last executing test programs: 16m36.787642796s ago: executing program 2 (id=165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x800) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000000c0)) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x16) 16m35.659089865s ago: executing program 2 (id=169): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1118cfea5b81f01d60c8bb2b3f000000040000000400000001000000000000004d591ab2065ad910613079a4ffef2abb1ac02ade5f41149010cccff668c2e45c36be0468c916", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000540), 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfe) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r7, 0x1}, 0x14}}, 0x0) chdir(0x0) 16m34.594569021s ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 16m34.416846063s ago: executing program 2 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2402, 0x0) 16m34.113730856s ago: executing program 2 (id=183): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4801) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0x10f}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f6710af70913eedb71ef01f308639f610317d0ebc081a9a6ce5268fc469324897df2cd1252ebd974c66f038e7171a7d89fb62449b50cf552f5d45009bf3d7b8170781a575b8f91432b38e0c816cd2", 0x9d}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read(r1, &(0x7f0000000040)=""/123, 0x7b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180a00000000000000000000000000007910000000000000630ae0ff0000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 16m32.802621484s ago: executing program 2 (id=188): r0 = io_uring_setup(0x6d45, &(0x7f0000000080)={0x0, 0xe33c, 0x1, 0x2, 0x261}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/225, 0xe1}], 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 16m31.803780077s ago: executing program 32 (id=188): r0 = io_uring_setup(0x6d45, &(0x7f0000000080)={0x0, 0xe33c, 0x1, 0x2, 0x261}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/225, 0xe1}], 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 15m54.133195997s ago: executing program 3 (id=308): r0 = socket$inet6(0xa, 0x80002, 0x88) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x800, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept$inet6(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xff1f, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) 15m52.832310375s ago: executing program 3 (id=314): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 15m51.988085947s ago: executing program 3 (id=318): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x9, 0x1, {{0x5, 0x4, 0x1, 0x33, 0x14, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @local}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf25180000001c000180080003000300000008000100", @ANYRES32, @ANYBLOB='\b', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="080000000300000014000200697036746e6c300000000000000000008a55c0476293a1ab9d4b520acc9b5267ad7ba004309a2faf646c1eaec035e8be275d901e06cad3d6c393083cf912650d7a96f6691f6552ab8dad581d4bfdd28f30"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000844) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2e0c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xe38}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 15m48.288294533s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2402, 0x0) 15m48.210643272s ago: executing program 3 (id=333): syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @private1, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[], 0x1c}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x8, 0xffffffff], 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 15m46.674451484s ago: executing program 3 (id=340): r0 = socket$inet6(0xa, 0x80002, 0x88) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x800, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) accept$inet6(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xff1f, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) 15m45.657228031s ago: executing program 33 (id=340): r0 = socket$inet6(0xa, 0x80002, 0x88) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x800, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) accept$inet6(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0xff1f, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) 14m32.859425097s ago: executing program 1 (id=555): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r1 = socket(0x4, 0x2, 0x2011) socket(0x27, 0x3, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYRESHEX, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x60000000, 0x27, 0x0, &(0x7f0000000000)="9444cdd6f2d69c718c00acd7dc44736bdcbaad5c259c075d4e21a700"/39, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = socket(0x11, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr=0x64010100, @multicast1}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100002b95fcdbdf2564010102000000000000000084af0000ac0000004a5300", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x24048081}, 0x800) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2000000000000001) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x3, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000000380)="585572d800d1e42ccb93f5fa1d0000f401359c93db710a308241b24dfb4a217f175b417a5c8ae819f1857f56505eadfe172494b8cfb915b925626922ee9455ef5924b7284bc72c80a15b", 0x4a, 0x20000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x87}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0xcc, 0xfffffff1, 0x0, 0x2, 0x0, 0x0, 0x400}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 14m30.622098434s ago: executing program 1 (id=562): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1118cfea5b81f01d60c8bb2b3f000000040000000400000001000000000000004d591ab2065ad910613079a4ffef2abb1ac02ade5f41149010cccff668c2e45c36be0468c916", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000540), 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfe) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 14m29.356079578s ago: executing program 1 (id=564): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = getegid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009880)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)="a17d87739c49fc60d6e8ebcdf2d407415cfd0be0337b8bdb11e4285d729b96a2afc8d0a59b86047491cc5d465b69023d8125cfc1581432501b8f36b074d89be31d265fb911e776e2a6c675467c9d607e4d41eb7d4147d7a58f50dfed75a6b66f3d3e50f3f6c20613c08d1c7815c1d565a0202864b1f20b0f88f8bc8c5c9ebacb90e3f9b0cacb777f5e3bd783b369b30da126a43e803a818958ddcc2c8bdcd229ea539a6426c4b2f51552768dd7", 0xad}], 0x1, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x44000}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)="33b9dc95963e2f05cab97e6b68014832e55993d22200e08efa3367b3d6784cae3ca129472a3a28d54dd252a914029e5fcfb88edc2764678dd9ed94ebc73562c7e3ced1f8c0b0b721065651bfd171a7307957bb928361b8634dbf9cbb", 0x5c}, {&(0x7f0000000980)="3d07d22e2c469a64473055788b018203c5d8dc000e0ec330455fde02113f1d4d36f187e4bbec47e5f2b1b251834951b65be663cff7a649c05bd3eb4099c2ca8d1c141d0f705c375ea54027472c93bde933767a5cf950cc58bcbe5169f469d795982a8a59409e0e366974eb0523f4c5e4dc644a6d6e3e9039ed0ce9cfe1b6512d891862c261d698350cd3337b8f15ed002531a85fa406c0d862", 0x99}, {&(0x7f0000000a40)="a86dbaced1919f73c61fdda88e9ef62fb8904769ccc4535434756c05389a97143b630e4b9512fd340fc1c205ab67cd333cf4245380b9fc84c90886f03bd49e5cd3749474f201845d411fa28187d381ec1f831b4beb50da657f9a3d382bbd5052b295b95c75234d5ffcef816d9997c84a77cc037df7afa368d0dc0e6b09e3b759ed1ccee04a2142df3e8f3392f19d7310532ccf53fdabca22c7d913a69f04982834290fc7fdd784c34e45e8353e9c1bc2e52813a97b92bad37fae9b87529c022e5bed21d9", 0xc4}], 0x3, &(0x7f0000001240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128, 0x4000005}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001380)="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", 0xff}, {&(0x7f0000001480)="16a6a00c48930369edae2a542cc28c0c5b9d097627e7c08f99b425ce3d436dfce03179a2cd575697b1cf91755a92ffcc232823f1ec610a1bfff6ad1f1e07f60f9df6f7fc361d1ab1f6891bae1f049c38d6611480ef874549371514ef907cc27e53650c9f6f41a444cd798ca916f390482ef64139072baa1fd2e683a283a16a7a809b4ab286685060603cf20e305485b5fc01b538be779e42cf26a4fafe6fbd2f7d070217ab414c87cb3351a6780b298fc492e9625e0d82e139acaa68cb450c37a3d59ea74ffb723d54fa79a98d80a70391315a73a18ed2ec3960585e283d4db43358b0c3473b6872d47a8978aa92445af1ec7da2bc6dab", 0xf7}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000001580)="1acacf53509f2a06e4f1366e1af133edf3a4976b3c20a1f133d08840c485eb65c3e729cd25522f0534ff2c9823176b8b8c29c2a9d22e881e9565ce4fb3fd078a2a9c30564a4be6ef5ac2a2effbf310cf4ab15a60ba1854a2f3713a38d1700d70880464045c2b76964bee398d69d77cf38b78474c5467850d25f0ffec0b91e6313a437619e6ca7b57cd314064bfd4eef92bd5e2e8baff990d3b13014a7e9664003db9017ab52593deca114245bb471ad96cce5a35c519afff964b2a74309ea48942a81fe09140f90e60a0e94ba3fa", 0xce}, {&(0x7f0000001680)="8225b87a8b3486ab36a8402d28f6da1243127bcca6ad231b990df17f38c44e71baac389b20b8dd24150f1542bfbb266870cbb3228fa2ee50225657eb2eba883852bcddd36e8ebed31bde8d66b28558ef1eeb2a6de252d41d7f503b1be65dd302add0a0c4ee47c29836f5054dcf56aece5bd952831b3962dfbbe31c48518df0254ddd3025da67c5d2d0", 0x89}], 0x5, &(0x7f0000001ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005e00)="d62a54644c736eb12441ba03d73fe09d78c82a44191735fb567d368051c9925828374ecf6c30a2341e17f17a2835bac45f805f9382e313e95d78ba76ba291fd2a0c5389db22d1b4d586a23f4c402094d1b1dd22b044b4a33e60b9e9416aa1d62e83bfd8952", 0x65}], 0x1, 0x0, 0x0, 0x200088c1}}], 0x4, 0x20000000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='ufshcd_clk_gating\x00', 0xffffffffffffffff, 0x0, 0x5b44}, 0x18) write$binfmt_aout(r1, &(0x7f0000005b40)=ANY=[], 0xff2e) 14m28.733489065s ago: executing program 1 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2402, 0x0) 14m28.049834006s ago: executing program 1 (id=573): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xb, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1a0}}, 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb35) 14m27.385577203s ago: executing program 1 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,no']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 14m26.309888851s ago: executing program 34 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,no']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 14m20.630711257s ago: executing program 5 (id=604): syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x8c100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x10001000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x2000000) 14m19.38037791s ago: executing program 5 (id=605): syz_open_dev$loop(0x0, 0x400000040000006, 0x400a00) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x6, @sliced={0x3, [0x0, 0x9, 0x405, 0x7, 0xe72b, 0x3, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0x5, 0xffff, 0xfffd, 0x100, 0x7, 0x1, 0x2, 0xa, 0x12, 0x400, 0x5, 0xacf, 0x4, 0x7, 0xfdfa, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa4, 0x65, 0x1d47, 0x6], 0xffffffff}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00000000000000000004"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (fail_nth: 2) 14m19.036840227s ago: executing program 5 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x14, &(0x7f0000000500)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x46c03c6f}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x6, 0xc, 0x4, 0x1, 0xe}, @generic={0x7, 0x2, 0x2, 0x8000, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x84000}) socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000000000092"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x8, 0xffffffff], 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 14m18.789674222s ago: executing program 5 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2402, 0x0) 14m18.511731008s ago: executing program 5 (id=611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timerfd_create(0x7, 0x800) close(0x3) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x2802) mmap$snddsp_status(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x3000001, 0x30, r2, 0x82000000) move_pages(0x0, 0xfffffffffffffeae, 0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f00000003c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r3, 0x0) r4 = userfaultfd(0x801) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x9a0000, 0x65ed7b08, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000028bd7000000018e9000012c7ba660800db0000000000220000008169b233f8abc3393785b2c392fbe2ee4a5c9f68cb3f6a002202d17c2b1bb7ced4dccd3de56d9f8d424050292eae5939b9560620fd8db35758314d67fc6433a4dee1512e36766459299db37d87269e96afa86d36e4bbeffff1102275669c56c0fa351006c2fe45dbc028f9330d41135aa7ab1256d5cf24d873233d72068fdb50746cd10da0094abef92799dbc7eabd112d1c497112e6b91a67273110078707c57d6928a4f1c8cda850d47a8997c62e0990d3edad7f626ed5332add433b10", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x24044010) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='}\x00\x00', 0x3}, {&(0x7f00000002c0)="ef5915f01712863431c4b6bf1ea66dc50e9913990d3be1abeaba94030d059d312f1d19c6ba80b9d107b86fab4273f4dcafb94651ec74e93ce27120c3dc2a2b3b79dc38de4e6c4c9c157d14ae8cc88c535304d2235721f4f80507fb16607fc0383d33d9c729ee3e88bc7d922507b9b2a35da908d2770000000000000000", 0x7d}], 0x48, 0xa, 0x8) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000008000000018010000faffffff000000000500000018230000", @ANYRES32=r8, @ANYBLOB="0000000083eb000018470000000000000000000000000000ad513000f0ffffff9500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x60700, 0x5, '\x00', 0x0, @fallback=0x21, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x5, 0x10000, 0x480}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x2, 0x4, 0x7}, {0x3, 0x4, 0x1, 0xb}, {0x1, 0x4, 0x2, 0x6}, {0x1, 0x3, 0x6, 0xb}, {0x4, 0x5, 0x8, 0x2}, {0x5, 0x4, 0x2, 0x6}, {0x5, 0x2, 0xb, 0xa}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x888, @void, @value}, 0x94) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000036000/0x4000)=nil, 0x400000, 0x3, 0x2}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) 14m15.39860662s ago: executing program 5 (id=618): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x181500, 0x80) 14m14.669849986s ago: executing program 35 (id=618): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x181500, 0x80) 8m6.302031476s ago: executing program 7 (id=1786): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x20040054) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0x800) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwritev2(r8, 0x0, 0x0, 0x800be6b, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='\x0f#//\'/]-\x00', &(0x7f0000000140)='./cgroup/file0\x00', &(0x7f00000001c0), 0x830480, &(0x7f00000003c0)={[], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'bpq0\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 8m6.01836296s ago: executing program 7 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8m5.577649471s ago: executing program 7 (id=1792): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 8m3.695953694s ago: executing program 7 (id=1798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0xfe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x48) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000400)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[], 0x254}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) creat(&(0x7f00000004c0)='./bus\x00', 0x1) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r4, 0x0) 8m2.818182289s ago: executing program 7 (id=1802): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c00000e"], 0x73) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2, &(0x7f0000000140)='\\\x00', 0x0}, 0x30) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x4, 0xdddd0000, 0x1, r3, 0x8}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7d) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r4}, 0x4) 8m1.358181105s ago: executing program 7 (id=1809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x14, &(0x7f0000000500)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x46c03c6f}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x6, 0xc, 0x4, 0x1, 0xe}, @generic={0x7, 0x2, 0x2, 0x8000, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x84000}) socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000000000092"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x8, 0xffffffff], 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 7m45.808724355s ago: executing program 36 (id=1809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x14, &(0x7f0000000500)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x46c03c6f}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x6, 0xc, 0x4, 0x1, 0xe}, @generic={0x7, 0x2, 0x2, 0x8000, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x84000}) socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000000000092"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x8, 0xffffffff], 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 1m40.989924006s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 1m22.835846226s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 1m12.269281282s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 1m3.528926865s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 56.496694277s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 51.667035785s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 45.380921183s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 34.617388647s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 19.879486654s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 18.973104974s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 14.809456121s ago: executing program 0 (id=3015): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2, 0x700, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) 13.187972326s ago: executing program 8 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004440)={{0x14}, [@NFT_MSG_NEWSETELEM={0x5e38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x93c, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "1ae4a3555fd3347c316e07054776f638b79b51d33c8bd2116c791f7a1c33dab73b546a8efab5c3c665"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x708, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "20139768a3e6a20c7b8c5d8718607368b68e2ec7cf3467aa1d73907a7b25b2a502ce1a8b33eda43c15c021261a7dba17cc7e86b76ce612073fc4db2aa578af6420149217cdd9a706afd11c759be5eeb0964f153c4bf9969d9445156c29ae1b7149e9d4ee347a1d7caf44b9c1fc1790796c09b8120dec69c53d"}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bfacbae7bf7fcf3d84daa50b7076f7f044"}]}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "61907512a59e6075a5ee2887ceef51c9a6915d5f9bf40bdbef54f3faf3d9c6070070431e44bbd7cf2617fc69e92a25f8499477769c83ede086a60a5b242f6d35c3059cc3e75fb2038ea71040d8d7ccc2adbdd590059b739da958daf42aa2107043a855637740453eac5abffbafa6b6aca8fab150c8c761cdea3e3f47f83cd3973cbbb544a143610c48b90702c0a3986c26a244cb1b68cbcb6124cd07cfe284e3b5a257adb6410d680a4ab27ffe1c713470f6"}, @NFTA_SET_ELEM_KEY_END={0x248, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2dc600e3b7c3d17e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "d7520a74b44132a61bc552cfd8cdd6233ba50fed3b52ab3c4a7acb6118d4547451edd9069676dab86db64889ef8064fed455e88f09558381a4434717bbfb8eedcc7cab6fa73007067e4a7f834a3d06cb7b3cc747f886a4ad41fb0961a590e00f2952640c866108c8b26b5a6a6117211c0296542492fbea2bf0fce0de587d248f1670abed92d509f708d27891387ffcc3d4ef7a7e6a6ab9dabd0edd8dd966ece59b2a073b2ee708114a2797a4c6b887bea5bfd0b15ea3051f3b1894d7868da8442e3faa11"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x360, 0xb, 0x0, 0x1, [{0x2a4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x290, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xca, 0x1, "ecb8e0c9ddf88426e20580999facb71fcdbe9ff112519b44f3bfab96159fef5e751733a0ef01924109417a4f5933fd088e85061c47de6c94f6bcdf31bc5eefc71423f7bb03e53129a3e3003af0c82eaed4950bcae381f485432dbbbf741a158cb669b7d790ada4ad0c1f7d38350ea2a8adfd8dc5443e340bc8e06fa1a2b8c36d8911718fe83aa73acd4c75c4a67e767223914a867ac8a00d3e8f73979191e48b868d0218d35ea30f11d38f3eca800bd94b3ea4d7eeb14f78e2d0d09e232f0680bd004683d937"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "5da63df6728336845058364ae721ca853af4ad4c4ee5eade7540296fc22a6b03dc6af042a8937325ad44a5cad0d7570138a2922cec4aa7f09d971dd7953718230b8e4ad37ad894aaedfed5b65a9db81858ea1f9a4e353ddd4171a8219e7b975c048fdcfaa1156449aad94f2a9364129c2acc796e83d9eb35d6333a501850894a573f60bcd87edf28a5ab15cb72c53a18f650bb2a3efe08992f9bbed635b70f23671d86f4ab32c26175ea8bad046b244a0595bd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "19f196a85466a507f3022fcf0e60868bffa6dee1236e1a7237a5bb95f9"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x99, 0x1, "8b1085b3730bf21622e86ec14b242513efc06af2716bed238c65174a20cd4bd46080e821dd180cdcfae9cebea7e15019199594e6dcc2843c73fa5d838dd81e09298125aa87825e8b382d68a835b505a3dd4640f9185cb101f78550bb0a93c801cd1f7dc19fb93874248a84a67d0bbdf8592e44c064f899499d398f3f67f412ca00c1d01d966f23df3fb4d9738bfc4bdbd790a3ecd0"}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "d694a2f0cf9c40332f5b883f2b7ee86732ccc181e2f1c1a23ae6e2f0317c696c2644023b559ff0668defaf9aeeb043704a3a229c440af9bab00e6d3e8b7ec812814c0249e7f53078fe"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "9c27085ab2f1dcf231ff44b172f1a7d6ff2faae82664246e3613b9820ef9935f9fa9"}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfffb}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xa}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f74, 0x3, 0x0, 0x1, [{0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2b, 0x6, 0x1, 0x0, "18c95a09c6506d55e7009095257d7a35af8bc279241393b7082f7947a04e116e2dc90aca1796ad"}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "ff1ee9cc827195ee5dcb343237ad20beff986805c9cb55b65686499fee65524054c35dc75b97e37a88b9024382ec540444341d728f47798fb13ebc66a6debcaf33085c9c7cb89a77cea5d9a6c53f98aa34820c1f73d240ef7a5cc7f14fbcde7f3189e908ad128018e6116bc1c6ef60407262a927c5b8157200d14575565d6d69c34cf05afdff402f9cd6d83929655b7ab3191f190500cf36b2b0"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x68, 0x6, 0x1, 0x0, "81334d99f96fa59732531aa5d7152a3f4e50a98282ce3dcd716d1199f1d418ef61c74da734045b1546c100bc483931062c92e5127fc0245fbb6474a840a1fbf79742647a9cb6c2b7f7cd2a4970cc966a50973e2647ec05cfccce8d971f739c9189d38cf2"}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x2554, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff9e93}, @NFTA_SET_ELEM_EXPRESSIONS={0x252c, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xdc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xcc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0xc8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "a39d224bcbf79d905065a0261406d70a268af8795d739904d8af774de8a7935db2070a622b24bcc19a0adc78463f7d5232e14d5ed01b235f8c8a49d3bf10300342cacf05915e305da0d64bddcb207594ccfbf8604b9cd719a98944f8afe51bc930c856e1bcf595de61ea965c070d836512efdd8d6ed68cb3749cae1665900af0bec6393e9ea70036fe823c90e2d2268b60b1473c0066d2b333244efd7cbc33bd6394b18bca8344a0f8a1a8bbf5e175d26b698d385c38ec8939fa58453f"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x23bc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x23ac, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x11bc, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x52, 0x1, "88355cf9216bc775688c555a0aa42d83d3efea9bd11380719086120e5058057f489271e880a8f6b7049d97c4bfc82cc97723c1a5b7cdb60999efab3dfe88a05502a60f7f7aa3430267b4465527bf"}, @NFTA_DATA_VALUE={0xbc, 0x1, "ad64dd873a4a2aaa319df36fbfa51eabfe5b26de1b3b4a4bf0f9847121c126fb3bd71ce467ccd2575471151fd3811869eaf28d7cd32b00dd84ae1bbd4424a2b3809df1ee64b23e1ad45a45147e4574f094f990be7b5a110f7d73102001b5f5590b4f625f087223e57fedf94fce86dc2314bf6126c29ae2adb613e81c13991d2b96f5a4baa8da90330d42ca7705ea88b7a1e8a01b9efcd2c005ca46eaa5b4b4b73ccd8ba8d0e779722458f90f06866cfdd1c397f47a34f68f"}]}, @NFTA_RANGE_FROM_DATA={0x11dc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd4, 0x1, "360af29285a465b93c3e0f8d0bff4dc2876748c0c3fcb075c0f5bae726d8782a74e4abd5489650b9e180ab90b98855b4e25f37cae70eecd973ae18a99adfffbb4c3847f97979f21d4509b88a016d59f0779065092ce7b36ecf6e56df90f4dc554d27a696de2a23991e01cab3daa106c3a7e1c9a9441ccb48b2ee307c8ff8242f984b8a4a26642e42e6abeb736d36767338eed05055f82954437c5edf1573287002e9d03709adcde61912f28bdca9d210de877997e295ca38f866b8f0ab6a0f228a0d2ca8e7a79c99356b511a1c6bb9dd"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}, {0x7a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x638, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2d4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2c0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x14e4b4f789324f93}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "00136fcc81745d9899abeb0eee0c8e744933b6015d90652d41de6d230e95b2f2ae460b8f0f2e1cf0b5d9235aa18fd50b69156d0a46575e62667aad8ff57767e4053f51bf7809ed14caa8925718605a61aaa004a7eb02fb2e579002fb5a344b1621761f14b01cb6260919fd8cf0959b0800789dbfd35f439fd45cfd01b453e3b9f23f3fd96dcb9b28d484270e08de30fb139c1766194a71eab49b51b594300b092249a123af23af27b5b9ba6930015e26471f73bdbbeaadf614ee41770273346ed35f5824c6525b987add03bd2be1ae6a2df289c45c"}, @NFTA_DATA_VALUE={0x46, 0x1, "1c7f7a8b09ed12a3c328a57ec944b4b523e95ecf029e4b6b1cac31955156b5671a36854b47187a58f1dca5c26ab89ef2cd2f75b3ca40baf1fbb6c1f6ab4da934c8d9"}]}, @NFTA_IMMEDIATE_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "57b139e9ff6bbba322faca51b5a2ee2c75e7e5ecdd06e7bd1d72fecae351dfc676d4a6ca86e6e411330bcf06f5fa9c9a60cec4609997f337a1773fb5250f854db298bf9180fc44770ce35c4742ac69d20c71728e6400556786ef9f3df656b573e1eb550dd626e39b3b7bae5634fcf1dd01ef5d78da5e89833d3320d1a284a55177f000cb1a857908fec31512058d96786a6029a3748079810f"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0xb09381b2b758a0e5}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x1a4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x194, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_INFO={0x66, 0x3, "d95b97b7b14779b352f2854178e36662e11f0e98ca6334bbe525a2d8517b529235464bdcb36d280b3d6a57789d468b3cc72b20bbce2732eff3be18726b755e9d1eab30cc131d390bbf7cf3f9e59554b91cee8e7a4a853e0ae8da8c3b265f2111bb86"}, @NFTA_MATCH_INFO={0xc3, 0x3, "342341da0cd49eb2fce27aeb5a00669b9a7f1dd7c52ebbb49f9168ed19390f897af9ade466fa7913857818a3a9d094db79b4313902a7619e8370ca52e60793209a8daa8394b99d05e3fa2c7a3d4e5302cb42f6e649428b98e6cea4f814ed2d5c4c082671e076cd543ea78b92cc1c078334e7c9c9ba745de6364f2e4c4ac9b5979b216b9185e5994f85d1dc432acc00d669ae96b9598b8df9eff21e857103fc28ff7f697ccdb4e575b88ec2b2ed3693c1cbcc4b761e1ea6d01a7f12dcc74016"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x2c, 0x3, "0e648b1205901ca91a05f629317bbedd37751b30f09459013169503ef4aa933021fcbb718a4bf5e0"}]}}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, {0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xab, 0x3, "5327e96fe09b0743eda37c76957ba5902f224a887a2c57af6f51a729b89cd9bd9f14f82a4a79fa8b2275f92b2c48b595cabda2e37ed50b54a708e4dbb3a5f59c2cde9ebed3576c8503971a3170c16c796cda17fba99efae3f4ad44e0c9c799bfe6bac097068acc898331bbdb375f6130195ddb8ef6000937e19b16d4710f0cba4c703de6aabd426423ce58e9ae73f3a14399563a3f885fbc36ed4f75e0ccfb0e83b43202bd67fe"}, @NFTA_MATCH_NAME={0xc, 0x1, 'comment\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "61888445d7d7c91c31a8ce7e4cf1cea6bb52cc135f438feb34d33c30925aa4f8f356c4b748df24413b221292f82163a3718776eaf8820354ec0125856c69811d454a6623898d87cc01fa3a7be1d75311672af6e8c4998b49654b5a4c7f59353f917349b4998a599a6a71f0b9edbe124ccdac7c710d33099a963eeedcc19fc228cca85cab79f8e49a25352592124714b4d64d1b509fd235e9ee8c7e5a0e808094117dd21db482f15b3753d90d"}, @NFTA_DATA_VALUE={0x80, 0x1, "8e0baa16755826252a1a553f0322bcca0e87321a824e806ec241b6f54ba6bc6fdced4915081890b53761abe34b81df10299b52e6cf65709e97a8d7a9af30f072032bab3dd906e1b8838090cf364a8a9962862c10f22e4c410430bd6c0d5b1d2faffe148b08df1194303c7ce5316e198995fa57ef59edb8e24f6249f1"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2550, 0x3, 0x0, 0x1, [{0x254c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x42, 0x6, 0x1, 0x0, "6acfe27f603170c587c3cdd99453f1fde151a9112c09fd617da0caab0321db8b9482a6581540b401012418ec9452608a0b6dd5d70e8485c6b3278684aa61"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "ae1113160ae6a29effec5f0f5e7448ff444d1715b3b6263e40c841179a9b4a5ba0e53dcc9397b40a2610b63ee39985c6ec452c4aca3531e467c67de9cc7a0d72aa00736cfdf46264854f4b86e545cf982336647df95cb146e45f164d3e460f8ca46cefa61e949fd5342fc9c6b441e337caf27576c6d2005ef8a0866f3c68b07711515ee633b0c085603338e9de09475ab6ee271383421e17cb8c3af7a2d3ceb05c5cb4938c609e9e26144d1a188b424755d873184336b062a6f24ab9d11f7c515e9d42d98a1b897fee4040b57981262981da483ba530fbedbc79aadd2e58a7e1e9"}]}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "3a545d0c98cf967d600d03a5987608d38be34fe3e6fa80a83d8451a2c8385d84eb5f0b92f9f6e0c388b812f28429ef49922825866a8f9a98a1228774ac990422d301956e6b5820520977b6bfc664f327ca1064c30e95c826f9f7a152b0e41c6342434d8d4d3f4a9c9bf1ed559dfcc2423a4af0e391949fdf54f5f1767aabdaf459baf6916fbe06b8c8baa3c9fb160d1a08cc6f21972bc1243123097547d6443e8d1cb6ee842fde55d1c7b64131dc3dd55234a6a86151cc8f1b8e4c46ecfc9b5ee428803ab48a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_KEY={0x1150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc3, 0x1, "f2b0f2e14fcafa3447bbd02aed1a7a6cf3caf4682cda537ce2efbc357a85b0f98901c513339b5fe30ef7b51a0358aa19b94e16a5144265a1c9b1962870cd8d87eeb6afc9e35a9440cc0e7ab4c451c83c3da5a24886cf10210501dbc6970ec3dbfdbd0f32dfb0bac4d59cda5c5ede908875bfc5641dd005e2a9022fd8edffc04b954feb02be263494ab23cae653005fd7da1fc6cfcc50b50716dab9120e990c3f692f7ef663ed7d775669ed9b0b3f18b975b3b8c3c5559f462e43aaa4627862"}, @NFTA_DATA_VALUE={0x83, 0x1, "135c019cbf8b7c3a91e6733ddb8b0fb247781926c0a9e2cf0e0392d4641eeb25830bc728d727b006444f9f537e9fdf390a5e8fb48a903513a9b41c3e1b14c0d7c243ac3bcf5caefefa4825f4cf406007ebe94695c18fba98dc1eb411eaceca0f1e9115b145b743137630bf7e9ba58f272900b89b9230700cc93408f1263895"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "2c3a521bddb4e424f145c3bb34a837a6db616657ad53e2c985582a10000109fd0817ccd75f6f3f367f3f0fd7910da4f3036a93c75fdb644892f1ad9a4f3f4cabe0b7b13ffbea62087d1afa0b5d4246763dfa1ce2c3557031e9525540bb120656d5d6c479b92d657b598ce62bed6c91539d34c5823859574d2a2d4dd74229264ca74f3d027df6006bfa7d0444769ca9515996bb2210fe3bacc647c980a6863d72410b40e27d47ba4cc399285c"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5e60}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0003, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003d0007010080000008000000047c000010"], 0x24}, 0x1, 0x0, 0x0, 0x40440cd}, 0xc000) r8 = semget$private(0x0, 0x1, 0x202) semtimedop(r8, &(0x7f0000000080)=[{0x0, 0xac}], 0x1, 0x0) nanosleep(0x0, 0x0) semtimedop(r8, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, 0x42, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1a}, [@generic="f5944add64f12217c84f71af189e0413ad39347d27b3c8865b8ca09614879524a5fd1586585247964fd8ac388063eb71f2847f6a3b96e26a7b85e7e6e1a29a36bcc6dad062c3eef447a74e36819b59a4ecc04739b4a255d1388cd2de80ead29b168524dbac271e197566fcb1d5f1df6293ccc4c18f88daf29f748fe152decc6cf7dcac5946510fad31a5c9d425fd0d45bba55ecbf71403aecc84ad6431dd33e5f237469056f1f89900baf2c4976caedf73030336bad81e95ecd1d2bb22415b38f05ca5c548c2fa809f7c8e3ef0e1687cea711be47b32338b9e0fb962004af84e0353f3c09c34bc17f3249adbb567", @typed={0x8, 0xea, 0x0, 0x0, @pid}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) semctl$GETNCNT(r8, 0x5, 0xe, &(0x7f00000001c0)=""/209) 12.112801991s ago: executing program 8 (id=3274): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) socket(0x1d, 0x1, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$dsp(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000100)={0x6704}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) process_vm_writev(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000480)=""/250, 0xfa}], 0x3, 0x0) 10.203500319s ago: executing program 8 (id=3277): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) socket$netlink(0x10, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a00)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x280801) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000001300)=""/4096) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f0000000500)="372be7e8b5ee4a40c4193dd0832904e81ca2095afc8ac5f13e80ab858ce6099e9a05908d30f572ead2270e39a241a6bcd143f0d8fa5fa3cf1667e16b3a99f05dae895e5f2e74ac20ef6e86617dd913eabae17dc51afb203158972bfd34f48647866d1a75b4a55ba95b55ba772202b9567cedd3ced38efe0149821d8810840d9678a54408db0ca15326d560968bda73a979ad2641fd90e33d7a0231007cda041698ae", 0xa2, 0x20044881, &(0x7f0000000180)={0xa, 0x4e20, 0x9a5, @mcast1, 0x2}, 0x1c) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r10, 0x5608) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r11, @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0xf5dea1023c4699a8) syz_usb_control_io(r0, 0x0, 0x0) 7.826841079s ago: executing program 8 (id=3280): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000480)="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", 0x11a}, {&(0x7f0000000680)="072e44eda0852ff9c13cb9d8bd205cfede75c16e4a782812b128d84273fc1735491e8c7dfe3d4dc909621cc064759920ca8e34955cbd83761a6fef2533bf0e10de874dcdd9eada0a42e8bd1da1aacc7f33f4d51a14a39146e83612912237a04566fd81180b9a0a484d38dd7b99a1c762961579c4dc97c5fcee28e2b4be7546922cb0206fe45df83cc696f431347b8274dcbef1d349a9e9d33cd527622e743cb0e5292866c370bec4bb0ad487c9fdd80e0c644ed2120c8c850d5bab55e58ba203010c8a53ea679921b73dec97768d5b03f462fd087efa969e7d06830dfc5c5c0af74d76a26ef5d71efaf3fd3d3e7836c86dcd2987c25c44afde3ec959a08b21022a670a0af2de71cee471d583b251bfa5adc7feac75", 0x115}], 0x2, 0x3, 0xba) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000008000000000000000000000000020100000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001200010a000000e3f4b96306464eb9f00000000000800000007c80dd10e64d2245dac34cf290191b98b4078345b51d24f636fda8995342455b2b18872089"], 0x26}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x16, 0x4, "bc3f6e71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) 6.18186419s ago: executing program 4 (id=2795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x0, 0x4, 0xb9, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 4.613421732s ago: executing program 9 (id=3284): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000001c0)={0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1118cfea5b81f01d60c8bb2b3f000000040000000400000001000000000000004d591ab2065ad910613079a4ffef2abb1ac02ade5f41149010cccff668c2", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000540), 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfe) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r6, 0x1}, 0x14}}, 0x0) chdir(0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.609178167s ago: executing program 8 (id=3285): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000480)="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", 0x11a}, {&(0x7f0000000680)="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", 0x115}], 0x2, 0x3, 0xba) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000008000000000000000000000000020100000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001200010a000000e3f4b96306464eb9f00000000000800000007c80dd10e64d2245dac34cf290191b98b4078345b51d24f636fda8995342455b2b18872089"], 0x26}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x16, 0x4, "bc3f6e71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) 3.656487917s ago: executing program 9 (id=3288): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 3) 3.442525673s ago: executing program 6 (id=3289): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="3038871f", 0xffcc, 0xc0, 0x0, 0x0) 3.407251022s ago: executing program 6 (id=3290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0xe}}}, 0x24}}, 0x44804) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = accept(r4, 0x0, &(0x7f00000003c0)) sendmsg$netlink(r4, &(0x7f0000000bc0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="3c0600001d00000829bd7000fcdbdf2504001e00e2184911ccd212c8bc810787465df2267daf5ed3a6ac8ae352f8aac86c49fc44c4f9061f88716c59bdaf6cdbdefcd98bf0a08e5cd32bfced743e74a9d9219090be8dd9b8299674de8d33dd20f5acf95f4898370efec8435e337d8cf0a30765f3515f1c301df0bc6b1a344c16650ae83eca9dc6497a32d14133e289cc19bacf81df5799bf5447e5cdf80f18f364a84bfd3b0ab556b20e212d336c3ea5e70d0eb8ea66f2ad0e34a00800c480040033808603808055ef159d17ee17c38631d228a3c92b978069738baf09a1dea6eff71a71bc0e0ff2067eee6454a1ed4ab6d8d6060000005b3bc1977a89adb259b1bdc0459325e755a933c09eb09f4a56af99c5c8bc750fdc669934a40ac86d4b6bf702a6cbee840fd047ccb58554ad94eb7d6ff5050d107431c4bb23b624aa67734d6910f6856b25f001a72cfbc469d6e6f2348a3843e2864f3cde2f1a67e1e1e5ebff330eab49af80a65a04c759af3a559f2fd215689dcb297e511af9bf8fe4b95ccdbf443a20be1be6bb46d709741bd3f7bcb0b270657ea4a6fac7d21903a77efb47095ac14e355904001e808c3bf627e0f27c7d63887e858de8677e1c8b8e5064938f6c2aa47e3ffd87e833e271ea695fa07ff6fa64ecf27d04553a3c6f6b58897aee83400cc809b7988fe53dffbed388ec3b86696e95b6abfd48ae1d23ed00cba2f0cfc9459a0dc31866383cfa902c38ffb6c6b06e9ad80573fb0287189abf5e8dc247fb1ee9e133d3e836652451c3b7ba129c14e362701a690a86c9cf31f6502cc4123dff9e5eb8d99db437bcd4baf5b745705db0b5f24159f5e868136d608caa5235fb77d2a54fcf0817c65d85091b16349b085e05092c27fc6efe038e927d5efa76447c2f25643d513cc9a4b510fb099c8da26f3e25059690972102adfcab216a66766babe31a01d4a9aa7df2066dc86813d5054a7c434d066c3f003d71d3731d5ca3a8608e4cca3c39929d89957f0b96930cbe9ce271fbaa676a47e74ba40cd7dffda631af61024c3caf6d7e162178d1a0b38c75c744dc064aed8cdb8a955cd7ac040d40757da940a56d554ed9127f43fc86e798d91164049cf4647513c8a3603c33b23f1590a6f043c5eeb45488a664a405c975ebd88bff4cc446476049bba402854431839f2e47e8f75b8459400ef40a22f50d9cbf9259da8d9af33080b9cb84acf800eafce176979cbe9d1a0a19f498862aa0166e793bf0e3206072b2d57251f8a274e3bb29b8fc1e7178f48e3a24437054dcf8f28158d96bd28aa507e77b7c96551058455ba110c07b33059254577313af700f1874d4fc44206788f7f88e62173c8888262b5be7f9b7ab7d9178769f1c3fff3ba2b83643845c51259a3a8ab9e3ebccbcf99dc3c2d6c3a4d95ead73f6f0ec400f03e53b07743d026b4e1e1614f34cd1c46ec80a1769dbf9ef67192fb1bfb47b3128d950c63842721fc3f3814c84cb8f685ad630d4e16c521e33c073be071f473e7f2802ee72271093a02a6e00001800488008002200ac1414200c00080005000000000000005f75572da72dd8faf6440a20f5430a21d9718d37c41371ef565a4d81706075d0d8663039ff985194970492eb33da4ec1d3e5f8069491ceb192cde3fe952aaa2886d8b80ead6b8b0e1c0d7619449cd1a79328d587fa8620e0758c8b5021a29f6329dc10bae3b44044d24ffa443f45d8b3c28257bb2ad2acbc91e778dd63043a2e82a7bedb339150519768e9ba81d841163da616405468935841533d046f067bebddf855930f7abefd89f1b5c3c663e54643d8052c818f63be7f76f7d2a1be7c78ee43321cf4f223200a6b83eeeda6190febf9b1462d9f367be6a8ce76d4d56cff9138c262a212c5396c00f100900bf79e997408009674fc372e3b18ad36b4a507c97a137e6f99c0e79b238ec4195cf61c18b186f690ce673da354dd7d7413ad9411b621dafa7cc95858d05532a63f2d09bb46a133c424450d68e8b50466b1d1183ec6b27cc9c5742cc668c5a1e3d10345f1b5af3282004700c3545948b4091dc111dc1d6b4bde27259420cb427b9c18b1aa3d68893e37a66801cdea2dd47f74c4b56187391332a6a5ffc1a7805e8e7e1d627ec69d0eceb680cfe0c97a695f56ff33965a8ace0aaf96fdfcc4936ef90ae84297697340b63b734e8b3c7094966495401cc8a2df8febe21060196e6929961b56125647cf5d000000efa1ebc29a1bde949f2fbcadaff5a9331f76a05e6ae0bf503c42e11ee46695f4f8dc5c3b621d202e15b1ab5458daec5a12917ea7f127616709cbee8862b0d758c80744a9381b2cbeafb7a1397c4cc098b40629001768221bf9aeaf734290cf96c7b8549c131a70d53dad8c1bf213c32e35c55151eea4a42e7aebd191493dbe19f16e1ec3432acc7adec5f6e6384da9fd00bc93c5d63c052fc0e44376435d0a92a5e5c8b255549a964d225e8c85078cebaec6f28f47ba480c4ddb6db1c7ff9c9408dcd419458b60f54823d4daabb170aaf349e110d8740000000000"], 0x63c}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000010000000000000000100000001000035074286e9ede100bca70000010001000100"/50, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4008850}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r10 = gettid() r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r12 = getuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x84000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [{@dont_measure}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '/proc/asound/seq/clients\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r12}}, {@subj_user={'subj_user', 0x3d, '!\\.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) statx(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x1000, 0x20, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000000c0)="0ff77812c55e048ae010a4cb0448755e4d2ea8f2eaae8a", 0x17}, {&(0x7f0000000680)="df95f6500795b9343d3d6c01a27f3274bed83bd83e4ad35c5ca49c6ceea77200838d947cf8e81c3a3fc4d7b9bd5446fe807dbaf9032daef1a95aea0e2f51ce4a60be1a788fede9c3032aea64e3d9269fcb5fad549deca40ddb2f90", 0x5b}, {&(0x7f0000000700)="8fe8569f2dd789904656624a49a8a6e25f7d03ce4496cc0fb416e7a63152687ca768a35d3bd112f56fa6cf6c6ddfc3fe0d70b87f8dffccfa02bfe6182ae1783b8fe2195f15a583cf28b341b5da1d94d41084e53c0b4205e34b08c5e5ccc4e59d18eddde36ad290ee158626ed947ead29c11ff2d21fa1eb766065a29fd96269f086868505cb63161f50f374bdf5c31d77b9c3dd06da25ffbb703feeb5f5ceffd197", 0xa1}, {&(0x7f00000001c0)="60df43e8e3232eb5b952b7", 0xb}, {&(0x7f0000000240)="ebd65c67c7081631645a9e55a5574523c1f0ba1b30891acc75bfd728fe735465433ea4cfadbde75ddcdc293c616bccddd7a2997733989c", 0x37}], 0x5, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r1, r3, r3, r3, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x138, 0x600080a0}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000dc0)="8779e8fdb2d34a9c482e7dfa77ea9e76b8a14586bc45cc2a7f2f9f15fc84c5fe25d78497c7223ac5505d71742d5f675d0c594706167d711947d6566b98bb55c7342fab7f7ad02637c12012245583ee61d7f403b8d0636b896602376e15f693e6259c01d2941cc754ca1b609dde909f6329ce61d59ff03c5bbfa75617269e38240a54afc267e366", 0x87}, {&(0x7f0000000e80)="c99e8346590538552a5d45c4c6e7180dcd3ae5494b6d8c30ff7245f8c29edde0b3a95b64c9565007bb88a3c8d8c2987af7d8840ea2", 0x35}, {&(0x7f0000000f00)="dd8e74188a02d10ecb714d9a04349eb98e05fb0eb554279317e1bf70750f7852f1e79e0079325f103d3edc907f05d8f64fd4c4aa1342dc1bea65ce18b32e7391d873cab6ad3edfa0c42bc11a9de50130b9bc187dfcb4bd321c61166cdbdca87b0b4aef0fd94a99bab6b26c061dd3e49190e572a4414e11e8a17e09d094acb5b22a84dbe244a8d9e10d1c94497f368abe3d88fc0703614afdb034bb099d7bd385a61660018dbca43a697260bfa880c0d70b4ed2916289c6c9b67c761871e3716404aecc8b739c0e7002a84ea05d8238e673ab4dca9bab393dd05c759d7927c620b8b5", 0xe2}, {&(0x7f0000001000)="4e2173e6f11023d7384079c6cf5596fc2cd913e18b720a008ab34d53326fd968824b3830069701d40432bafb47c29f7cf07da3", 0x33}, {&(0x7f0000001040)="a023faf0c89dbba4596182d5b640687bf18014bac07248b22dbf4b7017beeede7d923c693ec0c79193ef22aaabc5b33b2230b5cd6762cd538964f976159c53dccc1dedc1f812a4f3a365379844ba9549131fae2645c43ac8e986c4e8107357f7f3c2629f0f10bf8488a0c613100d7902a097b6e77b0288f64f10a30f37ee67639b60fda7a40614df679fbfb71132dfdf3a836da10a47c628845610ab06125d7619900bec493e0d8641a6591dacef537d48ac8dabc62e200e696a033c7199d10a24404ebf94a51b0164f039e35e48250c37055d8dd7a2227e1c7f79a826ab3c1c6e699b", 0xe3}], 0x5, 0x0, 0x0, 0x810}}], 0x2, 0x4004000) r14 = gettid() r15 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$cgroup2(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600), 0x82, &(0x7f0000000840)=ANY=[@ANYBLOB='memory_hugetlb_acname=!-]\\![(\',\x00'/43]) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r15, @ANYBLOB=',wfdno=', @ANYRESHEX=r15, @ANYBLOB="2c22ac03c4029efadb9338a6527b4c9d51cb6e58e06c69da5501053cfa1085ad1e378c614bf56751bfe662d190437312bf17c75fa52b8df0479ef9a225b57b54481dc4be6649cd4b5d4536ebbcdf35f08530c55f0508c05c41a2a346033ef24fd2488425726ee1ca1b17173972c1f66e5449cc7de1ae3f8e"]) r16 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r16}, {r16, 0x140}], 0x2, 0x0, 0x0, 0x0) tkill(r14, 0x7) keyctl$dh_compute(0x10, &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.965743279s ago: executing program 9 (id=3291): creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x161000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.709801084s ago: executing program 9 (id=3292): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.478493628s ago: executing program 6 (id=3293): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4801) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xff}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f6710af70913eedb71ef01f308639f610317d0ebc081a9a6ce5268fc469324897df2cd1252ebd974c66f038e7171a7d89fb62449b50cf552f5d45009bf3d7b8170781a575b8f91432b38e0c816cd2", 0x9d}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read(r2, &(0x7f0000000040)=""/123, 0x7b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180a00000000000000000000000000007910000000000000630ae0ff00000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.657838183s ago: executing program 9 (id=3294): syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x5, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "000000fb000000000000801100"}]}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x7, 0x3, 0xe60, 0x3, 0x8, 0x6, 0x9, 0x20000004}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x19, 0x2, {{0xffff0001, 0x5, 0xfffffffe, 0x5, 0x6462, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x500, 0x9, 0x0, 0x7f}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xf32, 0x1}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="3038871f", 0x4, 0xc0, 0x0, 0x0) 1.4844642s ago: executing program 9 (id=3295): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) tgkill(0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bb210a08c907120082f60102030109022d000100000000090400000396b70a0009050f000000000000090505000000000000090501"], 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x18, r4, 0xb31, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40008c4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.392345856s ago: executing program 6 (id=3296): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4801) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xff}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f6710af70913eedb71ef01f308639f610317d0ebc081a9a6ce5268fc469324897df2cd1252ebd974c66f038e7171a7d89fb62449b50cf552f5d45009bf3d7b8170781a575b8f91432b38e0c816cd2", 0x9d}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read(r2, &(0x7f0000000040)=""/123, 0x7b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180a00000000000000000000000000007910000000000000630ae0ff0000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 457.031083ms ago: executing program 6 (id=3297): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000680)="072e44eda0852ff9c13cb9d8bd205cfede75c16e4a782812b128d84273fc1735491e8c7dfe3d4dc909621cc064759920ca8e34955cbd83761a6fef2533bf0e10de874dcdd9eada0a42e8bd1da1aacc7f33f4d51a14a39146e83612912237a04566fd81180b9a0a484d38dd7b99a1c762961579c4dc97c5fcee28e2b4be7546922cb0206fe45df83cc696f431347b8274dcbef1d349a9e9d33cd527622e743cb0e5292866c370bec4bb0ad487c9fdd80e0c644ed2120c8c850d5bab55e58ba203010c8a53ea679921b73dec97768d5b03", 0xd0}], 0x1, 0x3, 0xba) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) 112.282629ms ago: executing program 8 (id=3298): creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x161000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x5, 0x20000, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xe9], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=3299): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1b0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000050c0), 0x0, 0x8c4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e20, @local}, {0x306, @random="f289017f20ee"}, 0x4, {0x2, 0x4e21, @remote}}) mount$bpf(0x0, 0x0, 0x0, 0x40020, &(0x7f0000000180)=ANY=[@ANYBLOB]) creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0) mlockall(0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x62200, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): sb 7-1: new full-speed USB device number 61 using dummy_hcd [ 952.727510][T14446] usb 7-1: device descriptor read/8, error -71 [ 952.809502][T15640] Bluetooth: hci1: command tx timeout [ 952.889974][ T1204] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 953.059771][T14446] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 953.102753][ T1204] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 953.129903][T14446] usb 7-1: device descriptor read/8, error -71 [ 953.149743][ T1204] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.160721][ T1204] usb 10-1: config 0 descriptor?? [ 953.176417][T18321] binder: 18313:18321 ioctl c0306201 200000000180 returned -22 [ 953.271931][T14446] usb usb7-port1: unable to enumerate USB device [ 953.289723][ T5857] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 953.471709][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.490392][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 953.504458][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 953.535852][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 953.546281][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 953.561835][ T5857] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 953.571904][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 953.580418][ T5857] usb 1-1: Product: syz [ 953.584778][ T5857] usb 1-1: Manufacturer: syz [ 953.589642][ T5857] usb 1-1: SerialNumber: syz [ 953.618983][ T5857] usb 1-1: config 0 descriptor?? [ 953.630453][T18331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.665303][T18331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.711161][T18331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.743822][T18331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.762654][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.820018][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.839588][ T5857] radio-si470x 1-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 954.097242][ T5857] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 954.129191][T18286] netdevsim netdevsim4 netdevsim0: renamed from eth21 [ 954.182418][ T5857] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 954.199836][T18286] netdevsim netdevsim4 netdevsim1: renamed from eth22 [ 954.208980][ T5857] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 954.267475][ T1204] pegasus 10-1:0.0: probe with driver pegasus failed with error -71 [ 954.286053][ T1204] usb 10-1: USB disconnect, device number 30 [ 954.425144][ T5857] usb 1-1: USB disconnect, device number 61 [ 954.436486][T18286] netdevsim netdevsim4 netdevsim2: renamed from eth23 [ 954.748085][T18286] netdevsim netdevsim4 netdevsim3: renamed from eth24 [ 954.899880][T15640] Bluetooth: hci1: command tx timeout [ 955.190026][T18354] overlayfs: missing 'lowerdir' [ 955.688220][ T30] audit: type=1400 audit(1746160454.467:883): avc: denied { read } for pid=18345 comm="syz.0.2925" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 955.878888][ T30] audit: type=1400 audit(1746160454.467:884): avc: denied { open } for pid=18345 comm="syz.0.2925" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 955.906222][ T30] audit: type=1400 audit(1746160454.467:885): avc: denied { ioctl } for pid=18345 comm="syz.0.2925" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 957.188691][T15640] Bluetooth: hci1: command tx timeout [ 957.340913][T18382] loop6: detected capacity change from 0 to 524287999 [ 957.679591][T14446] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 957.951301][T18398] binder: 18393:18398 ioctl c0306201 200000000180 returned -22 [ 958.003461][T14446] usb 1-1: config 0 has no interfaces? [ 958.014408][T14446] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 958.061909][T14446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 958.075466][T14446] usb 1-1: Product: syz [ 958.106339][T14446] usb 1-1: Manufacturer: syz [ 958.147602][T14446] usb 1-1: SerialNumber: syz [ 958.185258][T14446] usb 1-1: config 0 descriptor?? [ 958.338889][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.361308][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.390902][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.428914][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.471449][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.524172][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.537169][T18286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.550875][T18286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.585987][T18286] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 958.615534][T18286] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 958.657762][T18286] wireguard: wg0: Could not create IPv4 socket [ 958.691480][T18286] wireguard: wg1: Could not create IPv4 socket [ 958.731849][T18286] wireguard: wg2: Could not create IPv4 socket [ 959.211069][T15640] Bluetooth: hci1: command tx timeout [ 959.930164][T18434] overlayfs: missing 'lowerdir' [ 960.447212][T14630] usb 1-1: USB disconnect, device number 62 [ 960.524633][T18440] Failed to initialize the IGMP autojoin socket (err -2) [ 961.218773][T18448] loop6: detected capacity change from 0 to 524287999 [ 961.597106][T18452] __nla_validate_parse: 63 callbacks suppressed [ 961.597126][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2943'. [ 961.660263][T18452] binder: 18451:18452 ioctl c0306201 200000000180 returned -22 [ 961.881348][T18465] 9pnet_fd: Insufficient options for proto=fd [ 961.942028][T18467] binder: 18458:18467 ioctl c0306201 200000000180 returned -22 [ 961.961653][T18468] FAULT_INJECTION: forcing a failure. [ 961.961653][T18468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.974923][T18468] CPU: 0 UID: 0 PID: 18468 Comm: syz.8.2947 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 961.974947][T18468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 961.974956][T18468] Call Trace: [ 961.974962][T18468] [ 961.974969][T18468] dump_stack_lvl+0x16c/0x1f0 [ 961.974995][T18468] should_fail_ex+0x512/0x640 [ 961.975020][T18468] _copy_from_iter+0x2a4/0x15b0 [ 961.975045][T18468] ? __alloc_skb+0x200/0x380 [ 961.975070][T18468] ? __pfx__copy_from_iter+0x10/0x10 [ 961.975094][T18468] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 961.975121][T18468] netlink_sendmsg+0x829/0xdd0 [ 961.975144][T18468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.975171][T18468] ____sys_sendmsg+0xa95/0xc70 [ 961.975193][T18468] ? copy_msghdr_from_user+0x10a/0x160 [ 961.975210][T18468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.975243][T18468] ___sys_sendmsg+0x134/0x1d0 [ 961.975261][T18468] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.975307][T18468] __sys_sendmsg+0x16d/0x220 [ 961.975325][T18468] ? __pfx___sys_sendmsg+0x10/0x10 [ 961.975349][T18468] ? rcu_is_watching+0x12/0xc0 [ 961.975376][T18468] do_syscall_64+0xcd/0x260 [ 961.975399][T18468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.975416][T18468] RIP: 0033:0x7f34b6d8e969 [ 961.975430][T18468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.975446][T18468] RSP: 002b:00007f34b7bad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.975463][T18468] RAX: ffffffffffffffda RBX: 00007f34b6fb6080 RCX: 00007f34b6d8e969 [ 961.975474][T18468] RDX: 0000000004004010 RSI: 0000200000000000 RDI: 000000000000000b [ 961.975484][T18468] RBP: 00007f34b7bad090 R08: 0000000000000000 R09: 0000000000000000 [ 961.975494][T18468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.975504][T18468] R13: 0000000000000000 R14: 00007f34b6fb6080 R15: 00007ffd4dd8c2d8 [ 961.975528][T18468] [ 963.509203][T18485] overlayfs: missing 'lowerdir' [ 964.277927][T18491] loop6: detected capacity change from 0 to 524287999 [ 964.768490][T18505] tipc: Started in network mode [ 964.773623][T18505] tipc: Node identity 7f000001, cluster identity 4711 [ 964.782266][T18505] tipc: Enabling of bearer rejected, failed to enable media [ 965.443664][T18510] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 965.886586][T18523] binder: 18512:18523 ioctl c0306201 200000000180 returned -22 [ 966.099592][T14446] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 966.270236][T14446] usb 10-1: Using ep0 maxpacket: 8 [ 966.277028][T14446] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 966.288577][T14446] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.298678][T14446] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 966.324775][T14446] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 966.336489][T14446] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.345192][T14446] usb 10-1: Product: syz [ 966.350905][T14446] usb 10-1: Manufacturer: syz [ 966.355968][T14446] usb 10-1: SerialNumber: syz [ 966.380178][T14446] usb 10-1: config 0 descriptor?? [ 966.713349][T14446] usb 10-1: USB disconnect, device number 31 [ 967.439597][T14446] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 967.649540][T10018] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 967.718375][T14446] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.933908][T10018] usb 9-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 968.312944][T14446] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 968.388104][T10018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.398010][T14446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 968.410064][T10018] usb 9-1: config 0 descriptor?? [ 968.424684][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.436406][T10018] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 968.462421][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.475643][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.516191][T14446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 968.533118][T10018] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 968.559900][T14446] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 968.580036][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.627161][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 968.637410][T14446] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 968.659653][T14446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 968.668332][T14446] usb 1-1: Product: syz [ 968.672542][T14446] usb 1-1: Manufacturer: syz [ 968.677141][T14446] usb 1-1: SerialNumber: syz [ 968.684209][T18572] Failed to initialize the IGMP autojoin socket (err -2) [ 968.712193][T14446] usb 1-1: config 0 descriptor?? [ 968.734093][T18581] loop6: detected capacity change from 0 to 524287999 [ 968.736556][ T5900] usb 9-1: USB disconnect, device number 64 [ 969.264648][T14446] radio-si470x 1-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 969.352842][T14446] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 969.391121][T14446] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 969.432529][T14446] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 969.498545][T14446] usb 1-1: USB disconnect, device number 63 [ 970.730721][ T5820] Bluetooth: hci1: command tx timeout [ 970.969306][T18611] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 971.001214][T18611] kvm: pic: non byte read [ 971.049641][T18611] kvm: pic: level sensitive irq not supported [ 971.050129][T18611] kvm: pic: non byte read [ 971.769583][T18643] FAULT_INJECTION: forcing a failure. [ 971.769583][T18643] name failslab, interval 1, probability 0, space 0, times 0 [ 971.806317][T18643] CPU: 0 UID: 0 PID: 18643 Comm: syz.8.2975 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 971.806346][T18643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 971.806357][T18643] Call Trace: [ 971.806363][T18643] [ 971.806370][T18643] dump_stack_lvl+0x16c/0x1f0 [ 971.806397][T18643] should_fail_ex+0x512/0x640 [ 971.806418][T18643] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 971.806448][T18643] should_failslab+0xc2/0x120 [ 971.806466][T18643] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 971.806493][T18643] ? alloc_empty_file+0x55/0x1e0 [ 971.806516][T18643] alloc_empty_file+0x55/0x1e0 [ 971.806535][T18643] path_openat+0xe0/0x2d40 [ 971.806559][T18643] ? __x64_sys_openat+0x174/0x210 [ 971.806577][T18643] ? do_syscall_64+0xcd/0x260 [ 971.806597][T18643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.806624][T18643] ? __pfx_path_openat+0x10/0x10 [ 971.806656][T18643] do_filp_open+0x20b/0x470 [ 971.806681][T18643] ? __pfx_do_filp_open+0x10/0x10 [ 971.806725][T18643] ? alloc_fd+0x471/0x7d0 [ 971.806757][T18643] do_sys_openat2+0x11b/0x1d0 [ 971.806776][T18643] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.806798][T18643] ? __fget_files+0x20e/0x3c0 [ 971.806836][T18643] __x64_sys_openat+0x174/0x210 [ 971.806855][T18643] ? __pfx___x64_sys_openat+0x10/0x10 [ 971.806873][T18643] ? ksys_write+0x1b9/0x240 [ 971.806897][T18643] ? rcu_is_watching+0x12/0xc0 [ 971.806925][T18643] do_syscall_64+0xcd/0x260 [ 971.806948][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.806964][T18643] RIP: 0033:0x7f34b6d8e969 [ 971.806978][T18643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.806993][T18643] RSP: 002b:00007f34b7bad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.807008][T18643] RAX: ffffffffffffffda RBX: 00007f34b6fb6080 RCX: 00007f34b6d8e969 [ 971.807019][T18643] RDX: 0000000000004842 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 971.807030][T18643] RBP: 00007f34b7bad090 R08: 0000000000000000 R09: 0000000000000000 [ 971.807039][T18643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.807049][T18643] R13: 0000000000000000 R14: 00007f34b6fb6080 R15: 00007ffd4dd8c2d8 [ 971.807072][T18643] [ 972.809942][ T5820] Bluetooth: hci1: command tx timeout [ 973.059148][T18572] netdevsim netdevsim4 netdevsim0: renamed from eth21 [ 973.193417][T18572] netdevsim netdevsim4 netdevsim1: renamed from eth22 [ 973.249595][T14446] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 973.340781][T18572] netdevsim netdevsim4 netdevsim2: renamed from eth23 [ 973.429611][T14446] usb 9-1: Using ep0 maxpacket: 32 [ 973.438147][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.455041][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.477665][T18572] netdevsim netdevsim4 netdevsim3: renamed from eth24 [ 973.509581][T17917] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 973.602996][T14446] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 973.614267][T14446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.662193][T14446] usb 9-1: config 0 descriptor?? [ 973.687799][T14446] hub 9-1:0.0: USB hub found [ 973.761647][T17917] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.805112][T17917] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 973.862629][T18680] capability: warning: `syz.0.2981' uses 32-bit capabilities (legacy support in use) [ 973.873313][T17917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 973.889520][T14446] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 973.920999][T17917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 973.937414][T17917] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 973.984242][T17917] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 974.003575][T17917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 974.033211][T17917] usb 10-1: Product: syz [ 974.045152][T17917] usb 10-1: Manufacturer: syz [ 974.063148][T17917] usb 10-1: SerialNumber: syz [ 974.112028][T17917] usb 10-1: config 0 descriptor?? [ 974.322227][T14446] hid-generic 0003:046D:C31C.0013: item fetching failed at offset 0/1 [ 974.373292][T14446] hid-generic 0003:046D:C31C.0013: probe with driver hid-generic failed with error -22 [ 974.533675][T17917] radio-si470x 10-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 974.573118][ T30] audit: type=1326 audit(1746160473.347:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.0.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf838e969 code=0x7fc00000 [ 974.658544][T18704] FAULT_INJECTION: forcing a failure. [ 974.658544][T18704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.660031][ T5900] usb 9-1: USB disconnect, device number 65 [ 974.694162][T18704] CPU: 0 UID: 0 PID: 18704 Comm: syz.0.2983 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 974.694187][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 974.694198][T18704] Call Trace: [ 974.694204][T18704] [ 974.694211][T18704] dump_stack_lvl+0x16c/0x1f0 [ 974.694241][T18704] should_fail_ex+0x512/0x640 [ 974.694266][T18704] _copy_to_user+0x32/0xd0 [ 974.694291][T18704] isotp_getsockopt+0x144/0x230 [ 974.694311][T18704] ? __pfx_isotp_getsockopt+0x10/0x10 [ 974.694332][T18704] do_sock_getsockopt+0x3fc/0x800 [ 974.694356][T18704] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 974.694375][T18704] ? __fget_files+0x204/0x3c0 [ 974.694413][T18704] __sys_getsockopt+0x12f/0x260 [ 974.694444][T18704] __x64_sys_getsockopt+0xbd/0x160 [ 974.694468][T18704] ? do_syscall_64+0x91/0x260 [ 974.694489][T18704] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.694509][T18704] do_syscall_64+0xcd/0x260 [ 974.694531][T18704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.694549][T18704] RIP: 0033:0x7fabf838e969 [ 974.694563][T18704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.694579][T18704] RSP: 002b:00007fabf9111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 974.694596][T18704] RAX: ffffffffffffffda RBX: 00007fabf85b5fa0 RCX: 00007fabf838e969 [ 974.694608][T18704] RDX: 0000000000000003 RSI: 000000000000006a RDI: 0000000000000003 [ 974.694618][T18704] RBP: 00007fabf9111090 R08: 0000200000000180 R09: 0000000000000000 [ 974.694628][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.694638][T18704] R13: 0000000000000000 R14: 00007fabf85b5fa0 R15: 00007ffd22bf6e08 [ 974.694661][T18704] [ 974.942875][T18572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.953428][T18572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.963439][T18572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.975957][T18572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.987334][T18572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.997775][T18572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.007661][T18572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.018508][T18572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.046556][T18572] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 975.049842][ T5820] Bluetooth: hci1: command tx timeout [ 975.069362][T17917] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 975.081726][T17917] radio-si470x 10-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 975.082779][T18572] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 975.092048][T17917] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 975.151026][T18572] wireguard: wg0: Could not create IPv4 socket [ 975.168952][T18572] wireguard: wg1: Could not create IPv4 socket [ 975.184446][T18572] wireguard: wg2: Could not create IPv4 socket [ 975.273093][T10018] usb 10-1: USB disconnect, device number 32 [ 975.359823][ T5807] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 975.669769][T18716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.783296][ T5807] usb 1-1: device descriptor read/64, error -71 [ 976.079510][ T5807] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 976.103741][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.590716][ T5807] usb 1-1: device descriptor read/64, error -71 [ 976.713306][ T5807] usb usb1-port1: attempt power cycle [ 976.755254][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.765926][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.775023][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.784073][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.793127][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.802319][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.811387][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.820415][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.829436][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2989'. [ 976.845855][T18734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18734 comm=syz.8.2989 [ 977.318200][ T5807] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 977.369511][ T5807] usb 1-1: device descriptor read/8, error -71 [ 977.621734][ T5807] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 977.650278][ T5807] usb 1-1: device descriptor read/8, error -71 [ 977.771312][ T5807] usb usb1-port1: unable to enumerate USB device [ 977.829513][ T5883] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 978.023474][ T5883] usb 9-1: config 0 has no interfaces? [ 978.043186][ T5883] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 978.142808][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 978.283872][ T5883] usb 9-1: Product: syz [ 978.300844][ T5883] usb 9-1: Manufacturer: syz [ 978.313163][ T5883] usb 9-1: SerialNumber: syz [ 978.379502][T18788] overlayfs: missing 'lowerdir' [ 978.912146][ T5883] usb 9-1: config 0 descriptor?? [ 980.230142][ T5883] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 980.389449][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 980.453406][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.609431][ T5883] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 980.636639][ T24] usb 9-1: USB disconnect, device number 66 [ 980.645762][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.681097][ T5883] usb 1-1: config 0 descriptor?? [ 980.708219][T18854] binder: 18853:18854 ioctl c0306201 200000000180 returned -22 [ 980.718559][T18854] FAULT_INJECTION: forcing a failure. [ 980.718559][T18854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.733320][T18854] CPU: 1 UID: 0 PID: 18854 Comm: syz.9.3004 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 980.733344][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 980.733358][T18854] Call Trace: [ 980.733364][T18854] [ 980.733371][T18854] dump_stack_lvl+0x16c/0x1f0 [ 980.733396][T18854] should_fail_ex+0x512/0x640 [ 980.733421][T18854] _copy_to_user+0x32/0xd0 [ 980.733446][T18854] simple_read_from_buffer+0xcb/0x170 [ 980.733473][T18854] proc_fail_nth_read+0x197/0x270 [ 980.733498][T18854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.733523][T18854] ? rw_verify_area+0xcf/0x680 [ 980.733544][T18854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.733568][T18854] vfs_read+0x1de/0xc70 [ 980.733596][T18854] ? __pfx___mutex_lock+0x10/0x10 [ 980.733617][T18854] ? __pfx_vfs_read+0x10/0x10 [ 980.733647][T18854] ? __fget_files+0x20e/0x3c0 [ 980.733680][T18854] ksys_read+0x12a/0x240 [ 980.733702][T18854] ? __pfx_ksys_read+0x10/0x10 [ 980.733724][T18854] ? rcu_is_watching+0x12/0xc0 [ 980.733756][T18854] do_syscall_64+0xcd/0x260 [ 980.733780][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.733797][T18854] RIP: 0033:0x7fbd1dd8d37c [ 980.733810][T18854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 980.733826][T18854] RSP: 002b:00007fbd1ec2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.733843][T18854] RAX: ffffffffffffffda RBX: 00007fbd1dfb5fa0 RCX: 00007fbd1dd8d37c [ 980.733854][T18854] RDX: 000000000000000f RSI: 00007fbd1ec2a0a0 RDI: 0000000000000004 [ 980.733865][T18854] RBP: 00007fbd1ec2a090 R08: 0000000000000000 R09: 0000000000000000 [ 980.733875][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.733884][T18854] R13: 0000000000000000 R14: 00007fbd1dfb5fa0 R15: 00007ffe34c7d258 [ 980.733907][T18854] [ 980.924933][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.893067][ T5883] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 981.950844][T18879] __nla_validate_parse: 27 callbacks suppressed [ 981.950860][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.243959][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.253868][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.263596][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.273291][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.283008][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.294294][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.304126][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.313800][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.323559][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 982.776476][ T5883] usb 1-1: USB disconnect, device number 68 [ 982.895378][T18893] netlink: 'syz.6.3011': attribute type 7 has an invalid length. [ 984.333716][T15640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 984.348725][T15640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 984.359565][T15640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 984.376465][T15640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 984.384644][T15640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 984.438710][ T30] audit: type=1400 audit(1746160483.207:887): avc: denied { mount } for pid=18931 comm="syz.9.3016" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 984.476658][T18926] Failed to initialize the IGMP autojoin socket (err -2) [ 984.579476][ T30] audit: type=1400 audit(1746160483.277:888): avc: denied { mounton } for pid=18931 comm="syz.9.3016" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 984.629646][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 984.645699][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 984.655278][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 984.665323][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 984.674746][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 984.748185][T18941] Failed to initialize the IGMP autojoin socket (err -2) [ 984.882059][ T30] audit: type=1400 audit(1746160483.667:889): avc: denied { relabelfrom } for pid=18941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 984.904754][ T30] audit: type=1400 audit(1746160483.667:890): avc: denied { relabelto } for pid=18941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 985.003774][T18926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.163494][T18960] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 985.433334][ T30] audit: type=1400 audit(1746160484.217:891): avc: denied { unmount } for pid=14013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 985.476062][T18926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.582197][T18926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.720043][T18926] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 985.746319][T18926] team0: Port device macvlan2 removed [ 985.758836][T18926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.196423][T18993] vivid-000: ================= START STATUS ================= [ 986.248478][T18993] vivid-000: Generate PTS: true [ 986.307036][T18993] vivid-000: Generate SCR: true [ 986.493508][ T5820] Bluetooth: hci1: command tx timeout [ 986.501503][T18993] tpg source WxH: 640x360 (Y'CbCr) [ 986.558378][T18993] tpg field: 1 [ 986.584703][T18993] tpg crop: (0,0)/640x360 [ 986.606490][T18926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.623662][T18993] tpg compose: (0,0)/640x360 [ 986.648875][T18993] tpg colorspace: 8 [ 986.651963][T18926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.686681][T18993] tpg transfer function: 0/2 [ 986.695613][T18993] tpg Y'CbCr encoding: 0/1 [ 986.702176][T18993] tpg quantization: 0/2 [ 986.706719][T18993] tpg RGB range: 0/2 [ 986.715724][T18993] vivid-000: ================== END STATUS ================== [ 986.743788][T18926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.782505][T18926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.840845][T18926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.892277][T18926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.958837][T19005] netlink: 'syz.8.3026': attribute type 10 has an invalid length. [ 986.968466][T18926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.968717][T19005] __nla_validate_parse: 26 callbacks suppressed [ 986.968729][T19005] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3026'. [ 987.101181][T18926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.146638][T15640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 987.157121][T15640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 987.168192][T15640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 987.182285][T19005] dummy0: entered promiscuous mode [ 987.189887][T15640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 987.197337][T15640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.376915][T19005] bridge0: port 1(dummy0) entered blocking state [ 987.442028][T19005] bridge0: port 1(dummy0) entered disabled state [ 987.462285][T19005] dummy0: entered allmulticast mode [ 987.470250][T19005] bridge0: port 1(dummy0) entered blocking state [ 987.476659][T19005] bridge0: port 1(dummy0) entered forwarding state [ 987.489032][T18926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 987.559824][T18926] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 987.613022][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 987.633020][T18926] wireguard: wg0: Could not create IPv4 socket [ 987.671585][T18926] wireguard: wg1: Could not create IPv4 socket [ 987.690300][T18926] wireguard: wg2: Could not create IPv4 socket [ 987.716672][T19008] Failed to initialize the IGMP autojoin socket (err -2) [ 987.964585][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 987.974587][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 987.984320][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 987.994116][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 988.003867][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 988.013691][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 988.025013][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 988.034734][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3028'. [ 988.190962][T19029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19029 comm=syz.8.3028 [ 990.008770][T14015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 990.021195][T14015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 990.029627][T14015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 990.041392][T14630] usb 9-1: new full-speed USB device number 67 using dummy_hcd [ 990.049295][T14015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 990.058970][T14015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.094327][T19098] Failed to initialize the IGMP autojoin socket (err -2) [ 990.204615][T14630] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.216207][T14630] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 990.229345][T14630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 990.240773][T14630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 990.250881][T14630] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 990.285888][T14630] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 990.296105][T14630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 990.304618][T14630] usb 9-1: Product: syz [ 990.308785][T14630] usb 9-1: Manufacturer: syz [ 990.315712][T14630] usb 9-1: SerialNumber: syz [ 990.330195][T14630] usb 9-1: config 0 descriptor?? [ 990.855669][T14630] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 990.878867][T14630] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 990.889921][ T30] audit: type=1400 audit(1746160489.667:892): avc: denied { append } for pid=19118 comm="syz.9.3033" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 990.939755][T14630] usb 9-1: USB disconnect, device number 67 [ 991.539701][T14630] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 991.673384][T19155] binder: 19143:19155 ioctl c0306201 200000000180 returned -22 [ 991.702868][T14630] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 991.726098][T14630] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.760975][T14630] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 991.776728][T14630] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.794652][T14630] hub 10-1:4.0: USB hub found [ 991.994841][T14630] hub 10-1:4.0: 26 ports detected [ 992.001865][T14630] usb 10-1: selecting invalid altsetting 1 [ 992.007692][T14630] hub 10-1:4.0: Using single TT (err -22) [ 992.030507][T14630] hub 10-1:4.0: insufficient power available to use all downstream ports [ 992.090485][ T5820] Bluetooth: hci1: command tx timeout [ 992.189246][T19176] FAULT_INJECTION: forcing a failure. [ 992.189246][T19176] name failslab, interval 1, probability 0, space 0, times 0 [ 992.207021][T14630] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 992.211108][T19176] CPU: 1 UID: 0 PID: 19176 Comm: syz.8.3042 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 992.211131][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 992.211141][T19176] Call Trace: [ 992.211146][T19176] [ 992.211153][T19176] dump_stack_lvl+0x16c/0x1f0 [ 992.211176][T19176] should_fail_ex+0x512/0x640 [ 992.211194][T19176] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 992.211217][T19176] should_failslab+0xc2/0x120 [ 992.211234][T19176] __kmalloc_cache_noprof+0x6a/0x3e0 [ 992.211253][T19176] ? tomoyo_path_number_perm+0x18d/0x580 [ 992.211271][T19176] ? loop_add+0xbd/0xb70 [ 992.211292][T19176] loop_add+0xbd/0xb70 [ 992.211308][T19176] ? do_vfs_ioctl+0x512/0x1990 [ 992.211327][T19176] ? __pfx_loop_add+0x10/0x10 [ 992.211342][T19176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 992.211379][T19176] loop_control_ioctl+0x13c/0x630 [ 992.211397][T19176] ? __pfx_loop_control_ioctl+0x10/0x10 [ 992.211414][T19176] ? selinux_file_ioctl+0x180/0x270 [ 992.211435][T19176] ? selinux_file_ioctl+0xb4/0x270 [ 992.211457][T19176] ? __pfx_loop_control_ioctl+0x10/0x10 [ 992.211475][T19176] __x64_sys_ioctl+0x190/0x200 [ 992.211495][T19176] do_syscall_64+0xcd/0x260 [ 992.211515][T19176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.211529][T19176] RIP: 0033:0x7f34b6d8e969 [ 992.211541][T19176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.211555][T19176] RSP: 002b:00007f34b7bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.211570][T19176] RAX: ffffffffffffffda RBX: 00007f34b6fb5fa0 RCX: 00007f34b6d8e969 [ 992.211580][T19176] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 992.211588][T19176] RBP: 00007f34b7bce090 R08: 0000000000000000 R09: 0000000000000000 [ 992.211597][T19176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.211606][T19176] R13: 0000000000000000 R14: 00007f34b6fb5fa0 R15: 00007ffd4dd8c2d8 [ 992.211626][T19176] [ 992.428517][T14630] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 992.523251][T14630] usb 10-1: USB disconnect, device number 33 [ 992.597493][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.606483][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.244864][T19209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.265940][T19209] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 994.149760][ T5858] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 994.159207][ T5856] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 994.180812][ T5820] Bluetooth: hci1: command tx timeout [ 994.421623][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 994.428502][ T5856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.440915][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.469669][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 994.490037][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.505583][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 994.519890][T14630] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 994.527630][ T5858] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 994.555426][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.564124][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 994.583688][ T5858] usb 9-1: config 0 descriptor?? [ 994.598823][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 994.613956][ T5858] hub 9-1:0.0: USB hub found [ 994.630930][ T5856] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 994.651304][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 994.664274][ T5856] usb 7-1: Product: syz [ 994.669454][ T5856] usb 7-1: Manufacturer: syz [ 994.680100][ T5856] usb 7-1: SerialNumber: syz [ 994.696193][ T5856] usb 7-1: config 0 descriptor?? [ 994.722809][T14630] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.743802][T14630] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 994.777144][T14630] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 994.799679][T14630] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 994.829696][ T5858] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 994.839787][T14630] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 994.882297][T14630] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 994.891666][T14630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 994.901636][T14630] usb 10-1: Product: syz [ 994.906004][T14630] usb 10-1: Manufacturer: syz [ 994.916414][ T5856] radio-si470x 7-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 994.928179][T14630] usb 10-1: SerialNumber: syz [ 994.953242][T14630] usb 10-1: config 0 descriptor?? [ 995.089767][T15640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.101126][T15640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.113539][T15640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.123187][T15640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.133094][T15640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 995.158349][ T5856] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 995.163455][T19251] Failed to initialize the IGMP autojoin socket (err -2) [ 995.171387][T19098] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 995.188143][ T5856] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 995.201600][ T5856] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 995.214152][ T5856] usb 7-1: USB disconnect, device number 63 [ 995.245603][ T5858] hid-generic 0003:046D:C31C.0014: item fetching failed at offset 0/1 [ 995.263293][ T5858] hid-generic 0003:046D:C31C.0014: probe with driver hid-generic failed with error -22 [ 995.317545][T14630] radio-si470x 10-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 995.323236][T19098] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 995.380199][T19098] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 995.418100][T19098] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 995.562153][T14630] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 995.577169][T14630] radio-si470x 10-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 995.587562][T14630] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 995.600227][ T24] usb 9-1: USB disconnect, device number 68 [ 995.623017][T14630] usb 10-1: USB disconnect, device number 34 [ 996.246423][T19290] binder: 19282:19290 ioctl c0306201 200000000180 returned -22 [ 996.263434][ T5820] Bluetooth: hci1: command tx timeout [ 996.357458][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.389421][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.399318][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.881624][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.906185][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.942709][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.993245][T19098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.139431][T19098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.359537][T19309] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 997.441406][T19098] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 997.669493][T15640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 997.680712][T15640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 997.689116][T15640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 997.701114][T15640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 997.708639][T15640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 997.763829][T19308] Failed to initialize the IGMP autojoin socket (err -2) [ 997.783312][ T5856] kernel write not supported for file bpf-map (pid: 5856 comm: kworker/0:4) [ 997.794071][T19313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=19313 comm=syz.6.3058 [ 997.812960][T19098] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 997.814106][T19313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=19313 comm=syz.6.3058 [ 997.866068][T19098] wireguard: wg0: Could not create IPv4 socket [ 997.872079][ T30] audit: type=1400 audit(1746160496.637:893): avc: denied { write } for pid=19305 comm="syz.6.3058" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 997.884369][T19098] wireguard: wg1: Could not create IPv4 socket [ 997.938248][T19098] wireguard: wg2: Could not create IPv4 socket [ 997.951030][T19320] __nla_validate_parse: 27 callbacks suppressed [ 997.951047][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 997.983462][ T30] audit: type=1400 audit(1746160496.637:894): avc: denied { map } for pid=19305 comm="syz.6.3058" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 998.094605][T19326] loop6: detected capacity change from 0 to 524287999 [ 998.226140][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.235260][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.244341][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.253391][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.263956][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.273162][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.282216][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.291248][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.300298][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3060'. [ 998.359712][T15640] Bluetooth: hci1: command tx timeout [ 998.437728][ T30] audit: type=1400 audit(1746160496.637:895): avc: denied { call } for pid=19305 comm="syz.6.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 998.697487][ T30] audit: type=1400 audit(1746160496.637:896): avc: denied { transfer } for pid=19305 comm="syz.6.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 999.499440][ T24] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 999.499527][ T5807] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 999.769496][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.783465][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 999.789532][ T5807] usb 10-1: Using ep0 maxpacket: 8 [ 999.813808][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.814390][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 999.829425][ T5807] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 999.964829][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.137856][ T5807] usb 10-1: config 0 descriptor?? [ 1000.311797][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1000.329474][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1000.363814][ T24] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1000.389424][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1000.397532][ T24] usb 7-1: Product: syz [ 1000.409711][ T24] usb 7-1: Manufacturer: syz [ 1000.421258][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.431986][ T24] usb 7-1: SerialNumber: syz [ 1000.436650][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.446482][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1000.454437][ T24] usb 7-1: config 0 descriptor?? [ 1000.461984][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1000.470782][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1000.549786][ T30] audit: type=1400 audit(1746160499.317:897): avc: denied { create } for pid=19338 comm="syz.9.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1000.605128][ T5807] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1000.625280][T19362] Failed to initialize the IGMP autojoin socket (err -2) [ 1000.829171][ T24] radio-si470x 7-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1001.361170][ T24] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1001.412030][ T24] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1001.432428][ T24] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1001.473152][ T24] usb 7-1: USB disconnect, device number 64 [ 1001.588879][ T5857] usb 10-1: USB disconnect, device number 35 [ 1001.785625][T19394] binder: 19386:19394 ioctl c0306201 200000000180 returned -22 [ 1002.642081][T15640] Bluetooth: hci1: command tx timeout [ 1003.213086][T19408] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1003.570868][T19413] loop6: detected capacity change from 0 to 524287999 [ 1004.073257][T19424] 9pnet_fd: Insufficient options for proto=fd [ 1004.653014][T15640] Bluetooth: hci1: command tx timeout [ 1005.602556][T19444] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1006.704161][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.729444][T15640] Bluetooth: hci1: command tx timeout [ 1006.739502][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.755957][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.759579][ T5807] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1006.783922][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.797812][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.812234][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.822449][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.839050][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.874326][T19362] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1006.918813][T19362] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1006.937915][T19362] wireguard: wg0: Could not create IPv4 socket [ 1006.952999][ T5807] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.966719][T19362] wireguard: wg1: Could not create IPv4 socket [ 1006.973679][ T5807] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1006.987279][T19362] wireguard: wg2: Could not create IPv4 socket [ 1006.999607][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1007.029773][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1007.049421][ T5807] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1007.076484][ T5807] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1007.086427][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1007.115816][ T5807] usb 10-1: Product: syz [ 1007.120843][ T5807] usb 10-1: Manufacturer: syz [ 1007.132497][ T5807] usb 10-1: SerialNumber: syz [ 1007.141448][ T5807] usb 10-1: config 0 descriptor?? [ 1007.379132][ T5807] radio-si470x 10-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1007.587131][ T5807] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1007.597476][ T5807] radio-si470x 10-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1007.607414][ T5807] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 1007.661310][ T5807] usb 10-1: USB disconnect, device number 36 [ 1007.889506][ T5860] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1007.964993][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1007.979836][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.003708][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.013506][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.022190][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.050553][T19504] Failed to initialize the IGMP autojoin socket (err -2) [ 1008.081702][ T5860] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1008.095708][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.118144][ T5860] usb 7-1: config 0 descriptor?? [ 1008.233830][T19513] loop6: detected capacity change from 0 to 524287999 [ 1008.866817][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.939808][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.977314][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.998274][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.037867][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.057136][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.265945][T19531] loop6: detected capacity change from 0 to 524287999 [ 1009.618395][ T5860] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1009.678126][ T5860] usb 7-1: USB disconnect, device number 65 [ 1010.103722][T15640] Bluetooth: hci1: command tx timeout [ 1010.225845][T19556] __nla_validate_parse: 26 callbacks suppressed [ 1010.225856][T19556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3091'. [ 1011.559495][T14630] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1012.091063][T19587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1012.100043][T19587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1012.170145][T15640] Bluetooth: hci1: command tx timeout [ 1012.333359][T14630] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.368351][T14630] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.410868][T14630] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1012.420867][T14630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1012.431868][T14630] usb 10-1: Product: syz [ 1012.446773][T19592] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1012.447610][T14630] usb 10-1: Manufacturer: syz [ 1012.469867][T14630] usb 10-1: SerialNumber: syz [ 1012.486840][T14630] usb 10-1: config 0 descriptor?? [ 1012.505750][T14630] radio-si470x 10-1:0.0: could not find interrupt in endpoint [ 1012.529599][T14630] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 1012.571429][T14630] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1012.792219][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3099'. [ 1012.793564][T19603] team0: Mode changed to "loadbalance" [ 1013.338115][T19610] Failed to initialize the IGMP autojoin socket (err -2) [ 1013.584200][T19623] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3100'. [ 1013.594638][T19623] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3100'. [ 1013.604352][T19623] netlink: 'syz.8.3100': attribute type 5 has an invalid length. [ 1013.616587][T19623] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3100'. [ 1014.249474][T15640] Bluetooth: hci1: command tx timeout [ 1014.305950][ T24] usb 10-1: USB disconnect, device number 37 [ 1014.871971][T19504] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 1014.912307][T19504] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 1014.945708][T19504] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 1014.992936][T19504] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 1016.106024][T19677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.219466][ T24] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1016.329604][T15640] Bluetooth: hci1: command tx timeout [ 1016.949493][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.959082][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.968145][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.977656][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.985328][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1017.035137][ T24] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1017.038888][T19684] Failed to initialize the IGMP autojoin socket (err -2) [ 1017.059931][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.073435][ T24] usb 10-1: config 0 descriptor?? [ 1017.141824][T19683] Failed to initialize the IGMP autojoin socket (err -2) [ 1017.519875][T19673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.560221][T19673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.585000][T19673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.629716][T19673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.677552][T19673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.719233][T19673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.787512][T19504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.803628][T19504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.814457][T19504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.826022][T19504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.850469][T19504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.862075][T19504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.872601][T19504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.883402][T19504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.902951][T19504] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1017.934909][T19504] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1017.954875][T19504] wireguard: wg0: Could not create IPv4 socket [ 1017.976451][T19504] wireguard: wg1: Could not create IPv4 socket [ 1017.996493][T19504] wireguard: wg2: Could not create IPv4 socket [ 1018.174245][ T24] pegasus 10-1:0.0: probe with driver pegasus failed with error -71 [ 1018.195616][ T24] usb 10-1: USB disconnect, device number 38 [ 1019.148630][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1019.159864][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1019.169471][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1019.186420][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1019.334350][T19722] Failed to initialize the IGMP autojoin socket (err -2) [ 1019.642947][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1019.702404][T19726] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1019.703724][T19717] Failed to initialize the IGMP autojoin socket (err -2) [ 1019.770517][ T5807] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1019.930577][ T5807] usb 10-1: Using ep0 maxpacket: 32 [ 1019.939889][ T24] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1019.941396][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.966521][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.977277][ T5807] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1020.015269][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.029506][ T5807] usb 10-1: config 0 descriptor?? [ 1020.040880][ T5807] hub 10-1:0.0: USB hub found [ 1020.160997][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.184582][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1020.195602][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1020.226873][ T24] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1020.242643][ T5807] hub 10-1:0.0: 1 port detected [ 1020.252550][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1020.291223][ T24] usb 9-1: Product: syz [ 1020.295569][ T24] usb 9-1: Manufacturer: syz [ 1020.310199][ T24] usb 9-1: SerialNumber: syz [ 1020.337137][ T24] usb 9-1: config 0 descriptor?? [ 1020.353433][ T24] radio-si470x 9-1:0.0: could not find interrupt in endpoint [ 1020.369842][ T24] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1020.389433][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1020.785268][T19717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.798358][T19717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.810372][T19717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.820893][T19717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.834203][T19717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.847062][T19717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.857131][T19717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.868103][T19717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.878065][ T5807] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1020.878225][ T5857] usb 10-1: USB disconnect, device number 39 [ 1020.899588][T19717] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1020.926026][T19717] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1020.950478][T19717] wireguard: wg0: Could not create IPv4 socket [ 1020.967338][T19717] wireguard: wg1: Could not create IPv4 socket [ 1020.993578][T19717] wireguard: wg2: Could not create IPv4 socket [ 1022.455437][T19760] Failed to initialize the IGMP autojoin socket (err -2) [ 1022.907888][T17840] usb 9-1: USB disconnect, device number 69 [ 1023.430416][T17840] libceph: mon0 (1)[c::]:6789 connect error [ 1023.511684][ T30] audit: type=1326 audit(1746160522.287:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19778 comm="syz.9.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1dd8e969 code=0x7ffc0000 [ 1023.561876][ T5820] Bluetooth: hci5: unexpected event for opcode 0x04f8 [ 1023.591283][ T30] audit: type=1326 audit(1746160522.287:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19778 comm="syz.9.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1dd8e969 code=0x7ffc0000 [ 1023.709750][T17840] libceph: mon0 (1)[c::]:6789 connect error [ 1024.203637][T19779] ceph: No mds server is up or the cluster is laggy [ 1024.240495][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1024.469407][T17840] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 1024.641294][T17840] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.652833][T17840] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1024.664735][T17840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1024.676029][T17840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1024.687492][T17840] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1024.702896][T17840] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1024.712379][T17840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1024.721008][T17840] usb 9-1: Product: syz [ 1024.725169][T17840] usb 9-1: Manufacturer: syz [ 1024.732113][T17840] usb 9-1: SerialNumber: syz [ 1024.739244][T17840] usb 9-1: config 0 descriptor?? [ 1024.954438][T17840] radio-si470x 9-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1025.164662][T17840] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1025.174787][T17840] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1025.189626][T17840] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1025.204191][T17840] usb 9-1: USB disconnect, device number 70 [ 1025.770011][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3126'. [ 1026.113541][T15640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1026.123856][T15640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1026.133124][T15640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1026.141093][T15640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1026.155216][T15640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.283888][T19826] Failed to initialize the IGMP autojoin socket (err -2) [ 1026.589787][T14446] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1026.761492][T14446] usb 7-1: Using ep0 maxpacket: 8 [ 1026.819892][ T5856] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1026.872859][T14446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.019102][T14446] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1027.070451][ T5856] usb 10-1: Using ep0 maxpacket: 8 [ 1027.116821][T14446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.178972][ T5856] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1027.342232][ T5856] usb 10-1: config 179 has no interface number 0 [ 1027.366272][T14446] usb 7-1: config 0 descriptor?? [ 1027.442500][ T5856] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1027.612140][ T5856] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1027.794987][ T5856] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1027.933052][ T5856] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1028.096393][ T5856] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1028.249449][ T5820] Bluetooth: hci1: command tx timeout [ 1028.276219][ T5856] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1028.321282][T14446] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1028.337668][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.365186][T19839] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1029.919292][T14446] usb 7-1: USB disconnect, device number 66 [ 1029.981021][ T5856] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input65 [ 1030.358422][ T5820] Bluetooth: hci1: command tx timeout [ 1030.668347][ T24] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1030.932401][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1030.974192][T19870] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1031.129839][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1031.144816][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1031.174259][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.197071][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1031.267990][ T24] usb 9-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1031.286439][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.308167][ T24] usb 9-1: Product: syz [ 1031.322402][ T24] usb 9-1: Manufacturer: syz [ 1031.341344][ T24] usb 9-1: SerialNumber: syz [ 1031.362485][ T24] usb 9-1: config 0 descriptor?? [ 1031.675193][ T5857] usb 9-1: USB disconnect, device number 71 [ 1031.890112][T19826] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 1031.921863][ T1204] usb 10-1: USB disconnect, device number 40 [ 1031.927904][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1031.927948][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1031.941734][T19826] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 1031.982751][ T1204] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1032.063010][T19826] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 1032.147817][T19826] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 1032.252347][T19887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.288158][T19888] binder: 19881:19888 ioctl c0306201 200000000180 returned -22 [ 1032.424185][ T5820] Bluetooth: hci1: command tx timeout [ 1033.090097][T14446] libceph: mon0 (1)[c::]:6789 connect error [ 1033.175918][ T5820] Bluetooth: hci0: unexpected event for opcode 0x04f8 [ 1033.186875][ T30] audit: type=1326 audit(1746160531.957:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.8.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b6d8e969 code=0x7ffc0000 [ 1033.220745][ T30] audit: type=1326 audit(1746160531.957:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.8.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b6d8e969 code=0x7ffc0000 [ 1033.282977][ T30] audit: type=1326 audit(1746160531.957:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.8.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f34b6d8e969 code=0x7ffc0000 [ 1033.349881][ T30] audit: type=1326 audit(1746160531.957:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.8.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b6d8e969 code=0x7ffc0000 [ 1033.412714][ T30] audit: type=1326 audit(1746160531.957:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.8.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b6d8e969 code=0x7ffc0000 [ 1033.436514][T17840] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1033.458384][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 1033.536696][T15640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1033.560465][T15640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1033.866419][T19892] ceph: No mds server is up or the cluster is laggy [ 1033.971836][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 1033.997659][T15640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1034.019096][T15640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1034.019521][T17840] usb 10-1: Using ep0 maxpacket: 8 [ 1034.028389][T15640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1034.039486][T17840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.058865][T17840] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1034.078524][T17840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.085166][T19912] Failed to initialize the IGMP autojoin socket (err -2) [ 1034.227149][T17840] usb 10-1: config 0 descriptor?? [ 1034.490389][T15640] Bluetooth: hci1: command tx timeout [ 1034.636271][T17840] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1034.990357][ T82] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1035.185975][ T82] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.197064][ T82] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1035.218872][T19826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.245771][ T82] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1035.257895][T19826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.267854][ T82] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1035.278042][T19826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.288773][ T82] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1035.292551][T19826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.314113][T19826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.314461][ T82] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1035.335866][T19826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.346257][T19826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.347696][ T82] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1035.369812][ T82] usb 7-1: Product: syz [ 1035.370691][T19826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.373973][ T82] usb 7-1: Manufacturer: syz [ 1035.388562][T19826] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1035.421705][T17840] usb 10-1: USB disconnect, device number 41 [ 1035.441416][T19826] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1035.469720][ T82] usb 7-1: SerialNumber: syz [ 1035.484934][T19826] wireguard: wg0: Could not create IPv4 socket [ 1035.488630][ T82] usb 7-1: config 0 descriptor?? [ 1035.504477][T19826] wireguard: wg1: Could not create IPv4 socket [ 1035.514026][T19826] wireguard: wg2: Could not create IPv4 socket [ 1035.721462][ T82] radio-si470x 7-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1035.950324][ T82] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1035.984068][ T82] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1036.029822][ T82] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1036.083440][ T82] usb 7-1: USB disconnect, device number 67 [ 1037.237224][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.386181][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1037.397601][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.477898][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.490112][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.502406][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.512095][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.521647][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.531275][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.541013][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.550578][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.560248][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1037.741618][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.755720][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.763260][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.865814][T19981] Failed to initialize the IGMP autojoin socket (err -2) [ 1039.839502][T14446] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1039.850305][ T5820] Bluetooth: hci1: command tx timeout [ 1040.032821][T14446] usb 9-1: Using ep0 maxpacket: 32 [ 1040.200673][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.247836][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.295291][T14446] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1040.319715][T14446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.349855][T14446] usb 9-1: config 0 descriptor?? [ 1040.410622][T14446] hub 9-1:0.0: USB hub found [ 1040.468987][T20026] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1040.644247][T14446] hub 9-1:0.0: 1 port detected [ 1041.394771][T20043] binder: 20036:20043 ioctl c0306201 200000000180 returned -22 [ 1041.603001][T19981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.616123][T19981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.630068][T19981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.640589][T19981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.652854][T19981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.663556][T19981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.673449][T19981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.685633][T19981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.740936][T19981] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1041.786502][ T24] usb 9-1: USB disconnect, device number 72 [ 1041.871393][T20051] Failed to initialize the IGMP autojoin socket (err -2) [ 1041.918316][T19981] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1041.980680][ T5820] Bluetooth: hci1: command tx timeout [ 1042.052445][T19981] wireguard: wg0: Could not create IPv4 socket [ 1042.110522][T14446] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1042.114976][T19981] wireguard: wg1: Could not create IPv4 socket [ 1042.150927][T19981] wireguard: wg2: Could not create IPv4 socket [ 1044.850495][T20123] __nla_validate_parse: 99 callbacks suppressed [ 1044.850511][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3160'. [ 1044.959692][ T82] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1045.219424][ T82] usb 7-1: Using ep0 maxpacket: 32 [ 1045.227843][ T82] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.259060][ T82] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.286906][ T82] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1045.304851][ T82] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.329966][ T82] usb 7-1: config 0 descriptor?? [ 1045.384378][ T82] hub 7-1:0.0: USB hub found [ 1045.630230][ T82] hub 7-1:0.0: 1 port detected [ 1045.736559][T15640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1045.747742][T15640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1045.757906][T15640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1045.773156][T15640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1045.785386][T15640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1045.827967][T20139] loop6: detected capacity change from 0 to 524287999 [ 1045.900144][T20134] Failed to initialize the IGMP autojoin socket (err -2) [ 1046.654440][T14446] usb 7-1: USB disconnect, device number 68 [ 1046.709639][ T82] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1047.491643][T20156] Failed to initialize the IGMP autojoin socket (err -2) [ 1047.659453][T14446] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1047.769837][ T82] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1047.810676][T14446] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1047.825011][T14446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.844868][T14446] usb 7-1: config 0 descriptor?? [ 1047.929428][T15640] Bluetooth: hci1: command tx timeout [ 1047.943503][ T82] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.971835][ T82] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1047.987857][ T82] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1048.000710][ T82] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1048.010746][ T82] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1048.029937][ T82] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1048.038989][ T82] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1048.065636][ T82] usb 9-1: Product: syz [ 1048.074005][ T82] usb 9-1: Manufacturer: syz [ 1048.078623][ T82] usb 9-1: SerialNumber: syz [ 1048.156792][ T82] usb 9-1: config 0 descriptor?? [ 1048.413260][ T82] radio-si470x 9-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1048.622466][ T82] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1048.646660][ T82] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1048.693295][ T82] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1048.737035][ T82] usb 9-1: USB disconnect, device number 73 [ 1048.976423][T14446] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1048.995429][T14446] usb 7-1: USB disconnect, device number 69 [ 1050.019571][T15640] Bluetooth: hci1: command tx timeout [ 1050.551614][T20242] binder: 20236:20242 ioctl c0306201 200000000180 returned -22 [ 1051.028232][T20134] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 1051.095196][T20134] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 1051.164407][T20134] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 1051.234201][T20134] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 1051.700325][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.302911][T15640] Bluetooth: hci1: command tx timeout [ 1052.308419][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.317441][T20277] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.326795][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.337526][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.346554][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.355533][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.364514][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.373490][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1052.382651][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1054.017156][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.023567][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.410978][T15640] Bluetooth: hci1: command tx timeout [ 1054.430287][T20298] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1054.813154][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.825909][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.834499][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.848493][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.856186][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1054.935085][T20309] Failed to initialize the IGMP autojoin socket (err -2) [ 1055.520635][T20134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.560015][T20134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.590854][T20134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.619572][T20134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.647066][T20134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.679939][T20134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.699650][T20134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.734689][T20134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.778862][T20134] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1055.833862][T20134] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1055.858156][T20134] wireguard: wg0: Could not create IPv4 socket [ 1055.866434][T20134] wireguard: wg1: Could not create IPv4 socket [ 1055.874726][T20134] wireguard: wg2: Could not create IPv4 socket [ 1056.801312][T20368] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1057.036115][T20369] binder: 20360:20369 ioctl c0306201 200000000180 returned -22 [ 1057.095141][ T1204] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1057.427799][ T1204] usb 7-1: Using ep0 maxpacket: 8 [ 1057.454633][ T1204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1057.497468][ T1204] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1057.539396][ T1204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.603556][ T1204] usb 7-1: config 0 descriptor?? [ 1058.023836][T15640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1058.040332][T15640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1058.061393][T15640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1058.097884][ T1204] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1058.108274][T15640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1058.128482][T15640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1058.204565][T20383] Failed to initialize the IGMP autojoin socket (err -2) [ 1058.935643][T17831] usb 7-1: USB disconnect, device number 70 [ 1059.000804][T10018] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1059.163125][T10018] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1059.226666][T10018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.671246][T20418] Failed to initialize the IGMP autojoin socket (err -2) [ 1059.703735][T10018] usb 10-1: config 0 descriptor?? [ 1060.269927][ T5820] Bluetooth: hci1: command tx timeout [ 1061.192060][T10018] pegasus 10-1:0.0: probe with driver pegasus failed with error -71 [ 1061.224780][T10018] usb 10-1: USB disconnect, device number 42 [ 1061.331417][T20450] binder: 20442:20450 ioctl c0306201 200000000180 returned -22 [ 1061.917934][T20383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.941206][T20383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.952040][T20383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.980255][T20383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.005927][T20383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.033111][T20383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.079988][T20383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.095577][T20383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.116363][T20383] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1062.152286][T20383] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1062.171773][T20383] wireguard: wg0: Could not create IPv4 socket [ 1062.181405][T20383] wireguard: wg1: Could not create IPv4 socket [ 1062.191678][T20383] wireguard: wg2: Could not create IPv4 socket [ 1064.392278][T20532] Failed to initialize the IGMP autojoin socket (err -2) [ 1065.758713][T15640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.798543][T15640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.843001][T15640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.878965][T15640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.903577][T15640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.044906][T20538] Failed to initialize the IGMP autojoin socket (err -2) [ 1067.317614][T20569] Failed to initialize the IGMP autojoin socket (err -2) [ 1067.763772][T20587] overlayfs: failed to resolve './file0': -2 [ 1068.078928][T15640] Bluetooth: hci1: command tx timeout [ 1068.492870][T20607] binder: 20599:20607 ioctl c0306201 200000000180 returned -22 [ 1069.116971][T20625] __nla_validate_parse: 25 callbacks suppressed [ 1069.116986][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3217'. [ 1069.268222][T20629] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1070.254312][T15640] Bluetooth: hci1: command tx timeout [ 1070.526224][T14446] libceph: mon0 (1)[c::]:6789 connect error [ 1070.624122][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3221'. [ 1070.838864][T14446] libceph: mon0 (1)[c::]:6789 connect error [ 1070.864740][T15640] Bluetooth: hci3: unexpected event for opcode 0x04f8 [ 1070.865381][ T30] audit: type=1326 audit(1746160569.647:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20644 comm="syz.6.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba86b8e969 code=0x7ffc0000 [ 1070.928142][T20651] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1070.973884][ T30] audit: type=1326 audit(1746160569.677:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20644 comm="syz.6.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fba86b8e969 code=0x7ffc0000 [ 1071.021983][ T30] audit: type=1326 audit(1746160569.677:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20644 comm="syz.6.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba86b8e969 code=0x7ffc0000 [ 1071.051510][ T30] audit: type=1326 audit(1746160569.677:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20644 comm="syz.6.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba86b8e969 code=0x7ffc0000 [ 1071.362940][T14446] libceph: mon0 (1)[c::]:6789 connect error [ 1071.393606][T20645] ceph: No mds server is up or the cluster is laggy [ 1071.770744][T20685] overlayfs: failed to resolve './file0': -2 [ 1071.860104][ T5900] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1072.011741][ T5900] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.023162][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1072.042010][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1072.067067][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1072.084597][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1072.115125][ T5900] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1072.128648][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1072.144714][ T5900] usb 9-1: Product: syz [ 1072.153665][ T5900] usb 9-1: Manufacturer: syz [ 1072.158358][ T5900] usb 9-1: SerialNumber: syz [ 1072.172168][ T5900] usb 9-1: config 0 descriptor?? [ 1072.192624][T20697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1072.214879][T20697] kvm: pic: non byte read [ 1072.220888][T20697] kvm: pic: level sensitive irq not supported [ 1072.220951][T20697] kvm: pic: non byte read [ 1072.329807][T15640] Bluetooth: hci1: command tx timeout [ 1072.385920][ T5900] radio-si470x 9-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1072.686441][ T5900] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1072.708285][ T5900] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1072.722828][ T5900] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1072.735992][ T5900] usb 9-1: USB disconnect, device number 74 [ 1073.048262][T20538] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 1073.085689][T20538] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 1073.126887][T20538] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 1073.163163][T20538] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 1073.638970][T20538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.679832][T20538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.709154][T20538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.727613][T20538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.961050][T20766] binder: 20756:20766 ioctl c0306201 200000000180 returned -22 [ 1074.038812][T20538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.056866][T20538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.068004][T20538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.080747][T20538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.118434][T20538] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1074.159217][T20538] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1074.196621][T20538] wireguard: wg0: Could not create IPv4 socket [ 1074.227424][T20538] wireguard: wg1: Could not create IPv4 socket [ 1074.278845][T20538] wireguard: wg2: Could not create IPv4 socket [ 1074.409615][T15640] Bluetooth: hci1: command tx timeout [ 1074.859478][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.873230][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.883974][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.896955][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.923912][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.004009][T20785] binder: 20780:20785 ioctl c0306201 200000000180 returned -22 [ 1075.109026][T20775] Failed to initialize the IGMP autojoin socket (err -2) [ 1075.169537][ T5857] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1075.363500][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 1075.406922][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.462664][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.491989][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1075.519254][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.555070][ T5857] usb 7-1: config 0 descriptor?? [ 1075.577597][ T5857] hub 7-1:0.0: USB hub found [ 1075.789753][ T5857] hub 7-1:0.0: 1 port detected [ 1075.863054][T20802] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1076.628373][ T5857] usb 7-1: USB disconnect, device number 71 [ 1076.780438][T20830] Failed to initialize the IGMP autojoin socket (err -2) [ 1077.175929][T15640] Bluetooth: hci2: command tx timeout [ 1077.607341][T20850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.373060][T20775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.577758][T20775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.694863][T20775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.710442][T20775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.741989][T20775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.775343][T20775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.785395][T20775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.803104][T20775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.823499][T20775] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1078.866247][T20775] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1078.903382][T20775] wireguard: wg0: Could not create IPv4 socket [ 1078.921978][T20775] wireguard: wg1: Could not create IPv4 socket [ 1078.941323][T20775] wireguard: wg2: Could not create IPv4 socket [ 1078.944391][T20869] binder: 20861:20869 ioctl c0306201 200000000180 returned -22 [ 1079.020108][T20870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.209798][T15640] Bluetooth: hci2: command tx timeout [ 1082.483307][T20882] Failed to initialize the IGMP autojoin socket (err -2) [ 1083.639494][ T5857] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1083.799474][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 1083.822122][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.959822][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.982905][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1083.992999][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.009084][ T5857] usb 7-1: config 0 descriptor?? [ 1084.029883][ T5857] hub 7-1:0.0: USB hub found [ 1084.382662][ T5857] hub 7-1:0.0: 1 port detected [ 1085.149615][ T5856] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 1085.692889][T14447] usb 7-1: USB disconnect, device number 72 [ 1085.782962][ T5856] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.809273][ T5856] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1085.858501][ T5856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1085.890033][ T5856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1085.911480][ T5856] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1086.034217][ T5856] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1086.065731][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1086.132681][ T5856] usb 9-1: Product: syz [ 1086.168074][ T5856] usb 9-1: Manufacturer: syz [ 1086.224604][ T5856] usb 9-1: SerialNumber: syz [ 1086.338610][ T5856] usb 9-1: config 0 descriptor?? [ 1086.956272][ T5856] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1087.012671][ T5856] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1087.150805][ T5856] usb 9-1: USB disconnect, device number 75 [ 1088.186346][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1088.197657][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1088.207250][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1088.215518][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1088.223165][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.251805][T20991] Failed to initialize the IGMP autojoin socket (err -2) [ 1089.012491][T20991] netdevsim netdevsim4 netdevsim0: renamed from eth25 [ 1089.080418][T20991] netdevsim netdevsim4 netdevsim1: renamed from eth26 [ 1090.292911][ T5820] Bluetooth: hci1: command tx timeout [ 1090.364817][T21040] Failed to initialize the IGMP autojoin socket (err -2) [ 1090.565687][T20991] netdevsim netdevsim4 netdevsim2: renamed from eth27 [ 1090.727076][T20991] netdevsim netdevsim4 netdevsim3: renamed from eth28 [ 1091.577925][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3264'. [ 1091.593580][T14446] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1091.602251][T15640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1091.613200][T15640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1091.620740][T21060] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.3264'. [ 1091.750643][T15640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1091.786862][T15640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1091.794614][T15640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.823980][T14446] usb 9-1: Using ep0 maxpacket: 32 [ 1091.851565][T21048] Failed to initialize the IGMP autojoin socket (err -2) [ 1091.874636][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.903536][T21058] Failed to initialize the IGMP autojoin socket (err -2) [ 1091.943183][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.979603][T14446] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1091.989634][T14446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.009917][T14446] usb 9-1: config 0 descriptor?? [ 1092.022312][T14446] hub 9-1:0.0: USB hub found [ 1092.118864][T21075] overlayfs: failed to resolve './file0': -2 [ 1092.237489][T14446] hub 9-1:0.0: 1 port detected [ 1092.329533][T21065] Bluetooth: hci1: command tx timeout [ 1092.597996][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.622097][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.637937][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.649065][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.686336][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.698190][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.711324][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.722360][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.759528][T20991] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1092.818739][T20991] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1092.844615][T20991] wireguard: wg0: Could not create IPv4 socket [ 1092.858271][T20991] wireguard: wg1: Could not create IPv4 socket [ 1092.867104][T20991] wireguard: wg2: Could not create IPv4 socket [ 1092.869716][ T1204] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1092.883822][T14446] usb 9-1: USB disconnect, device number 76 [ 1094.123233][T21158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3271'. [ 1094.345348][T14015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1094.393175][T14015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1094.446472][T21168] Failed to initialize the IGMP autojoin socket (err -2) [ 1094.528435][T14015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.542846][T14015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.557234][T14015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.766503][T21166] Failed to initialize the IGMP autojoin socket (err -2) [ 1095.732143][T21178] Failed to initialize the IGMP autojoin socket (err -2) [ 1095.928255][T21180] Failed to initialize the IGMP autojoin socket (err -2) [ 1096.704948][T14015] Bluetooth: hci1: command tx timeout [ 1097.159568][ T1204] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1097.180084][T14630] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1097.359395][ T1204] usb 10-1: Using ep0 maxpacket: 8 [ 1097.365994][ T1204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1097.376105][T14630] usb 9-1: Using ep0 maxpacket: 8 [ 1097.386206][ T1204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1097.402300][ T1204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.413247][T14630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.436976][T14630] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1097.462588][ T1204] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1097.481401][T14630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.493786][ T1204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.516358][ T1204] usb 10-1: Product: syz [ 1097.521472][T14630] usb 9-1: config 0 descriptor?? [ 1097.529564][ T1204] usb 10-1: Manufacturer: syz [ 1097.543700][ T1204] usb 10-1: SerialNumber: syz [ 1097.549411][T14446] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1097.573194][ T1204] usb 10-1: config 0 descriptor?? [ 1097.703121][T14446] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.723640][T14446] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1097.758281][T14446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1097.794224][T14446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1097.819512][T14446] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1097.845464][ T1204] usb 10-1: USB disconnect, device number 43 [ 1097.873946][T14446] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1097.890895][T14446] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1097.921409][T14446] usb 7-1: Product: syz [ 1097.935819][T14446] usb 7-1: Manufacturer: syz [ 1097.942898][T14630] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1097.953532][T14446] usb 7-1: SerialNumber: syz [ 1097.972222][T14446] usb 7-1: config 0 descriptor?? [ 1098.072240][T21166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.087561][T21166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.107154][T21166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.118187][T21166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.131786][T21166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.142610][T21166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.152609][T21166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.169263][T21166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.187821][T21166] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1098.216330][T14446] radio-si470x 7-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1098.226489][T21166] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1098.245263][T21166] wireguard: wg0: Could not create IPv4 socket [ 1098.257756][T21166] wireguard: wg1: Could not create IPv4 socket [ 1098.267751][T21166] wireguard: wg2: Could not create IPv4 socket [ 1098.417936][T14446] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1098.428373][T14446] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1098.455108][T14446] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1098.486950][T14446] usb 7-1: USB disconnect, device number 73 [ 1098.693007][T14446] usb 9-1: USB disconnect, device number 77 [ 1099.734797][T14446] usb 9-1: new full-speed USB device number 78 using dummy_hcd [ 1099.911193][T14446] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.184312][T14446] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1100.196183][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1100.207418][T14446] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1100.217467][T14446] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1100.230405][T14630] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1100.246560][T14446] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1100.257550][T14446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1100.265935][T14446] usb 9-1: Product: syz [ 1100.270426][T14446] usb 9-1: Manufacturer: syz [ 1100.275073][T14446] usb 9-1: SerialNumber: syz [ 1100.290634][T14446] usb 9-1: config 0 descriptor?? [ 1100.382224][T14630] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1100.400275][T14630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.423817][T14630] usb 7-1: config 0 descriptor?? [ 1100.532483][T14446] radio-si470x 9-1:0.0: DeviceID=0x3f6e ChipID=0x7100 [ 1100.709604][T12572] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1100.739127][T14446] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1100.753665][T14446] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1100.767958][T14446] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1100.796143][T14446] usb 9-1: USB disconnect, device number 78 [ 1100.879404][T12572] usb 10-1: Using ep0 maxpacket: 8 [ 1100.903316][T12572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1100.906988][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.935798][T12572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.975687][T12572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1100.998340][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.008138][T12572] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1101.035225][T21262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.036135][T12572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.048486][T21262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.079387][T12572] usb 10-1: Product: syz [ 1101.083729][T12572] usb 10-1: Manufacturer: syz [ 1101.088735][T12572] usb 10-1: SerialNumber: syz [ 1101.107560][T12572] usb 10-1: config 0 descriptor?? [ 1101.334737][ T1204] usb 10-1: USB disconnect, device number 44 [ 1101.681335][T14630] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1101.708696][T14630] usb 7-1: USB disconnect, device number 74 [ 1103.493944][T21382] FAULT_INJECTION: forcing a failure. [ 1103.493944][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.535314][T21382] CPU: 1 UID: 0 PID: 21382 Comm: syz.9.3288 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1103.535339][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1103.535349][T21382] Call Trace: [ 1103.535355][T21382] [ 1103.535361][T21382] dump_stack_lvl+0x16c/0x1f0 [ 1103.535388][T21382] should_fail_ex+0x512/0x640 [ 1103.535410][T21382] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1103.535437][T21382] should_failslab+0xc2/0x120 [ 1103.535456][T21382] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1103.535479][T21382] ? __pfx___might_resched+0x10/0x10 [ 1103.535501][T21382] ? vhost_task_create+0xe5/0x2e0 [ 1103.535518][T21382] ? rcu_is_watching+0x12/0xc0 [ 1103.535537][T21382] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1103.535557][T21382] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1103.535581][T21382] vhost_task_create+0xe5/0x2e0 [ 1103.535603][T21382] ? __pfx_vhost_task_create+0x10/0x10 [ 1103.535620][T21382] ? register_lock_class+0x41/0x4c0 [ 1103.535652][T21382] ? __pfx_vhost_task_fn+0x10/0x10 [ 1103.535672][T21382] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 1103.535705][T21382] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1103.535734][T21382] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1103.535758][T21382] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 1103.535787][T21382] kvm_vcpu_ioctl+0x5e9/0x1680 [ 1103.535815][T21382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1103.535846][T21382] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 1103.535875][T21382] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1103.535908][T21382] ? hook_file_ioctl_common+0x145/0x410 [ 1103.535932][T21382] ? selinux_file_ioctl+0x180/0x270 [ 1103.535955][T21382] ? selinux_file_ioctl+0xb4/0x270 [ 1103.535980][T21382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1103.536005][T21382] __x64_sys_ioctl+0x190/0x200 [ 1103.536030][T21382] do_syscall_64+0xcd/0x260 [ 1103.536054][T21382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.536071][T21382] RIP: 0033:0x7fbd1dd8e969 [ 1103.536086][T21382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.536101][T21382] RSP: 002b:00007fbd1ec09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.536117][T21382] RAX: ffffffffffffffda RBX: 00007fbd1dfb6080 RCX: 00007fbd1dd8e969 [ 1103.536129][T21382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1103.536139][T21382] RBP: 00007fbd1ec09090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.536149][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.536158][T21382] R13: 0000000000000001 R14: 00007fbd1dfb6080 R15: 00007ffe34c7d258 [ 1103.536182][T21382] [ 1103.824186][ T5857] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 1103.852231][T21065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1103.867674][T21065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1103.876515][T21065] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1103.885634][T21065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1103.900084][T21065] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.931161][T21386] Failed to initialize the IGMP autojoin socket (err -2) [ 1103.945433][T21391] binder: 21384:21391 ioctl c0306201 200000000180 returned -22 [ 1104.000856][ T5857] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.011379][ T5857] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1104.023147][ T5857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1104.036533][ T5857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1104.043922][T21393] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1104.047625][ T5857] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1104.069648][ T5857] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1104.079171][ T5857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1104.098517][ T5857] usb 9-1: Product: syz [ 1104.113145][ T5857] usb 9-1: Manufacturer: syz [ 1104.117763][ T5857] usb 9-1: SerialNumber: syz [ 1104.145213][ T5857] usb 9-1: config 0 descriptor?? [ 1104.621763][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1104.680499][ T5857] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1104.911258][ T5857] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1105.153505][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.162674][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.173274][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.182378][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.191423][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.200524][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.209958][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.219041][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.227991][T21417] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1105.362781][T21421] hsr0: entered allmulticast mode [ 1105.367813][T21421] hsr_slave_0: entered allmulticast mode [ 1105.382794][T21421] hsr_slave_1: entered allmulticast mode [ 1105.858565][ T5857] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1105.950742][T14015] Bluetooth: hci1: command tx timeout [ 1106.310243][ T5857] usb 10-1: Using ep0 maxpacket: 8 [ 1106.318086][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1106.329267][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1106.342353][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1106.358645][ T5857] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1106.368267][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.481449][ T5857] usb 10-1: Product: syz [ 1106.488326][ T5857] usb 10-1: Manufacturer: syz [ 1106.503996][ T5857] usb 10-1: SerialNumber: syz [ 1106.520237][ T5857] usb 10-1: config 0 descriptor?? [ 1106.763193][ T5857] usb 10-1: USB disconnect, device number 45 [ 1106.791894][T14446] usb 9-1: USB disconnect, device number 79 [ 1106.931476][T21488] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1106.976400][T21488] kvm: pic: level sensitive irq not supported [ 1106.976471][T21488] kvm: pic: non byte read [ 1212.009218][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1212.016188][ C0] rcu: 1-...!: (1 GPs behind) idle=ecec/1/0x4000000000000000 softirq=137829/137830 fqs=1 [ 1212.027016][ C0] rcu: (detected by 0, t=10502 jiffies, g=90413, q=307 ncpus=2) [ 1212.034731][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1212.034757][ C1] NMI backtrace for cpu 1 [ 1212.034770][ C1] CPU: 1 UID: 0 PID: 5477 Comm: dhcpcd Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1212.034786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1212.034794][ C1] RIP: 0010:lock_acquire+0x130/0x350 [ 1212.034817][ C1] Code: b1 00 00 00 65 8b 05 f7 0a 0c 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 77 cd 0b 12 8b 90 ec 0a 00 00 85 d2 0f 85 8c 00 00 00 9c <8f> 04 24 fa 48 c7 c7 fb 16 cd 8d e8 00 9a d4 09 45 89 e0 89 e9 44 [ 1212.034829][ C1] RSP: 0018:ffffc90000a08db0 EFLAGS: 00000046 [ 1212.034840][ C1] RAX: ffff888033634880 RBX: ffff8880b8527858 RCX: 0000000000000001 [ 1212.034849][ C1] RDX: 0000000000000000 RSI: ffffffff8b6f38b6 RDI: ffffed10170a4f0b [ 1212.034857][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1212.034865][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1212.034872][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1212.034880][ C1] FS: 00007f80462b4740(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 1212.034894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.034902][ C1] CR2: 00007ffcdc47d378 CR3: 0000000024b82000 CR4: 00000000003526f0 [ 1212.034911][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1212.034918][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1212.034926][ C1] Call Trace: [ 1212.034931][ C1] [ 1212.034941][ C1] _raw_spin_lock_irq+0x36/0x50 [ 1212.034956][ C1] ? __hrtimer_run_queues+0x2bc/0xad0 [ 1212.034969][ C1] __hrtimer_run_queues+0x2bc/0xad0 [ 1212.034985][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1212.034997][ C1] ? read_tsc+0x9/0x20 [ 1212.035017][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1212.035034][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1212.035050][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1212.035066][ C1] [ 1212.035070][ C1] [ 1212.035075][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.035089][ C1] RIP: 0010:lock_acquire+0xb/0x350 [ 1212.035106][ C1] Code: 7f d4 09 eb c3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 4d 89 cf 41 56 <41> 89 f6 41 55 41 89 d5 41 54 45 89 c4 55 89 cd 53 48 89 fb 48 83 [ 1212.035118][ C1] RSP: 0018:ffffc9000412f900 EFLAGS: 00000246 [ 1212.035128][ C1] RAX: 0000000000000000 RBX: ffff8880322c0008 RCX: 0000000000000000 [ 1212.035135][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880322c0078 [ 1212.035143][ C1] RBP: 1ffff92000825f24 R08: 0000000000000001 R09: 0000000000000000 [ 1212.035151][ C1] R10: ffff88804f43b540 R11: 0000000000000000 R12: dffffc0000000000 [ 1212.035159][ C1] R13: ffff88804f43c500 R14: ffff8880322c0000 R15: 0000000000000000 [ 1212.035173][ C1] down_write+0x92/0x200 [ 1212.035189][ C1] ? anon_vma_clone+0x143/0x5c0 [ 1212.035207][ C1] ? __pfx_down_write+0x10/0x10 [ 1212.035222][ C1] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1212.035242][ C1] ? anon_vma_clone+0xd8/0x5c0 [ 1212.035260][ C1] anon_vma_clone+0x143/0x5c0 [ 1212.035279][ C1] anon_vma_fork+0x7a/0x620 [ 1212.035298][ C1] copy_process+0x88be/0x91a0 [ 1212.035321][ C1] ? __pfx_copy_process+0x10/0x10 [ 1212.035341][ C1] ? find_held_lock+0x2b/0x80 [ 1212.035356][ C1] ? sk_setsockopt+0xd5f/0x3810 [ 1212.035372][ C1] ? sk_setsockopt+0x267/0x3810 [ 1212.035388][ C1] ? __pfx_sk_setsockopt+0x10/0x10 [ 1212.035400][ C1] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1212.035421][ C1] kernel_clone+0xfc/0x960 [ 1212.035437][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1212.035460][ C1] __do_sys_clone+0xce/0x120 [ 1212.035476][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1212.035498][ C1] ? __sys_setsockopt+0x1a0/0x230 [ 1212.035515][ C1] ? __sys_setsockopt+0x1cd/0x230 [ 1212.035536][ C1] do_syscall_64+0xcd/0x260 [ 1212.035553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.035565][ C1] RIP: 0033:0x7f8046364a12 [ 1212.035575][ C1] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 1212.035587][ C1] RSP: 002b:00007ffcdc45ca48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1212.035598][ C1] RAX: ffffffffffffffda RBX: 000055e36a342f01 RCX: 00007f8046364a12 [ 1212.035606][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1212.035614][ C1] RBP: 00007ffcdc47cfb8 R08: 0000000000000000 R09: 000055e36a342fb0 [ 1212.035622][ C1] R10: 00007f80462b4a10 R11: 0000000000000246 R12: 0000000000000000 [ 1212.035630][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000055e36a342fe4 [ 1212.035642][ C1] [ 1212.035751][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g90413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1212.501269][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1212.511245][ C0] rcu: RCU grace-period kthread stack dump: [ 1212.517130][ C0] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1212.530635][ C0] Call Trace: [ 1212.533914][ C0] [ 1212.536844][ C0] __schedule+0x116f/0x5de0 [ 1212.541354][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1212.546297][ C0] ? __pfx___schedule+0x10/0x10 [ 1212.551151][ C0] ? find_held_lock+0x2b/0x80 [ 1212.555826][ C0] ? schedule+0x2d7/0x3a0 [ 1212.560152][ C0] schedule+0xe7/0x3a0 [ 1212.564217][ C0] schedule_timeout+0x123/0x290 [ 1212.569062][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1212.574424][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1212.579707][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1212.585509][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1212.590972][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1212.595738][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1212.601025][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1212.605877][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1212.611683][ C0] rcu_gp_kthread+0x270/0x380 [ 1212.616359][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.621554][ C0] ? rcu_is_watching+0x12/0xc0 [ 1212.626314][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1212.631512][ C0] ? __kthread_parkme+0x19e/0x250 [ 1212.636533][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1212.641728][ C0] kthread+0x3c2/0x780 [ 1212.645792][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.650371][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.654951][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.659529][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.664110][ C0] ? rcu_is_watching+0x12/0xc0 [ 1212.668870][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.673452][ C0] ret_from_fork+0x45/0x80 [ 1212.677860][ C0] ? __pfx_kthread+0x10/0x10 [ 1212.682443][ C0] ret_from_fork_asm+0x1a/0x30 [ 1212.687216][ C0] [ 1212.690228][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1212.696541][ C0] CPU: 0 UID: 0 PID: 21486 Comm: syz.8.3298 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1212.708597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1212.718641][ C0] RIP: 0010:smp_call_function_single+0x1bf/0x580 [ 1212.724962][ C0] Code: 5c 24 40 66 44 89 6c 24 4e 48 89 de 66 89 44 24 4c e8 b5 fa ff ff 41 89 c5 0f 1f 44 00 00 e8 b8 f3 0b 00 eb 07 e8 b1 f3 0b 00 90 8b 5c 24 48 31 ff 83 e3 01 89 de e8 df ee 0b 00 85 db 75 e5 [ 1212.744560][ C0] RSP: 0018:ffffc90003c1fbc0 EFLAGS: 00000293 [ 1212.750625][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81af3f51 [ 1212.758584][ C0] RDX: ffff88805dd28000 RSI: ffffffff81af3f3f RDI: 0000000000000005 [ 1212.766549][ C0] RBP: ffffc90003c1fc90 R08: 0000000000000005 R09: 0000000000000000 [ 1212.774511][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000783f7c [ 1212.782474][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 1212.790450][ C0] FS: 00005555793e8500(0000) GS:ffff8881249e2000(0000) knlGS:0000000000000000 [ 1212.799373][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.805949][ C0] CR2: 000000110c33966b CR3: 000000005cdf6000 CR4: 00000000003526f0 [ 1212.813913][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1212.821875][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1212.829838][ C0] Call Trace: [ 1212.833108][ C0] [ 1212.836033][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1212.841661][ C0] ? __pfx_smp_call_function_single+0x10/0x10 [ 1212.847722][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 1212.853357][ C0] ? mark_held_locks+0x49/0x80 [ 1212.858123][ C0] rcu_barrier+0x28d/0x6e0 [ 1212.862544][ C0] kvm_mmu_uninit_vm+0x5b/0x60 [ 1212.867313][ C0] kvm_arch_destroy_vm+0x207/0x2f0 [ 1212.872429][ C0] kvm_put_kvm+0x4f2/0xb40 [ 1212.876844][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 1212.882035][ C0] kvm_vm_release+0x3c/0x50 [ 1212.886530][ C0] __fput+0x3ff/0xb70 [ 1212.890520][ C0] task_work_run+0x14d/0x240 [ 1212.895102][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1212.900204][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 1212.905913][ C0] ? xfd_validate_state+0x5d/0x180 [ 1212.911020][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1212.916649][ C0] do_syscall_64+0xda/0x260 [ 1212.921149][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.927035][ C0] RIP: 0033:0x7f34b6d8e969 [ 1212.931443][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.951051][ C0] RSP: 002b:00007ffd4dd8c438 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1212.959457][ C0] RAX: 0000000000000000 RBX: 000000000010e38f RCX: 00007f34b6d8e969 [ 1212.967418][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1212.975377][ C0] RBP: 00007f34b6fb7ba0 R08: 0000000000000001 R09: 0000000f4dd8c72f [ 1212.983335][ C0] R10: 00007f34b6c00000 R11: 0000000000000246 R12: 00007f34b6fb5fac [ 1212.991296][ C0] R13: 00007f34b6fb5fa0 R14: ffffffffffffffff R15: 00007ffd4dd8c550 [ 1212.999273][ C0]