] m920x_read = error: -19 [ 869.198080][ T29] audit: type=1326 audit(1733688233.671:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.204293][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 869.368997][ T29] audit: type=1326 audit(1733688233.671:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.432258][ T29] audit: type=1326 audit(1733688233.671:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f080a97fed9 code=0x7ffc0000 [ 869.489380][ T5904] m920x_read = error: -19 [ 869.506093][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 869.751149][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'. [ 870.389816][T16665] m920x_read = error: -19 [ 870.414940][T16665] dvb-usb: error -19 while querying for an remote control event. [ 870.419915][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.863946][T16665] m920x_read = error: -19 [ 870.881092][T16665] dvb-usb: error -19 while querying for an remote control event. [ 871.027446][T17261] overlayfs: failed to resolve './file0': -2 [ 871.074921][T16665] m920x_read = error: -19 [ 871.085460][T16665] dvb-usb: error -19 while querying for an remote control event. [ 871.263365][T16665] m920x_read = error: -19 [ 871.267762][T16665] dvb-usb: error -19 while querying for an remote control event. [ 871.359154][T17270] loop8: detected capacity change from 0 to 7 [ 871.383452][T17270] Dev loop8: unable to read RDB block 7 [ 871.393384][T17270] loop8: unable to read partition table [ 871.399434][T17270] loop8: partition table beyond EOD, truncated [ 871.408853][T17270] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 871.408853][T17270] ) failed (rc=-5) [ 871.475221][T16665] m920x_read = error: -19 [ 871.480885][T16665] dvb-usb: error -19 while querying for an remote control event. [ 871.643472][ T5904] m920x_read = error: -19 [ 871.647934][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 872.725867][ T5904] m920x_read = error: -19 [ 872.730298][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 872.863676][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 873.311911][ T5901] m920x_read = error: -19 [ 873.316720][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 873.334756][T17291] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 873.366390][T17300] overlayfs: overlapping lowerdir path [ 873.506701][ T5904] m920x_read = error: -19 [ 873.526081][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 873.699283][T17318] overlayfs: failed to resolve './file0': -2 [ 873.703427][ T5901] m920x_read = error: -19 [ 873.716705][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 873.767923][T17322] FAULT_INJECTION: forcing a failure. [ 873.767923][T17322] name failslab, interval 1, probability 0, space 0, times 0 [ 873.853343][T17322] CPU: 0 UID: 0 PID: 17322 Comm: syz.7.2542 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 873.864169][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.874250][T17322] Call Trace: [ 873.877555][T17322] [ 873.880509][T17322] dump_stack_lvl+0x241/0x360 [ 873.885222][T17322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.890457][T17322] ? __pfx__printk+0x10/0x10 [ 873.895073][T17322] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 873.901077][T17322] ? __pfx___might_resched+0x10/0x10 [ 873.906394][T17322] ? ima_get_action+0x75/0xb0 [ 873.911107][T17322] should_fail_ex+0x3b0/0x4e0 [ 873.915816][T17322] should_failslab+0xac/0x100 [ 873.920524][T17322] kmem_cache_alloc_node_noprof+0x77/0x380 [ 873.926354][T17322] ? __alloc_skb+0x1c3/0x440 [ 873.930948][T17322] __alloc_skb+0x1c3/0x440 [ 873.935370][T17322] ? __pfx___alloc_skb+0x10/0x10 [ 873.940310][T17322] ? __lock_acquire+0x1397/0x2100 [ 873.945344][T17322] alloc_skb_with_frags+0xc3/0x820 [ 873.950463][T17322] sock_alloc_send_pskb+0x91a/0xa60 [ 873.955684][T17322] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 873.961405][T17322] ? __lock_acquire+0x1397/0x2100 [ 873.966448][T17322] ? dev_get_by_index+0x23/0x2d0 [ 873.971392][T17322] packet_sendmsg+0x3fe8/0x6a40 [ 873.976266][T17322] ? __lock_acquire+0x1397/0x2100 [ 873.981310][T17322] ? smack_socket_sendmsg+0x1bb/0x540 [ 873.986689][T17322] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 873.992414][T17322] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 873.998836][T17322] ? __pfx_packet_sendmsg+0x10/0x10 [ 874.004035][T17322] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 874.010802][T17322] ? __fget_files+0x2a/0x410 [ 874.015397][T17322] ? __might_fault+0xaa/0x120 [ 874.020091][T17322] ? __pfx_packet_sendmsg+0x10/0x10 [ 874.025287][T17322] __sock_sendmsg+0x221/0x270 [ 874.029969][T17322] __sys_sendto+0x363/0x4c0 [ 874.034477][T17322] ? __pfx___sys_sendto+0x10/0x10 [ 874.039500][T17322] ? __mutex_unlock_slowpath+0x21e/0x790 [ 874.045147][T17322] ? __fget_files+0x2a/0x410 [ 874.049747][T17322] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 874.055747][T17322] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 874.062091][T17322] __x64_sys_sendto+0xde/0x100 [ 874.066867][T17322] do_syscall_64+0xf3/0x230 [ 874.071378][T17322] ? clear_bhb_loop+0x35/0x90 [ 874.076067][T17322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.081972][T17322] RIP: 0033:0x7f9b2fb7fed9 [ 874.086393][T17322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.106014][T17322] RSP: 002b:00007f9b309f9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 874.114450][T17322] RAX: ffffffffffffffda RBX: 00007f9b2fd45fa0 RCX: 00007f9b2fb7fed9 [ 874.122424][T17322] RDX: 000000000000000e RSI: 0000000020000180 RDI: 0000000000000004 [ 874.130396][T17322] RBP: 00007f9b309f90a0 R08: 0000000020000100 R09: 0000000000000014 [ 874.138369][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.146341][T17322] R13: 0000000000000000 R14: 00007f9b2fd45fa0 R15: 00007ffe8fa42ed8 [ 874.154322][T17322] [ 874.159972][T15667] m920x_read = error: -19 [ 874.165174][T15667] dvb-usb: error -19 while querying for an remote control event. [ 874.309873][T17328] FAULT_INJECTION: forcing a failure. [ 874.309873][T17328] name failslab, interval 1, probability 0, space 0, times 0 [ 874.329238][ T5901] m920x_read = error: -19 [ 874.335555][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 874.371091][T17328] CPU: 0 UID: 0 PID: 17328 Comm: syz.1.2545 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 874.381915][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 874.391995][T17328] Call Trace: [ 874.395299][T17328] [ 874.398234][T17328] dump_stack_lvl+0x241/0x360 [ 874.402932][T17328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.408143][T17328] ? __pfx__printk+0x10/0x10 [ 874.412739][T17328] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 874.419244][T17328] ? __pfx___might_resched+0x10/0x10 [ 874.424554][T17328] ? kmemdup_nul+0x30/0xa0 [ 874.428977][T17328] should_fail_ex+0x3b0/0x4e0 [ 874.433659][T17328] should_failslab+0xac/0x100 [ 874.438358][T17328] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 874.444693][T17328] ? ovl_parse_param+0xdf0/0x1900 [ 874.449725][T17328] kstrdup+0x39/0xb0 [ 874.453625][T17328] ovl_parse_param+0xdf0/0x1900 [ 874.458485][T17328] ? __pfx_ovl_parse_param+0x10/0x10 [ 874.463771][T17328] ? smack_fs_context_parse_param+0xff/0x170 [ 874.469753][T17328] ? __pfx_smack_fs_context_parse_param+0x10/0x10 [ 874.476176][T17328] ? rcu_is_watching+0x15/0xb0 [ 874.480955][T17328] ? static_key_count+0x41/0x70 [ 874.485816][T17328] vfs_parse_fs_param+0x1a5/0x420 [ 874.490846][T17328] ? __pfx_ovl_next_opt+0x10/0x10 [ 874.495877][T17328] vfs_parse_monolithic_sep+0x2d9/0x420 [ 874.501429][T17328] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 874.507511][T17328] do_new_mount+0x28f/0xb40 [ 874.512019][T17328] ? __pfx_do_new_mount+0x10/0x10 [ 874.517046][T17328] __se_sys_mount+0x2d6/0x3c0 [ 874.521727][T17328] ? __pfx___se_sys_mount+0x10/0x10 [ 874.526928][T17328] ? do_syscall_64+0x100/0x230 [ 874.531694][T17328] ? __x64_sys_mount+0x20/0xc0 [ 874.536459][T17328] do_syscall_64+0xf3/0x230 [ 874.540965][T17328] ? clear_bhb_loop+0x35/0x90 [ 874.545638][T17328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.551532][T17328] RIP: 0033:0x7f080a97fed9 [ 874.555942][T17328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.575550][T17328] RSP: 002b:00007f080b7ee058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 874.583972][T17328] RAX: ffffffffffffffda RBX: 00007f080ab45fa0 RCX: 00007f080a97fed9 [ 874.591940][T17328] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 874.599912][T17328] RBP: 00007f080b7ee0a0 R08: 0000000020000480 R09: 0000000000000000 [ 874.607883][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.615851][T17328] R13: 0000000000000000 R14: 00007f080ab45fa0 R15: 00007ffdad618008 [ 874.623831][T17328] [ 874.651558][ T5901] m920x_read = error: -19 [ 874.661373][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 874.697678][T15667] hid (null): global environment stack underflow [ 874.713447][T15667] hid (null): global environment stack underflow [ 874.727346][T15667] hid-generic 00C6:0000:0006.001D: global environment stack underflow [ 874.736699][T15667] hid-generic 00C6:0000:0006.001D: item 0 1 1 11 parsing failed [ 874.745079][T15667] hid-generic 00C6:0000:0006.001D: probe with driver hid-generic failed with error -22 [ 874.844648][ T5904] m920x_read = error: -19 [ 874.849158][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 874.923404][ T5901] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 875.023374][ T5904] m920x_read = error: -19 [ 875.027761][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 875.073346][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 875.080303][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.090966][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 875.141765][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.157476][ T29] audit: type=1326 audit(1733688240.581:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2fb7fed9 code=0x7ffc0000 [ 875.189331][ T5901] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 875.204874][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 875.467956][ T29] audit: type=1326 audit(1733688240.581:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2fb7fed9 code=0x7ffc0000 [ 876.210217][ T5904] m920x_read = error: -19 [ 876.214822][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 876.222644][ T29] audit: type=1326 audit(1733688240.581:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2fb81df7 code=0x7ffc0000 [ 876.685416][ T5904] m920x_read = error: -19 [ 876.689831][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 876.854866][ T5904] m920x_read = error: -19 [ 876.859291][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 877.002131][ T29] audit: type=1326 audit(1733688240.581:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b2fb81d6c code=0x7ffc0000 [ 877.023474][ T5904] m920x_read = error: -19 [ 877.028092][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 877.036491][ T29] audit: type=1326 audit(1733688240.581:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b2fb81ca4 code=0x7ffc0000 [ 877.058801][ T29] audit: type=1326 audit(1733688240.581:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9b2fb81ca4 code=0x7ffc0000 [ 877.080493][ T29] audit: type=1326 audit(1733688240.581:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b2fb7eb3a code=0x7ffc0000 [ 877.193417][ T5904] m920x_read = error: -19 [ 877.197839][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 877.228172][ T29] audit: type=1326 audit(1733688240.581:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2fb7fed9 code=0x7ffc0000 [ 877.250479][ T29] audit: type=1326 audit(1733688240.581:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2fb7fed9 code=0x7ffc0000 [ 877.274569][ T29] audit: type=1326 audit(1733688240.601:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17344 comm="syz.7.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b2fb7fed9 code=0x7ffc0000 [ 877.302821][ T5901] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 877.312227][ T5901] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 877.320355][ T5901] usb 5-1: Manufacturer: syz [ 877.340659][ T5901] usb 5-1: config 0 descriptor?? [ 877.371334][T16665] m920x_read = error: -19 [ 877.547990][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2552'. [ 877.734823][T17342] ALSA: mixer_oss: invalid OSS volume '' [ 877.865256][T16665] dvb-usb: error -19 while querying for an remote control event. [ 877.874149][T17365] overlayfs: failed to resolve './file0': -2 [ 877.994170][ T5901] rc_core: IR keymap rc-hauppauge not found [ 878.007962][ T5901] Registered IR keymap rc-empty [ 878.012945][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.033429][T15667] m920x_read = error: -19 [ 878.037883][T15667] dvb-usb: error -19 while querying for an remote control event. [ 878.045955][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.064070][ T5901] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 878.082060][T17371] FAULT_INJECTION: forcing a failure. [ 878.082060][T17371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.097800][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input59 [ 878.121948][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.7.2557 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 878.132748][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 878.142816][T17371] Call Trace: [ 878.146106][T17371] [ 878.149040][T17371] dump_stack_lvl+0x241/0x360 [ 878.153726][T17371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.158924][T17371] ? __pfx__printk+0x10/0x10 [ 878.163515][T17371] ? __pfx_lock_release+0x10/0x10 [ 878.168538][T17371] ? __lock_acquire+0x1397/0x2100 [ 878.173572][T17371] should_fail_ex+0x3b0/0x4e0 [ 878.178263][T17371] _copy_from_user+0x2f/0xc0 [ 878.182867][T17371] kstrtouint_from_user+0xc6/0x190 [ 878.187993][T17371] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 878.193722][T17371] ? __pfx_lock_acquire+0x10/0x10 [ 878.198762][T17371] proc_fail_nth_write+0xaa/0x2d0 [ 878.203786][T17371] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 878.209678][T17371] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 878.215312][T17371] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 878.220944][T17371] vfs_write+0x2a3/0xd30 [ 878.225197][T17371] ? __pfx_vfs_write+0x10/0x10 [ 878.229967][T17371] ? __fget_files+0x2a/0x410 [ 878.234562][T17371] ? __fget_files+0x395/0x410 [ 878.239236][T17371] ? __fget_files+0x2a/0x410 [ 878.243828][T17371] ksys_write+0x18f/0x2b0 [ 878.248163][T17371] ? __pfx_ksys_write+0x10/0x10 [ 878.253020][T17371] ? do_syscall_64+0x100/0x230 [ 878.257787][T17371] ? do_syscall_64+0xb6/0x230 [ 878.262469][T17371] do_syscall_64+0xf3/0x230 [ 878.266976][T17371] ? clear_bhb_loop+0x35/0x90 [ 878.271656][T17371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.277551][T17371] RIP: 0033:0x7f9b2fb7e98f [ 878.281968][T17371] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 878.301579][T17371] RSP: 002b:00007f9b309f9050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 878.309999][T17371] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b2fb7e98f [ 878.317969][T17371] RDX: 0000000000000001 RSI: 00007f9b309f90b0 RDI: 0000000000000007 [ 878.325939][T17371] RBP: 00007f9b309f90a0 R08: 0000000000000000 R09: 0000000000000014 [ 878.333907][T17371] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 878.341874][T17371] R13: 0000000000000000 R14: 00007f9b2fd45fa0 R15: 00007ffe8fa42ed8 [ 878.349866][T17371] [ 878.370159][T15667] m920x_read = error: -19 [ 878.374674][T15667] dvb-usb: error -19 while querying for an remote control event. [ 878.388449][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.431030][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.453459][ T5904] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 878.523854][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.574770][T16665] m920x_read = error: -19 [ 878.583399][T16665] dvb-usb: error -19 while querying for an remote control event. [ 878.598013][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.663303][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.714662][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.737238][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 878.774232][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 878.928740][ T5904] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 878.973338][ T5904] usb 2-1: config 0 has no interface number 0 [ 878.979621][T16665] m920x_read = error: -19 [ 878.986764][T16665] dvb-usb: error -19 while querying for an remote control event. [ 879.009370][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 879.053491][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 879.070308][ T5904] usb 2-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice=a7.84 [ 879.079536][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.087611][ T5904] usb 2-1: Product: syz [ 879.091759][ T5904] usb 2-1: Manufacturer: syz [ 879.096725][ T5904] usb 2-1: SerialNumber: syz [ 879.103087][ T5901] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 879.112062][ T5904] usb 2-1: config 0 descriptor?? [ 879.130532][ T5904] gspca_main: sonixb-2.14.0 probing 0c45:60af [ 879.138039][ T5901] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 879.145254][T17381] FAULT_INJECTION: forcing a failure. [ 879.145254][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 879.147185][ T5901] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 879.167486][T17381] CPU: 1 UID: 0 PID: 17381 Comm: syz.0.2559 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 879.178891][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 879.188971][T17381] Call Trace: [ 879.192270][T17381] [ 879.195219][T17381] dump_stack_lvl+0x241/0x360 [ 879.199934][T17381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.205158][T17381] ? __pfx__printk+0x10/0x10 [ 879.209775][T17381] ? kmem_cache_alloc_noprof+0x48/0x380 [ 879.215518][T17381] ? __pfx___might_resched+0x10/0x10 [ 879.220835][T17381] should_fail_ex+0x3b0/0x4e0 [ 879.225534][T17381] should_failslab+0xac/0x100 [ 879.230233][T17381] ? getname_kernel+0x59/0x2f0 [ 879.235022][T17381] kmem_cache_alloc_noprof+0x70/0x380 [ 879.240424][T17381] ? trace_kmalloc+0x1f/0xd0 [ 879.245038][T17381] getname_kernel+0x59/0x2f0 [ 879.246221][ T5901] usb 5-1: USB disconnect, device number 57 [ 879.249637][T17381] kern_path+0x1d/0x50 [ 879.249667][T17381] ovl_parse_param+0x13f2/0x1900 [ 879.264566][T17381] ? __pfx_ovl_parse_param+0x10/0x10 [ 879.269873][T17381] ? smack_fs_context_parse_param+0xff/0x170 [ 879.271462][T15667] m920x_read = error: -19 [ 879.275861][T17381] ? __pfx_smack_fs_context_parse_param+0x10/0x10 [ 879.275896][T17381] ? rcu_is_watching+0x15/0xb0 [ 879.275927][T17381] ? static_key_count+0x41/0x70 [ 879.275954][T17381] vfs_parse_fs_param+0x1a5/0x420 [ 879.275977][T17381] ? __pfx_ovl_next_opt+0x10/0x10 [ 879.275999][T17381] vfs_parse_monolithic_sep+0x2d9/0x420 [ 879.276025][T17381] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 879.276063][T17381] do_new_mount+0x28f/0xb40 [ 879.280394][T15667] dvb-usb: error -19 while querying for an remote control event. [ 879.286756][T17381] ? __pfx_do_new_mount+0x10/0x10 [ 879.286788][T17381] __se_sys_mount+0x2d6/0x3c0 [ 879.286814][T17381] ? __pfx___se_sys_mount+0x10/0x10 [ 879.286836][T17381] ? do_syscall_64+0x100/0x230 [ 879.286865][T17381] ? __x64_sys_mount+0x20/0xc0 [ 879.286889][T17381] do_syscall_64+0xf3/0x230 [ 879.286913][T17381] ? clear_bhb_loop+0x35/0x90 [ 879.286941][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.286966][T17381] RIP: 0033:0x7f895337fed9 [ 879.286985][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.393809][T17381] RSP: 002b:00007f89540b7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.402234][T17381] RAX: ffffffffffffffda RBX: 00007f8953546080 RCX: 00007f895337fed9 [ 879.410223][T17381] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 879.418213][T17381] RBP: 00007f89540b70a0 R08: 0000000020000480 R09: 0000000000000000 [ 879.426193][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.434166][T17381] R13: 0000000000000000 R14: 00007f8953546080 R15: 00007fff587c6ee8 [ 879.442157][T17381] [ 879.448975][T16665] m920x_read = error: -19 [ 879.466585][T16665] dvb-usb: error -19 while querying for an remote control event. [ 879.477133][T17381] overlayfs: failed to resolve './bus': -12 [ 879.633765][T16665] m920x_read = error: -19 [ 879.639764][T16665] dvb-usb: error -19 while querying for an remote control event. [ 879.676206][ T5904] sonixb 2-1:0.89: Error reading register 00: -110 [ 879.903405][ T5901] m920x_read = error: -19 [ 879.908020][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 880.068245][T16665] usb 2-1: USB disconnect, device number 46 [ 880.077204][ T5901] m920x_read = error: -19 [ 880.081578][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 880.129274][T17384] loop8: detected capacity change from 0 to 7 [ 880.171051][T17384] Dev loop8: unable to read RDB block 7 [ 880.184079][T17384] loop8: unable to read partition table [ 880.198258][T17384] loop8: partition table beyond EOD, truncated [ 880.233993][T17384] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 880.233993][T17384] ) failed (rc=-5) [ 880.323335][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 880.323354][ T29] audit: type=1326 audit(1733688245.741:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17388 comm="syz.4.2563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x0 [ 880.356882][T16665] m920x_read = error: -19 [ 880.361305][T16665] dvb-usb: error -19 while querying for an remote control event. [ 880.481425][T17396] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2564'. [ 880.545086][T15667] m920x_read = error: -19 [ 880.780708][T15667] dvb-usb: error -19 while querying for an remote control event. [ 881.053577][T15667] m920x_read = error: -19 [ 881.057964][T15667] dvb-usb: error -19 while querying for an remote control event. [ 881.193311][T17404] bridge0: port 2(erspan0) entered blocking state [ 881.200064][T17404] bridge0: port 2(erspan0) entered disabled state [ 881.208007][T17404] erspan0: entered allmulticast mode [ 881.218490][T17404] erspan0: entered promiscuous mode [ 881.884802][T15667] m920x_read = error: -19 [ 881.889683][T15667] dvb-usb: error -19 while querying for an remote control event. [ 882.156439][ T5901] m920x_read = error: -19 [ 882.160919][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 882.303516][ T9161] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 882.343475][ T5901] m920x_read = error: -19 [ 882.347889][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 882.381044][T17425] 9pnet_fd: Insufficient options for proto=fd [ 882.524465][ T9161] usb 1-1: Using ep0 maxpacket: 8 [ 882.530963][ T9161] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.546928][ T9161] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.567425][ T9161] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 882.569025][ T5901] m920x_read = error: -19 [ 882.588373][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 882.596480][ T9161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.663507][ T46] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 882.703870][T15667] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 882.756765][T16665] m920x_read = error: -19 [ 882.761149][T16665] dvb-usb: error -19 while querying for an remote control event. [ 882.833693][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 882.857314][ T46] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 882.857841][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2577'. [ 882.875796][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.903669][T15667] usb 5-1: Using ep0 maxpacket: 16 [ 882.936557][ T5901] m920x_read = error: -19 [ 882.937301][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 882.969744][T15667] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 882.969776][T15667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.969798][T15667] usb 5-1: Product: syz [ 882.969816][T15667] usb 5-1: Manufacturer: syz [ 882.969832][T15667] usb 5-1: SerialNumber: syz [ 883.013172][T15667] usb 5-1: config 0 descriptor?? [ 883.169659][ T9] m920x_read = error: -19 [ 883.169684][ T9] dvb-usb: error -19 while querying for an remote control event. [ 883.325810][ T46] usb 9-1: config 0 descriptor?? [ 883.337891][T16665] m920x_read = error: -19 [ 883.338189][T16665] dvb-usb: error -19 while querying for an remote control event. [ 883.342576][T15667] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v169 fw v83.176.175 (1 channels) [ 883.408329][ T46] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 883.493427][T16665] m920x_read = error: -19 [ 883.493454][T16665] dvb-usb: error -19 while querying for an remote control event. [ 883.548337][T15667] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 883.623528][T15667] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 883.672697][T16665] m920x_read = error: -19 [ 883.677172][T16665] dvb-usb: error -19 while querying for an remote control event. [ 883.756347][T15667] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 883.760946][T15667] usb 5-1: USB disconnect, device number 58 [ 883.979109][ T5901] m920x_read = error: -19 [ 883.983995][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 884.036088][ T9161] usbhid 1-1:4.0: can't add hid device: -71 [ 884.052042][ T9161] usbhid 1-1:4.0: probe with driver usbhid failed with error -71 [ 884.143542][T16665] m920x_read = error: -19 [ 884.809711][T16665] dvb-usb: error -19 while querying for an remote control event. [ 884.923364][ T9161] usb 1-1: USB disconnect, device number 87 [ 885.032378][T15667] m920x_read = error: -19 [ 885.807847][T17455] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2580'. [ 885.810192][ T46] gspca_vc032x: reg_w err -110 [ 885.822042][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.827490][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.832853][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.832934][T15667] dvb-usb: error -19 while querying for an remote control event. [ 885.838291][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.851375][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.856823][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.862600][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.868465][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.873966][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.879379][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.884774][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.890138][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.895547][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.900905][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.906690][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.912059][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.917639][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.923024][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 885.928665][ T46] gspca_vc032x: Unknown sensor... [ 885.934209][ T46] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 886.055977][T17452] block device autoloading is deprecated and will be removed. [ 886.067099][T17452] syz.0.2579: attempt to access beyond end of device [ 886.067099][T17452] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 886.173873][T16665] m920x_read = error: -19 [ 886.185703][T16665] dvb-usb: error -19 while querying for an remote control event. [ 886.365451][T15667] m920x_read = error: -19 [ 886.374514][T15667] dvb-usb: error -19 while querying for an remote control event. [ 886.536212][T15667] usb 9-1: USB disconnect, device number 87 [ 886.547247][T16665] m920x_read = error: -19 [ 886.551661][T16665] dvb-usb: error -19 while querying for an remote control event. [ 886.622187][ T29] audit: type=1326 audit(1733688252.021:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17456 comm="syz.1.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f080a97fed9 code=0x0 [ 886.843462][T16665] m920x_read = error: -19 [ 886.858583][T16665] dvb-usb: error -19 while querying for an remote control event. [ 886.930761][T17480] loop8: detected capacity change from 0 to 7 [ 886.976236][ T8273] Dev loop8: unable to read RDB block 7 [ 886.986636][ T8273] loop8: unable to read partition table [ 887.003169][ T8273] loop8: partition table beyond EOD, truncated [ 887.037966][T17480] Dev loop8: unable to read RDB block 7 [ 887.045069][T17480] loop8: unable to read partition table [ 887.050886][T17480] loop8: partition table beyond EOD, truncated [ 887.057832][T15667] m920x_read = error: -19 [ 887.062196][T15667] dvb-usb: error -19 while querying for an remote control event. [ 887.085415][T17480] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 887.085415][T17480] ) failed (rc=-5) [ 887.223404][ T9] m920x_read = error: -19 [ 887.227788][ T9] dvb-usb: error -19 while querying for an remote control event. [ 887.283824][ T9161] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 887.398352][ T9] m920x_read = error: -19 [ 887.402752][ T9] dvb-usb: error -19 while querying for an remote control event. [ 887.483743][ T9161] usb 5-1: Using ep0 maxpacket: 32 [ 887.503834][ T9161] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 887.514836][ T9161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.547049][T17504] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2595'. [ 887.554063][ T9161] usb 5-1: config 0 descriptor?? [ 887.603823][ T46] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 887.639013][ T9161] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 887.663560][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 887.672174][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 887.680139][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 887.687946][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 887.694851][ T9] m920x_read = error: -19 [ 887.695659][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 887.699816][ T9] dvb-usb: error -19 while querying for an remote control event. [ 887.707813][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 887.707870][ T9161] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 887.743335][ T9161] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 887.932473][ T9161] usb 5-1: USB disconnect, device number 59 [ 888.000755][ T9161] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 888.064506][ T9161] keyspan 5-1:0.0: device disconnected [ 888.067108][T15667] m920x_read = error: -19 [ 888.103407][T15667] dvb-usb: error -19 while querying for an remote control event. [ 888.105442][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 888.130615][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.169744][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.179778][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.193525][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 888.202959][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.216483][ T46] usb 2-1: config 0 descriptor?? [ 888.296402][T15667] m920x_read = error: -19 [ 888.300779][T15667] dvb-usb: error -19 while querying for an remote control event. [ 888.534735][T16665] m920x_read = error: -19 [ 888.545246][T16665] dvb-usb: error -19 while querying for an remote control event. [ 888.773460][T15667] m920x_read = error: -19 [ 888.856383][T15667] dvb-usb: error -19 while querying for an remote control event. [ 889.454495][T15667] m920x_read = error: -19 [ 889.474944][T15667] dvb-usb: error -19 while querying for an remote control event. [ 889.663393][T16665] m920x_read = error: -19 [ 889.667792][T16665] dvb-usb: error -19 while querying for an remote control event. [ 889.731895][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 889.742044][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 889.787969][ T46] usb 2-1: USB disconnect, device number 47 [ 889.844831][T16665] m920x_read = error: -19 [ 889.849281][T16665] dvb-usb: error -19 while querying for an remote control event. [ 890.014905][T16665] m920x_read = error: -19 [ 890.019291][T16665] dvb-usb: error -19 while querying for an remote control event. [ 890.073458][T17503] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 890.077553][T15667] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 890.194205][ T9] m920x_read = error: -19 [ 890.198620][ T9] dvb-usb: error -19 while querying for an remote control event. [ 890.213769][T17503] usb 1-1: device descriptor read/64, error -71 [ 890.270674][ T29] audit: type=1326 audit(1733688255.691:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17535 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7fc00000 [ 890.281762][T15667] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 890.303571][T17543] overlay: Unknown parameter '\aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaoverlay' [ 890.331007][T15667] usb 9-1: can't read configurations, error -61 [ 890.364456][ T9] m920x_read = error: -19 [ 890.368825][ T9] dvb-usb: error -19 while querying for an remote control event. [ 890.383964][ T46] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 890.511680][T15667] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 890.513360][T17503] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 890.520992][T17546] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2608'. [ 890.547155][ T9] m920x_read = error: -19 [ 890.550432][ T46] usb 2-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 890.551991][ T9] dvb-usb: error -19 while querying for an remote control event. [ 890.562008][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.683751][T17503] usb 1-1: device descriptor read/64, error -71 [ 890.714145][ T46] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 890.765104][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.782527][T16665] m920x_read = error: -19 [ 890.794650][T17503] usb usb1-port1: attempt power cycle [ 890.794716][T16665] dvb-usb: error -19 while querying for an remote control event. [ 890.867160][T15667] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 890.873710][ T46] usb 2-1: config 0 descriptor?? [ 890.908029][T15667] usb 9-1: can't read configurations, error -61 [ 890.925572][T15667] usb usb9-port1: attempt power cycle [ 890.944790][ T29] audit: type=1326 audit(1733688256.371:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17535 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e1d7fed9 code=0x7fc00000 [ 891.007387][ T29] audit: type=1326 audit(1733688256.371:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17535 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e1d7fed9 code=0x7fc00000 [ 891.016467][ T46] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 891.029319][ T5901] m920x_read = error: -19 [ 891.069778][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 891.160728][T17503] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 891.243955][ T5901] m920x_read = error: -19 [ 891.249188][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 891.430438][T15667] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 891.461062][ T5901] m920x_read = error: -19 [ 891.466781][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 891.672190][ T5901] m920x_read = error: -19 [ 891.672305][T15667] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 891.689864][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 891.697003][T17503] usb 1-1: device descriptor read/8, error -71 [ 891.698927][T15667] usb 9-1: can't read configurations, error -61 [ 891.762206][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 891.848973][T15667] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 891.873623][T16665] m920x_read = error: -19 [ 891.878195][T16665] dvb-usb: error -19 while querying for an remote control event. [ 891.888169][T15667] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 891.896053][T15667] usb 9-1: can't read configurations, error -61 [ 891.904155][T15667] usb usb9-port1: unable to enumerate USB device [ 891.943568][T17503] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 891.970100][T17503] usb 1-1: device descriptor read/8, error -71 [ 892.043626][T15667] m920x_read = error: -19 [ 892.048051][T15667] dvb-usb: error -19 while querying for an remote control event. [ 892.056037][ T5901] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 892.086657][T17503] usb usb1-port1: unable to enumerate USB device [ 892.213362][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 892.219884][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 892.229082][ T5901] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 892.238867][T15667] m920x_read = error: -19 [ 892.243413][T15667] dvb-usb: error -19 while querying for an remote control event. [ 892.251164][ T5901] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 892.261037][ T5901] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 892.271125][ T5901] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 892.280934][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 892.287745][ T5901] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 892.296972][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.311619][ T5901] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 892.403430][T16665] m920x_read = error: -19 [ 892.407852][T16665] dvb-usb: error -19 while querying for an remote control event. [ 892.512632][ T5901] scsi host1: usb-storage 5-1:1.0 [ 892.573512][ T5901] m920x_read = error: -19 [ 892.578056][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 892.733709][T17557] kAFS: unparsable volume name [ 892.743906][ T5901] m920x_read = error: -19 [ 892.748630][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 892.927663][T16665] m920x_read = error: -19 [ 892.935778][T16665] dvb-usb: error -19 while querying for an remote control event. [ 893.693467][ T5901] m920x_read = error: -19 [ 893.721610][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 894.095348][ T9] m920x_read = error: -19 [ 894.099922][ T9] dvb-usb: error -19 while querying for an remote control event. [ 894.148931][T16665] usb 2-1: USB disconnect, device number 48 [ 894.182493][T16322] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 894.263457][T15667] m920x_read = error: -19 [ 894.267895][T15667] dvb-usb: error -19 while querying for an remote control event. [ 894.481477][T16322] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 894.634289][T16665] m920x_read = error: -19 [ 894.638801][T16665] dvb-usb: error -19 while querying for an remote control event. [ 894.753871][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 894.965263][ T5904] m920x_read = error: -19 [ 895.270463][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 895.463482][ T5904] m920x_read = error: -19 [ 895.467868][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 895.653715][T16665] m920x_read = error: -19 [ 895.658093][T16665] dvb-usb: error -19 while querying for an remote control event. [ 895.667197][T17593] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2621'. [ 895.947838][T16665] m920x_read = error: -19 [ 895.967064][T16665] dvb-usb: error -19 while querying for an remote control event. [ 896.153445][T17561] usb 5-1: reset high-speed USB device number 60 using dummy_hcd [ 896.175408][T15667] m920x_read = error: -19 [ 896.180705][T15667] dvb-usb: error -19 while querying for an remote control event. [ 896.267812][T17561] usb 5-1: device reset changed ep0 maxpacket size! [ 896.358453][T17503] usb 5-1: USB disconnect, device number 60 [ 896.366082][T16665] m920x_read = error: -19 [ 896.370488][T16665] dvb-usb: error -19 while querying for an remote control event. [ 896.446005][ T35] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 896.456648][ T35] sd 1:0:0:0: [sdb] Sense not available. [ 896.462695][ T35] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 896.534674][T16665] m920x_read = error: -19 [ 896.539050][T16665] dvb-usb: error -19 while querying for an remote control event. [ 896.583507][ T35] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 896.584519][ T35] sd 1:0:0:0: [sdb] Write Protect is off [ 896.584541][ T35] sd 1:0:0:0: [sdb] Mode Sense: 00 00 00 00 [ 896.585242][ T35] sd 1:0:0:0: [sdb] Asking for cache data failed [ 896.585265][ T35] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 896.586395][ T35] [ 896.586401][ T35] ====================================================== [ 896.586406][ T35] WARNING: possible circular locking dependency detected [ 896.586412][ T35] 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 Not tainted [ 896.586419][ T35] ------------------------------------------------------ [ 896.586424][ T35] kworker/u8:2/35 is trying to acquire lock: [ 896.586431][ T35] ffff888028d0ba00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x3fa/0x830 [ 896.586463][ T35] [ 896.586463][ T35] but task is already holding lock: [ 896.586467][ T35] ffff888028d0b1c8 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 896.586494][ T35] [ 896.586494][ T35] which lock already depends on the new lock. [ 896.586494][ T35] [ 896.586499][ T35] [ 896.586499][ T35] the existing dependency chain (in reverse order) is: [ 896.586503][ T35] [ 896.586503][ T35] -> #5 (&q->q_usage_counter(queue)#55){++++}-{0:0}: [ 896.586521][ T35] lock_acquire+0x1ed/0x550 [ 896.586533][ T35] blk_queue_enter+0xe1/0x600 [ 896.586543][ T35] blk_mq_alloc_request+0x4fa/0xaa0 [ 896.586556][ T35] scsi_execute_cmd+0x177/0x1090 [ 896.586567][ T35] read_capacity_10+0x256/0x9c0 [ 896.586580][ T35] sd_revalidate_disk+0x1066/0xbce0 [ 896.586593][ T35] sd_probe+0x9fa/0x1100 [ 896.586604][ T35] really_probe+0x2b8/0xad0 [ 896.586616][ T35] __driver_probe_device+0x1a2/0x390 [ 896.586626][ T35] driver_probe_device+0x50/0x430 [ 896.586637][ T35] __device_attach_driver+0x2d6/0x530 [ 896.586647][ T35] bus_for_each_drv+0x24e/0x2e0 [ 896.586660][ T35] __device_attach_async_helper+0x22d/0x300 [ 896.586671][ T35] async_run_entry_fn+0xa8/0x420 [ 896.586686][ T35] process_scheduled_works+0xa66/0x1840 [ 896.586700][ T35] worker_thread+0x870/0xd30 [ 896.586722][ T35] kthread+0x2f0/0x390 [ 896.586733][ T35] ret_from_fork+0x4b/0x80 [ 896.586742][ T35] ret_from_fork_asm+0x1a/0x30 [ 896.586756][ T35] [ 896.586756][ T35] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 896.586771][ T35] lock_acquire+0x1ed/0x550 [ 896.586781][ T35] __mutex_lock+0x1ac/0xee0 [ 896.586795][ T35] nbd_set_size+0x2e0/0x8f0 [ 896.586807][ T35] nbd_ioctl+0x5dc/0xf40 [ 896.586826][ T35] blkdev_ioctl+0x57d/0x6a0 [ 896.586835][ T35] __se_sys_ioctl+0xf5/0x170 [ 896.586849][ T35] do_syscall_64+0xf3/0x230 [ 896.586862][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.586877][ T35] [ 896.586877][ T35] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 896.586895][ T35] lock_acquire+0x1ed/0x550 [ 896.586905][ T35] blk_mq_submit_bio+0x1536/0x2390 [ 896.586915][ T35] __submit_bio+0x2c6/0x560 [ 896.586925][ T35] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 896.586935][ T35] mpage_readahead+0x7da/0x930 [ 896.586947][ T35] read_pages+0x176/0x830 [ 896.586960][ T35] page_cache_ra_unbounded+0x797/0x8c0 [ 896.586972][ T35] page_cache_sync_ra+0x3c5/0xad0 [ 896.586985][ T35] filemap_get_pages+0x621/0x2540 [ 896.587000][ T35] filemap_read+0x45c/0xf50 [ 896.587012][ T35] blkdev_read_iter+0x2d8/0x430 [ 896.587024][ T35] vfs_read+0x991/0xb70 [ 896.587037][ T35] ksys_read+0x18f/0x2b0 [ 896.587049][ T35] do_syscall_64+0xf3/0x230 [ 896.587062][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.587076][ T35] [ 896.587076][ T35] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 896.587093][ T35] lock_acquire+0x1ed/0x550 [ 896.587103][ T35] down_read+0xb1/0xa40 [ 896.587116][ T35] filemap_fault+0x6e8/0x1950 [ 896.587125][ T35] __do_fault+0x135/0x460 [ 896.587137][ T35] handle_pte_fault+0x335a/0x68a0 [ 896.587150][ T35] handle_mm_fault+0x1053/0x1ad0 [ 896.587161][ T35] __get_user_pages+0x1c82/0x49e0 [ 896.587173][ T35] populate_vma_page_range+0x264/0x330 [ 896.587184][ T35] __mm_populate+0x27a/0x460 [ 896.587195][ T35] vm_mmap_pgoff+0x2c3/0x3d0 [ 896.587207][ T35] ksys_mmap_pgoff+0x4eb/0x720 [ 896.587224][ T35] do_syscall_64+0xf3/0x230 [ 896.587236][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.587250][ T35] [ 896.587250][ T35] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 896.587265][ T35] lock_acquire+0x1ed/0x550 [ 896.587274][ T35] __might_fault+0xc6/0x120 [ 896.587285][ T35] _copy_from_user+0x2a/0xc0 [ 896.587300][ T35] blk_trace_ioctl+0x1ad/0x9a0 [ 896.587310][ T35] blkdev_ioctl+0x40c/0x6a0 [ 896.587319][ T35] __se_sys_ioctl+0xf5/0x170 [ 896.587332][ T35] do_syscall_64+0xf3/0x230 [ 896.587344][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.587358][ T35] [ 896.587358][ T35] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 896.587372][ T35] validate_chain+0x18ef/0x5920 [ 896.587385][ T35] __lock_acquire+0x1397/0x2100 [ 896.587394][ T35] lock_acquire+0x1ed/0x550 [ 896.587404][ T35] __mutex_lock+0x1ac/0xee0 [ 896.587416][ T35] blk_mq_init_sched+0x3fa/0x830 [ 896.587426][ T35] elevator_init_mq+0x20e/0x320 [ 896.587435][ T35] add_disk_fwnode+0x10d/0xf80 [ 896.587445][ T35] sd_probe+0xba6/0x1100 [ 896.587457][ T35] really_probe+0x2b8/0xad0 [ 896.587467][ T35] __driver_probe_device+0x1a2/0x390 [ 896.587477][ T35] driver_probe_device+0x50/0x430 [ 896.587487][ T35] __device_attach_driver+0x2d6/0x530 [ 896.587498][ T35] bus_for_each_drv+0x24e/0x2e0 [ 896.587510][ T35] __device_attach_async_helper+0x22d/0x300 [ 896.587521][ T35] async_run_entry_fn+0xa8/0x420 [ 896.587535][ T35] process_scheduled_works+0xa66/0x1840 [ 896.587549][ T35] worker_thread+0x870/0xd30 [ 896.587557][ T35] kthread+0x2f0/0x390 [ 896.587567][ T35] ret_from_fork+0x4b/0x80 [ 896.587576][ T35] ret_from_fork_asm+0x1a/0x30 [ 896.587589][ T35] [ 896.587589][ T35] other info that might help us debug this: [ 896.587589][ T35] [ 896.587593][ T35] Chain exists of: [ 896.587593][ T35] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#55 [ 896.587593][ T35] [ 896.587613][ T35] Possible unsafe locking scenario: [ 896.587613][ T35] [ 896.587617][ T35] CPU0 CPU1 [ 896.587621][ T35] ---- ---- [ 896.587624][ T35] lock(&q->q_usage_counter(queue)#55); [ 896.587635][ T35] lock(&q->limits_lock); [ 896.587643][ T35] lock(&q->q_usage_counter(queue)#55); [ 896.587654][ T35] lock(&q->debugfs_mutex); [ 896.587662][ T35] [ 896.587662][ T35] *** DEADLOCK *** [ 896.587662][ T35] [ 896.587665][ T35] 4 locks held by kworker/u8:2/35: [ 896.587672][ T35] #0: ffff88801baef148 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 896.587702][ T35] #1: ffffc90000ab7d00 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 896.587731][ T35] #2: ffff88814d1ae378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0xfc/0x300 [ 896.587758][ T35] #3: ffff888028d0b1c8 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 896.587790][ T35] [ 896.587790][ T35] stack backtrace: [ 896.587795][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 896.587808][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 896.587815][ T35] Workqueue: async async_run_entry_fn [ 896.587830][ T35] Call Trace: [ 896.587834][ T35] [ 896.587840][ T35] dump_stack_lvl+0x241/0x360 [ 896.587854][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.587866][ T35] ? __pfx__printk+0x10/0x10 [ 896.587881][ T35] print_circular_bug+0x13a/0x1b0 [ 896.587895][ T35] check_noncircular+0x36a/0x4a0 [ 896.587909][ T35] ? __pfx_check_noncircular+0x10/0x10 [ 896.587921][ T35] ? lockdep_lock+0x123/0x2b0 [ 896.587934][ T35] validate_chain+0x18ef/0x5920 [ 896.587950][ T35] ? validate_chain+0x11e/0x5920 [ 896.587962][ T35] ? preempt_count_add+0x93/0x190 [ 896.587977][ T35] ? __pfx_validate_chain+0x10/0x10 [ 896.587989][ T35] ? stack_trace_save+0x118/0x1d0 [ 896.588004][ T35] ? unwind_next_frame+0x18e6/0x22d0 [ 896.588015][ T35] ? deref_stack_reg+0x17c/0x210 [ 896.588026][ T35] ? preempt_count_add+0x93/0x190 [ 896.588039][ T35] ? unwind_next_frame+0x193b/0x22d0 [ 896.588052][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 896.588066][ T35] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 896.588081][ T35] ? arch_stack_walk+0x11c/0x150 [ 896.588094][ T35] ? mark_lock+0x9a/0x360 [ 896.588106][ T35] __lock_acquire+0x1397/0x2100 [ 896.588120][ T35] lock_acquire+0x1ed/0x550 [ 896.588130][ T35] ? blk_mq_init_sched+0x3fa/0x830 [ 896.588142][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 896.588152][ T35] ? __device_attach_driver+0x2d6/0x530 [ 896.588164][ T35] ? bus_for_each_drv+0x24e/0x2e0 [ 896.588177][ T35] ? __pfx___might_resched+0x10/0x10 [ 896.588191][ T35] ? kthread+0x2f0/0x390 [ 896.588202][ T35] ? ret_from_fork+0x4b/0x80 [ 896.588217][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 896.588233][ T35] __mutex_lock+0x1ac/0xee0 [ 896.588246][ T35] ? blk_mq_init_sched+0x3fa/0x830 [ 896.588257][ T35] ? __asan_memset+0x23/0x50 [ 896.588270][ T35] ? lockdep_init_map_type+0xa1/0x910 [ 896.588281][ T35] ? blk_mq_init_sched+0x3fa/0x830 [ 896.588291][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 896.588307][ T35] ? blk_queue_flag_set+0x24/0x40 [ 896.588323][ T35] blk_mq_init_sched+0x3fa/0x830 [ 896.588333][ T35] ? percpu_ref_is_zero+0xe9/0x100 [ 896.588346][ T35] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 896.588356][ T35] ? blk_mq_cancel_work_sync+0xf3/0x140 [ 896.588367][ T35] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 896.588379][ T35] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 896.588392][ T35] ? add_disk_fwnode+0x10d/0xf80 [ 896.588403][ T35] elevator_init_mq+0x20e/0x320 [ 896.588415][ T35] add_disk_fwnode+0x10d/0xf80 [ 896.588427][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.588440][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 896.588453][ T35] sd_probe+0xba6/0x1100 [ 896.588468][ T35] ? __pfx_sd_probe+0x10/0x10 [ 896.588479][ T35] really_probe+0x2b8/0xad0 [ 896.588492][ T35] __driver_probe_device+0x1a2/0x390 [ 896.588505][ T35] driver_probe_device+0x50/0x430 [ 896.588517][ T35] __device_attach_driver+0x2d6/0x530 [ 896.588529][ T35] bus_for_each_drv+0x24e/0x2e0 [ 896.588543][ T35] ? __pfx___device_attach_driver+0x10/0x10 [ 896.588555][ T35] ? __pfx_bus_for_each_drv+0x10/0x10 [ 896.588568][ T35] ? ktime_get+0x3e/0x1f0 [ 896.588582][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 896.588596][ T35] __device_attach_async_helper+0x22d/0x300 [ 896.588609][ T35] ? __pfx___device_attach_async_helper+0x10/0x10 [ 896.588621][ T35] ? process_scheduled_works+0x976/0x1840 [ 896.588636][ T35] ? read_tsc+0x9/0x20 [ 896.588649][ T35] ? ktime_get+0x1c5/0x1f0 [ 896.588663][ T35] ? __pfx___device_attach_async_helper+0x10/0x10 [ 896.588675][ T35] async_run_entry_fn+0xa8/0x420 [ 896.588689][ T35] ? process_scheduled_works+0x976/0x1840 [ 896.588704][ T35] process_scheduled_works+0xa66/0x1840 [ 896.588723][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 896.588739][ T35] ? assign_work+0x364/0x3d0 [ 896.588754][ T35] worker_thread+0x870/0xd30 [ 896.588767][ T35] ? __kthread_parkme+0x169/0x1d0 [ 896.588777][ T35] ? __pfx_worker_thread+0x10/0x10 [ 896.588787][ T35] kthread+0x2f0/0x390 [ 896.588798][ T35] ? __pfx_worker_thread+0x10/0x10 [ 896.588807][ T35] ? __pfx_kthread+0x10/0x10 [ 896.588818][ T35] ret_from_fork+0x4b/0x80 [ 896.588828][ T35] ? __pfx_kthread+0x10/0x10 [ 896.588839][ T35] ret_from_fork_asm+0x1a/0x30 [ 896.588855][ T35] [ 896.604609][T17606] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 896.604631][T17606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 896.604674][T17606] vhci_hcd vhci_hcd.0: Device attached [ 896.750612][T17607] vhci_hcd: connection closed [ 896.753984][T16665] m920x_read = error: -19 [ 896.762545][ T3690] vhci_hcd: stop threads [ 896.764214][T16665] dvb-usb: error -19 while querying for an remote control event. [ 896.769626][ T3690] vhci_hcd: release socket [ 896.799956][ T35] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 896.802147][ T3690] vhci_hcd: disconnect device [ 896.996846][T16665] m920x_read = error: -19 [ 897.020483][ T46] vhci_hcd: vhci_device speed not set [ 897.027129][T16665] dvb-usb: error -19 while querying for an remote control event. [ 898.044064][ T5904] m920x_read = error: -19 [ 898.048452][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 898.084486][T17503] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 898.213385][T16665] m920x_read = error: -19 [ 898.217778][T16665] dvb-usb: error -19 while querying for an remote control event. [ 898.233877][T17503] usb 5-1: Using ep0 maxpacket: 32 [ 898.240304][T17503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.251703][T17503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.261481][T17503] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 898.274356][T17503] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 898.283428][T17503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.292338][T17503] usb 5-1: config 0 descriptor?? [ 898.383453][T16665] m920x_read = error: -19 [ 898.387835][T16665] dvb-usb: error -19 while querying for an remote control event. [ 898.553671][T16665] m920x_read = error: -19 [ 898.559005][T16665] dvb-usb: error -19 while querying for an remote control event. [ 898.711548][T17503] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001E/input/input60 [ 898.723711][ T5904] m920x_read = error: -19 [ 898.728067][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 898.739100][T17503] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001E/input/input61 [ 898.757229][T17503] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 898.799224][T14540] udevd[14540]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 898.846801][T14313] udevd[14313]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 898.893369][T16665] m920x_read = error: -19 [ 898.897741][T16665] dvb-usb: error -19 while querying for an remote control event. [ 899.103610][ T5904] m920x_read = error: -19 [ 899.108006][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 899.273331][ T5904] m920x_read = error: -19 [ 899.277767][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 899.443780][T16665] m920x_read = error: -19 [ 899.448151][T16665] dvb-usb: error -19 while querying for an remote control event. [ 899.613379][T16665] m920x_read = error: -19 [ 899.617776][T16665] dvb-usb: error -19 while querying for an remote control event. [ 899.783617][ C1] kye 0003:0458:5011.001E: usb_submit_urb(ctrl) failed: -1 [ 899.784827][T16665] m920x_read = error: -19 [ 899.797995][T16665] dvb-usb: error -19 while querying for an remote control event. [ 899.963492][T16665] m920x_read = error: -19 [ 899.970286][T16665] dvb-usb: error -19 while querying for an remote control event. [ 900.133801][T16665] m920x_read = error: -19 [ 900.138187][T16665] dvb-usb: error -19 while querying for an remote control event. [ 900.303475][T16665] m920x_read = error: -19 [ 900.307882][T16665] dvb-usb: error -19 while querying for an remote control event. [ 900.475568][T16665] m920x_read = error: -19 [ 900.479925][T16665] dvb-usb: error -19 while querying for an remote control event. [ 900.553694][ T5867] usb 5-1: USB disconnect, device number 61 [ 900.643470][ T5904] m920x_read = error: -19 [ 900.647834][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 900.813313][ T5904] m920x_read = error: -19 [ 900.817665][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 900.983942][ T5904] m920x_read = error: -19 [ 900.988306][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 901.153819][ T5904] m920x_read = error: -19 [ 901.158195][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 901.323358][ T5904] m920x_read = error: -19 [ 901.327722][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 901.494137][ T5904] m920x_read = error: -19 [ 901.498511][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 901.663995][ T5904] m920x_read = error: -19 [ 901.668360][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 901.835570][ T5904] m920x_read = error: -19 [ 901.839918][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 902.004203][T15667] m920x_read = error: -19 [ 902.008566][T15667] dvb-usb: error -19 while querying for an remote control event. [ 902.173354][T15667] m920x_read = error: -19 [ 902.177762][T15667] dvb-usb: error -19 while querying for an remote control event. [ 902.343356][T15667] m920x_read = error: -19 [ 902.348152][T15667] dvb-usb: error -19 while querying for an remote control event. [ 902.513787][ T5904] m920x_read = error: -19 [ 902.518152][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 902.683358][ T5904] m920x_read = error: -19 [ 902.687739][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 902.853540][ T5904] m920x_read = error: -19 [ 902.858857][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 903.023437][ T5904] m920x_read = error: -19 [ 903.027805][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 903.193333][T15667] m920x_read = error: -19 [ 903.197698][T15667] dvb-usb: error -19 while querying for an remote control event. [ 903.363390][ T5904] m920x_read = error: -19 [ 903.368947][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 903.533332][ T5904] m920x_read = error: -19 [ 903.537698][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 903.705812][ T5904] m920x_read = error: -19 [ 903.710158][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 903.873709][ T5904] m920x_read = error: -19 [ 903.878074][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 904.043582][ T5904] m920x_read = error: -19 [ 904.047986][ T5904] dvb-usb: error -19 while querying for an remote control event. [ 904.213802][T15667] m920x_read = error: -19 [ 904.218147][T15667] dvb-usb: error -19 while querying for an remote control event. [ 904.386507][T15667] m920x_read = error: -19 [ 904.390859][T15667] dvb-usb: error -19 while querying for an remote control event. [ 904.554388][T15667] m920x_read = error: -19 [ 904.558742][T15667] dvb-usb: error -19 while querying for an remote control event. [ 904.723411][T15667] m920x_read = error: -19 [ 904.727783][T15667] dvb-usb: error -19 while querying for an remote control event. [ 904.893601][T15667] m920x_read = error: -19 [ 904.897966][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.063437][T15667] m920x_read = error: -19 [ 905.067785][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.233412][T15667] m920x_read = error: -19 [ 905.237777][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.404166][T15667] m920x_read = error: -19 [ 905.408550][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.573452][T15667] m920x_read = error: -19 [ 905.577841][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.743390][T15667] m920x_read = error: -19 [ 905.747786][T15667] dvb-usb: error -19 while querying for an remote control event. [ 905.913369][T15667] m920x_read = error: -19 [ 905.917762][T15667] dvb-usb: error -19 while querying for an remote control event. [ 906.084174][T15667] m920x_read = error: -19 [ 906.088550][T15667] dvb-usb: error -19 while querying for an remote control event. [ 906.254208][T15667] m920x_read = error: -19 [ 906.258571][T15667] dvb-usb: error -19 while querying for an remote control event. [ 906.433378][T15667] m920x_read = error: -19 [ 906.437758][T15667] dvb-usb: error -19 while querying for an remote control event. [ 906.603645][T15667] m920x_read = error: -19 [ 906.608019][T15667] dvb-usb: error -19 while querying for an remote control event.