last executing test programs: 5m7.829902342s ago: executing program 4 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804cab6d58eed2d2a5c200000008004500002c0000fffd001190780000c1000000299700004e2000189078040000000e0000000900000000000000"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="e90c6398caa20180c200000308004500001c0000e00081119078000000000000000000004e2200089078f1b015067e97788694d386d354e0180300000096550124581c76034535e89ce20324baa8c0314bd76e57980465992486fde12ec0a50ef482d127d09e992b5b71870792364be8ce7167dea9557a6bbd013803b0a3e40000000000003162c9a3e267ff594a059b13c2e6b857ada55fb29409329aac5dc7332b34efc0fc48f49e86f9d9af06c4562ede53ab0e8bdcc726674c659f7849fe"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000440)="a3f6f88a95e404dc4f", 0x9}], 0x1}}], 0x1, 0x4008001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x3a, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3a2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x39fc, 0x2, [@TCA_ROUTE4_ACT={0x1d58, 0x6, [@m_csum={0xd4, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xda4b, 0x7, 0x3, 0x1ff}, 0x73}}]}, {0x8c, 0x6, "b885d751053c381ccf985db59da252079670cfc8551dbf92fbfda33ac71129f1c50cdb84cdaa0bac8cfd6405c6eaf2189fc3f3b2a1bf596dc724e8815da9a7e5bf37cfdb15d668b1ea0783c6cf69b46008ca2974a37ef2a6ecd70a0f85a9fcfe918efc058b6b6617845e47a6fa1b7ecc3af3b3ca8d319b9e7d659c867b849b172acabf74975d90d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1a08, 0x9, 0x0, 0x0, {{0xb}, {0x1960, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x4, 0xfffffff7, 0x0, {0x3, 0x2, 0x3, 0xfffa, 0x3ff, 0x101}, {0x5, 0x0, 0x6, 0xfff, 0x7, 0x80000000}, 0x4, 0x14, 0xfffffeaf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf94}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x9, 0x9, 0x1, 0x83, 0x11890000, 0x5, 0x1, 0x6, 0x9, 0x1, 0x3, 0x883, 0x4, 0xfffeffff, 0x4, 0x2052, 0x1, 0x7ff, 0x3ff, 0xfffffffd, 0x401, 0x2, 0x6, 0x0, 0x1, 0x9, 0x2, 0x6ec, 0x1, 0x9, 0x1, 0xfffffffd, 0x9, 0x60000, 0x5, 0x7fff, 0x200, 0xb, 0x2, 0x1c1, 0xe5, 0x6, 0xfffffffd, 0xa, 0x7, 0xfffffffd, 0x8, 0xffff7fff, 0x4443, 0x4, 0xffffffff, 0x5, 0x9b, 0x8, 0xfffffff3, 0x6, 0x26, 0x1, 0x9b8b, 0x0, 0x0, 0x7fffffff, 0x80000000, 0x4, 0x4, 0x0, 0x8, 0x8001, 0xfffffff7, 0x5, 0x9, 0x800, 0x80, 0x21, 0x7, 0x97f5, 0x6, 0x9, 0x1, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8, 0x0, 0x200, 0xf, 0x3ff, 0x4, 0x0, 0x2, 0xffff0ebc, 0x6, 0xe5fb, 0xa2, 0x8, 0x9, 0x6, 0xbbbc, 0x8, 0xb, 0x0, 0x1, 0x9, 0x18, 0x101, 0x7f, 0x44, 0x3, 0x401, 0x1, 0x1, 0xa, 0x2, 0x1, 0x2, 0x80, 0xfffffff7, 0x2, 0x6, 0x3ff, 0xe01, 0x0, 0x9, 0xd7, 0x1, 0x6, 0x7, 0xffff22bd, 0x1, 0x7, 0x798b, 0x2, 0xff, 0xa5b1, 0x3, 0xd, 0x100, 0x3, 0x9, 0x8, 0x9, 0x8, 0x1, 0x9, 0xb4b, 0x3, 0x7, 0xb, 0x9, 0x7, 0x3, 0xfb, 0x705, 0x5, 0xffff, 0x172, 0x6, 0x2, 0x9, 0x4bd, 0x9, 0x6, 0x9, 0x4, 0x2, 0xcc8e, 0x9, 0x3, 0x101, 0x7, 0x1, 0x6, 0x10000, 0x5, 0x9, 0x2, 0x2, 0x5, 0x9, 0x6a9, 0x8, 0x6, 0xd, 0x4, 0x9, 0x80, 0x7, 0x0, 0x8bc, 0xff, 0x0, 0x3, 0x5, 0xb, 0x3, 0x7, 0x2, 0x7, 0x101, 0x0, 0xba, 0x5, 0x9, 0xfffffff8, 0x10001, 0x0, 0x7ff, 0x7ff, 0x4, 0x0, 0x7, 0x6a7d, 0xf3, 0xec, 0x3, 0x80000000, 0x4, 0x18, 0xa3, 0x7, 0x3, 0x2, 0xad, 0x2, 0x6c, 0x6, 0x7, 0xff30, 0x48, 0x5, 0x9, 0x2, 0xd6, 0x7, 0xfff, 0x9, 0x3, 0x5, 0x200, 0x2, 0x800, 0x6, 0x5f1fd3e0, 0xa, 0x5, 0x80000001, 0x48f, 0xe7, 0x1ff, 0x91a, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x80, 0x4000000, 0x6, 0xf53, 0x5, 0x3, 0x3, 0x2e, 0x5, 0xa0, 0x1, 0x5, 0x3, 0x9521, 0x9, 0x9, 0xfffffff3, 0x4, 0x6, 0x9f0, 0xfffffffa, 0x10001, 0x6, 0xd, 0x4, 0x7, 0x10000, 0x9, 0x91, 0x3, 0x3, 0x8, 0x90, 0x3, 0x9c, 0xa29, 0xb, 0x6, 0x9, 0x3ff, 0x4e3, 0x2, 0xa, 0x6, 0x1a6, 0x0, 0x7, 0x7, 0x6, 0x6, 0xfffffff8, 0x4, 0x401, 0x4, 0x4, 0xbc3c, 0x7, 0x0, 0x7ff, 0x1, 0x0, 0x7, 0x9, 0x3, 0xd, 0x1, 0x7, 0x0, 0x6, 0x5, 0x400, 0xb7b5, 0x8, 0x9, 0x1, 0x80000000, 0x3, 0x81, 0x200, 0x7, 0x5, 0x5, 0x2, 0x8, 0x0, 0x9, 0x0, 0xe55, 0x4, 0x2, 0x7, 0x7, 0x3, 0xd, 0x7, 0x1, 0x2, 0x7, 0x9, 0x1, 0x0, 0x9, 0x6, 0x85f, 0x3, 0x1, 0x7, 0xfffffbff, 0x9, 0x5, 0x5, 0x4, 0x0, 0x44, 0x0, 0x7, 0xfc35, 0x2, 0x6, 0xa, 0x5, 0x8, 0x76fdf1fd, 0x5, 0x3, 0x0, 0x9, 0xffffffb4, 0x4, 0x1, 0x7, 0x8, 0x1, 0x5, 0x8000, 0x6, 0x1, 0x7, 0x1, 0x6, 0x200, 0x5, 0x7d, 0x1, 0x8, 0x2, 0x2, 0x3, 0xfff, 0xfe, 0x1, 0x7, 0xda, 0x9, 0xfffffffe, 0x7, 0x1, 0x360, 0x7fff, 0x9, 0x101, 0x3ff, 0x101, 0xfffffffd, 0x81, 0x3ff, 0x3, 0x5, 0x72de, 0x6efa, 0xffffffff, 0x4, 0x1, 0x61, 0x5, 0x8, 0xcd, 0x9, 0x7, 0x0, 0x3, 0x3, 0x1ff, 0x3, 0xc, 0x4, 0x100, 0x9, 0x8, 0x8, 0x7, 0x8000, 0x9, 0x3, 0xf, 0x5, 0x2, 0x8, 0x800, 0x6, 0xea2, 0x5, 0x8, 0x8000, 0x8, 0x5b89, 0x5, 0x8, 0x1, 0x33d, 0x100, 0x2, 0x800, 0xc, 0x1, 0x80000000, 0x1, 0x6, 0x4, 0x4, 0xffffff80, 0x4, 0x3, 0xc, 0xe1, 0xc7, 0x8e8, 0x8, 0x6, 0x38000000, 0x9a, 0x0, 0x4, 0x8, 0x8, 0x9, 0x7, 0x7, 0x0, 0x8, 0x1, 0xd, 0x67df, 0xfffffff7, 0x9, 0x8, 0x0, 0xca, 0x5, 0x1eb, 0xed, 0x2, 0x6, 0x3, 0x3]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x0, 0xc, 0x101, 0x4, 0x10000, 0x8, 0x10, 0xffffffff, 0x9, 0x4, 0xffff, 0xeb9, 0x4, 0x34f00000, 0x8, 0x4, 0x0, 0x7, 0x0, 0x143b, 0x0, 0x9347, 0x20, 0x7, 0x7, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0xd5, 0x3d3, 0xe, 0xf93, 0x1000, 0x5, 0x0, 0xdc6, 0x400, 0x40, 0x9, 0x4, 0x2, 0x4c, 0x9, 0x0, 0x5f6d812a, 0x7, 0x7, 0x9f, 0x9, 0x401, 0x9, 0xffffffff, 0xffff7fff, 0x800, 0x3, 0x5, 0x96, 0x9, 0x20000, 0x8001, 0x5, 0x9, 0x5, 0x1, 0x9, 0x56, 0x7, 0x0, 0x9, 0x6879, 0x0, 0x6, 0x2000, 0x2, 0x0, 0x10000, 0x401, 0xa, 0xff, 0x401, 0x7, 0x9, 0x1, 0x2, 0x9, 0x290, 0x9, 0x6, 0xffff9960, 0x9, 0x0, 0x80, 0x663, 0x7, 0x1000, 0x3, 0x9, 0x8, 0x0, 0x6, 0x3, 0xcee9, 0x2, 0x5, 0x7fff, 0x7fffffff, 0x3, 0x5, 0x9, 0x1, 0x8, 0xfffffffe, 0x3ba, 0x9, 0x6, 0x6, 0x3, 0x6, 0x2, 0xf, 0x5, 0x9, 0x7, 0x9, 0x9, 0x9, 0x0, 0x5, 0x3, 0xc035, 0x2, 0x2, 0x5, 0x8000, 0x2, 0xffffffc0, 0xfff, 0x9, 0x9, 0x8, 0x0, 0x80, 0x7, 0x7fff, 0x4, 0x8, 0x9, 0x40, 0x7, 0x466d0a36, 0x7, 0x5a, 0xf71, 0x4, 0x1c, 0x5, 0x8, 0x6, 0x0, 0x101, 0xe7e, 0x3, 0x9, 0x4, 0x9, 0x1a2a, 0xc, 0x7fffffff, 0x5, 0x4, 0xd7, 0x4, 0x4, 0xcf, 0x7fffffff, 0x9, 0x6498d976, 0xd, 0x5, 0x8, 0xffffffff, 0x2, 0x8, 0x6, 0x10000, 0xdc6, 0xa, 0x8, 0x7fffffff, 0x2, 0xfffffff0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x6, 0x37, 0x5, 0x2, 0x1, 0x1ec1, 0x3, 0xa, 0x5, 0x1, 0x1, 0x8, 0x6, 0x5, 0x2, 0x7f, 0x8d4, 0x634, 0x9, 0x1f9b, 0x278a, 0xf9f5, 0x7, 0x9bb, 0x7, 0x7fff, 0x6, 0x377, 0x10, 0x8, 0x8, 0x7, 0x3, 0xd5, 0x6, 0xae, 0x8, 0x4, 0x5, 0xfff, 0x6, 0x8, 0x6, 0x6, 0xa6d1, 0x3ff, 0xffffffff, 0x1, 0xd, 0x9, 0x0, 0x6, 0x7, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x4, 0x1, 0x800, 0x3, {0x8, 0x0, 0xfff8, 0x1, 0x3, 0x7}, {0x6, 0x1, 0xfd15, 0x4, 0x7, 0x4}, 0xffffffc7, 0xff00000, 0x92800000}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x87c9}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x1, 0x8, 0xc612, 0xdb, 0x4000009, 0x5, 0x8, 0x0, 0x3, 0x6, 0x101, 0xffff6c55, 0xfffffffc, 0x5, 0x8, 0x751, 0x5, 0x5, 0xb, 0x10, 0xffffffff, 0x10, 0x4, 0xff, 0x0, 0xf, 0x0, 0x10, 0x7f, 0x26, 0x200, 0x10001, 0x9, 0x8, 0x7, 0x0, 0x5, 0x7c, 0x7, 0x8, 0xb, 0x9, 0x8, 0x1, 0x10, 0x4fd1, 0x9, 0x284, 0x9, 0x400, 0xff, 0x40, 0x7, 0x2af, 0x7, 0x4, 0x5, 0x8, 0x6, 0x0, 0x0, 0x6, 0x9, 0x4, 0x1000, 0x2, 0x4, 0xb0, 0xa8f, 0x1, 0x8, 0x8001, 0x7, 0x1, 0x5a4f, 0xfffffffe, 0x2, 0xfffffffb, 0x7, 0x6b, 0xe2, 0xf5, 0x4, 0x0, 0x5, 0x2, 0x2, 0x2, 0x6, 0xfffffffa, 0x2, 0x6, 0x6, 0x4000, 0x8, 0xc, 0x1000, 0x800, 0xff, 0x980b, 0x7fff, 0x8, 0x8000, 0x80, 0x5, 0x89b, 0x0, 0x10001, 0x400, 0x2, 0x2bc4, 0x1, 0x0, 0x6, 0xd, 0x8, 0xff, 0x9, 0x1, 0xb74, 0x6d73, 0x6, 0x8, 0xffff8000, 0xe55a, 0x9, 0x2, 0x1000, 0x4, 0x48f, 0x1000, 0x4, 0x3, 0xfffffff8, 0x7fffffff, 0xd0, 0x3, 0x6, 0x2, 0x8, 0x5, 0x7, 0x3, 0xd, 0x9, 0xd, 0x8f25, 0x9, 0x79ae, 0x4, 0x8, 0x7, 0x80000001, 0x2, 0x1ff, 0x9, 0x10, 0x5, 0xfa0, 0x9, 0x9, 0x9, 0x2, 0x3, 0xa2c, 0x67b, 0x11cb6959, 0xe1f, 0x4, 0x7, 0x9, 0xffffffee, 0xffffffff, 0x800, 0x8, 0x9, 0x8, 0x0, 0x3, 0x8, 0x0, 0x5, 0x4, 0x7, 0x8c87, 0x400, 0x4, 0x6, 0x7, 0x1, 0xe574, 0xc2df, 0x400, 0x10001, 0x5, 0x5, 0x4f4, 0x32, 0x3, 0x2, 0x7, 0xb, 0x5, 0x80000000, 0x9, 0x685b38cc, 0x5, 0xf59b, 0x3, 0x8, 0x4, 0x2, 0x7, 0x5, 0xd, 0x9, 0x6aa097e8, 0xfff, 0x9, 0x8, 0x1, 0xfffffff7, 0x6, 0x7, 0x5, 0x19, 0x7c, 0x1000, 0x2, 0x7, 0x1, 0x0, 0x3, 0x8, 0xbb, 0x1, 0x4, 0x2, 0x2, 0xffffffff, 0x3, 0x7, 0x8, 0x4d50, 0x9, 0x57a, 0x200, 0x1f, 0x0, 0x8, 0x16, 0x7fff, 0x6, 0xfffff4d7]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x800, 0x7, 0x10000, 0x2, 0xe, 0x0, 0x2, 0x2, 0x7ff, 0x3, 0x10001, 0x51e, 0x1, 0xfffffff8, 0x3, 0x2, 0x0, 0xfffffff7, 0xe9, 0x7, 0x4, 0xb94, 0xd, 0x7, 0x5, 0x3, 0x101, 0x800, 0x8, 0x4, 0xd, 0xc, 0x400, 0x1, 0x3, 0x1ff, 0x5, 0x1, 0x5, 0xc, 0xb7, 0x9, 0x3f87, 0x2, 0x5, 0x4, 0xbc7, 0xfffffff9, 0x8, 0x4, 0x100, 0x3, 0x2, 0xd, 0x9, 0x9, 0x7, 0x7, 0x1, 0x10, 0x7, 0x0, 0xffffffff, 0x0, 0xbd, 0x10, 0x4, 0xe365, 0xffffff01, 0x3, 0x1, 0x80, 0x3, 0xde27, 0x9, 0x80000001, 0xb, 0x9, 0x6, 0x8, 0x2, 0x8, 0x8, 0x1ff, 0x1ff, 0x2, 0xa6, 0x40aa, 0x267b, 0x0, 0x0, 0x1, 0x1, 0xffffffff, 0x8, 0x57, 0x6, 0x4, 0x7, 0x4, 0x2, 0x4, 0x1, 0x5, 0x8, 0x8, 0x6, 0x8, 0x81, 0xfffffffa, 0x3, 0x7, 0x7fffffff, 0x6, 0x7, 0x9, 0x1, 0x10001, 0x5, 0xa, 0x8, 0x9, 0x8, 0x2, 0x5, 0x8, 0x6, 0x6, 0xac5e, 0x5f4, 0x9, 0x5, 0xdc, 0xf971, 0x2, 0x9bf0, 0x8, 0x7, 0x5, 0x4, 0xf85, 0x0, 0x4, 0x7, 0x5, 0x5, 0x3, 0xffffffa6, 0x5, 0x7, 0x0, 0x7, 0x7, 0xbc2e, 0x80000000, 0x2, 0x1000, 0x80000000, 0x96f6, 0x0, 0x7fffffff, 0x6, 0xff, 0xc67, 0x810f, 0x2, 0x3, 0xfffffff7, 0x9, 0x2, 0x1, 0x4, 0x10, 0x6, 0x8, 0x40b0, 0xfffffff7, 0x6, 0x8, 0x8000, 0x4, 0x18a, 0x401, 0xa17c, 0xa8c5, 0x5, 0x1000, 0x6, 0x9b2, 0x7, 0x10, 0x6fb, 0xa38d, 0x3296, 0xffffffff, 0x7, 0xfffffff7, 0x7a, 0x7, 0xc9, 0x6, 0x9, 0x9, 0xfff, 0x7, 0xffff0001, 0xffffffff, 0x9, 0x7, 0x4, 0x3, 0xf4, 0xf, 0x8, 0x2, 0xd, 0x0, 0x1, 0x0, 0x7, 0x7fff, 0x3, 0x7fffffff, 0x0, 0xd6d7, 0x3, 0x1, 0x8, 0xfffffffa, 0xdb, 0x3, 0x6, 0x7, 0x0, 0x44, 0x6, 0xaeb7, 0x3, 0x7, 0x2, 0x7f, 0xff, 0x2, 0x7, 0x3, 0x5, 0x5a, 0x5, 0x34f4, 0x80000000, 0x1, 0x9, 0x1, 0x2, 0x8a76]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7, 0xe2a9, 0x2, {0x4, 0x0, 0x5, 0x47, 0x5, 0x5}, {0x4, 0x0, 0x800, 0x7, 0x5}, 0xaa9, 0x12, 0xff8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x45, 0x3, 0x5, 0x0, 0x4, 0x695, 0x7fffffff, 0x101, 0x80000000, 0xffffffff, 0x8, 0x1, 0xff, 0x0, 0x3eaf, 0x6c, 0x40, 0x2, 0x4, 0x9, 0xf, 0x0, 0x3, 0xc, 0xbd, 0x3, 0xbe5, 0x5, 0x1, 0x8, 0x7fffffff, 0x5, 0x10, 0xc, 0x8, 0x0, 0x3, 0xb77, 0x6, 0x1, 0x2, 0x8, 0x4, 0x6, 0x3e, 0xb, 0x4, 0x3ff, 0x7, 0xfffdfffd, 0xf08, 0x7, 0xff, 0x4, 0x0, 0x8, 0x17f, 0x8, 0xf205, 0x9, 0x10001, 0xc, 0x8, 0xf80, 0x9, 0xfffffffa, 0x4, 0xffff, 0xffff0001, 0x0, 0x8000000, 0x3, 0x3, 0x9, 0xff, 0x9, 0xadb, 0x10000, 0x5, 0x2, 0x0, 0x0, 0xbc7, 0x8f63, 0x4, 0x0, 0x6, 0x9455a71, 0x8, 0x8cb2, 0xffffff7f, 0x2, 0x1ff, 0x1, 0x4, 0x80000001, 0x9, 0x5, 0x3ebd, 0xff, 0x38, 0x400, 0x2, 0x3, 0xfffffffc, 0x4a, 0x0, 0x1000, 0x40, 0x4, 0xa, 0x8, 0x6, 0x4, 0x4, 0x4, 0x3c59, 0x6, 0x3, 0x2, 0x2, 0x5, 0x7fff, 0xa, 0x5, 0x30, 0x7ff, 0x5, 0x6, 0x4, 0x2, 0x412, 0xd, 0x8, 0x4222c4e2, 0x2, 0x8, 0xb1, 0x9fea, 0xfff, 0x3, 0x6, 0x0, 0x101, 0x60, 0x2, 0x401, 0x9c0, 0x1, 0x10, 0x7, 0x2, 0x1, 0x4, 0xdf5, 0x9, 0xca2, 0xfffffff8, 0x7, 0x4, 0xb600, 0xa, 0x4, 0x0, 0x6aee, 0x200, 0x2, 0x3, 0x2, 0xa, 0x3, 0x9, 0x8000, 0x7fffffff, 0xfffffff8, 0x6, 0x9, 0x7, 0xffff5773, 0x9, 0x1, 0xf, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8139, 0x8, 0x8, 0x5, 0x2, 0x6, 0x8e, 0xfffffff9, 0x3, 0xb1ec, 0x9, 0x8, 0x3fe000, 0x6, 0x4, 0xfffff801, 0x5e7, 0x40, 0x3, 0x1, 0x7, 0x3, 0xa8e, 0x9, 0x8, 0x0, 0x6, 0x1, 0x6b53, 0x5, 0xb479, 0x7fffffff, 0x347, 0x2, 0x3, 0x9, 0x91ca, 0x3, 0x401, 0xfff, 0x180, 0x2c, 0x1, 0x4, 0x3, 0xffff, 0x8, 0x1, 0x78, 0x5, 0x3ff, 0x8, 0x31de, 0x2, 0xc, 0x3, 0x4, 0x8, 0x1, 0x1, 0x8000, 0x3, 0x4a109db6, 0x8, 0x5, 0x1, 0x0, 0x9, 0x43f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x7f, 0x6, "94fdb185b9c7f2b3cd53fa8a63e5e5bcc6a8034e92595f148d78f55ce67ed0369733028f874336364938a969f861b50c402d2b504b60e855ae863494bfef85001750c8e8050d3e4c29da582b51feba89fad80008f38a2fea277802656372e11082f1b80691a4c666be54d31737a9480dd9bec8ab1f59667fdcddc5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x12c, 0xc, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0x3, 0x80, 0x10000}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x40}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6b}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0x9d, 0x6, "da6c32e9c2852a9e99ccf50e8272bb837fb4f6484e2b99928a091b0c1adc4842ca465280f27acb036591e894d37930abe095410bdbf2b208068a59f82aabfb2d45ff98a873c3b5f6f321f6974f67d36273a2659cac64fb90b8e9d74d6653b3cfa809e8ee594e04dd5fd93681ab0a58635bea6e74aea79c909e7620b6c255ab75ae4639c01b3a32280a400cea2984137787dc33204fb94dd4af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x14c, 0xf, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9f6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xfa, 0x6, "e9a99e72acef11d54f0b4bda04e7e2b02739092f74db38b00c9746d648ac528c1a98a9694a4ad5fe70215a97d2e28e4f0b8714ce735ad92bc93e94525a6a883ad42e1cd5a33c9f5a8b343c5a2037880f8553ad76c243b01e623ab668c3461b80fa354d90291ca6b32f05c3101d31de3434e423e966db0b78769d853a269782a07a0cc064a38915bfbf0e8ff23f25aab476b1dbac8dfe0e22c529787e52e499373c283e9c725fdd3b14dae937fc28f07f5324596491f012174c5c5283a071c5be092d9186028343fdc8d12185749387758e05b4d3bc06133d5b75ba1bc27f27da465ce026b8d2daf1332e3a2acc1cf58cc89cabe508ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x1030, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xea3, 0x0, 0x8001, 0x1, 0x3, 0x6, 0x5, 0x8, 0x45, 0xc, 0x8, 0x1, 0x5, 0x4, 0xc, 0x6, 0xfffffffb, 0x419, 0x1, 0xffffffff, 0x2, 0xfffffffb, 0x1, 0xfffffffb, 0x2, 0x7, 0x8, 0x6, 0x81, 0x40, 0x5, 0x3, 0x400, 0x14, 0x9, 0x5, 0x31eda162, 0xe1d, 0x5, 0x7, 0x43f, 0x3, 0x1, 0xe, 0x5, 0x80000001, 0xfffffff7, 0x1, 0x2, 0x10c, 0x9, 0x4, 0x8, 0x4, 0x261d, 0x3, 0x873, 0x0, 0x7ff0000, 0x5, 0x3, 0x1, 0x8001, 0xe, 0x0, 0xd, 0xa, 0xf3, 0x96, 0x7, 0x10, 0x2, 0x4, 0xab, 0x43, 0x7, 0x9, 0x3, 0x40, 0x401, 0x8, 0x2, 0x9, 0xfffffffe, 0x8, 0x8, 0x0, 0x0, 0x3, 0x6, 0x4, 0x8, 0x8, 0x81, 0x7, 0x3, 0x4, 0x8, 0x4, 0x2, 0x95, 0x7, 0x0, 0x7, 0x81, 0x2, 0xe6e, 0x6, 0x1, 0xb95, 0x139, 0x0, 0x1, 0x3, 0x8, 0x6, 0xfff, 0x7, 0x81, 0x1, 0x7ff, 0x7, 0xda, 0x3, 0x8, 0x9, 0x9, 0x3, 0x0, 0x5, 0x1, 0x1000f5, 0x1, 0x6, 0x10001, 0x6, 0x2, 0x2, 0x6, 0x101, 0x5, 0x10000, 0x9, 0x3, 0x7, 0x9, 0x4, 0xa0b2, 0x9, 0x6, 0x61, 0x80000000, 0x7, 0xfffffffe, 0xd, 0x3, 0x5ee9, 0xffffff5a, 0xffc00000, 0x0, 0x7, 0x1, 0x44f, 0x10, 0x100, 0x6, 0x3, 0x77a, 0x3, 0x0, 0xc, 0x8, 0x1, 0x8, 0xecf, 0x9, 0xa5, 0xfffffffb, 0x0, 0xff, 0x7, 0x4, 0x7, 0x100, 0x2f4, 0x400, 0xffff, 0x46, 0x1, 0x50, 0xcc, 0x800, 0x5, 0x4, 0x80, 0x4, 0x3, 0x80, 0xd, 0x11, 0xfff, 0xd4, 0x0, 0xf6e4, 0x0, 0x0, 0xff, 0x80000000, 0xfff, 0x2, 0x7a, 0x2, 0xfff, 0x6, 0x6, 0x3, 0x200001, 0x4, 0x3a, 0x200, 0x2726, 0x6, 0xd, 0x8, 0x7ff, 0x1, 0x2, 0x8001, 0x3ff, 0x4, 0x8, 0x6, 0x0, 0x2, 0xfffffffc, 0x5, 0x460, 0x101, 0x1, 0x5, 0x4, 0x1, 0x609, 0x800, 0xfffffffe, 0x1, 0x8001, 0x1, 0x7fffffff, 0x100, 0x3, 0x6, 0x40, 0x6, 0xfffffffd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000000, 0x7, 0x9, 0x80000000, 0x3, 0x7, 0xffff, 0x4, 0x1bf69416, 0x2, 0x1, 0x8, 0xc0000000, 0x0, 0x401, 0x48000, 0xc, 0xa7, 0x5, 0x1, 0x10000, 0xc, 0xffff, 0x0, 0x2, 0x4, 0xf, 0x4a8c, 0x7f, 0x5, 0x8001, 0x44000, 0xfffffffb, 0x5, 0x1, 0x3, 0x0, 0x2, 0x4, 0x3af, 0xa8ce, 0x3, 0x7, 0x5, 0x5, 0x5, 0x3, 0x7, 0x9, 0xfff, 0x56, 0x9, 0x7ff, 0x88e, 0x24, 0x7a, 0x8, 0xfff, 0x5, 0x1, 0xff, 0x7, 0x0, 0x38ea, 0x7fff, 0x8, 0x34737677, 0x7fffffff, 0x3, 0x6, 0xc, 0x5, 0xa936, 0x8a08, 0x1, 0x400, 0x0, 0x7, 0xfff, 0x5, 0xb8e, 0x7, 0xe98, 0x6, 0x4, 0xfffffff3, 0xed6, 0xfff, 0x8, 0x9, 0x3ff, 0x7fff, 0x6, 0x8, 0x9, 0xafd, 0x4177, 0x1, 0x2061, 0x0, 0xb95, 0x7fff, 0xff, 0x6, 0x5, 0x50e, 0x4, 0x1000, 0xf99, 0x80000000, 0x3f7, 0x1, 0x81, 0x7, 0x2, 0x7fff, 0x401, 0x8, 0x3, 0xd, 0x5f6, 0xbee5, 0xfffffffc, 0xfffffff9, 0xd1, 0x3, 0xa, 0x9, 0x6, 0x228, 0x8000, 0xb60, 0x5, 0x5, 0x200, 0x1ff, 0x3, 0x3, 0x80, 0xa, 0xfff, 0x6, 0x9, 0x8, 0x9, 0x6b95, 0x1, 0x3, 0x7, 0x0, 0x4, 0x80, 0x1, 0x0, 0xefc, 0x6, 0xfffffff7, 0x302, 0x9, 0x3, 0x5, 0x0, 0x6d9, 0x4, 0x2, 0x0, 0xf, 0x2, 0x9, 0x8, 0xe5b1, 0x1, 0x40000000, 0xffff, 0x2, 0xab2, 0xa0, 0x401, 0x10000, 0x88c, 0xfc, 0x6, 0x3, 0xbb, 0x1, 0x8, 0x0, 0x0, 0xe8, 0x7c6, 0x5, 0x2, 0x6, 0x7fffffff, 0x10, 0x7, 0x1, 0x81, 0x1, 0x49, 0x7, 0xb25, 0x200, 0xffffff6e, 0x40, 0xfff, 0x10, 0x40, 0x2, 0xab, 0x1, 0x6, 0x7ff, 0x6, 0x9, 0x800, 0x3, 0x7, 0x10, 0x401, 0x8, 0x7, 0x7, 0x0, 0x3ff, 0x1, 0x10001, 0x4, 0x0, 0x7f1, 0x8, 0x7fffffff, 0xb, 0x9, 0x4, 0x8, 0x2, 0x7, 0x7, 0xfff, 0x1000, 0x3, 0x9f, 0xffffff6d, 0x3, 0x8, 0x1, 0x2, 0x788, 0x9, 0x6, 0x9, 0x8, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x38}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x52f2dc61, 0xffffffff, 0x8b, 0xfffffffb, 0xf, 0x3e17, 0x1, 0x8, 0x1, 0x80, 0x24000000, 0xd5da, 0xf, 0x6, 0x1de6ebf8, 0x1, 0x8, 0x9, 0x7f, 0x5, 0x3, 0x0, 0x4, 0xfffffff9, 0x0, 0x5, 0xff, 0xfffff000, 0x6, 0x2, 0x7fffffff, 0x8, 0x2b, 0x4, 0x401, 0x8b, 0x3, 0x3, 0x6b, 0x1000, 0xd, 0x101, 0x5, 0x101, 0x5087, 0x7ff, 0x1, 0x10, 0x6, 0x43, 0xfffffffb, 0x25, 0x7, 0x6, 0x1, 0x1, 0x100, 0x3, 0x1, 0xdc, 0x1, 0xe0a5, 0x28000000, 0x4, 0x91, 0x1, 0x7ff, 0x1, 0xd36, 0xcb0, 0x53, 0x9214b021, 0x9, 0x7, 0x719, 0xc0000000, 0x80000000, 0x3, 0x3, 0x4, 0x8000, 0x7, 0xfffffff9, 0x3, 0x8, 0x9, 0x4, 0x2, 0x8380, 0xa, 0x878, 0x2, 0x80000001, 0x0, 0x1, 0x4, 0xffa1, 0x1000, 0x7, 0x5, 0xc7e, 0x1ff, 0x7, 0x5, 0x4, 0x1, 0x7, 0x5, 0xb5c4, 0x55c, 0x3, 0x6c9f, 0x1, 0x6, 0xfffffffb, 0x9, 0x4, 0x2, 0x0, 0x0, 0x5, 0x2, 0x2, 0xbff, 0xffff, 0x7, 0xcc7e, 0x6c6, 0x5, 0xd8, 0x62, 0x6, 0x2, 0x4, 0x7, 0x7, 0xdf, 0x4, 0x2, 0x6, 0xfffff69d, 0x7, 0xc, 0xf3, 0x4, 0x101, 0x2, 0x2, 0x95, 0x0, 0x2, 0x4, 0xffff, 0xfffffff8, 0x1, 0x7fffffff, 0xfff, 0xffc7, 0xef03, 0x9, 0x40, 0x1, 0x6, 0x3, 0xdf, 0x1, 0x0, 0x9, 0x40, 0x7, 0x8, 0x2b000000, 0x79, 0x7fffffff, 0x84, 0x6, 0x4, 0xfffff801, 0x443, 0x9, 0x7, 0x6, 0x13, 0xfffffffd, 0x2, 0x2, 0x0, 0x10001, 0x2, 0x1, 0x8000, 0x80000000, 0xfffffffe, 0x7, 0x3a, 0x5, 0x871f, 0x56, 0x5, 0x3, 0x3, 0x2, 0x5, 0xe00000, 0xf, 0x8001, 0x9, 0x9, 0x1, 0x10, 0xc, 0x8, 0x65, 0x4, 0xe, 0x80000001, 0xf4, 0xb6f, 0xd4, 0x10000, 0xadb, 0xc5, 0x9, 0x1e, 0x8, 0x1, 0xfffffff7, 0xbc0b, 0x10001, 0x101, 0x100, 0x16a4, 0x4156658a, 0x6, 0x4, 0x40, 0x3, 0x93, 0x800, 0x262, 0x7, 0x1, 0xffffff5a, 0x9, 0x3, 0x17, 0x8, 0x7, 0x1, 0x9, 0x8, 0xc00, 0x2, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x9, 0x6, 0x80, 0x5, 0x5a, 0x6, 0x7f, 0x7, 0x80000001, 0x9614, 0x0, 0x5a, 0x6, 0x3a, 0x6, 0xffffffff, 0xaa, 0x1, 0x100000, 0x2, 0x5, 0x8, 0x4df7, 0x400, 0x1, 0x81, 0x100, 0xc, 0xfffffff9, 0x3, 0x4, 0x401, 0x5, 0x0, 0xd, 0x3, 0xc7, 0xb, 0x3, 0x17, 0x81, 0x4, 0x2, 0xc62, 0xc, 0x5, 0x8, 0x3, 0x80000001, 0x1, 0x3, 0x8, 0x1bcce9ce, 0x9, 0x36a, 0x6, 0x14d0000, 0x800, 0x1800, 0x6, 0x0, 0x5cbc, 0xfffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0xb, 0xf8, 0x4, 0x1ff, 0x3, 0x7, 0xbb21, 0xc2, 0x6, 0x6, 0x7, 0x2000, 0x3, 0x7, 0x3, 0x7, 0x7fffffff, 0x6, 0x9ef, 0xa1, 0x4, 0x6, 0x9, 0x4, 0x7, 0x8, 0x6, 0x4, 0x9, 0x80, 0x6, 0x3, 0xa6478fe, 0xd85, 0x9, 0x7, 0x1, 0xffffffff, 0x5, 0xad93, 0x0, 0x6, 0x5, 0x401, 0x17cc, 0x4, 0x8, 0x4, 0x8, 0x178, 0x100, 0x1000, 0x7, 0x1, 0xdfa5, 0xf6d6, 0x9, 0x3ff, 0x7, 0x2, 0x10000, 0x0, 0xf00, 0x7f, 0x3, 0x7256, 0x2, 0x64851547, 0x8, 0x7, 0x5, 0x945, 0x7, 0x3, 0xf, 0x5, 0x10000, 0x8, 0x7fffffff, 0x620, 0x4, 0x5, 0x2, 0x74, 0x3, 0xffffffff, 0xd4, 0xe, 0x80, 0x5, 0x3, 0xfef2, 0x1, 0x3, 0x8, 0x3, 0x9, 0x2781, 0x80000000, 0x8, 0x7, 0x1, 0x7, 0x7ff, 0x9, 0x1e29, 0x6, 0x800, 0x0, 0x4f7b7b5, 0x0, 0x2, 0x8, 0x0, 0x100, 0x1, 0x5, 0x5, 0x5, 0x1, 0xb, 0x1ff, 0x4, 0x1, 0x800, 0x1, 0xa, 0x101, 0x8, 0xd, 0x80000001, 0x5, 0x5, 0x4, 0x33, 0x7, 0x4, 0x4, 0xe, 0x1, 0x10000, 0xfffffff9, 0x6, 0x6, 0xcd, 0x1, 0x7, 0x1, 0x3, 0x0, 0x80000001, 0x40, 0x7, 0x9, 0x5, 0x6, 0x401, 0x4, 0x6, 0x1, 0xffffffde, 0x4c, 0x6, 0x7, 0x3800, 0x0, 0x8, 0xfffffffb, 0xfffffff7, 0xfff, 0x5, 0xd, 0x84, 0x1, 0x9, 0x9fc1, 0x0, 0x6, 0x4, 0x3ff, 0xfffffff7, 0x5, 0x2, 0x9, 0xfffffff8, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}]}, @TCA_ROUTE4_POLICE={0xc48, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x800, 0x7, 0xffff2796, 0x4, 0x3ff, 0x2, 0x7, 0x657, 0x9, 0x9, 0x8, 0x8, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x0, 0x3, 0xbd4, 0x1, 0x1, 0xd43, 0x6, 0xfffffff9, 0x83b7, 0x0, 0x0, 0x8, 0x7, 0xd, 0x7fffffff, 0x5, 0xfff, 0x5, 0xfff, 0x3, 0x4, 0xa82, 0x8001, 0x7, 0x1, 0x4, 0x10000, 0xb, 0x63f2, 0x7, 0x5, 0x1, 0x90, 0x3800000, 0xf, 0x0, 0x3, 0x2, 0x3, 0x5, 0x6, 0x5, 0x3, 0x1, 0x9, 0x7, 0x0, 0x5, 0x400, 0x5, 0x5, 0x83c, 0x3, 0x7, 0x5, 0x0, 0x1, 0x2, 0x10000, 0x5, 0xa3f, 0x8, 0x2, 0x1800000, 0x2, 0x200, 0x2ffe6892, 0x7, 0x2, 0x9, 0xa614, 0x35, 0x82e4, 0x8001, 0x8b, 0x6f450659, 0x75, 0x1, 0x2, 0x80, 0xf, 0x4, 0xffffffd8, 0x6b8, 0x7ff, 0x518000, 0x100, 0x3, 0x2, 0xf0d9, 0x10001, 0x1, 0xffffffff, 0x4, 0x400, 0x6, 0x2, 0x3, 0x0, 0xc820, 0xffff, 0x3, 0x6, 0x3, 0x8, 0x8, 0x9, 0x3e, 0x2, 0x0, 0x8, 0x9, 0x3, 0xf5, 0x1, 0x63, 0x5, 0x200, 0x3, 0x6, 0x80000001, 0x80, 0x6, 0x8, 0xb0d, 0xfea, 0x2, 0x7, 0x100, 0xf4, 0x1000, 0x8f5, 0x9, 0x7f, 0x6, 0x80, 0x5cac, 0x8, 0x7ff, 0x8, 0x80, 0x30, 0x1, 0x1, 0x8eea, 0xc94, 0x4, 0x1000, 0x7fff, 0x200, 0x92, 0x8, 0xb, 0xb, 0xfffff800, 0x7, 0x20000000, 0x8, 0x7, 0x7, 0x1, 0x2, 0x1, 0x1, 0x8, 0x7, 0x81, 0x7, 0x2, 0x0, 0xd, 0x7f, 0x7, 0x7, 0x6, 0x72, 0x8, 0x8, 0x2, 0x1, 0x226f, 0xd, 0x100, 0x2, 0x5, 0x8, 0x6, 0xaf, 0x1000, 0xd, 0x4, 0x3, 0x2, 0x9, 0xb, 0x48d2, 0x9, 0x0, 0x3, 0x5, 0x9, 0x5, 0x3, 0xadb, 0x200, 0xf, 0x6bc, 0x9, 0x80000001, 0x2, 0xc37b, 0x2, 0x9, 0x2, 0x3, 0xa, 0x8, 0x100, 0x6, 0x1, 0x2, 0xcc, 0x4, 0x0, 0x1, 0x9, 0x8, 0x0, 0x9, 0x29, 0x2, 0x3abd, 0x7fffffff, 0x6, 0x4, 0x1c1, 0xfffffff4, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xbc, 0x0, 0x87ff, 0x8, 0x0, 0x3, 0xdd8, 0x3, 0x1, 0x6, 0x4, 0x0, 0x8001, 0x9, 0x8001, 0x8, 0xffffffff, 0x7, 0x2, 0xfffffe00, 0x0, 0xfffffffd, 0x8, 0x2, 0xe, 0x3, 0x44, 0x8, 0xffff, 0x1000, 0x401, 0x7, 0xb0a, 0x9, 0x58, 0x2, 0x1ff, 0x5, 0x30000000, 0x4, 0x6, 0x5, 0x4, 0x80000000, 0x10000, 0xff, 0x8, 0x4, 0x0, 0x6, 0x4, 0x8, 0x9b9, 0x1ff, 0x5, 0x4, 0x200, 0x7, 0x5, 0x2, 0x0, 0x1, 0x8, 0x3, 0x6, 0xe, 0xb1, 0x8, 0xffffff00, 0x18, 0x2, 0x2, 0xa2a2, 0x7, 0x0, 0x10, 0x2, 0x5, 0x7, 0x7fffffff, 0x0, 0xffffff80, 0x1, 0x117a, 0x8fa, 0x7, 0x0, 0xffffffff, 0x6, 0x40, 0xfffffff8, 0x10000, 0x0, 0x0, 0x3, 0x4, 0xfff, 0xfffff001, 0x9, 0xd, 0x7, 0x5, 0x4, 0x4, 0x4, 0x2, 0x80000001, 0x2, 0xe, 0x1174, 0x0, 0xa745, 0xf2, 0x4, 0x200, 0x8, 0xd, 0x5, 0x8, 0xa, 0x6, 0x3ff, 0x4, 0x23d9a90d, 0x4, 0x6, 0x0, 0xc887, 0x6, 0x4, 0xe3, 0x7bde, 0x7, 0x90, 0xe6, 0x92c7, 0x1, 0x6, 0xc468, 0x2, 0xee, 0xffffffff, 0x6, 0x1, 0x7fff, 0x8, 0x100, 0x7, 0x6, 0x5, 0x8001, 0x3, 0x4, 0x2, 0x4, 0x8045, 0x6, 0x80000000, 0x3, 0x0, 0x8, 0x1ff, 0x1, 0x7, 0x6, 0x2, 0x1, 0x5, 0x8, 0x9, 0x2, 0xe, 0x5, 0x7, 0x9b, 0x0, 0x6, 0x1, 0x5, 0x36c, 0x10001, 0xff, 0xbd, 0x8, 0x5, 0x3, 0x0, 0x401, 0x1, 0xf7, 0x8, 0x80, 0x7fffffff, 0x1, 0x10001, 0xc577, 0x80c, 0x6, 0x4f, 0x9, 0x0, 0x1, 0x101, 0xe, 0x8, 0x8001, 0x1, 0xb3, 0x4, 0x7, 0x2, 0xf2a, 0x8, 0x6, 0x3, 0x5, 0xffffffff, 0x4, 0x9, 0x98, 0x0, 0x3, 0xaf3c, 0xad, 0x5, 0x4f, 0x4, 0x400, 0x6, 0x3ff, 0x7d95, 0x5, 0xc232, 0x7, 0x8f3f, 0x1ff, 0x9, 0x2, 0x40, 0xf, 0x5cc, 0x8, 0x7, 0x80000000, 0xfffffffd, 0x8000, 0x1, 0x8001, 0x4, 0x7f, 0xf, 0x74, 0x6, 0xc9f2, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0xfffffffd, 0x2, 0x7, 0x7f, 0x8, 0x3, 0xfffffffe, 0xa, 0x5f4, 0x0, 0x8, 0xfffffffe, 0xffff, 0x8, 0xa99, 0x1ff, 0x3, 0x4, 0x8, 0x401, 0xddd1, 0x0, 0x7ff, 0x4, 0x3, 0x54b, 0x8, 0x4, 0xfffffff6, 0x7, 0x5, 0x44bc, 0x4, 0x5c07, 0x4, 0x7, 0x4, 0x3, 0x100, 0xfff8, 0xe, 0x9365, 0x6, 0x101, 0x8, 0xffffffff, 0x9, 0x6, 0xb, 0x400, 0x1, 0xf9f, 0x789, 0x80000001, 0x3, 0x6, 0x7, 0x5, 0x100, 0x2, 0xc, 0x4a9, 0x3, 0x634c, 0x0, 0xfffff02b, 0x5, 0x8, 0x3, 0x4, 0x9, 0x3, 0xfffffff8, 0x4, 0xfffffffd, 0xfffffffc, 0x3, 0x800, 0x1b, 0x2, 0x80000001, 0x101, 0xfff, 0x8, 0x5, 0x7, 0x4, 0x7, 0x67, 0x4, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, 0x9, 0x9ea, 0x200, 0xc1, 0x0, 0xffffd5ef, 0x776, 0x9, 0x10000, 0x1000, 0x5, 0x6, 0x5, 0x7f, 0x8ac2, 0x10001, 0x101, 0x2b, 0xec, 0xbd, 0x7f, 0x80, 0x8, 0x9, 0x6, 0x1, 0x4, 0x9, 0x7, 0xbc, 0x6f, 0x8, 0x7, 0x9, 0x6, 0xb0, 0x2, 0x7c, 0x7ff, 0xfffffffd, 0x2, 0x8, 0xd3e, 0x7, 0x6, 0x4, 0x5, 0x5, 0x7fff, 0x8, 0x9, 0x8, 0x1, 0x7, 0x9, 0x8, 0xfff, 0x400, 0x5, 0x2, 0x0, 0x1, 0x7fffffff, 0x3, 0x22c, 0xc7, 0x7, 0x884, 0x3, 0x4, 0x8, 0x7, 0x401, 0x9, 0x9, 0x3, 0x0, 0x6, 0x7, 0x8, 0x5, 0x8, 0xc000000, 0x4, 0x3, 0x5, 0x6, 0x316cf82d, 0x8, 0x7ff, 0x0, 0x3ff, 0x5, 0xfffff7a1, 0xff, 0x5, 0x8, 0x5, 0xfd, 0x10, 0x47, 0x81, 0x8c, 0x3, 0x3, 0x7, 0x5, 0x5, 0x3, 0xfffffff7, 0x7, 0x6, 0x8, 0x7, 0x8, 0x0, 0x6, 0x40, 0xe, 0xe, 0xb1, 0x3, 0x8, 0x2, 0x80000001, 0x4, 0x800, 0x3, 0x10000, 0x4, 0xf, 0x7, 0x37, 0xf, 0x2, 0x1, 0x0, 0xfffffffc, 0x5, 0x9, 0x7, 0x439, 0x1, 0x100, 0x70f4, 0xfffff055, 0x8a, 0x9, 0xffff8001, 0x0, 0x80000001, 0x6, 0xc0000, 0x7, 0xc, 0xf, 0x7, 0x968]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x42}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe5}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x72}]}}]}, 0x3a2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r11 = eventfd(0xfffffffd) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r12, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) 5m5.631693565s ago: executing program 4 (id=648): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0xc02, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000004c0)={'custom1\x00'}) (fail_nth: 2) 5m3.647557613s ago: executing program 4 (id=655): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x404901, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x6, 0x9, 0x437}]}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r0, 0x0, 0x8000001, 0xa) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x4807b000) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000729158086311000292b80000000109022b0001020000000904a9"], 0x0) 4m58.178446146s ago: executing program 4 (id=673): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x91415000) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB='rootcontext=']) r2 = accept4$tipc(r0, 0x0, &(0x7f00000000c0), 0x180400) poll(&(0x7f0000000100)=[{r2, 0x2}, {r0}], 0x2, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) close(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000240)={{@my=0x0, 0x6}, @local, 0x1, 0x2, 0x8, 0x7, 0xfffffffffffffff7, 0x4, 0xa8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) brk(0x4) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) move_pages(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000076000/0x400000)=nil], &(0x7f0000000140)=[0x5], 0x0, 0x0) 4m57.857212739s ago: executing program 4 (id=676): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffff9}}}}]}, 0x78}}, 0x0) io_setup(0x9, &(0x7f0000000080)) r3 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) (async) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r8) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="000200000000000000040000000000000000000005000000010000730000000004000000000000000200000000000000000000009d800a247dfdb74a65bc79801cf83a000000000000000000000000000000000000000080"]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r14, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="04030000fe8000000000000000000000000000bb86dd00"], 0x38}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) r15 = eventfd2(0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r15, &(0x7f0000000b80)={0xa0001011}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r15, &(0x7f0000000b80)={0xa0001011}) 4m55.96580154s ago: executing program 4 (id=682): rseq(0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) r3 = msgget(0x1, 0x5a0) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/215) r4 = msgget$private(0x0, 0x113) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000180)=""/53) msgctl$IPC_STAT(r4, 0x2, &(0x7f00000001c0)=""/4096) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000011c0)=""/173) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001380)=0xe8) getgid() msgctl$IPC_SET(0x0, 0x1, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000015c0)=""/86) msgsnd(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="03000000008400f108000097f862"], 0xe, 0x0) msgsnd(0x0, &(0x7f0000001840)={0x3}, 0x8, 0x800) msgctl$IPC_INFO(0x0, 0x3, 0x0) 4m55.648546996s ago: executing program 32 (id=682): rseq(0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) r3 = msgget(0x1, 0x5a0) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/215) r4 = msgget$private(0x0, 0x113) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000180)=""/53) msgctl$IPC_STAT(r4, 0x2, &(0x7f00000001c0)=""/4096) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000011c0)=""/173) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001380)=0xe8) getgid() msgctl$IPC_SET(0x0, 0x1, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f00000015c0)=""/86) msgsnd(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="03000000008400f108000097f862"], 0xe, 0x0) msgsnd(0x0, &(0x7f0000001840)={0x3}, 0x8, 0x800) msgctl$IPC_INFO(0x0, 0x3, 0x0) 1m15.428250117s ago: executing program 0 (id=1493): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x6b4, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xb3, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4000, 0x4, 0xa}, {0x6, 0x24, 0x1a, 0x4, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x3, 0x9e}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x81, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1m11.963071755s ago: executing program 0 (id=1501): lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x28, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001580), 0x400000000000203, 0x10122, 0x0) ppoll(&(0x7f00000006c0)=[{r5, 0x100}], 0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) getresgid(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r7 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0xd025, 0x40}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000100)={&(0x7f0000000340)=""/147, 0x93, 0x0, &(0x7f0000000280)=""/153, 0x99}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) 1m9.020679486s ago: executing program 0 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x2295898, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='./bus\x00', 0x41) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x0, 0x80000001, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x80, 0xf6, 0x1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xc15, 0x0, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x2295898, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdirat(r1, &(0x7f0000000440)='./bus\x00', 0x41) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x0, 0x80000001, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x80, 0xf6, 0x1}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xc15, 0x0, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) 1m8.711513462s ago: executing program 0 (id=1516): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40808c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r6) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000300000008000100"], 0x12c}, 0x1, 0x0, 0x0, 0x20000060}, 0x4800) 1m7.895578157s ago: executing program 0 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x1144, 0x38, 0x401, 0x70bd2c, 0x25dfdbfc, {0xb}, [@generic="ff983f3fc5c3d10000a373d8a35044178d9db3197f9144fdb343d2cbaa470797c077b932954d95a6877ea9ce557ff625880a5a290ebf98f0147a9e30fa22d9d2c65f1f6186942b5c8681b16a4bfaa117953d4ec07463af64fdaa3adacc00c211ef8b45337afc34d050a3c12185b13956124ee7aed73cc90f6ec58a46e5880c76ca6ada7752", @generic="b77ef1a85500bdbdaa45f0787fa4822139c9d5aef065a4204ed6ca184f549c507f1cbb55c76d29a953c887b0e80ce2e4bd45f6f44fe475e8c2a581dbdf8f447bccdef09d2b4b248b9ce4b88080602396aa53b220e9411312c227cf37bb4640f86770081b81eb41653367b323cd0e21e2b1befd5310595144ca760ac1342193e584be008303fc2f245d58a20afaab", @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@remote}]}, 0x1144}}, 0x4050) 1m7.633982503s ago: executing program 33 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x1144, 0x38, 0x401, 0x70bd2c, 0x25dfdbfc, {0xb}, [@generic="ff983f3fc5c3d10000a373d8a35044178d9db3197f9144fdb343d2cbaa470797c077b932954d95a6877ea9ce557ff625880a5a290ebf98f0147a9e30fa22d9d2c65f1f6186942b5c8681b16a4bfaa117953d4ec07463af64fdaa3adacc00c211ef8b45337afc34d050a3c12185b13956124ee7aed73cc90f6ec58a46e5880c76ca6ada7752", @generic="b77ef1a85500bdbdaa45f0787fa4822139c9d5aef065a4204ed6ca184f549c507f1cbb55c76d29a953c887b0e80ce2e4bd45f6f44fe475e8c2a581dbdf8f447bccdef09d2b4b248b9ce4b88080602396aa53b220e9411312c227cf37bb4640f86770081b81eb41653367b323cd0e21e2b1befd5310595144ca760ac1342193e584be008303fc2f245d58a20afaab", @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@remote}]}, 0x1144}}, 0x4050) 8.128322609s ago: executing program 2 (id=1745): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x56b}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7c"], 0x20) r7 = socket$inet6(0xa, 0x6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f00000000c0)=0x5) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) 7.923489646s ago: executing program 5 (id=1746): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0x5c, 0x15, 0x40, 0x7ca, 0x8150, 0xc96b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x9d, 0x1e, 0x29}}]}}]}}, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) (async) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) syz_emit_ethernet(0x55, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0xc, 0x5d, 0x3, 0x7, [{@rand_addr=0x64010101, 0x8}]}, @timestamp={0x44, 0xc, 0x5f, 0x0, 0x8, [0x1, 0x7]}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x4, "7aef6df81479e416d35d69e7bde29d3d019584"}}}}}, 0x0) 5.504537559s ago: executing program 5 (id=1756): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (fail_nth: 3) 5.455297345s ago: executing program 3 (id=1757): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x59ec, 0x0, 0x0, 0x15, 0x14, "1271a2ab78fce00d9668dda1af1ea89d62b7080a01000000ea0300008a03040000000000000000ffffff7f0000000000000800000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90bec61c551265406c7f30600303ba9600feffffffffffffff00"}}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x40}}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xaf}]}}, {"5b765e5ea26e1b18c245b428b26748a169107a06243cf985ad3c476425177a03bbe7a608135c4685123cf2146a3b07b372cd2cbd5b1f38255f90fac6a226b3eca5b6166550fa991c37888a6ddbe38c31c34e62776249ad6cb97e7706c6f3f8b6cb6ee48386dc8ace290ba075e03aca76a406eb00e75dc1796b3844a1d3daba82e7853c2b32139584e82f970945da94ab"}}}}}}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={r1, r4, r5}, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x13f8, 0x0, 0x50}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000200)={r9, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xffff, 0xb, 0xf3e, 0x8000, r9}, 0x10) recvmmsg(r6, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x3d}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x60) accept$nfc_llcp(r10, &(0x7f0000000440), &(0x7f00000004c0)=0x60) 5.254794167s ago: executing program 2 (id=1759): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r0, 0x0, &(0x7f0000000100)={0x3eb00, 0x1ea}, &(0x7f00000001c0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005e80)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000200000000000ffff00000000140006000000000001"], 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000140006000000000a0000000000000000", @ANYRES32=r4, @ANYBLOB="14000200fc01000000000000000000000000000014000600000000000100"/40], 0x40}}, 0x0) 4.995327504s ago: executing program 3 (id=1760): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000100000000000000008500000017000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x50a3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r0, 0x7, 0x80000000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0xfc, 0x0, 0x0, 0x0, @tick, {0x10}, {}, @raw32}, {0x0, 0x0, 0x0, 0x9b, @tick=0x5, {}, {}, @quote}], 0x27) 4.95931568s ago: executing program 5 (id=1761): openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003980), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 4.727064229s ago: executing program 2 (id=1762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x28, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x28}}, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x406000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x18, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000002d00)={0x80000020}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000101000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f"], 0x28}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000b00)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002b40)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r6, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) 4.052002551s ago: executing program 3 (id=1764): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r2, 0x34, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x3}]) openat$nullb(0xffffffffffffff9c, 0x0, 0x181480, 0x0) socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6", 0x4d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.029905023s ago: executing program 1 (id=1767): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r1, 0x402, 0x80000004) getdents64(r1, &(0x7f0000000200)=""/171, 0xab) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x98}}}, 0x108) 3.014855742s ago: executing program 3 (id=1768): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x44) r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2400) socket$inet6(0xa, 0x3, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[], 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4008014) 2.751093084s ago: executing program 1 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000300000000047c00000800088004000800b4130180b0131080ac"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 2.621941067s ago: executing program 3 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e47f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000780), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031200000012033f00"], 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x141000, 0xa4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x800c}, 0x24044884) 2.563432775s ago: executing program 2 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2712, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000200)='1', 0xffffffffffffffe9) sendmsg$alg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18}], 0x18}, 0x4c091) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmmsg(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/252, 0xfc}], 0x1}, 0x8}], 0x1, 0x2162, 0x0) 2.54887088s ago: executing program 1 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file3\x00', &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x16, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x110) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6d2c1ee2959b1bb47ff93282c9c5f6ad901b", @ANYRES32=0x0, @ANYBLOB="0800010002000000"], 0x20}}, 0x24008002) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) r7 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x27) sendmmsg(r6, &(0x7f0000000240)=[{{&(0x7f00000004c0)=@llc={0x1a, 0x305, 0x0, 0x0, 0x7, 0x0, @multicast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000540)="cd674a2153705ed89e19a79d48b62166cb10443dab5f1d66fc2f4e1d6d7280d29527a1ab6d2c845e38e82b93c02cb958d028bff7b7aefff011542c4d220fb59fb9032bc82fd30b20918fbf3d2d81d8658966e86c3914d824eaced5cd79870563031b4c6c75b3817c", 0x68}, {0x0}, {&(0x7f0000000a80)="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", 0xfe0}], 0x3, &(0x7f0000001b80)=ANY=[], 0xd0}}], 0x1, 0x3ec0) close(r5) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x28, 0x0}, 0x40012160) 2.079334455s ago: executing program 6 (id=1776): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x730, 0xffffffffffffffff, &(0x7f0000000640)="acbf8c5cd9fb165d4b1849c727d65daaba7b869863731b1b8f700d456a5ad162026082b311a7bb47d91b9ab41e2f392715fc81e457c8a08958d75d85a23ac280f5bd4b6853f1b0a5f4b3fed6ca4f8d570ee0734a62d0fa1ff26a06c52bb090690d9357e5389da99aed936357728e37f1e219a2231774534cfbdb92cd4580cc88b9c90aff7907729826a5723359d35dc83253ab4e437cd6d35d6b79b2e5334d2b7a69679b091dba19ed70802432a4bc562c9cc1605a01f559dfd51d8e1d93456dd3f21126b672fce0f4139ebe31387fc214dc15f8153d50224ea82e6a5edf9396e943edbdae07a5eec1caa8", 0xeb, 0x48, 0x0, 0x1}]) 2.058018216s ago: executing program 1 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x27, 0x5, 0xfffffff) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000002c0)={0x0, 0x101, "70f363229c508541a04de6b8e39311c25bd985db094bf9e4b1ddf0c1b06e9976", 0x7, 0x7f6, 0xfffffffffffffffd, 0x3, 0x3, 0x6f, 0x155, 0x2, [0x5, 0x7, 0x8d, 0xffd]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 2.006523672s ago: executing program 2 (id=1778): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x36a0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x400, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) r5 = dup(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000200)={0x0, 0x5887, 0x0, 0x2004, 0xf4, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$vcsn(&(0x7f0000000380), 0x6, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0), 0x1, 0x8}) io_uring_enter(r6, 0x3516, 0xf723, 0x8, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000080)=""/174) 1.831440674s ago: executing program 6 (id=1779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x5c5a, 0x2}}) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 1.66966686s ago: executing program 6 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680040008"], 0x38}}, 0x0) (fail_nth: 3) 1.583418644s ago: executing program 6 (id=1781): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) 1.576784307s ago: executing program 6 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x7, 0x9, 0x0, 0x5, 0x0, 0x9, 0x0, 0x8, 0x9, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ftruncate(r5, 0x4e62000000000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @loopback}, &(0x7f0000000080)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000021c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040000}, 0x80) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x10001, @vifc_lcl_ifindex=r11, @rand_addr=0x64010100}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESOCT=r8, @ANYRES16=0x0, @ANYRESHEX, @ANYRES64=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r12, @ANYRES64=r2, @ANYRESOCT=r10, @ANYBLOB="a5f05246794a239a59faf4cf8c1ba2fcf43e4dcc3b7d8ed6dffc45e676bbc7ea199b9f284abab53bee70ca8732b44b4f412f41d293e30631fe68c0e49efa6caf8afda3", @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r13}, 0x10) read$ptp(r10, &(0x7f00000000c0)=""/3, 0x3) 1.138496504s ago: executing program 1 (id=1783): r0 = syz_usbip_server_init(0x4) write$usbip_server(r0, &(0x7f0000000580)=@ret_submit={{0x3, 0x8, 0x0, 0x0, 0x150}, 0xe94, 0x0, 0x7ff, 0x87, 0x1, 0x0, "", [{0x8, 0xfff, 0x5, 0x8}, {0x9, 0x2, 0xcad, 0xeb}, {0x80000000, 0x3, 0x5, 0x2}, {0x212c4a4b, 0x9, 0xb, 0x81}, {0x5, 0x1, 0x4}, {0x1, 0xde9a, 0xcc3, 0x9}, {0xfff, 0xbc8, 0x9, 0x4}, {0x4, 0xfffffffe, 0x7, 0x2eafc575}, {0xbd, 0xfffffff7, 0x2, 0xff}, {0x0, 0xff, 0x101, 0x80000001}, {0xfffffff7, 0x6, 0x4, 0xc070}, {0x2, 0x6, 0x200, 0x80}, {0x2, 0x9c63, 0x3ff, 0x4}, {0x9, 0x0, 0x4, 0x9}, {0x101, 0x4, 0x80}, {0x1, 0x9, 0x22, 0xffffffff}, {0x6, 0x1, 0xe01e, 0x7ff}, {0x40000, 0x9dba, 0xf, 0x4}, {0xf, 0x1000, 0x21, 0x3ff}, {0x3, 0x8, 0x0, 0x3}, {0x8, 0x4, 0x6, 0x83a}, {0x7, 0x2, 0x8000, 0x2}, {0xfffffff8, 0x401, 0x3, 0x2}, {0x1, 0x0, 0x7, 0x10000}, {0x6, 0x2, 0x8, 0x7}, {0x7, 0x7f, 0x10, 0xf3b2}, {0x8, 0x6, 0xf8, 0x8}, {0x4, 0x2b3d, 0x9, 0x10001}, {0x4, 0x9, 0x8, 0x7fff}, {0x7ff, 0xc00c, 0xff, 0x8000}, {0x5, 0x7, 0x3, 0x3ff}, {0x2, 0x2, 0x4, 0xffffffff}, {0x6, 0x80000000, 0xffffff81, 0xd98}, {0x8, 0x8, 0x2, 0x500000}, {0x6b0, 0x6, 0xc0, 0x3ff}, {0xf15, 0x8, 0x6, 0x7ff}, {0x3, 0x5, 0xfffffffa, 0x80}, {0x9, 0x7, 0x8, 0x81}, {0xe2, 0xffffffff, 0x5}, {0x400, 0x8c, 0xfffffffe, 0x1}, {0x10, 0xff, 0xfffffff8, 0xffffffff}, {0x6, 0x9, 0x9f, 0x56aec72a}, {0x4, 0xfff, 0x5, 0x4}, {0x176, 0x1ff, 0x7, 0x3}, {0x81, 0x5, 0xfffff000, 0x6}, {0xffffff80, 0x7, 0x4, 0x2}, {0x2, 0xffffffff, 0x4, 0xffff}, {0x5, 0x80000001, 0x6, 0xc}, {0x5, 0x20d7, 0x18, 0x8}, {0x9, 0x7, 0x1, 0x401}, {0x2, 0xf9a, 0x8, 0x4}, {0xfffffffa, 0x6, 0x9, 0x10}, {0x2, 0xe, 0x6, 0x9}, {0x5, 0xd, 0x5, 0x3}, {0x80000001, 0x3, 0x7f, 0x5}, {0x800, 0x8001, 0x0, 0x6}, {0x4, 0x6, 0x53da, 0x2}, {0x7f, 0x200, 0x46, 0x6}, {0x1546725e, 0x8, 0x4acf3159, 0xec}, {0x8, 0x6, 0xfffffffd, 0x5}, {0x1, 0xfffffffb, 0x4, 0x6}, {0x6, 0x80000001, 0x5, 0x5}, {0x0, 0x100, 0x3}, {0x9, 0x8, 0x8, 0xfffffff9}, {0x4, 0x2, 0x800, 0x8}, {0xcf88, 0x401}, {0x3472, 0x1, 0x4, 0x38a}, {0x7, 0x5, 0x5, 0x4}, {0x2e1a, 0x3cc, 0x1, 0x1}, {0x6, 0xfffeffff, 0x8, 0x8}, {0x0, 0x7, 0x9, 0x90c}, {0xa, 0x8, 0x0, 0x99f}, {0x7, 0xb85f, 0x1, 0x80}, {0xb16800, 0x0, 0xfffffff9, 0x4}, {0x4, 0x0, 0x1ff, 0xfffffff7}, {0x4, 0x2, 0x1, 0x1}, {0x40, 0x1, 0xaad, 0x8}, {0x6c, 0x4, 0x7ff, 0x8}, {0xffffffff, 0x6, 0x5, 0x2f}, {0x0, 0x2, 0x8, 0x9}, {0x7, 0x9, 0xc1b, 0x5}, {0x200, 0x100, 0x1, 0xfffffffe}, {0xfffffffa, 0xbbbd, 0x4, 0xfffffff9}, {0x4, 0x8, 0x4, 0x8001}, {0x1f540000, 0x8001, 0x0, 0xfd}, {0x9, 0xbbfa, 0x101, 0x7fffffff}, {0x0, 0x440, 0x1, 0x4}, {0x8, 0x8, 0x8, 0x7e2}, {0xd8, 0x4, 0x7, 0x4}, {0xd82, 0xb117, 0x101, 0xe1d6}, {0xfff, 0xd, 0x9, 0x6}, {0x6, 0x4123, 0xeff2, 0x1ac}, {0x2, 0x1, 0xae, 0x8}, {0x8, 0x5, 0x7, 0xfffffbff}, {0x5, 0x401, 0x0, 0xff}, {0x80000001, 0x200, 0x1, 0x6}, {0x4, 0x4, 0x2, 0xffffffff}, {0x400, 0x7, 0x1ff, 0x4}, {0xf, 0x7, 0x9, 0xffff}, {0x95, 0x81, 0x1}, {0x200000, 0x2, 0x8, 0x6}, {0x6, 0x3ff, 0xc3, 0x7}, {0xe, 0x8, 0x1, 0x9}, {0x510f4406, 0x8, 0x7, 0x7fff}, {0xfffffff7, 0x9, 0x2, 0x7}, {0x6, 0xfffffff9, 0x5, 0x80000001}, {0x1, 0x1, 0x1, 0x9}, {0x4, 0x80000001, 0x101, 0x5}, {0x1, 0x3, 0x1, 0x4}, {0x7fff, 0x2, 0x1fffc00, 0x6}, {0x422e, 0x7ff, 0x1ff, 0xf}, {0x400, 0x80, 0x1, 0x6}, {0x6, 0x1, 0x47, 0xfd}, {0xc, 0x0, 0x5, 0xb63}, {0x0, 0x58, 0x44, 0x400}, {0x2, 0x2, 0x10}, {0xa0f1, 0x0, 0x1, 0x3}, {0x40, 0x6, 0x5, 0x5}, {0x7, 0xb82, 0x80, 0x5}, {0x8, 0x680, 0x133, 0x7}, {0x200, 0x9, 0x6, 0x5}, {0x8, 0x6d, 0x9, 0x3ff}, {0x3, 0x6, 0x9, 0x2}, {0x1, 0x6, 0xb, 0x2}, {0x5, 0xbbdd, 0x28000, 0x77e}, {0x7, 0x1, 0x101, 0x7ff}, {0x7f, 0x1, 0xffff2640, 0x5}, {0x6, 0x100, 0x4, 0x4}, {0x8b, 0xe, 0x8, 0x4}, {0x5, 0x74f, 0x7, 0xd5}, {0x6, 0x3, 0x7, 0x91}, {0x100, 0x3, 0x1}, {0x0, 0x0, 0x9, 0x9}, {0x5, 0x1000, 0x1}, {0x200, 0x1, 0x6, 0x8}]}, 0x8a0) 639.342169ms ago: executing program 5 (id=1784): userfaultfd(0x801) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(0x0, 0x100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) pidfd_send_signal(r3, 0x0, 0xfffffffffffffffe, 0x0) 399.748692ms ago: executing program 6 (id=1785): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x700280) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$TCFLSH(r3, 0x400455c8, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x18) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x40000001) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000100), 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_GETFMTS(r5, 0x8004500b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380), 0x61) 374.570269ms ago: executing program 5 (id=1786): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0}, 0xfff5) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x5ac6, 0x10100, 0x0, 0x36e}, &(0x7f0000000480), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1a94, &(0x7f0000000280)={0x0, 0x800000, 0x800, 0x3, 0x0, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 52.417737ms ago: executing program 2 (id=1787): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x1, 0x1001) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) timerfd_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="01000000706fde4218a733d372d1ee431c431a0201fcdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fanotify_mark(r3, 0x1, 0x4000003b, r2, 0x0) vmsplice(r2, &(0x7f0000008280)=[{&(0x7f0000006100)="ff", 0x1}], 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x1126ef0, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x20008005) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) 870.497µs ago: executing program 3 (id=1788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) rename(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, 0x0, 0x209, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) close_range(r1, r1, 0x2) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000180)=@nullb, r3, &(0x7f0000000340)) r4 = syz_clone(0x4900200, 0x0, 0xfffffe10, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x2, &(0x7f0000000100)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) pipe(&(0x7f00000003c0)) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r7, 0x1, 0x0, 0x0, {0xf}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=1789): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x730, 0xffffffffffffffff, &(0x7f0000000640)="acbf8c5cd9fb165d4b1849c727d65daaba7b869863731b1b8f700d456a5ad162026082b311a7bb47d91b9ab41e2f392715fc81e457c8a08958d75d85a23ac280f5bd4b6853f1b0a5f4b3fed6ca4f8d570ee0734a62d0fa1ff26a06c52bb090690d9357e5389da99aed936357728e37f1e219a2231774534cfbdb92cd4580cc88b9c90aff7907729826a5723359d35dc83253ab4e437cd6d35d6b79b2e5334d2b7a69679b091dba19ed70802432a4bc562c9cc1605a01f559dfd51d8e1d93456dd3f21126b672fce0f4139ebe31387fc214dc15f8153d50224ea82e6a5edf9396e943edbdae07a5eec1caa8", 0xeb, 0x48, 0x0, 0x1}]) kernel console output (not intermixed with test programs): 9] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000007 [ 398.479138][T10769] RBP: 00007f3978486090 R08: 0000000000000000 R09: 0000000000000000 [ 398.479147][T10769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.479157][T10769] R13: 0000000000000000 R14: 00007f39777a6160 R15: 00007ffd9cdd8e28 [ 398.479180][T10769] [ 398.481015][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.621836][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.703780][T10765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 399.305961][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.340242][ T6094] usb 1-1: USB disconnect, device number 39 [ 399.637436][T10787] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 399.643983][T10787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 399.670872][T10787] vhci_hcd vhci_hcd.0: Device attached [ 399.686449][T10788] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 399.695731][ T11] vhci_hcd: stop threads [ 399.700678][ T11] vhci_hcd: release socket [ 399.705189][ T11] vhci_hcd: disconnect device [ 399.808589][ T5907] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 399.960011][ T5907] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.971367][ T5907] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 399.995768][ T5907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.003365][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 400.022416][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.036548][ T5907] usb 4-1: config 0 descriptor?? [ 400.045598][T10782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 400.146594][ T29] audit: type=1400 audit(1738124128.375:1499): avc: denied { execute } for pid=10796 comm="syz.0.1288" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 400.170634][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.334445][T10777] overlayfs: statfs failed on './file0' [ 400.519864][ T29] audit: type=1400 audit(1738124128.755:1500): avc: denied { read } for pid=10796 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 400.539162][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.617389][ T5907] logitech 0003:046D:C24F.000F: collection stack underflow [ 400.633699][ T5907] logitech 0003:046D:C24F.000F: item 0 2 0 12 parsing failed [ 401.054680][ T5907] logitech 0003:046D:C24F.000F: parse failed [ 401.074901][ T5907] logitech 0003:046D:C24F.000F: probe with driver logitech failed with error -22 [ 401.099816][ T5907] usb 4-1: USB disconnect, device number 37 [ 401.186480][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 401.199303][T10811] FAULT_INJECTION: forcing a failure. [ 401.199303][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 401.214535][T10808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.220623][T10811] CPU: 1 UID: 0 PID: 10811 Comm: syz.5.1291 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 401.220648][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 401.220658][T10811] Call Trace: [ 401.220663][T10811] [ 401.220669][T10811] dump_stack_lvl+0x16c/0x1f0 [ 401.220700][T10811] should_fail_ex+0x50a/0x650 [ 401.220724][T10811] ? fs_reclaim_acquire+0xae/0x150 [ 401.220750][T10811] should_failslab+0xc2/0x120 [ 401.220769][T10811] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 401.220785][T10811] ? __alloc_skb+0x2b1/0x380 [ 401.220806][T10811] __alloc_skb+0x2b1/0x380 [ 401.220821][T10811] ? __pfx___alloc_skb+0x10/0x10 [ 401.220842][T10811] ? if_nlmsg_size+0x45d/0xa80 [ 401.220861][T10811] rtmsg_ifinfo_build_skb+0x81/0x280 [ 401.220884][T10811] rtnetlink_event+0xf3/0x1f0 [ 401.220904][T10811] notifier_call_chain+0xb7/0x410 [ 401.220924][T10811] ? __pfx_rtnetlink_event+0x10/0x10 [ 401.220944][T10811] call_netdevice_notifiers_info+0xbe/0x140 [ 401.220968][T10811] dev_set_mac_address+0x370/0x4a0 [ 401.220990][T10811] ? __pfx_dev_set_mac_address+0x10/0x10 [ 401.221013][T10811] ? __pfx_down_write+0x10/0x10 [ 401.221030][T10811] ? trace_kmalloc+0x2d/0xd0 [ 401.221048][T10811] ? __kmalloc_noprof+0x23b/0x510 [ 401.221065][T10811] dev_set_mac_address_user+0x30/0x50 [ 401.221086][T10811] do_setlink.constprop.0+0x7bf/0x3f80 [ 401.221108][T10811] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 401.221122][T10811] ? lock_acquire.part.0+0x11b/0x380 [ 401.221147][T10811] ? __mutex_trylock_common+0xea/0x250 [ 401.221169][T10811] ? __pfx___mutex_trylock_common+0x10/0x10 [ 401.221190][T10811] ? rtnl_newlink+0x5d9/0x1d60 [ 401.221205][T10811] ? rcu_is_watching+0x12/0xc0 [ 401.221220][T10811] ? trace_contention_end+0xee/0x140 [ 401.221241][T10811] ? __mutex_lock+0x1cc/0xb10 [ 401.221264][T10811] ? rcu_is_watching+0x12/0xc0 [ 401.221278][T10811] ? rtnl_newlink+0x5d9/0x1d60 [ 401.221293][T10811] ? __pfx___mutex_lock+0x10/0x10 [ 401.221315][T10811] ? cap_capable+0xb3/0x250 [ 401.221340][T10811] ? full_name_hash+0xbc/0x110 [ 401.221359][T10811] ? netdev_name_node_lookup+0x127/0x180 [ 401.221384][T10811] rtnl_newlink+0x1306/0x1d60 [ 401.221404][T10811] ? __pfx_rtnl_newlink+0x10/0x10 [ 401.221423][T10811] ? __pfx___lock_acquire+0x10/0x10 [ 401.221441][T10811] ? cred_has_capability.isra.0+0x192/0x2f0 [ 401.221460][T10811] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 401.221482][T10811] ? find_held_lock+0x2d/0x110 [ 401.221509][T10811] ? __pfx_rtnl_newlink+0x10/0x10 [ 401.221524][T10811] rtnetlink_rcv_msg+0x95b/0xea0 [ 401.221541][T10811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.221566][T10811] netlink_rcv_skb+0x16b/0x440 [ 401.221582][T10811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.221598][T10811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.221624][T10811] ? netlink_deliver_tap+0x1ae/0xd30 [ 401.221650][T10811] netlink_unicast+0x53c/0x7f0 [ 401.221667][T10811] ? __pfx_netlink_unicast+0x10/0x10 [ 401.221688][T10811] netlink_sendmsg+0x8b8/0xd70 [ 401.221705][T10811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.221728][T10811] ____sys_sendmsg+0xaaf/0xc90 [ 401.221747][T10811] ? copy_msghdr_from_user+0x10b/0x160 [ 401.221763][T10811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.221793][T10811] ___sys_sendmsg+0x135/0x1e0 [ 401.221810][T10811] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.221835][T10811] ? __pfx_lock_release+0x10/0x10 [ 401.221853][T10811] ? trace_lock_acquire+0x14e/0x1f0 [ 401.221877][T10811] ? __fget_files+0x206/0x3a0 [ 401.221896][T10811] __sys_sendmsg+0x16e/0x220 [ 401.221912][T10811] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.221942][T10811] do_syscall_64+0xcd/0x250 [ 401.221958][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.221978][T10811] RIP: 0033:0x7f397758cda9 [ 401.221990][T10811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.222003][T10811] RSP: 002b:00007f39784c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.222018][T10811] RAX: ffffffffffffffda RBX: 00007f39777a5fa0 RCX: 00007f397758cda9 [ 401.222027][T10811] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 401.222036][T10811] RBP: 00007f39784c8090 R08: 0000000000000000 R09: 0000000000000000 [ 401.222044][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.222053][T10811] R13: 0000000000000000 R14: 00007f39777a5fa0 R15: 00007ffd9cdd8e28 [ 401.222073][T10811] [ 401.223101][T10811] vlan0: entered promiscuous mode [ 401.608684][ T5907] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 401.619570][T10811] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 402.051073][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 402.081766][ T5907] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 402.097694][T10824] lo speed is unknown, defaulting to 1000 [ 402.100997][ T5907] usb 1-1: config 0 has no interface number 0 [ 402.116693][ T5907] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 31 [ 402.153924][ T5907] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 402.175566][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.194088][T10831] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1297'. [ 402.205111][ T5907] usb 1-1: Product: syz [ 402.211328][ T5907] usb 1-1: Manufacturer: syz [ 402.292829][ T5907] usb 1-1: SerialNumber: syz [ 402.302591][ T5907] usb 1-1: config 0 descriptor?? [ 402.310627][T10813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.320753][ T5907] smsc95xx v2.0.0 [ 402.412472][T10835] FAULT_INJECTION: forcing a failure. [ 402.412472][T10835] name failslab, interval 1, probability 0, space 0, times 0 [ 402.426630][ T864] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 402.437232][T10835] CPU: 0 UID: 0 PID: 10835 Comm: syz.1.1298 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 402.437258][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 402.437268][T10835] Call Trace: [ 402.437273][T10835] [ 402.437280][T10835] dump_stack_lvl+0x16c/0x1f0 [ 402.437312][T10835] should_fail_ex+0x50a/0x650 [ 402.437335][T10835] ? fs_reclaim_acquire+0xae/0x150 [ 402.437370][T10835] should_failslab+0xc2/0x120 [ 402.437388][T10835] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 402.437406][T10835] ? __pmd_alloc+0xc3/0x870 [ 402.437434][T10835] __pmd_alloc+0xc3/0x870 [ 402.437460][T10835] __handle_mm_fault+0x9fb/0x2c60 [ 402.437483][T10835] ? __pfx___handle_mm_fault+0x10/0x10 [ 402.437498][T10835] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 402.437536][T10835] ? find_vma+0xc0/0x140 [ 402.437557][T10835] ? __pfx_find_vma+0x10/0x10 [ 402.437582][T10835] handle_mm_fault+0x3fa/0xaa0 [ 402.437603][T10835] do_user_addr_fault+0x7a3/0x13f0 [ 402.437632][T10835] exc_page_fault+0x5c/0xc0 [ 402.437657][T10835] asm_exc_page_fault+0x26/0x30 [ 402.437679][T10835] RIP: 0010:__put_user_4+0x11/0x20 [ 402.437703][T10835] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 402.437719][T10835] RSP: 0018:ffffc9000426fa50 EFLAGS: 00050202 [ 402.437733][T10835] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000680 [ 402.437743][T10835] RDX: ffff888035f68000 RSI: ffffffff8a4b472c RDI: ffffffff8bd2fec0 [ 402.437754][T10835] RBP: 0000000020000680 R08: 0000000000000000 R09: fffffbfff20c4922 [ 402.437763][T10835] R10: ffffffff90624917 R11: 0000000000000000 R12: ffff8880276da000 [ 402.437774][T10835] R13: ffff8880276da0e8 R14: ffff8880276da100 R15: 0000000020000680 [ 402.437792][T10835] ? bt_sock_ioctl+0x15c/0x320 [ 402.437821][T10835] bt_sock_ioctl+0x166/0x320 [ 402.437847][T10835] rfcomm_sock_ioctl+0x4e/0xd0 [ 402.437867][T10835] sock_do_ioctl+0x116/0x280 [ 402.437890][T10835] ? __pfx_sock_do_ioctl+0x10/0x10 [ 402.437912][T10835] ? lockdep_hardirqs_on_prepare+0x3b0/0x420 [ 402.437944][T10835] ? find_held_lock+0x2d/0x110 [ 402.437965][T10835] sock_ioctl+0x228/0x6c0 [ 402.437989][T10835] ? __pfx_sock_ioctl+0x10/0x10 [ 402.438014][T10835] ? lock_acquire+0x2f/0xb0 [ 402.438034][T10835] ? avc_has_perm_noaudit+0x61/0x3a0 [ 402.438063][T10835] ? avc_has_perm_noaudit+0x143/0x3a0 [ 402.438088][T10835] ? __pfx_sock_ioctl+0x10/0x10 [ 402.438110][T10835] do_vfs_ioctl+0x682/0x1990 [ 402.438132][T10835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 402.438162][T10835] ? inode_has_perm+0x16f/0x1d0 [ 402.438189][T10835] ? file_has_perm+0x280/0x350 [ 402.438207][T10835] ? __pfx_file_has_perm+0x10/0x10 [ 402.438242][T10835] ? selinux_file_ioctl+0xb4/0x270 [ 402.438270][T10835] __x64_sys_ioctl+0x11d/0x200 [ 402.438293][T10835] do_syscall_64+0xcd/0x250 [ 402.438310][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.438332][T10835] RIP: 0033:0x7fb7a118cda9 [ 402.438350][T10835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.438365][T10835] RSP: 002b:00007fb7a200c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.438379][T10835] RAX: ffffffffffffffda RBX: 00007fb7a13a5fa0 RCX: 00007fb7a118cda9 [ 402.438389][T10835] RDX: 0000000020000680 RSI: 000000000000541b RDI: 0000000000000003 [ 402.438399][T10835] RBP: 00007fb7a200c090 R08: 0000000000000000 R09: 0000000000000000 [ 402.438409][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.438418][T10835] R13: 0000000000000000 R14: 00007fb7a13a5fa0 R15: 00007ffe42657c28 [ 402.438440][T10835] [ 402.556468][T10840] FAULT_INJECTION: forcing a failure. [ 402.556468][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.567147][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.573223][T10840] CPU: 1 UID: 0 PID: 10840 Comm: syz.5.1300 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 402.573242][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 402.573251][T10840] Call Trace: [ 402.573256][T10840] [ 402.573261][T10840] dump_stack_lvl+0x16c/0x1f0 [ 402.573288][T10840] should_fail_ex+0x50a/0x650 [ 402.573312][T10840] _copy_from_user+0x2e/0xd0 [ 402.573334][T10840] bpf_test_init.isra.0+0xf1/0x150 [ 402.573359][T10840] bpf_prog_test_run_xdp+0x4f0/0x1560 [ 402.573385][T10840] ? lock_acquire+0x2f/0xb0 [ 402.573404][T10840] ? __fget_files+0x40/0x3a0 [ 402.573419][T10840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.573441][T10840] ? __fget_files+0x206/0x3a0 [ 402.573457][T10840] ? fput+0x67/0x440 [ 402.573474][T10840] ? __bpf_prog_get+0xa0/0x290 [ 402.573495][T10840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.573516][T10840] __sys_bpf+0xfc6/0x49c0 [ 402.573531][T10840] ? __pfx_lock_release+0x10/0x10 [ 402.573551][T10840] ? __pfx___sys_bpf+0x10/0x10 [ 402.573565][T10840] ? vfs_write+0x306/0x1150 [ 402.573590][T10840] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 402.573633][T10840] ? fput+0x67/0x440 [ 402.573649][T10840] ? ksys_write+0x1ba/0x250 [ 402.573670][T10840] ? __pfx_ksys_write+0x10/0x10 [ 402.573694][T10840] __x64_sys_bpf+0x78/0xc0 [ 402.573709][T10840] ? lockdep_hardirqs_on+0x7c/0x110 [ 402.573729][T10840] do_syscall_64+0xcd/0x250 [ 402.573748][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.573768][T10840] RIP: 0033:0x7f397758cda9 [ 402.573780][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.573793][T10840] RSP: 002b:00007f39784c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.573808][T10840] RAX: ffffffffffffffda RBX: 00007f39777a5fa0 RCX: 00007f397758cda9 [ 402.573817][T10840] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a [ 402.573825][T10840] RBP: 00007f39784c8090 R08: 0000000000000000 R09: 0000000000000000 [ 402.573834][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.573842][T10840] R13: 0000000000000000 R14: 00007f39777a5fa0 R15: 00007ffd9cdd8e28 [ 402.573861][T10840] [ 403.031748][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.037733][ C0] hrtimer: interrupt took 599255119 ns [ 403.080804][T10813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 403.088083][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 403.137746][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.169778][ T864] usb 4-1: Using ep0 maxpacket: 16 [ 403.179859][ T864] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 403.189242][ T864] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 403.197988][ T864] usb 4-1: Product: syz [ 403.202713][ T864] usb 4-1: Manufacturer: syz [ 403.207472][ T864] usb 4-1: SerialNumber: syz [ 403.214310][ T864] usb 4-1: config 0 descriptor?? [ 403.349443][ T5907] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 403.353484][ T6094] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 403.360518][ T5907] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 403.580801][ T5907] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 403.592454][ T5907] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 403.816407][ T5907] usb 4-1: USB disconnect, device number 38 [ 403.868588][ T5868] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 403.888954][ T6094] usb 6-1: Using ep0 maxpacket: 32 [ 403.895190][ T6094] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 403.903611][ T6094] usb 6-1: config 0 has no interface number 0 [ 403.909891][ T6094] usb 6-1: config 0 interface 184 has no altsetting 0 [ 403.918268][ T6094] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 403.934463][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.943701][ T6094] usb 6-1: Product: syz [ 403.947956][ T6094] usb 6-1: Manufacturer: syz [ 403.957163][ T6094] usb 6-1: SerialNumber: syz [ 403.963424][ T6094] usb 6-1: config 0 descriptor?? [ 403.970727][ T6094] smsc75xx v1.0.0 [ 404.015467][T10850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.081726][ T5868] usb 3-1: No LPM exit latency info found, disabling LPM. [ 404.098215][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 404.110024][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 404.121089][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 404.143034][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 404.156400][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.166060][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.176663][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.191320][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.200426][T10846] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 405.271542][ T5900] usb 1-1: USB disconnect, device number 40 [ 405.277314][ T6094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 405.318621][ T6094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 405.335349][ T5868] cdc_ncm 3-1:1.0: bind() failure [ 405.364330][ T6094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 405.397185][ T5868] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 405.408236][ T6094] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 405.427160][ T5868] cdc_ncm 3-1:1.1: bind() failure [ 405.533848][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 405.639114][T10863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.655689][ T6094] usb 6-1: USB disconnect, device number 15 [ 405.738636][ T5868] usb 3-1: USB disconnect, device number 24 [ 405.780835][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 405.905911][ T29] audit: type=1400 audit(1738124134.135:1501): avc: denied { watch watch_reads } for pid=10868 comm="syz.1.1311" path="/280/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 405.929639][T10869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1311'. [ 406.111495][T10871] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 406.178859][ T29] audit: type=1400 audit(1738124134.415:1502): avc: denied { append } for pid=10884 comm="syz.5.1316" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.273339][ T29] audit: type=1400 audit(1738124134.485:1503): avc: denied { connect } for pid=10881 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 406.360230][ T5868] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 406.541819][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.562978][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.639614][ T5868] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 406.668576][ T864] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 406.681825][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.716085][ T5868] usb 4-1: config 0 descriptor?? [ 406.818577][ T864] usb 6-1: Using ep0 maxpacket: 16 [ 406.834958][ T864] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 406.844979][ T864] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 406.879719][ T864] usb 6-1: Product: syz [ 406.883936][ T864] usb 6-1: Manufacturer: syz [ 406.888853][ T864] usb 6-1: SerialNumber: syz [ 406.907918][ T864] usb 6-1: config 0 descriptor?? [ 407.157592][ T5868] wacom 0003:056A:0013.0010: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 407.183837][ T6094] usb 6-1: USB disconnect, device number 16 [ 407.193243][ T5868] wacom 0003:056A:0013.0010: hidraw0: USB HID v0.00 Device [HID 056a:0013] on usb-dummy_hcd.3-1/input0 [ 407.211150][ T5868] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0013.0010/input/input25 [ 407.613991][ T6094] usb 4-1: USB disconnect, device number 39 [ 407.906054][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 407.917463][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 408.068665][ T5900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 408.728605][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 408.735729][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.749052][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.790699][ T5900] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 408.898386][T10924] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 409.135576][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.146544][ T5900] usb 6-1: config 0 descriptor?? [ 409.290658][T10926] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 409.308712][T10926] overlayfs: missing 'lowerdir' [ 409.779296][ T5900] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 410.537005][ T5870] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 410.719095][ T5870] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 411.108340][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.190045][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.221514][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.238372][ T5907] usb 6-1: USB disconnect, device number 17 [ 411.250115][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.274903][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.298690][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.309684][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.328631][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.376327][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.491039][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.500158][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.535979][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.567612][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.578046][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.639421][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.661374][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.705750][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.728557][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.736400][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.745933][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.756923][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.764739][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.773789][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.784875][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.788717][ T5907] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 411.793324][ T5870] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 412.108751][ T5870] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 412.119610][ T5870] usb 4-1: Product: syz [ 412.127694][ T5870] usb 4-1: Manufacturer: syz [ 412.142898][ T5870] usb 4-1: SerialNumber: syz [ 412.506200][ T5870] usb 4-1: config 0 descriptor?? [ 412.517282][ T5870] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 412.518573][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 412.828711][ T29] audit: type=1400 audit(1738124141.055:1504): avc: denied { setattr } for pid=10951 comm="syz.2.1335" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 413.133883][ T5907] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 413.143144][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 413.152541][ T5907] usb 6-1: Product: syz [ 413.160061][ T5907] usb 6-1: Manufacturer: syz [ 413.166935][ T5907] usb 6-1: SerialNumber: syz [ 413.173113][ T5870] usb 4-1: USB disconnect, device number 40 [ 413.186492][ T5870] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 413.196103][ T5907] usb 6-1: config 0 descriptor?? [ 414.070450][ T5830] Bluetooth: hci2: unexpected event for opcode 0x9df2 [ 414.723296][ T5900] usb 6-1: USB disconnect, device number 18 [ 414.878336][ T29] audit: type=1400 audit(1738124143.105:1505): avc: denied { execute } for pid=10955 comm="syz.1.1336" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.930476][ T29] audit: type=1400 audit(1738124143.145:1506): avc: denied { ioctl } for pid=10955 comm="syz.1.1336" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.996811][ T29] audit: type=1400 audit(1738124143.225:1507): avc: denied { ioctl } for pid=10975 comm="syz.0.1341" path="socket:[31056]" dev="sockfs" ino=31056 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.067892][T10978] FAULT_INJECTION: forcing a failure. [ 415.067892][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.082153][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.0.1342 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 415.082176][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 415.082186][T10978] Call Trace: [ 415.082190][T10978] [ 415.082196][T10978] dump_stack_lvl+0x16c/0x1f0 [ 415.082227][T10978] should_fail_ex+0x50a/0x650 [ 415.082249][T10978] _copy_from_user+0x2e/0xd0 [ 415.082271][T10978] copy_msghdr_from_user+0x99/0x160 [ 415.082298][T10978] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 415.082327][T10978] ___sys_sendmsg+0xff/0x1e0 [ 415.082346][T10978] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.082373][T10978] ? __pfx_lock_release+0x10/0x10 [ 415.082396][T10978] ? trace_lock_acquire+0x14e/0x1f0 [ 415.082423][T10978] ? __fget_files+0x206/0x3a0 [ 415.082445][T10978] __sys_sendmsg+0x16e/0x220 [ 415.082463][T10978] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.082496][T10978] do_syscall_64+0xcd/0x250 [ 415.082514][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.082537][T10978] RIP: 0033:0x7f6698d8cda9 [ 415.082551][T10978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.082568][T10978] RSP: 002b:00007f6699be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.082585][T10978] RAX: ffffffffffffffda RBX: 00007f6698fa5fa0 RCX: 00007f6698d8cda9 [ 415.082596][T10978] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000003 [ 415.082606][T10978] RBP: 00007f6699be5090 R08: 0000000000000000 R09: 0000000000000000 [ 415.082615][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.082624][T10978] R13: 0000000000000000 R14: 00007f6698fa5fa0 R15: 00007ffd5852cb68 [ 415.082646][T10978] [ 415.533370][ T29] audit: type=1400 audit(1738124143.765:1508): avc: denied { remount } for pid=10979 comm="syz.5.1344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 415.621322][ T5868] IPVS: starting estimator thread 0... [ 416.068751][T10987] IPVS: using max 33 ests per chain, 79200 per kthread [ 416.173595][ T29] audit: type=1400 audit(1738124144.315:1509): avc: denied { execmem } for pid=10992 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 416.432205][ T5900] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 416.741392][ T29] audit: type=1400 audit(1738124144.965:1510): avc: denied { getopt } for pid=10998 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 417.339919][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 417.351502][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 4 [ 417.799425][ T5900] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 417.810529][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.820666][ T5900] usb 4-1: Product: syz [ 417.824852][ T5900] usb 4-1: Manufacturer: syz [ 417.829780][ T5900] usb 4-1: SerialNumber: syz [ 417.836466][ T5900] usb 4-1: config 0 descriptor?? [ 417.855222][T11010] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 417.870269][T11010] overlayfs: missing 'lowerdir' [ 417.886865][ T5900] usb 4-1: no audio or video endpoints found [ 417.948335][T11013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 417.954903][T11013] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.017271][T11013] vhci_hcd vhci_hcd.0: Device attached [ 418.083007][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.111937][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.122109][ T8] usb 4-1: USB disconnect, device number 41 [ 418.152098][T11014] vhci_hcd: connection closed [ 418.152307][ T8165] vhci_hcd: stop threads [ 418.273854][ T5900] vhci_hcd: vhci_device speed not set [ 418.288850][ T8165] vhci_hcd: release socket [ 418.295748][ T8165] vhci_hcd: disconnect device [ 418.318697][ T6094] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 418.348616][ T5900] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 418.376369][ T5900] usb 35-1: enqueue for inactive port 0 [ 418.989125][ T6094] usb 6-1: Using ep0 maxpacket: 16 [ 419.008877][ T5900] vhci_hcd: vhci_device speed not set [ 419.044794][ T6094] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 419.063007][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 419.108290][ T6094] usb 6-1: Product: syz [ 419.135004][ T6094] usb 6-1: Manufacturer: syz [ 419.156607][ T6094] usb 6-1: SerialNumber: syz [ 419.174261][ T6094] usb 6-1: config 0 descriptor?? [ 419.633489][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 419.732332][ T5907] usb 6-1: USB disconnect, device number 19 [ 419.757117][ T29] audit: type=1400 audit(1738124147.985:1511): avc: denied { map } for pid=11031 comm="syz.1.1357" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 419.799477][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 419.847339][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.873840][ T8] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=10.66 [ 419.907356][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.078694][ T6094] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 420.150969][ T8] usb 1-1: string descriptor 0 read error: -71 [ 420.188734][ T8] usb_8dev 1-1:127.0 can0: sending command message failed [ 420.233968][ T8] usb_8dev 1-1:127.0 can0: can't get firmware version [ 420.250135][ T6094] usb 4-1: No LPM exit latency info found, disabling LPM. [ 420.265769][ T6094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 420.319283][ T8] usb_8dev 1-1:127.0: probe with driver usb_8dev failed with error -22 [ 420.342113][ T6094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 420.370136][ T8] usb 1-1: USB disconnect, device number 41 [ 420.381351][ T6094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 420.424348][ T6094] usb 4-1: string descriptor 0 read error: -22 [ 420.452023][ T6094] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.489172][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.528802][T11034] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 420.838864][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 421.203276][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1361'. [ 421.364915][ T6094] cdc_ncm 4-1:1.0: bind() failure [ 421.369835][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 421.978578][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 422.004871][ T5900] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 422.014124][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.023053][ T5900] usb 6-1: Product: syz [ 422.027264][ T5900] usb 6-1: Manufacturer: syz [ 422.076986][ T5900] usb 6-1: SerialNumber: syz [ 422.083132][ T6094] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 422.095886][ T5900] usb 6-1: config 0 descriptor?? [ 422.096785][ T6094] cdc_ncm 4-1:1.1: bind() failure [ 422.135352][ T6094] usb 4-1: USB disconnect, device number 42 [ 422.353652][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.402818][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.619755][T11039] : entered promiscuous mode [ 422.771204][ T5900] usb 6-1: USB disconnect, device number 20 [ 423.164043][T11064] : entered promiscuous mode [ 423.358798][ T6094] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 423.558622][ T6094] usb 1-1: device descriptor read/64, error -71 [ 424.169059][ T5868] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 424.305113][ T6094] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 425.013347][T11073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.121660][ T6094] usb 1-1: device descriptor read/64, error -71 [ 425.148624][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 425.157131][ T5868] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 425.174836][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 425.183319][ T5868] usb 4-1: Product: syz [ 425.187464][ T5868] usb 4-1: Manufacturer: syz [ 425.192495][ T5868] usb 4-1: SerialNumber: syz [ 425.199305][ T5868] usb 4-1: config 0 descriptor?? [ 425.238709][ T6094] usb usb1-port1: attempt power cycle [ 425.340114][T11083] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 425.347879][T11083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1372'. [ 425.362211][T11083] serio: Serial port pts0 [ 425.373098][ T5900] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 425.636550][ T5900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 425.648766][ T6094] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 425.710539][ T6094] usb 1-1: device descriptor read/8, error -71 [ 425.808542][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.826976][ T5900] usb 6-1: config 0 descriptor?? [ 425.844287][ T5868] usb 4-1: USB disconnect, device number 43 [ 425.850605][ T5900] usbtest 6-1:0.0: Linux user mode test driver [ 425.861807][ T5900] usbtest 6-1:0.0: low-speed {control} tests [ 426.079954][ T6094] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 426.224766][ T5900] usb 6-1: USB disconnect, device number 21 [ 426.229549][T11090] QAT: failed to copy from user cfg_data. [ 426.293193][ T6094] usb 1-1: device descriptor read/8, error -71 [ 426.408923][ T6094] usb usb1-port1: unable to enumerate USB device [ 426.520797][T11105] overlayfs: missing 'lowerdir' [ 426.653750][ T29] audit: type=1400 audit(1738124154.885:1512): avc: denied { create } for pid=11108 comm="syz.3.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 426.697558][ T29] audit: type=1400 audit(1738124154.905:1513): avc: denied { ioctl } for pid=11108 comm="syz.3.1381" path="socket:[32067]" dev="sockfs" ino=32067 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 426.724372][ T5868] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 426.749904][T11107] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1380'. [ 426.759244][T11107] netlink: 6296 bytes leftover after parsing attributes in process `syz.2.1380'. [ 426.768759][T11107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1380'. [ 426.902919][ T5868] usb 2-1: No LPM exit latency info found, disabling LPM. [ 426.937010][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 427.014505][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 427.102629][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 427.188344][ T5868] usb 2-1: string descriptor 0 read error: -22 [ 427.221806][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.303819][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.308137][ T5900] kernel write not supported for file /radio3 (pid: 5900 comm: kworker/0:4) [ 427.325188][T11096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 428.829492][T11120] could not allocate digest TFM handle crct10dif-pclmul [ 428.988724][ T5868] cdc_ncm 2-1:1.0: bind() failure [ 428.996242][ T5868] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 429.076437][ T5868] cdc_ncm 2-1:1.1: bind() failure [ 429.465822][ T5868] usb 2-1: USB disconnect, device number 38 [ 429.488848][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 429.507714][T11145] xt_TCPMSS: Only works on TCP SYN packets [ 429.638850][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 429.662862][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 429.675685][ T8] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=10.66 [ 429.686500][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.797934][ T29] audit: type=1400 audit(1738124158.025:1514): avc: denied { ioctl } for pid=11163 comm="syz.1.1395" path="socket:[32256]" dev="sockfs" ino=32256 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 429.912694][ T8] usb 1-1: string descriptor 0 read error: -71 [ 429.927103][ T8] usb_8dev 1-1:127.0 can0: sending command message failed [ 429.938757][ T8] usb_8dev 1-1:127.0 can0: can't get firmware version [ 429.988643][ T5900] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 429.999977][ T8] usb_8dev 1-1:127.0: probe with driver usb_8dev failed with error -22 [ 430.025549][ T8] usb 1-1: USB disconnect, device number 46 [ 430.160997][ T5900] usb 4-1: config 1 has an invalid interface number: 129 but max is 0 [ 430.174520][ T5900] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 430.184807][ T5900] usb 4-1: config 1 has no interface number 0 [ 430.191117][ T5900] usb 4-1: config 1 interface 129 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.204817][ T5900] usb 4-1: config 1 interface 129 has no altsetting 0 [ 430.213445][ T5900] usb 4-1: New USB device found, idVendor=1199, idProduct=6820, bcdDevice=32.c3 [ 430.222665][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.231589][ T5900] usb 4-1: Product: syz [ 430.235854][ T5900] usb 4-1: Manufacturer: syz [ 430.240969][ T5900] usb 4-1: SerialNumber: syz [ 430.288596][ T864] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 430.444218][ T864] usb 3-1: Using ep0 maxpacket: 8 [ 430.462526][ T864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.494471][ T864] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 430.520971][ T864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 430.542965][ T5900] hub 4-1:1.129: bad descriptor, ignoring hub [ 430.550035][ T864] usb 3-1: SerialNumber: syz [ 430.562326][ T5900] hub 4-1:1.129: probe with driver hub failed with error -5 [ 430.572657][ T5900] sierra 4-1:1.129: Sierra USB modem converter detected [ 430.581533][ T864] usb 3-1: config 0 descriptor?? [ 430.589026][ T5900] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 430.627778][ T5900] usb 4-1: USB disconnect, device number 44 [ 431.553928][ T29] audit: type=1400 audit(1738124159.525:1515): avc: denied { create } for pid=11174 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 431.610365][ T5900] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 431.620388][ T5900] sierra 4-1:1.129: device disconnected [ 431.649443][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.907511][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.979201][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1401'. [ 432.019054][T11187] gre0: entered promiscuous mode [ 432.023645][ T864] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 432.031201][ T864] usb 3-1: No valid video chain found. [ 432.038219][ T864] usb 3-1: USB disconnect, device number 25 [ 432.083701][ T29] audit: type=1400 audit(1738124160.315:1516): avc: denied { setopt } for pid=11189 comm="syz.3.1402" lport=39818 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 432.230447][T11196] overlayfs: failed to resolve './file0': -2 [ 432.298603][ T5907] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 432.478957][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 432.508857][ T5907] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 432.516990][ T5907] usb 6-1: config 0 has no interface number 0 [ 432.545381][ T5907] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 432.578598][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.601437][ T5907] usb 6-1: Product: syz [ 432.605672][ T5907] usb 6-1: Manufacturer: syz [ 432.635606][ T5907] usb 6-1: SerialNumber: syz [ 432.646611][ T5907] usb 6-1: config 0 descriptor?? [ 432.658815][ T2153] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 432.975554][ T5907] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 433.005271][ T5907] usb 6-1: No streaming interface found for terminal 6. [ 433.080541][ T2153] usb 4-1: No LPM exit latency info found, disabling LPM. [ 433.099567][ T2153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 433.108666][ T5907] usb 6-1: USB disconnect, device number 22 [ 433.165530][ T2153] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 433.464152][T11192] syz.1.1403 (11192): drop_caches: 2 [ 433.473890][ T2153] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 433.505611][ T2153] usb 4-1: string descriptor 0 read error: -22 [ 433.519317][ T2153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.529207][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.155831][T11198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.423455][ T29] audit: type=1400 audit(1738124162.485:1517): avc: denied { getopt } for pid=11210 comm="syz.5.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.499136][T11214] 9pnet_fd: Insufficient options for proto=fd [ 435.174759][ T29] audit: type=1400 audit(1738124162.775:1518): avc: denied { bind } for pid=11208 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.418454][ T2153] cdc_ncm 4-1:1.0: bind() failure [ 435.428101][ T29] audit: type=1400 audit(1738124163.655:1519): avc: denied { connect } for pid=11218 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.464238][ T2153] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 435.493244][ T2153] cdc_ncm 4-1:1.1: bind() failure [ 435.549214][ T29] audit: type=1400 audit(1738124163.785:1520): avc: denied { map } for pid=11222 comm="syz.0.1412" path="socket:[31475]" dev="sockfs" ino=31475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.649376][ T2153] usb 4-1: USB disconnect, device number 45 [ 435.696225][ T29] audit: type=1400 audit(1738124163.785:1521): avc: denied { read accept } for pid=11222 comm="syz.0.1412" path="socket:[31475]" dev="sockfs" ino=31475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.743112][ T29] audit: type=1400 audit(1738124163.965:1522): avc: denied { watch watch_reads } for pid=11222 comm="syz.0.1412" path="/proc/939/syscall" dev="proc" ino=32429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 435.834562][ T29] audit: type=1326 audit(1738124164.065:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 435.843812][T11234] overlayfs: failed to resolve './file0': -2 [ 435.909995][ T29] audit: type=1326 audit(1738124164.065:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 435.968055][ T29] audit: type=1326 audit(1738124164.095:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.240979][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 437.240993][ T29] audit: type=1326 audit(1738124165.465:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.323156][ T29] audit: type=1326 audit(1738124165.465:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.481945][ T29] audit: type=1326 audit(1738124165.545:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.506052][ T29] audit: type=1326 audit(1738124165.555:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.793015][ T29] audit: type=1326 audit(1738124165.555:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 437.823040][ T29] audit: type=1326 audit(1738124165.555:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 438.270664][ T29] audit: type=1400 audit(1738124165.825:1555): avc: denied { write } for pid=11245 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.335580][ T29] audit: type=1400 audit(1738124165.825:1556): avc: denied { nlmsg_write } for pid=11245 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.512605][ T29] audit: type=1326 audit(1738124166.725:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 438.738827][ T29] audit: type=1326 audit(1738124166.735:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397758cda9 code=0x7ffc0000 [ 438.942067][T11269] overlayfs: failed to resolve './file0': -2 [ 439.283781][T11281] serio: Serial port pts0 [ 440.025186][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.931689][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1439'. [ 441.692353][T11328] netlink: 'syz.2.1444': attribute type 1 has an invalid length. [ 442.406385][ T6094] IPVS: starting estimator thread 0... [ 442.568620][T11333] IPVS: using max 34 ests per chain, 81600 per kthread [ 442.685868][T11337] block device autoloading is deprecated and will be removed. [ 443.058748][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 443.058782][ T29] audit: type=1326 audit(1738124170.985:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.130155][ T29] audit: type=1326 audit(1738124170.985:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.161282][ T29] audit: type=1326 audit(1738124170.995:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.218964][ T29] audit: type=1326 audit(1738124170.995:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.259433][ T29] audit: type=1326 audit(1738124170.995:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.931361][ T29] audit: type=1326 audit(1738124170.995:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 443.964654][T11343] : entered promiscuous mode [ 443.991758][ T29] audit: type=1326 audit(1738124170.995:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 444.034523][ T29] audit: type=1326 audit(1738124170.995:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 444.121578][ T29] audit: type=1326 audit(1738124170.995:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 444.201609][ T29] audit: type=1326 audit(1738124170.995:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6698d8cda9 code=0x7ffc0000 [ 444.660984][ T6094] kernel write not supported for file [eventfd] (pid: 6094 comm: kworker/1:8) [ 445.001861][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 445.358639][ T6094] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 445.474505][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1458'. [ 445.487872][T11374] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1458'. [ 445.528648][ T6094] usb 4-1: Using ep0 maxpacket: 16 [ 445.536795][ T6094] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 445.546449][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 445.559044][ T6094] usb 4-1: Product: syz [ 445.565396][ T6094] usb 4-1: Manufacturer: syz [ 445.586579][ T6094] usb 4-1: SerialNumber: syz [ 445.663889][ T6094] usb 4-1: config 0 descriptor?? [ 445.678794][T11375] netlink: 'syz.2.1458': attribute type 4 has an invalid length. [ 445.961319][ T6094] usb 4-1: USB disconnect, device number 46 [ 446.430623][T11383] FAULT_INJECTION: forcing a failure. [ 446.430623][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.448673][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.5.1460 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 446.448699][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 446.448708][T11383] Call Trace: [ 446.448712][T11383] [ 446.448718][T11383] dump_stack_lvl+0x16c/0x1f0 [ 446.448747][T11383] should_fail_ex+0x50a/0x650 [ 446.448770][T11383] _copy_from_user+0x2e/0xd0 [ 446.448793][T11383] copy_msghdr_from_user+0x99/0x160 [ 446.448811][T11383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 446.448836][T11383] ___sys_sendmsg+0xff/0x1e0 [ 446.448853][T11383] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.448878][T11383] ? __pfx_lock_release+0x10/0x10 [ 446.448899][T11383] ? trace_lock_acquire+0x14e/0x1f0 [ 446.448926][T11383] ? __fget_files+0x206/0x3a0 [ 446.448947][T11383] __sys_sendmsg+0x16e/0x220 [ 446.448964][T11383] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.448992][T11383] do_syscall_64+0xcd/0x250 [ 446.449008][T11383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.449030][T11383] RIP: 0033:0x7f397758cda9 [ 446.449043][T11383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.449058][T11383] RSP: 002b:00007f39784c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.449075][T11383] RAX: ffffffffffffffda RBX: 00007f39777a5fa0 RCX: 00007f397758cda9 [ 446.449086][T11383] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 446.449096][T11383] RBP: 00007f39784c8090 R08: 0000000000000000 R09: 0000000000000000 [ 446.449106][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.449115][T11383] R13: 0000000000000000 R14: 00007f39777a5fa0 R15: 00007ffd9cdd8e28 [ 446.449137][T11383] [ 447.117333][ T5868] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 450.788622][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 450.893455][ T5868] usb 1-1: device descriptor read/all, error -61 [ 451.052890][ T5868] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 451.268639][ T5868] usb 1-1: device descriptor read/64, error -71 [ 451.378826][ T5868] usb usb1-port1: attempt power cycle [ 452.008721][ T5868] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 452.059400][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 452.065667][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.077233][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.093722][ T5868] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 452.113126][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.130223][ T5868] usb 1-1: config 0 descriptor?? [ 452.647540][ T5868] saitek 0003:06A3:0CCD.0012: item fetching failed at offset 8/11 [ 452.656308][ T5868] saitek 0003:06A3:0CCD.0012: parse failed [ 452.662599][ T5868] saitek 0003:06A3:0CCD.0012: probe with driver saitek failed with error -22 [ 452.956285][T11427] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.1472'. [ 453.634882][T11431] binder: 11430:11431 ioctl c04064a0 20000100 returned -22 [ 453.888853][ T6094] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 454.144364][ T6094] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 454.153493][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.171755][ T6094] usb 6-1: Product: syz [ 454.177391][ T5868] usb 1-1: USB disconnect, device number 49 [ 454.189098][ T6094] usb 6-1: Manufacturer: syz [ 454.268050][ T6094] usb 6-1: SerialNumber: syz [ 454.306563][ T6094] usb 6-1: config 0 descriptor?? [ 454.380374][ T6094] ch341 6-1:0.0: ch341-uart converter detected [ 454.429047][ T2153] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 454.613944][ T2153] usb 3-1: No LPM exit latency info found, disabling LPM. [ 454.659110][ T2153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 454.751420][ T2153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 454.777379][ T2153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 454.820660][ T2153] usb 3-1: string descriptor 0 read error: -22 [ 454.842734][ T2153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.868537][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.889306][T11442] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 455.198926][ T2153] cdc_ncm 3-1:1.0: bind() failure [ 455.207169][ T2153] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 455.214421][ T2153] cdc_ncm 3-1:1.1: bind() failure [ 455.306086][T11452] overlayfs: failed to resolve './file0': -2 [ 455.617558][ T6094] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 455.675094][ T2153] usb 3-1: USB disconnect, device number 26 [ 456.105914][ T2153] usb 6-1: USB disconnect, device number 23 [ 456.123381][ T2153] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 456.240535][ T2153] ch341 6-1:0.0: device disconnected [ 458.336691][ T5907] hid-generic 1AA0:0002:0386.0013: item fetching failed at offset 0/2 [ 458.811887][ T5907] hid-generic 1AA0:0002:0386.0013: probe with driver hid-generic failed with error -22 [ 459.489085][T11496] trusted_key: encrypted_key: insufficient parameters specified [ 459.785850][T11495] netlink: 'syz.5.1492': attribute type 10 has an invalid length. [ 459.819924][T11495] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1492'. [ 460.270138][T11516] random: crng reseeded on system resumption [ 460.861572][ T2153] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 461.608664][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 461.617635][T11525] bridge_slave_1: left allmulticast mode [ 461.623396][T11525] bridge_slave_1: left promiscuous mode [ 461.629202][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.055441][T11525] bridge_slave_0: left allmulticast mode [ 462.061191][T11525] bridge_slave_0: left promiscuous mode [ 462.068278][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.167146][T11525] bridge0 (unregistering): left allmulticast mode [ 462.309279][ T864] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 463.125371][ T864] usb 4-1: device descriptor read/64, error -71 [ 463.189609][ T2153] usb 1-1: device descriptor read/all, error -71 [ 463.511935][T11540] batman_adv: batadv0: Adding interface: ip6gretap1 [ 463.518633][T11540] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 463.538656][T11540] batman_adv: batadv0: Interface activated: ip6gretap1 [ 463.969428][ T864] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 465.480689][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 465.628577][ T5900] usb 6-1: device descriptor read/64, error -71 [ 465.869133][ T5900] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 466.018681][ T5900] usb 6-1: device descriptor read/64, error -71 [ 466.083190][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 466.158602][ T5900] usb usb6-port1: attempt power cycle [ 466.248845][ T5868] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 466.409930][ T5868] usb 3-1: No LPM exit latency info found, disabling LPM. [ 466.430364][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 466.453887][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 466.519776][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 466.854453][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 466.867954][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.870023][ T5900] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 466.877539][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.915248][ T5900] usb 6-1: device descriptor read/8, error -71 [ 466.921597][T11571] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 467.388891][ T5868] cdc_ncm 3-1:1.0: bind() failure [ 467.406459][ T5868] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 467.415153][ T5868] cdc_ncm 3-1:1.1: bind() failure [ 467.426717][ T5868] usb 3-1: USB disconnect, device number 27 [ 467.448874][ T5900] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 467.480344][ T5900] usb 6-1: device descriptor read/8, error -71 [ 467.599579][ T5900] usb usb6-port1: unable to enumerate USB device [ 467.668985][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.680850][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.696106][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.703924][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.716384][ T5817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 467.725387][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.788820][ T864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 467.802126][T11597] lo speed is unknown, defaulting to 1000 [ 467.930627][T11597] chnl_net:caif_netlink_parms(): no params data found [ 467.939345][ T864] usb 4-1: Using ep0 maxpacket: 8 [ 467.946732][ T864] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 467.954856][ T864] usb 4-1: can't read configurations, error -61 [ 468.088740][ T864] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 468.378020][T11597] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.385248][ T864] usb 4-1: Using ep0 maxpacket: 8 [ 468.395391][ T864] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.404911][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.412195][ T864] usb 4-1: can't read configurations, error -61 [ 468.422674][T11597] bridge_slave_0: entered allmulticast mode [ 468.437205][ T864] usb usb4-port1: attempt power cycle [ 468.448779][T11597] bridge_slave_0: entered promiscuous mode [ 468.469625][T11597] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.476841][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.484290][T11597] bridge_slave_1: entered allmulticast mode [ 468.491153][T11597] bridge_slave_1: entered promiscuous mode [ 468.533220][T11597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.565547][T11597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.595477][T11597] team0: Port device team_slave_0 added [ 468.604692][T11597] team0: Port device team_slave_1 added [ 468.627891][T11597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.635088][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.660988][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.667377][T11597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.680088][T11597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.687350][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.713258][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.719890][T11597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.762615][T11597] hsr_slave_0: entered promiscuous mode [ 468.768959][T11597] hsr_slave_1: entered promiscuous mode [ 468.775049][T11597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.786273][T11597] Cannot create hsr debugfs directory [ 468.799093][ T864] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 468.830619][ T864] usb 4-1: Using ep0 maxpacket: 8 [ 468.847400][ T864] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.860939][ T864] usb 4-1: can't read configurations, error -61 [ 469.009143][ T864] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 469.029602][ T864] usb 4-1: Using ep0 maxpacket: 8 [ 469.031227][ T864] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 469.031256][ T864] usb 4-1: can't read configurations, error -61 [ 469.031421][ T864] usb usb4-port1: unable to enumerate USB device [ 469.151231][T11597] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 469.162040][T11597] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.171513][T11597] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.186438][T11597] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.684839][T11597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.759386][ T5830] Bluetooth: hci3: command tx timeout [ 469.800163][T11597] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.834074][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.841206][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.900366][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.907501][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.362827][T11642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 470.480592][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.327475][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 471.327510][ T29] audit: type=1400 audit(1738124199.555:1651): avc: denied { execute } for pid=11660 comm="syz.5.1535" path="/172/file0/cpu.stat" dev="ramfs" ino=33699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 471.827576][T11597] veth0_vlan: entered promiscuous mode [ 471.835696][T11597] veth1_vlan: entered promiscuous mode [ 471.841545][ T5830] Bluetooth: hci3: command tx timeout [ 471.854901][T11597] veth0_macvtap: entered promiscuous mode [ 471.862255][T11597] veth1_macvtap: entered promiscuous mode [ 471.872308][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.882766][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.893264][T11597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.915742][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.946501][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.958671][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.969261][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.980125][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.990760][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.001815][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.016932][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.027105][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.037765][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.048134][T11597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.110860][T11597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.112925][ T29] audit: type=1400 audit(1738124200.335:1652): avc: denied { unmount } for pid=8622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 472.129393][T11597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.141896][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.227088][T11597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.290527][T11597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.338635][T11597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.367420][T11597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.675988][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.748341][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.759328][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.782010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.883488][ T29] audit: type=1400 audit(1738124201.115:1653): avc: denied { mounton } for pid=11597 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 473.976357][ T5830] Bluetooth: hci3: command tx timeout [ 474.163191][T11695] openvswitch: netlink: Message has 8 unknown bytes. [ 476.538613][ T5817] Bluetooth: hci3: command tx timeout [ 476.655211][T11732] dvmrp6: entered allmulticast mode [ 476.866585][T11746] openvswitch: netlink: IPv6 tunnel dst address is zero [ 478.128571][ T29] audit: type=1400 audit(1738124206.355:1654): avc: denied { getopt } for pid=11754 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 478.838235][ T29] audit: type=1400 audit(1738124207.065:1655): avc: denied { bind } for pid=11771 comm="syz.5.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 479.075580][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 479.646245][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1570'. [ 479.697450][T11794] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 479.738908][ T5907] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 479.778692][ T29] audit: type=1400 audit(1738124208.005:1656): avc: denied { bind } for pid=11795 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.800271][T11794] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 479.856788][ T29] audit: type=1400 audit(1738124208.005:1657): avc: denied { getopt } for pid=11795 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.916273][T11804] overlay: Unknown parameter 'fowner<00000000000000060928' [ 479.923758][ T5907] usb 4-1: Invalid ep0 maxpacket: 64 [ 480.009448][ T29] audit: type=1400 audit(1738124208.245:1658): avc: denied { read } for pid=11800 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 480.177835][ T5907] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 480.588151][ T29] audit: type=1400 audit(1738124208.815:1659): avc: denied { append } for pid=11811 comm="syz.6.1574" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 480.588191][ T29] audit: type=1400 audit(1738124208.815:1660): avc: denied { getopt } for pid=11811 comm="syz.6.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.611924][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.788315][ T29] audit: type=1804 audit(1738124208.985:1661): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1575" name="/newroot/337/file1" dev="fuse" ino=1 res=1 errno=0 [ 480.792062][T11814] tty tty32: ldisc open failed (-12), clearing slot 31 [ 480.809999][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.829300][ T5907] usb 4-1: Invalid ep0 maxpacket: 64 [ 480.848685][ T5907] usb usb4-port1: attempt power cycle [ 480.879870][ T29] audit: type=1800 audit(1738124208.985:1662): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1575" name="/" dev="fuse" ino=1 res=0 errno=0 [ 481.037564][ T29] audit: type=1804 audit(1738124208.985:1663): pid=11817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1575" name="/newroot/337/file1" dev="fuse" ino=1 res=1 errno=0 [ 481.059236][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.254477][ T5907] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 481.289936][ T5907] usb 4-1: Invalid ep0 maxpacket: 64 [ 481.418617][ T5907] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 481.452368][ T5907] usb 4-1: Invalid ep0 maxpacket: 64 [ 481.475539][ T5907] usb usb4-port1: unable to enumerate USB device [ 483.355593][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'. [ 483.498287][T11859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1587'. [ 484.473420][T11871] program syz.6.1591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.506425][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 484.506436][ T29] audit: type=1326 audit(1738124212.735:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 484.559295][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1591'. [ 484.657833][ T29] audit: type=1326 audit(1738124212.735:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 484.876739][ T29] audit: type=1326 audit(1738124212.735:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 485.052205][ T29] audit: type=1326 audit(1738124212.735:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 485.075680][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.986047][ T29] audit: type=1326 audit(1738124212.735:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 486.009587][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.108829][ T29] audit: type=1326 audit(1738124212.735:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 486.153448][ T29] audit: type=1326 audit(1738124212.735:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 486.176942][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.214391][ T29] audit: type=1326 audit(1738124212.775:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 486.240730][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.421234][ T29] audit: type=1326 audit(1738124212.775:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 486.444831][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.513274][ T29] audit: type=1326 audit(1738124212.775:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.2.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979958cda9 code=0x7ffc0000 [ 488.536199][T11891] lo speed is unknown, defaulting to 1000 [ 488.988655][ T5867] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 489.175177][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.228755][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.249127][ T5867] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.258239][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.283171][ T5867] usb 4-1: config 0 descriptor?? [ 489.417844][ T5867] usbhid 4-1:0.0: can't add hid device: -22 [ 489.982858][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 490.538575][ T5867] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 490.673621][T11923] FAULT_INJECTION: forcing a failure. [ 490.673621][T11923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.687147][T11923] CPU: 1 UID: 0 PID: 11923 Comm: syz.1.1608 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 490.687169][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 490.687179][T11923] Call Trace: [ 490.687183][T11923] [ 490.687189][T11923] dump_stack_lvl+0x16c/0x1f0 [ 490.687221][T11923] should_fail_ex+0x50a/0x650 [ 490.687248][T11923] _copy_to_user+0x32/0xd0 [ 490.687276][T11923] simple_read_from_buffer+0xd0/0x160 [ 490.687302][T11923] proc_fail_nth_read+0x198/0x270 [ 490.687326][T11923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.687350][T11923] ? rw_verify_area+0xcf/0x680 [ 490.687373][T11923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.687395][T11923] vfs_read+0x1df/0xbf0 [ 490.687419][T11923] ? __fget_files+0x1fc/0x3a0 [ 490.687435][T11923] ? __pfx___mutex_lock+0x10/0x10 [ 490.687462][T11923] ? __pfx_vfs_read+0x10/0x10 [ 490.687492][T11923] ? __fget_files+0x206/0x3a0 [ 490.687515][T11923] ksys_read+0x12b/0x250 [ 490.687539][T11923] ? __pfx_ksys_read+0x10/0x10 [ 490.687570][T11923] do_syscall_64+0xcd/0x250 [ 490.687588][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.687611][T11923] RIP: 0033:0x7fb7a118b7bc [ 490.687626][T11923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 490.687641][T11923] RSP: 002b:00007fb7a200c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.687658][T11923] RAX: ffffffffffffffda RBX: 00007fb7a13a5fa0 RCX: 00007fb7a118b7bc [ 490.687669][T11923] RDX: 000000000000000f RSI: 00007fb7a200c0a0 RDI: 000000000000004e [ 490.687679][T11923] RBP: 00007fb7a200c090 R08: 0000000000000000 R09: 0000000000000000 [ 490.687688][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.687698][T11923] R13: 0000000000000000 R14: 00007fb7a13a5fa0 R15: 00007ffe42657c28 [ 490.687720][T11923] [ 490.903941][T11925] input: syz0 as /devices/virtual/input/input29 [ 490.924045][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 490.989010][ T5867] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 490.998098][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 491.006556][ T5867] usb 6-1: Product: syz [ 491.010859][ T5867] usb 6-1: Manufacturer: syz [ 491.015438][ T5867] usb 6-1: SerialNumber: syz [ 491.020993][ T5867] usb 6-1: config 0 descriptor?? [ 491.307352][ T5867] usb 6-1: USB disconnect, device number 28 [ 492.391270][ T6094] usb 4-1: USB disconnect, device number 57 [ 492.924506][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 492.924521][ T29] audit: type=1326 audit(1738124221.145:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 492.958953][ T29] audit: type=1326 audit(1738124221.155:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 492.984161][ T29] audit: type=1326 audit(1738124221.155:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.058551][ T29] audit: type=1326 audit(1738124221.155:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.117051][ T29] audit: type=1326 audit(1738124221.155:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.245288][T11951] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 493.251739][ T29] audit: type=1326 audit(1738124221.155:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.251828][T11951] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 493.287313][T11948] fuse: Unknown parameter 'dd' [ 493.335879][T11951] vhci_hcd vhci_hcd.0: Device attached [ 493.353226][ T29] audit: type=1326 audit(1738124221.155:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.369892][T11952] vhci_hcd: connection closed [ 493.411588][ T36] vhci_hcd: stop threads [ 493.431032][ T36] vhci_hcd: release socket [ 493.435800][ T36] vhci_hcd: disconnect device [ 493.440943][ T29] audit: type=1326 audit(1738124221.155:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.496794][ T29] audit: type=1326 audit(1738124221.155:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 493.529916][ T29] audit: type=1326 audit(1738124221.155:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.3.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee18cda9 code=0x7ffc0000 [ 494.461557][T11965] nvme_fabrics: unknown parameter or missing value 'g' in ctrl creation request [ 494.769615][T11976] support for the xor transformation has been removed. [ 495.108704][ T6094] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 495.847526][ T6094] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 495.857246][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.980037][ T6094] usb 4-1: Product: syz [ 495.987587][ T6094] usb 4-1: Manufacturer: syz [ 496.006087][ T6094] usb 4-1: SerialNumber: syz [ 496.318917][T11996] batman_adv: batadv0: Adding interface: ip6gretap1 [ 496.325609][T11996] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 496.346662][T11996] batman_adv: batadv0: Interface activated: ip6gretap1 [ 496.915532][ T6094] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 497.013886][ T5867] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.079185][T12001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 497.085745][T12001] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 497.113691][T12001] vhci_hcd vhci_hcd.0: Device attached [ 497.128275][T12002] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 497.144381][ T36] vhci_hcd: stop threads [ 497.149190][ T36] vhci_hcd: release socket [ 497.153763][ T36] vhci_hcd: disconnect device [ 497.248555][ T5907] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 497.398642][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 497.406069][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 497.414716][ T5907] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=10.66 [ 497.423908][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.519026][ T8] usb 4-1: USB disconnect, device number 58 [ 497.657818][ T5907] usb 6-1: string descriptor 0 read error: -71 [ 497.672524][ T5907] usb_8dev 6-1:127.0 can0: sending command message failed [ 497.681104][ T5907] usb_8dev 6-1:127.0 can0: can't get firmware version [ 497.735682][T12013] tipc: Started in network mode [ 497.744560][T12013] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 497.753746][T12013] tipc: Enabling of bearer rejected, failed to enable media [ 497.769280][ T5907] usb_8dev 6-1:127.0: probe with driver usb_8dev failed with error -22 [ 497.788746][ T5907] usb 6-1: USB disconnect, device number 29 [ 497.948695][ T2153] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 498.068681][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 498.068711][ T29] audit: type=1326 audit(1738124226.295:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12006 comm="syz.6.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 498.098344][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.128150][ T5867] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 498.164860][ T2153] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 498.177281][ T29] audit: type=1326 audit(1738124226.295:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12006 comm="syz.6.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 498.184402][ T5867] ath9k_htc: Failed to initialize the device [ 498.210222][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.304589][ T2153] usb 3-1: Product: syz [ 498.330708][ T2153] usb 3-1: Manufacturer: syz [ 498.335357][ T2153] usb 3-1: SerialNumber: syz [ 498.350492][ T2153] usb 3-1: config 0 descriptor?? [ 498.362952][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 498.365362][ T2153] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 028 [ 498.510838][T12025] lo speed is unknown, defaulting to 1000 [ 498.575981][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.586557][T12025] IPVS: You probably need to specify IP address on multicast interface. [ 498.595725][T12025] IPVS: Error connecting to the multicast addr [ 498.615475][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.643128][ T29] audit: type=1400 audit(1738124226.875:1779): avc: denied { setopt } for pid=12010 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 498.662613][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.670102][ T5907] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 498.675516][ T2153] (null): failure setting delay to 10us [ 498.698533][ T2153] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 498.710306][ T2153] usb 3-1: USB disconnect, device number 28 [ 498.766127][ T29] audit: type=1400 audit(1738124226.995:1780): avc: denied { bind } for pid=12038 comm="syz.3.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 498.859552][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 498.875780][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.906693][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.939590][ T5907] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 498.950028][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.973228][ T5907] usb 6-1: config 0 descriptor?? [ 498.988141][ T29] audit: type=1400 audit(1738124227.215:1781): avc: denied { read write } for pid=12046 comm="syz.6.1644" name="cgroup.subtree_control" dev="cgroup2" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 499.068712][ T29] audit: type=1400 audit(1738124227.215:1782): avc: denied { open } for pid=12046 comm="syz.6.1644" path="" dev="cgroup2" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 499.134783][ T5907] usb 6-1: bad CDC descriptors [ 499.661814][T12055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'. [ 499.680500][T12021] Bluetooth: MGMT ver 1.23 [ 499.717782][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 499.743010][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 499.759391][T12053] lo speed is unknown, defaulting to 1000 [ 499.811986][T12055] geneve2: entered allmulticast mode [ 500.026591][T12064] sp0: Synchronizing with TNC [ 501.250111][ T5868] usb 6-1: USB disconnect, device number 30 [ 501.285287][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1650'. [ 501.452833][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.849547][T12085] input: syz1 as /devices/virtual/input/input30 [ 501.859504][ T29] audit: type=1400 audit(1738124230.085:1783): avc: denied { map } for pid=12084 comm="syz.3.1653" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 502.205787][T12092] xt_hashlimit: size too large, truncated to 1048576 [ 502.250377][ T29] audit: type=1400 audit(1738124230.085:1784): avc: denied { execute } for pid=12084 comm="syz.3.1653" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 502.356304][T12098] FAULT_INJECTION: forcing a failure. [ 502.356304][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 502.438681][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.1.1657 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 502.438708][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 502.438717][T12098] Call Trace: [ 502.438722][T12098] [ 502.438729][T12098] dump_stack_lvl+0x16c/0x1f0 [ 502.438762][T12098] should_fail_ex+0x50a/0x650 [ 502.438785][T12098] ? fs_reclaim_acquire+0xae/0x150 [ 502.438809][T12098] ? tomoyo_realpath_from_path+0xb9/0x720 [ 502.438831][T12098] should_failslab+0xc2/0x120 [ 502.438849][T12098] __kmalloc_noprof+0xcb/0x510 [ 502.438865][T12098] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 502.438892][T12098] tomoyo_realpath_from_path+0xb9/0x720 [ 502.438912][T12098] ? tomoyo_path_number_perm+0x235/0x590 [ 502.438931][T12098] ? tomoyo_path_number_perm+0x235/0x590 [ 502.438951][T12098] tomoyo_path_number_perm+0x248/0x590 [ 502.438965][T12098] ? tomoyo_path_number_perm+0x235/0x590 [ 502.438983][T12098] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.439020][T12098] ? __pfx_lock_release+0x10/0x10 [ 502.439039][T12098] ? trace_lock_acquire+0x14e/0x1f0 [ 502.439061][T12098] ? lock_acquire+0x2f/0xb0 [ 502.439079][T12098] ? __fget_files+0x40/0x3a0 [ 502.439097][T12098] ? __fget_files+0x206/0x3a0 [ 502.439113][T12098] security_file_ioctl+0x9b/0x240 [ 502.439133][T12098] __x64_sys_ioctl+0xb7/0x200 [ 502.439156][T12098] do_syscall_64+0xcd/0x250 [ 502.439174][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.439195][T12098] RIP: 0033:0x7fb7a118cda9 [ 502.439209][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.439224][T12098] RSP: 002b:00007fb7a200c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.439240][T12098] RAX: ffffffffffffffda RBX: 00007fb7a13a5fa0 RCX: 00007fb7a118cda9 [ 502.439250][T12098] RDX: 0000000020000680 RSI: 00000000c02c5638 RDI: 0000000000000003 [ 502.439258][T12098] RBP: 00007fb7a200c090 R08: 0000000000000000 R09: 0000000000000000 [ 502.439268][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.439277][T12098] R13: 0000000000000000 R14: 00007fb7a13a5fa0 R15: 00007ffe42657c28 [ 502.439300][T12098] [ 502.439311][T12098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.495796][T12100] overlayfs: failed to resolve './file0': -2 [ 503.319501][T12110] veth0_to_team: entered promiscuous mode [ 503.325337][T12110] veth0_to_team: entered allmulticast mode [ 503.430437][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 504.094946][ T29] audit: type=1400 audit(1738124232.165:1785): avc: denied { write } for pid=12105 comm="syz.2.1661" name="file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.189057][ T8] usb 4-1: no configurations [ 504.193992][ T8] usb 4-1: can't read configurations, error -22 [ 504.204947][ T29] audit: type=1400 audit(1738124232.165:1786): avc: denied { open } for pid=12105 comm="syz.2.1661" path="/323/file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.409926][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 504.733563][ T29] audit: type=1400 audit(1738124232.275:1787): avc: denied { ioctl } for pid=12105 comm="syz.2.1661" path="/323/file0" dev="tmpfs" ino=1802 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.758640][ T8] usb 4-1: no configurations [ 504.763560][ T8] usb 4-1: can't read configurations, error -22 [ 504.786229][ T8] usb usb4-port1: attempt power cycle [ 505.158693][ T8] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 505.205061][ T8] usb 4-1: no configurations [ 505.213947][ T8] usb 4-1: can't read configurations, error -22 [ 505.358750][ T8] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 505.390120][ T8] usb 4-1: no configurations [ 505.394901][ T8] usb 4-1: can't read configurations, error -22 [ 505.410149][ T8] usb usb4-port1: unable to enumerate USB device [ 506.318088][ T5868] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 506.578707][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 506.588220][ T5868] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 506.815152][ T5868] usb 4-1: config 0 has no interface number 0 [ 506.874549][ T5868] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 506.961297][ T5868] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 507.055094][ T5868] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 507.159371][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.211638][ T5868] usb 4-1: Product: syz [ 507.215857][ T5868] usb 4-1: Manufacturer: syz [ 507.221100][ T5868] usb 4-1: SerialNumber: syz [ 507.227589][ T5868] usb 4-1: config 0 descriptor?? [ 507.233357][T12151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.243138][T12151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.356946][T12163] FAULT_INJECTION: forcing a failure. [ 507.356946][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 507.398711][T12163] CPU: 0 UID: 0 PID: 12163 Comm: syz.5.1679 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 507.398739][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 507.398749][T12163] Call Trace: [ 507.398754][T12163] [ 507.398761][T12163] dump_stack_lvl+0x16c/0x1f0 [ 507.398797][T12163] should_fail_ex+0x50a/0x650 [ 507.398820][T12163] ? fs_reclaim_acquire+0xae/0x150 [ 507.398845][T12163] ? tomoyo_realpath_from_path+0xb9/0x720 [ 507.398867][T12163] should_failslab+0xc2/0x120 [ 507.398886][T12163] __kmalloc_noprof+0xcb/0x510 [ 507.398903][T12163] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 507.398932][T12163] tomoyo_realpath_from_path+0xb9/0x720 [ 507.398953][T12163] ? tomoyo_path_number_perm+0x235/0x590 [ 507.398971][T12163] ? tomoyo_path_number_perm+0x235/0x590 [ 507.398992][T12163] tomoyo_path_number_perm+0x248/0x590 [ 507.399008][T12163] ? tomoyo_path_number_perm+0x235/0x590 [ 507.399028][T12163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.399069][T12163] ? __pfx_lock_release+0x10/0x10 [ 507.399091][T12163] ? trace_lock_acquire+0x14e/0x1f0 [ 507.399112][T12163] ? lock_acquire+0x2f/0xb0 [ 507.399133][T12163] ? __fget_files+0x40/0x3a0 [ 507.399154][T12163] ? __fget_files+0x206/0x3a0 [ 507.399173][T12163] security_file_ioctl+0x9b/0x240 [ 507.399196][T12163] __x64_sys_ioctl+0xb7/0x200 [ 507.399221][T12163] do_syscall_64+0xcd/0x250 [ 507.399239][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.399262][T12163] RIP: 0033:0x7f397758cda9 [ 507.399275][T12163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.399291][T12163] RSP: 002b:00007f39784c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.399308][T12163] RAX: ffffffffffffffda RBX: 00007f39777a5fa0 RCX: 00007f397758cda9 [ 507.399319][T12163] RDX: 0000000020004740 RSI: 00000000c074510c RDI: 0000000000000003 [ 507.399329][T12163] RBP: 00007f39784c8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.399339][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.399348][T12163] R13: 0000000000000000 R14: 00007f39777a5fa0 R15: 00007ffd9cdd8e28 [ 507.399371][T12163] [ 507.399407][T12163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.465876][T12151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.638626][T12151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.078646][ T864] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 508.228612][ T864] usb 6-1: Using ep0 maxpacket: 16 [ 508.243408][ T864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.254051][ T864] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 508.272704][ T864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.293391][ T864] usb 6-1: config 0 descriptor?? [ 508.891040][ T5868] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 508.918594][ T29] audit: type=1400 audit(1738124237.105:1788): avc: denied { setopt } for pid=12150 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.953524][ T5868] asix 4-1:0.251: probe with driver asix failed with error -524 [ 509.110794][ T864] hid (null): unknown global tag 0xc [ 509.687825][ T864] hid (null): unknown global tag 0xd [ 509.700408][ T864] hid (null): report_id 0 is invalid [ 509.738330][ T864] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0014/input/input31 [ 509.857234][ T5900] usb 4-1: USB disconnect, device number 63 [ 509.880438][ T864] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0014/input/input32 [ 509.910417][ T864] kye 0003:0458:5013.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 509.927423][ T864] usb 6-1: USB disconnect, device number 31 [ 510.361482][ T2153] IPVS: starting estimator thread 0... [ 510.899737][T12188] IPVS: using max 56 ests per chain, 134400 per kthread [ 512.249907][T12207] IPv6: Can't replace route, no match found [ 512.571564][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 512.869696][T12213] trusted_key: encrypted_key: insufficient parameters specified [ 513.078589][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 513.087663][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 513.168594][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 513.371103][T12219] netlink: 'syz.6.1693': attribute type 1 has an invalid length. [ 513.382797][T12219] netlink: 'syz.6.1693': attribute type 1 has an invalid length. [ 513.594365][T12221] FAULT_INJECTION: forcing a failure. [ 513.594365][T12221] name failslab, interval 1, probability 0, space 0, times 0 [ 513.648626][T12221] CPU: 1 UID: 0 PID: 12221 Comm: syz.2.1694 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 513.648654][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 513.648663][T12221] Call Trace: [ 513.648669][T12221] [ 513.648675][T12221] dump_stack_lvl+0x16c/0x1f0 [ 513.648707][T12221] should_fail_ex+0x50a/0x650 [ 513.648728][T12221] ? fs_reclaim_acquire+0xae/0x150 [ 513.648754][T12221] should_failslab+0xc2/0x120 [ 513.648773][T12221] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 513.648791][T12221] ? getname_flags.part.0+0x4c/0x550 [ 513.648816][T12221] getname_flags.part.0+0x4c/0x550 [ 513.648846][T12221] getname_flags+0x93/0xf0 [ 513.648870][T12221] __x64_sys_renameat+0xaf/0x100 [ 513.648891][T12221] do_syscall_64+0xcd/0x250 [ 513.648909][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.648930][T12221] RIP: 0033:0x7f979958cda9 [ 513.648943][T12221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.648959][T12221] RSP: 002b:00007f979a4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 513.648975][T12221] RAX: ffffffffffffffda RBX: 00007f97997a5fa0 RCX: 00007f979958cda9 [ 513.648986][T12221] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000004 [ 513.648996][T12221] RBP: 00007f979a4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 513.649006][T12221] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 513.649015][T12221] R13: 0000000000000000 R14: 00007f97997a5fa0 R15: 00007ffe1c98a328 [ 513.649038][T12221] [ 513.814636][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.039021][T12228] fuse: Bad value for 'group_id' [ 514.056789][T12228] fuse: Bad value for 'group_id' [ 514.067525][T12230] nfs: Unknown parameter '' [ 514.376741][ T864] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 514.508792][T12240] FAULT_INJECTION: forcing a failure. [ 514.508792][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.521935][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.3.1701 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 514.521956][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 514.521966][T12240] Call Trace: [ 514.521972][T12240] [ 514.521978][T12240] dump_stack_lvl+0x16c/0x1f0 [ 514.522009][T12240] should_fail_ex+0x50a/0x650 [ 514.522036][T12240] _copy_from_user+0x2e/0xd0 [ 514.522062][T12240] __x64_sys_sendfile64+0x121/0x220 [ 514.522080][T12240] ? ksys_write+0x1ba/0x250 [ 514.522105][T12240] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 514.522130][T12240] do_syscall_64+0xcd/0x250 [ 514.522148][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.522171][T12240] RIP: 0033:0x7f8cee18cda9 [ 514.522185][T12240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.522201][T12240] RSP: 002b:00007f8cef037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 514.522217][T12240] RAX: ffffffffffffffda RBX: 00007f8cee3a6160 RCX: 00007f8cee18cda9 [ 514.522228][T12240] RDX: 0000000020000080 RSI: 0000000000000007 RDI: 0000000000000007 [ 514.522237][T12240] RBP: 00007f8cef037090 R08: 0000000000000000 R09: 0000000000000000 [ 514.522247][T12240] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 514.522256][T12240] R13: 0000000000000000 R14: 00007f8cee3a6160 R15: 00007ffe26237758 [ 514.522278][T12240] [ 514.858601][ T864] usb 3-1: Using ep0 maxpacket: 8 [ 514.868712][ T864] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.877709][ T864] usb 3-1: config 0 has no interface number 0 [ 515.828579][ T864] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.840521][ T864] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.849742][ T864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.859273][ T864] usb 3-1: config 0 descriptor?? [ 515.867210][ T864] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 516.064515][T12247] trusted_key: encrypted_key: insufficient parameters specified [ 516.274880][ T6094] usb 3-1: USB disconnect, device number 29 [ 516.754250][ T29] audit: type=1400 audit(1738124244.985:1789): avc: denied { watch } for pid=12251 comm="syz.1.1705" path="/proc/1198/task" dev="proc" ino=38324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 518.577698][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 518.709792][ T29] audit: type=1400 audit(1738124246.935:1790): avc: denied { ioctl } for pid=12274 comm="syz.2.1712" path="socket:[38446]" dev="sockfs" ino=38446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 518.734787][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.238594][ T864] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 519.541167][ T864] usb 6-1: Using ep0 maxpacket: 32 [ 519.668718][ T864] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=13.87 [ 519.679354][ T864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.743158][T12294] trusted_key: encrypted_key: insufficient parameters specified [ 520.069491][ T864] usb 6-1: Product: syz [ 520.074758][T12293] ubi: mtd0 is already attached to ubi0 [ 520.109780][ T864] usb 6-1: Manufacturer: syz [ 520.128887][ T864] usb 6-1: SerialNumber: syz [ 520.232330][ T864] usb 6-1: config 0 descriptor?? [ 520.241023][ T864] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 520.378643][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 520.533119][ T5175] bcm5974 6-1:0.0: could not read from device [ 520.544681][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 520.556327][ T8] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 520.607746][ T864] usb 6-1: USB disconnect, device number 32 [ 520.615326][ T5175] bcm5974 6-1:0.0: could not read from device [ 520.622520][ T8] usb 3-1: config 0 has no interface number 1 [ 520.645860][ T5175] bcm5974 6-1:0.0: could not read from device [ 520.964466][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 521.367224][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.377434][ T8] usb 3-1: Product: syz [ 521.381692][ T8] usb 3-1: Manufacturer: syz [ 521.386299][ T8] usb 3-1: SerialNumber: syz [ 521.450717][ T8] usb 3-1: config 0 descriptor?? [ 522.224830][T12322] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1727'. [ 522.421453][ T29] audit: type=1400 audit(1738124250.655:1791): avc: denied { ioctl } for pid=12321 comm="syz.5.1728" path="socket:[38521]" dev="sockfs" ino=38521 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 522.493332][ T8] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 522.537592][ T8] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -110 [ 523.434670][T12330] batman_adv: batadv0: Adding interface: ip6gretap1 [ 523.441458][T12330] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 523.461484][T12330] batman_adv: batadv0: Interface activated: ip6gretap1 [ 523.900099][T12332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.171501][ T2153] usb 3-1: USB disconnect, device number 30 [ 524.211647][T12338] tipc: Can't bind to reserved service type 1 [ 524.543702][ T29] audit: type=1400 audit(1738124252.725:1792): avc: denied { sendto } for pid=12333 comm="syz.3.1731" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 525.110955][T12348] overlayfs: failed to resolve './file1': -2 [ 525.332156][ T29] audit: type=1400 audit(1738124253.545:1793): avc: denied { accept } for pid=12351 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.442459][ T5817] Bluetooth: hci1: SCO packet for unknown connection handle 316 [ 525.488674][ T29] audit: type=1400 audit(1738124253.565:1794): avc: denied { accept } for pid=12351 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 525.648542][ T29] audit: type=1326 audit(1738124253.875:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.708098][T12357] lo speed is unknown, defaulting to 1000 [ 525.714122][ T29] audit: type=1326 audit(1738124253.875:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.755516][ T29] audit: type=1326 audit(1738124253.875:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.758856][ T5817] Bluetooth: hci0: command 0x0405 tx timeout [ 525.789084][ T29] audit: type=1326 audit(1738124253.875:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.829821][ T29] audit: type=1326 audit(1738124253.875:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.895457][ T29] audit: type=1326 audit(1738124253.885:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.6.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00b538cda9 code=0x7ffc0000 [ 525.918846][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.868681][ T5867] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 526.971781][T12381] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 527.088562][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 527.128753][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.168632][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.205771][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.240970][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.259707][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.288733][ T5867] usb 6-1: string descriptor 0 read error: -71 [ 527.320768][ T5867] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.341913][ T5867] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.367280][ T5867] usb 6-1: config 0 descriptor?? [ 527.380546][ T5867] usb 6-1: can't set config #0, error -71 [ 527.398156][ T5867] usb 6-1: USB disconnect, device number 33 [ 527.848773][ T5867] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 527.992417][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 527.992436][ T29] audit: type=1400 audit(1738124256.215:1839): avc: denied { load_policy } for pid=12384 comm="syz.2.1745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 528.041775][T12404] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 528.097754][T12404] SELinux: failed to load policy [ 528.104734][ T5867] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 528.113073][ T5867] usb 6-1: config 0 has no interface number 0 [ 528.121839][ T5867] usb 6-1: New USB device found, idVendor=07ca, idProduct=8150, bcdDevice=c9.6b [ 528.131106][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.139696][ T5867] usb 6-1: Product: syz [ 528.143875][ T5867] usb 6-1: Manufacturer: syz [ 528.148576][ T5867] usb 6-1: SerialNumber: syz [ 528.202742][ T5867] usb 6-1: config 0 descriptor?? [ 528.704435][ T5867] usb 6-1: USB disconnect, device number 34 [ 528.728803][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 529.795373][T12422] FAULT_INJECTION: forcing a failure. [ 529.795373][T12422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.852583][T12422] CPU: 0 UID: 0 PID: 12422 Comm: syz.5.1756 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 529.852611][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 529.852621][T12422] Call Trace: [ 529.852626][T12422] [ 529.852634][T12422] dump_stack_lvl+0x16c/0x1f0 [ 529.852663][T12422] should_fail_ex+0x50a/0x650 [ 529.852688][T12422] _copy_from_iter+0x2a1/0x1560 [ 529.852711][T12422] ? trace_lock_acquire+0x14e/0x1f0 [ 529.852733][T12422] ? __alloc_skb+0x1fe/0x380 [ 529.852750][T12422] ? __pfx__copy_from_iter+0x10/0x10 [ 529.852772][T12422] ? __virt_addr_valid+0x1a4/0x590 [ 529.852792][T12422] ? __virt_addr_valid+0x5e/0x590 [ 529.852809][T12422] ? __phys_addr_symbol+0x30/0x80 [ 529.852824][T12422] ? __check_object_size+0x488/0x710 [ 529.852847][T12422] netlink_sendmsg+0x813/0xd70 [ 529.852869][T12422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.852893][T12422] sock_write_iter+0x4fe/0x5b0 [ 529.852917][T12422] ? __pfx_sock_write_iter+0x10/0x10 [ 529.852949][T12422] ? __pfx_file_has_perm+0x10/0x10 [ 529.852979][T12422] do_iter_readv_writev+0x655/0x950 [ 529.853005][T12422] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 529.853028][T12422] ? selinux_file_permission+0x11f/0x580 [ 529.853056][T12422] ? rw_verify_area+0xcf/0x680 [ 529.853080][T12422] vfs_writev+0x363/0xdd0 [ 529.853101][T12422] ? find_held_lock+0x2d/0x110 [ 529.853124][T12422] ? __pfx_vfs_writev+0x10/0x10 [ 529.853146][T12422] ? find_held_lock+0x2d/0x110 [ 529.853167][T12422] ? __pfx_lock_release+0x10/0x10 [ 529.853189][T12422] ? trace_lock_acquire+0x14e/0x1f0 [ 529.853215][T12422] ? __fget_files+0x206/0x3a0 [ 529.853237][T12422] ? do_writev+0x297/0x340 [ 529.853257][T12422] do_writev+0x297/0x340 [ 529.853279][T12422] ? __pfx_do_writev+0x10/0x10 [ 529.853306][T12422] do_syscall_64+0xcd/0x250 [ 529.853323][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.853346][T12422] RIP: 0033:0x7f397758cda9 [ 529.853359][T12422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.853375][T12422] RSP: 002b:00007f39784c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 529.853391][T12422] RAX: ffffffffffffffda RBX: 00007f39777a5fa0 RCX: 00007f397758cda9 [ 529.853402][T12422] RDX: 0000000000000001 RSI: 0000000020001200 RDI: 0000000000000003 [ 529.853412][T12422] RBP: 00007f39784c8090 R08: 0000000000000000 R09: 0000000000000000 [ 529.853422][T12422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.853431][T12422] R13: 0000000000000000 R14: 00007f39777a5fa0 R15: 00007ffd9cdd8e28 [ 529.853453][T12422] [ 530.152912][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 531.120382][T12440] loop7: detected capacity change from 0 to 16384 [ 531.227288][T12438] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 531.570708][T12442] loop7: detected capacity change from 16384 to 16383 [ 531.573739][T12448] SELinux: Context is not valid (left unmapped). [ 531.608896][ T29] audit: type=1400 audit(1738124259.825:1840): avc: denied { relabelto } for pid=12441 comm="syz.3.1764" name="file0" dev="overlay" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 531.717403][ T29] audit: type=1400 audit(1738124259.845:1841): avc: denied { associate } for pid=12441 comm="syz.3.1764" name="#1811" dev="tmpfs" ino=1811 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 531.768535][T12438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12438 comm=syz.5.1763 [ 532.006446][T12443] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1764'. [ 532.019729][ T29] audit: type=1400 audit(1738124260.255:1842): avc: denied { read } for pid=12441 comm="syz.3.1764" name="file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 532.067684][ T29] audit: type=1400 audit(1738124260.255:1843): avc: denied { open } for pid=12441 comm="syz.3.1764" path=2F202864656C6574656429 dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 532.179397][ T29] audit: type=1400 audit(1738124260.405:1844): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 532.414279][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1770'. [ 532.568826][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 532.703635][T12475] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 532.840420][ T5868] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 533.042651][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.066054][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.088597][ T5868] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 533.138618][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.151146][ T5868] usb 4-1: config 0 descriptor?? [ 533.498726][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 533.648608][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 533.687063][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 533.711044][ T29] audit: type=1400 audit(1738124261.945:1845): avc: denied { write } for pid=12491 comm="syz.6.1782" name="xfrm_stat" dev="proc" ino=4026534166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 533.721453][T12493] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1782'. [ 533.744075][ T5868] hid (null): bogus close delimiter [ 533.747546][ T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 533.795767][ T8] usb 3-1: Product: syz [ 533.823926][ T8] usb 3-1: Manufacturer: syz [ 533.835200][ T8] usb 3-1: SerialNumber: syz [ 533.874488][ T8] usb 3-1: config 0 descriptor?? [ 533.926543][ T5868] usb 4-1: language id specifier not provided by device, defaulting to English [ 534.051982][T12493] batadv0: entered allmulticast mode [ 534.400846][ T5868] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input35 [ 534.551791][ T8] usb 3-1: USB disconnect, device number 31 [ 534.565173][ T5868] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input36 [ 534.582243][T12496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 534.588790][T12496] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.614154][T12496] vhci_hcd vhci_hcd.0: Device attached [ 534.631098][T12497] vhci_hcd: connection closed [ 534.631348][ T1149] vhci_hcd: stop threads [ 534.649607][ T5868] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input37 [ 534.715618][ T1149] vhci_hcd: release socket [ 534.735780][ T1149] vhci_hcd: disconnect device [ 534.748080][ T5868] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input38 [ 534.775605][ T5868] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 534.788583][ T864] vhci_hcd: vhci_device speed not set [ 534.811372][ T5868] usb 4-1: USB disconnect, device number 64 [ 535.033858][ T11] Bluetooth: (null): Invalid header checksum [ 535.043319][ T11] Bluetooth: (null): Invalid header checksum [ 535.150361][ T11] Bluetooth: (null): Invalid header checksum [ 640.278412][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 640.285392][ C1] rcu: 0-...!: (1 GPs behind) idle=4134/1/0x4000000000000000 softirq=51860/51861 fqs=0 [ 640.296702][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P36/1:b..l [ 640.304448][ C1] rcu: (detected by 1, t=10506 jiffies, g=43469, q=178 ncpus=2) [ 640.312248][ C1] Sending NMI from CPU 1 to CPUs 0: [ 640.312272][ C0] NMI backtrace for cpu 0 [ 640.312283][ C0] CPU: 0 UID: 0 PID: 5815 Comm: syz-executor Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 640.312299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 640.312307][ C0] RIP: 0010:check_preemption_disabled+0x24/0xe0 [ 640.312328][ C0] Code: 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d bd 5b ae 74 65 8b 05 b2 5b ae 74 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea 65 48 8b 05 85 5b ae [ 640.312340][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00000086 [ 640.312351][ C0] RAX: 0000000000000000 RBX: 1ffff92000000f8e RCX: ffffffff81969a49 [ 640.312360][ C0] RDX: fffffbfff20c4923 RSI: ffffffff8bd2fe40 RDI: ffffffff8bd2fe80 [ 640.312369][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c4922 [ 640.312377][ C0] R10: ffffffff90624917 R11: 0000000000000001 R12: ffffffff9ab4f250 [ 640.312386][ C0] R13: dffffc0000000000 R14: ffff88802a1b5340 R15: 1ffff92000000faa [ 640.312395][ C0] FS: 0000555591208500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 640.312409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.312418][ C0] CR2: 000000110c3f87a1 CR3: 0000000060bf8000 CR4: 00000000003526f0 [ 640.312427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.312435][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 640.312443][ C0] Call Trace: [ 640.312450][ C0] [ 640.312457][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 640.312476][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 640.312495][ C0] ? nmi_handle+0x1ac/0x5d0 [ 640.312514][ C0] ? check_preemption_disabled+0x24/0xe0 [ 640.312528][ C0] ? default_do_nmi+0x6a/0x160 [ 640.312544][ C0] ? exc_nmi+0x170/0x1e0 [ 640.312559][ C0] ? end_repeat_nmi+0xf/0x53 [ 640.312579][ C0] ? lock_release+0xa9/0x6f0 [ 640.312598][ C0] ? check_preemption_disabled+0x24/0xe0 [ 640.312612][ C0] ? check_preemption_disabled+0x24/0xe0 [ 640.312626][ C0] ? check_preemption_disabled+0x24/0xe0 [ 640.312640][ C0] [ 640.312644][ C0] [ 640.312649][ C0] rcu_is_watching+0x12/0xc0 [ 640.312664][ C0] lock_release+0x4e2/0x6f0 [ 640.312685][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 640.312700][ C0] ? __pfx_lock_release+0x10/0x10 [ 640.312717][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 640.312730][ C0] ? lock_acquire+0x2f/0xb0 [ 640.312746][ C0] ? debug_object_deactivate+0x13b/0x370 [ 640.312761][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 640.312779][ C0] debug_object_deactivate+0x1ef/0x370 [ 640.312794][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 640.312810][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 640.312824][ C0] ? __pfx_advance_sched+0x10/0x10 [ 640.312841][ C0] __hrtimer_run_queues+0x47c/0xae0 [ 640.312858][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 640.312871][ C0] ? read_tsc+0x9/0x20 [ 640.312888][ C0] hrtimer_interrupt+0x392/0x8e0 [ 640.312906][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 640.312927][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 640.312947][ C0] [ 640.312951][ C0] [ 640.312956][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.312975][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 640.312994][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 a2 3e f6 48 89 df e8 2e 22 3f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 fa 2f f6 65 8b 05 16 e2 ab 74 85 c0 74 16 5b [ 640.313007][ C0] RSP: 0018:ffffc9000403fbc8 EFLAGS: 00000246 [ 640.313018][ C0] RAX: 0000000000000002 RBX: ffff8880b862c680 RCX: 1ffffffff20c40b1 [ 640.313028][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd8e0 RDI: ffffffff8bd2fec0 [ 640.313037][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 640.313045][ C0] R10: ffffffff90624917 R11: 0000000000000001 R12: 0000000000000000 [ 640.313054][ C0] R13: ffffc9000403fd78 R14: 0000000000000000 R15: ffff8880b862c700 [ 640.313069][ C0] hrtimer_start_range_ns+0x4a7/0xc70 [ 640.313084][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 640.313104][ C0] ? do_nanosleep+0x18a/0x510 [ 640.313119][ C0] do_nanosleep+0x1f3/0x510 [ 640.313136][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 640.313152][ C0] ? __asan_memset+0x23/0x50 [ 640.313171][ C0] ? __hrtimer_init+0x106/0x2c0 [ 640.313191][ C0] hrtimer_nanosleep+0x158/0x380 [ 640.313205][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 640.313218][ C0] ? __might_fault+0xe3/0x190 [ 640.313236][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 640.313256][ C0] ? get_timespec64+0x148/0x240 [ 640.313271][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 640.313288][ C0] common_nsleep+0xa1/0xd0 [ 640.313306][ C0] __x64_sys_clock_nanosleep+0x344/0x4a0 [ 640.313327][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 640.313351][ C0] do_syscall_64+0xcd/0x250 [ 640.313364][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.313382][ C0] RIP: 0033:0x7fb7a11bf665 [ 640.313395][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 640.313408][ C0] RSP: 002b:00007ffe42657f50 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 640.313420][ C0] RAX: ffffffffffffffda RBX: 00000000000004db RCX: 00007fb7a11bf665 [ 640.313430][ C0] RDX: 00007ffe42657f90 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.313438][ C0] RBP: 00007ffe42657ffc R08: 0000000000000000 R09: 0000000000000000 [ 640.313446][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 640.313454][ C0] R13: 00000000000927c0 R14: 0000000000082a9d R15: 00007ffe42658050 [ 640.313468][ C0] [ 640.314267][ C1] task:kworker/u8:3 state:R running task stack:23280 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 640.880458][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 640.888278][ C1] Call Trace: [ 640.891557][ C1] [ 640.894490][ C1] __schedule+0xf43/0x5890 [ 640.898918][ C1] ? kasan_save_stack+0x42/0x60 [ 640.903767][ C1] ? kasan_save_stack+0x33/0x60 [ 640.908618][ C1] ? kasan_save_track+0x14/0x30 [ 640.913470][ C1] ? __pfx_mark_lock+0x10/0x10 [ 640.918241][ C1] ? worker_thread+0x6c8/0xf00 [ 640.923013][ C1] ? kthread+0x3af/0x750 [ 640.927265][ C1] ? __pfx___schedule+0x10/0x10 [ 640.932125][ C1] ? hlock_class+0x4e/0x130 [ 640.936636][ C1] ? mark_held_locks+0x9f/0xe0 [ 640.941411][ C1] preempt_schedule_irq+0x51/0x90 [ 640.946443][ C1] irqentry_exit+0x36/0x90 [ 640.950866][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.956855][ C1] RIP: 0010:lock_release+0x3e5/0x6f0 [ 640.962147][ C1] Code: 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 640.981762][ C1] RSP: 0018:ffffc90000ac7a30 EFLAGS: 00000206 [ 640.987832][ C1] RAX: dffffc0000000000 RBX: 1ffff92000158f48 RCX: ffffc90000ac7a80 [ 640.995806][ C1] RDX: 1ffff11003d545e4 RSI: ffffffff8b6cdbe0 RDI: ffffffff8bd2fec0 [ 641.003778][ C1] RBP: 5cc21e0a1e6900e0 R08: 0000000000000000 R09: fffffbfff20c4922 [ 641.011751][ C1] R10: ffffffff90624917 R11: 0000000000000003 R12: 0000000000000003 [ 641.019723][ C1] R13: 0000000000000004 R14: ffff88801eaa2f28 R15: ffff88801eaa2440 [ 641.027733][ C1] ? batadv_iv_ogm_schedule_buff+0x75c/0x14d0 [ 641.033809][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.038843][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 641.044046][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 641.049343][ C1] ? lock_acquire+0x2f/0xb0 [ 641.053857][ C1] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 641.059932][ C1] batadv_iv_ogm_schedule_buff+0x761/0x14d0 [ 641.065838][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 641.072177][ C1] ? batadv_send_skb_packet+0x5d7/0x770 [ 641.077738][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 641.084774][ C1] process_one_work+0x9c5/0x1ba0 [ 641.089729][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 641.097279][ C1] ? __pfx_process_one_work+0x10/0x10 [ 641.102667][ C1] ? assign_work+0x1a0/0x250 [ 641.107268][ C1] worker_thread+0x6c8/0xf00 [ 641.111879][ C1] ? __pfx_worker_thread+0x10/0x10 [ 641.117005][ C1] kthread+0x3af/0x750 [ 641.121080][ C1] ? __pfx_kthread+0x10/0x10 [ 641.125678][ C1] ? lock_acquire+0x2f/0xb0 [ 641.130191][ C1] ? __pfx_kthread+0x10/0x10 [ 641.134790][ C1] ret_from_fork+0x45/0x80 [ 641.139212][ C1] ? __pfx_kthread+0x10/0x10 [ 641.143805][ C1] ret_from_fork_asm+0x1a/0x30 [ 641.148587][ C1] [ 641.151605][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g43469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 641.162798][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 641.172768][ C1] rcu: RCU grace-period kthread stack dump: [ 641.178650][ C1] task:rcu_preempt state:R running task stack:28208 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 641.192154][ C1] Call Trace: [ 641.195431][ C1] [ 641.198366][ C1] __schedule+0xf43/0x5890 [ 641.202791][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 641.208011][ C1] ? __pfx___schedule+0x10/0x10 [ 641.212864][ C1] ? schedule+0x298/0x350 [ 641.217196][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.222229][ C1] ? lock_acquire+0x2f/0xb0 [ 641.226737][ C1] ? schedule+0x1fd/0x350 [ 641.231077][ C1] schedule+0xe7/0x350 [ 641.235151][ C1] schedule_timeout+0x124/0x280 [ 641.240013][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 641.245394][ C1] ? __pfx_process_timeout+0x10/0x10 [ 641.250689][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 641.256506][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 641.261975][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 641.266757][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 641.272050][ C1] ? rcu_gp_init+0xc82/0x1630 [ 641.276738][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 641.281948][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 641.287767][ C1] rcu_gp_kthread+0x271/0x380 [ 641.292454][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 641.297668][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.302880][ C1] ? __kthread_parkme+0x148/0x220 [ 641.307912][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 641.313125][ C1] kthread+0x3af/0x750 [ 641.317211][ C1] ? __pfx_kthread+0x10/0x10 [ 641.321822][ C1] ? __pfx_kthread+0x10/0x10 [ 641.326422][ C1] ret_from_fork+0x45/0x80 [ 641.330846][ C1] ? __pfx_kthread+0x10/0x10 [ 641.335442][ C1] ret_from_fork_asm+0x1a/0x30 [ 641.340225][ C1] [ 641.343244][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 641.349565][ C1] CPU: 1 UID: 0 PID: 12510 Comm: syz.2.1787 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 641.359978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 641.370040][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 641.375424][ C1] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 ff 30 4a 7e <65> 8b 05 00 31 4a 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 641.395038][ C1] RSP: 0018:ffffc90003d179c0 EFLAGS: 00000202 [ 641.401111][ C1] RAX: 0000000000000001 RBX: ffff8880b86469c0 RCX: ffffffff81ada9da [ 641.409083][ C1] RDX: ffff888041cca440 RSI: 0000000000000000 RDI: 0000000000000005 [ 641.417058][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 641.425032][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed10170c8d39 [ 641.433008][ C1] R13: 0000000000000001 R14: ffff8880b873fe40 R15: ffff8880b86469c8 [ 641.440980][ C1] FS: 00007f979a4b06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 641.449920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.456505][ C1] CR2: 000000110c3dca30 CR3: 00000000567bc000 CR4: 00000000003526f0 [ 641.464480][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.472450][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 641.480443][ C1] Call Trace: [ 641.483741][ C1] [ 641.486591][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 641.492925][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 641.498131][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 641.503598][ C1] ? timekeeping_advance+0x72e/0xa90 [ 641.508889][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 641.514527][ C1] ? __asan_memcpy+0x3c/0x60 [ 641.519126][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 641.524420][ C1] ? rcu_is_watching+0x12/0xc0 [ 641.529189][ C1] ? update_process_times+0x178/0x2d0 [ 641.534577][ C1] ? __pfx_update_process_times+0x10/0x10 [ 641.540309][ C1] ? update_wall_time+0x1c/0x40 [ 641.545168][ C1] ? tick_nohz_handler+0x376/0x530 [ 641.550285][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 641.555745][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 641.561126][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 641.566846][ C1] ? read_tsc+0x9/0x20 [ 641.570923][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 641.576045][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 641.582209][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 641.588034][ C1] [ 641.590962][ C1] [ 641.593890][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.600060][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 641.606130][ C1] ? write_comp_data+0x11/0x90 [ 641.610906][ C1] smp_call_function_many_cond+0x4ea/0x12c0 [ 641.616807][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 641.622621][ C1] clock_was_set+0x646/0x850 [ 641.627222][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 641.632337][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 641.638155][ C1] timekeeping_inject_offset+0x402/0x520 [ 641.643791][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.649005][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 641.655162][ C1] ? bpf_lsm_capable+0x9/0x10 [ 641.659843][ C1] ? security_capable+0x7e/0x260 [ 641.664786][ C1] do_adjtimex+0x369/0xaa0 [ 641.669208][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 641.674152][ C1] ? __might_fault+0x13b/0x190 [ 641.678919][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 641.684124][ C1] ? __might_fault+0xe3/0x190 [ 641.688807][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 641.694880][ C1] __do_sys_clock_adjtime+0x173/0x290 [ 641.700263][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 641.706162][ C1] ? __pfx_do_futex+0x10/0x10 [ 641.710856][ C1] ? rcu_is_watching+0x12/0xc0 [ 641.715631][ C1] do_syscall_64+0xcd/0x250 [ 641.720136][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.726034][ C1] RIP: 0033:0x7f979958cda9 [ 641.730463][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.750087][ C1] RSP: 002b:00007f979a4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 641.758510][ C1] RAX: ffffffffffffffda RBX: 00007f97997a5fa0 RCX: 00007f979958cda9 [ 641.766480][ C1] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000 [ 641.774450][ C1] RBP: 00007f979960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 641.782417][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.790384][ C1] R13: 0000000000000000 R14: 00007f97997a5fa0 R15: 00007ffe1c98a328 [ 641.798370][ C1]