last executing test programs: 9m33.142063171s ago: executing program 4 (id=11): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4ea5, 0x100, @local, 0xfffffffb}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xff0f) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) 9m31.224342249s ago: executing program 4 (id=17): r0 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2e4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9f3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8b38}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5e272a72a7a090ae7edf15285cba1867d8297b68d10a3b2f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="103faec2d39bbb50a73525c4183f884a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e426fe7bde76ac872046fd2cb8cb07d8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e9b2acee6881efafc3c76c81ebe96758"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="898682731b78fc282c323e17507ef8a0243301fa2c2ab61ec7070a1c40aa288b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9e}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="91ca5697a865eb455623fbc604e2e4af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9d03}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa735cc9953443b0e1a0b0119d91b18a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c403a350cbd7a01a"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="47d73bbbbeeb2eed26286c313cccc6bc"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b68487a1ee8853e2f15f9fef6c8c2f95"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="25e2abe06fa2d7c65396b6935ac6a6ac"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="326b85a9e279f59a818e89e85386becf382ab812faf29784"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c02a5b62916c4910"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0508aa9610460ab3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="499e4286b2897c70f1a90e34accfb749f7c430e025aa671c0d2db378c57bd14d"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f1538f566b6f128d428e70366a81e441"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c1155d9621f44001b4009a73c595d961"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bf5c97ff3b2ecbae7c777c27c970bb92"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8256802716c84ac5"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="243ce8cdb8755d747cc7d513279004d4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d06fcc30ec4b07ae5504ddf8ae614906"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ed37bf0bd60d3aec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "664e075930d85d26"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fdd2bbe7a2f50bd7bb23801f3210f1ff"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "759f05eb353b0eca"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f79b05be33b5f88b47dda433ed9f81482b74eda8048b59cdb54e8a0f992c9adc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="193b18c478f1da11fd2b31c1063e2726"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e8782d918cbed582"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000440)='sysv\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) fcntl$lock(r0, 0x1, &(0x7f00000004c0)={0x2, 0x1, 0x3ce, 0x5, r4}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x240801, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000005c0)=0x2) syz_open_dev$sg(&(0x7f0000000600), 0x6, 0x58f802) socket(0x23, 0x1, 0xfff) socket$netlink(0x10, 0x3, 0x12) (async) socket$netlink(0x10, 0x3, 0x12) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000640)={0x101, r6, 0x80000}) epoll_create1(0x0) (async) r8 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) setpgid(r4, r4) (async) setpgid(r4, r4) rt_sigaction(0x41, &(0x7f0000000740)={&(0x7f00000006c0)="7b22c4a32178696918c4a3a97d010e6544dc78210f01dcc462010a1427410f01d81aecdf759b672e660f596f00", 0x40000001, &(0x7f0000000700)="c4218d71f172d818c4a1f96d3d32233333c423fd0059fdf18fc858a354b97c24410f5dd1c401b567ae00000000835eac03f26fd0f5", {[0x2]}}, &(0x7f0000000880)={&(0x7f0000000780)="676541d96393c4419d6512816299d3790000c402c9b8a3c49f000045d07a74c4e33d6d076126430fe7bff0ffffff83ef00c4c1b5daa61986ba6ac4637d1d48eb04", 0x0, &(0x7f0000000800)="2e360f101a8f897091eec44219a7f5666566460fdb88b4000000c4e15df45600c4c3c1ceab00100000cf64666566470f38377e0ec4a181dbc6c4a2c18c2244d3b828000000"}, 0x8, &(0x7f00000008c0)) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)={0x2a4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf1e9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46b76b53}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcd}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfce}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1b2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x73}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x51}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "e82021cc3a1b4c49afbada91e94f7354ed8d0a2a8a6cfc1216df6b190d26c3712444b81d0a48ff8c834507d1a8d0b83cc54a34b06c17412099c20ab8ffb8887138dcbb54e908cfa68f4afce9e102091f0cc58fbb051516d341fae5ff4142433565479340d8b6d3647347c997978f0b7f2cdfe070b59fd22fc1f313bda88f74394668977965c80d1833f8fffb95f23af3a79b12e58d911bb999fdf25b22963ff713894207a60cdb441c26539f61bbeb422d0232f2fd4a80294bc3"}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) (async) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)={0x2a4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf1e9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46b76b53}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcd}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfce}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1b2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x73}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x51}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "e82021cc3a1b4c49afbada91e94f7354ed8d0a2a8a6cfc1216df6b190d26c3712444b81d0a48ff8c834507d1a8d0b83cc54a34b06c17412099c20ab8ffb8887138dcbb54e908cfa68f4afce9e102091f0cc58fbb051516d341fae5ff4142433565479340d8b6d3647347c997978f0b7f2cdfe070b59fd22fc1f313bda88f74394668977965c80d1833f8fffb95f23af3a79b12e58d911bb999fdf25b22963ff713894207a60cdb441c26539f61bbeb422d0232f2fd4a80294bc3"}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x15, 0x18, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0xe7, &(0x7f0000000d80)=""/231, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r9, 0x8, &(0x7f0000000e80)={0x6, 0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x2, &(0x7f0000000ec0)=[r5, r5, r9, r7], &(0x7f0000000f00)=[{0x5, 0x1, 0x0, 0x1}, {0x2, 0x1, 0xf, 0x6}], 0x10, 0x6, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x15, 0x18, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0xe7, &(0x7f0000000d80)=""/231, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r9, 0x8, &(0x7f0000000e80)={0x6, 0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x2, &(0x7f0000000ec0)=[r5, r5, r9, r7], &(0x7f0000000f00)=[{0x5, 0x1, 0x0, 0x1}, {0x2, 0x1, 0xf, 0x6}], 0x10, 0x6, @void, @value}, 0x94) accept$nfc_llcp(r9, &(0x7f0000001000), &(0x7f0000001080)=0x60) (async) r10 = accept$nfc_llcp(r9, &(0x7f0000001000), &(0x7f0000001080)=0x60) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000010c0)={'wlan0\x00'}) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000001100)=0x2, 0x4) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x20010, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x80, &(0x7f0000001140)=0x6, 0x0, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000001180)) socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9m30.086170808s ago: executing program 4 (id=20): rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioperm(0x0, 0x44, 0x7) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0xf6ffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9m29.39258021s ago: executing program 4 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10040104}, 0x400c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000080)={0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) syz_pidfd_open(r4, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 9m28.153927943s ago: executing program 4 (id=26): syz_open_dev$usbfs(0x0, 0x201, 0x59f240) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x8183, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 9m24.985431261s ago: executing program 4 (id=35): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="03000000000201", 0x7}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_complete(0x0) 9m9.04316716s ago: executing program 32 (id=35): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="03000000000201", 0x7}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_complete(0x0) 4m13.015146826s ago: executing program 2 (id=1162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x13, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000480)={0x90, 0x0, 0x0, {0x4, 0x6, 0x4, 0x444, 0x0, 0xffffffff, {0x5, 0x8000000000000001, 0x20, 0x5, 0x4, 0x9, 0x7, 0x81, 0x3, 0x8000, 0x2, r10, r11, 0x1, 0x3fb}}}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000280), r12) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.68812253s ago: executing program 2 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xed, &(0x7f0000000540)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x19, 0xdf, 0x67, 0x0, 0x3, 0x11, 0x0, @private=0xa010182, @multicast2}, {0x4e21, 0x5e20, 0xcb, 0x0, @gue={{0x2, 0x0, 0x0, 0x26, 0x100}, "271cccbdecb08cfa4b931dd9f9bef5d02275fa646a9e96d7611e67c0811149973ee5244194c50630fc0a6875a9f41cb780fda8f087016b054e2e4d8a9addec30abf1d24855b3e28b1bd14169988e4e5b0f0a98f6cb175853734767360d905f5da0c844f8222dd2a03fe42ec60e57ba9e9d991d42ca4efe490a82f9c9b962a5f294261507a7ccae0e5f16c7f9e47c81a483f8fed0c6fd52c4748189031a7546436cec0991e1b4170626da36eff949d6f27a763c469890e1c70a1ed9"}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f007, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be7a00000000", @ANYRES32, @ANYBLOB="ffea0000000000e56200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f0000000080)=0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f00000006c0)) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080006000000000000000000000000000000e85b91b850de88a2b00d72f11475bcf7bc879ead1fc0c2f917d5ee04720460f3894ea7f68a1ec2603972b86324b5cd143bf7bdfa9b11fd7135b2a53b9c31ec4c1d7aa38e71430fb8f28487fbb2bac0befc0801d2b4061571d3c422bd70348302419df6433aa1554fa05b8e687ad67bbe24e3d9de30bc19259a3600fdeb355bd4e42005b5833bd3a38b2c9a563c552b1d8a20de47a3fe22d7c69f50f57fc9e1e7ff4734b624e6b86324c34e7053d16e4144b44fb98a0cb3e8b08057ecdf17261d4c819b710172f16d3b1d3a0a", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 4m8.70921139s ago: executing program 2 (id=1175): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x47}, {@empty, 0x4e22, 0x3, 0x900, 0x400fc1a, 0x8}}, 0x44) r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000010000000000ffdbdf250a010100000000000000000000000000ff01000000000000000200000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000803200000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000002000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000ffffffff1c00040001"], 0x170}}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x26, 0x180006, 0x40) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) 4m8.153990963s ago: executing program 2 (id=1177): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x300, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4m7.999853066s ago: executing program 2 (id=1180): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x100) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000180)=0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r2 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x5, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x10}, 0x80) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x80) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000e60d7327f1df2159f4855c65736676032147e0e80c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010100000000"], 0xec}}, 0x0) 4m7.729876662s ago: executing program 2 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) socket(0x1d, 0x2, 0x6) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x300, 0x7fffffff}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) getpid() setns(0xffffffffffffffff, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0x1}) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) clock_getres(0x9c6016cb8aca43c8, &(0x7f0000000040)) 4m7.076814514s ago: executing program 33 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) socket(0x1d, 0x2, 0x6) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x300, 0x7fffffff}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) getpid() setns(0xffffffffffffffff, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0x1}) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) clock_getres(0x9c6016cb8aca43c8, &(0x7f0000000040)) 2m46.230015271s ago: executing program 6 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000007200010300000000000000000700a600", @ANYRES32=0x0, @ANYBLOB="0800010012"], 0x20}, 0x1, 0xf00}, 0x0) 2m43.777740017s ago: executing program 6 (id=1431): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xbb00}}}}}}}, 0x0) 2m43.204089801s ago: executing program 6 (id=1435): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x14927e, 0x91) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r9, 0x0, 0x3) syz_fuse_handle_req(r7, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x0, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 2m41.756502707s ago: executing program 6 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400"], 0xe8}}, 0x0) 2m40.770012108s ago: executing program 6 (id=1439): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) semget$private(0x0, 0x0, 0x2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x6800) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 2m39.514712753s ago: executing program 6 (id=1442): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x400, 0xf1, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x68, 0x0, 0x7f, 0x4, 0x0, @local, @multicast2, {[@end, @ra={0x94, 0x4, 0x4000}, @generic={0x7, 0xe, "8aacfde57aa0963d212c726d"}, @end, @ssrr={0x89, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x25b7788fd5e166d9, 0xb, "892e1ea9615b71f7b2"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newtaction={0xe8, 0x30, 0xb, 0x0, 0x0, {}, [{0xd4, 0x1, [@m_ct={0xd0, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x401}, @TCA_CT_LABELS={0x14, 0x7, "5033a44a9bc53b0149979c0db12f7a74"}]}, {0x89, 0x6, "b383ff1cd4edd08b846765729ec92d76c26d4c82828ab509262bd09ac9abe865961c8b551d22fe439ea315ddd84e832400d1d92e556eb55efb456e490f140d9afc639630ae07a8dd20be3c6fd643da24cb8700277f921e22aba5bf72a339fefc1d62595b34470c02c9130539d03a389c8c75d23e52017dec2f3c4f6af8861c9a52a26751b8"}, {0xc}, {0xc}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000000000009500000000000000"], &(0x7f00000012c0)='GPL\x00', 0x4, 0xff6, &(0x7f0000000200)=""/4086, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) 2m23.425716508s ago: executing program 34 (id=1442): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x400, 0xf1, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x68, 0x0, 0x7f, 0x4, 0x0, @local, @multicast2, {[@end, @ra={0x94, 0x4, 0x4000}, @generic={0x7, 0xe, "8aacfde57aa0963d212c726d"}, @end, @ssrr={0x89, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x25b7788fd5e166d9, 0xb, "892e1ea9615b71f7b2"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newtaction={0xe8, 0x30, 0xb, 0x0, 0x0, {}, [{0xd4, 0x1, [@m_ct={0xd0, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x401}, @TCA_CT_LABELS={0x14, 0x7, "5033a44a9bc53b0149979c0db12f7a74"}]}, {0x89, 0x6, "b383ff1cd4edd08b846765729ec92d76c26d4c82828ab509262bd09ac9abe865961c8b551d22fe439ea315ddd84e832400d1d92e556eb55efb456e490f140d9afc639630ae07a8dd20be3c6fd643da24cb8700277f921e22aba5bf72a339fefc1d62595b34470c02c9130539d03a389c8c75d23e52017dec2f3c4f6af8861c9a52a26751b8"}, {0xc}, {0xc}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000000000009500000000000000"], &(0x7f00000012c0)='GPL\x00', 0x4, 0xff6, &(0x7f0000000200)=""/4086, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) 12.794440566s ago: executing program 1 (id=1898): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x325, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket(0x5, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) getrlimit(0x9, &(0x7f0000000000)) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r7) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c010000100005f627bd700000000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e220000004200000200000087000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d46c000000ac1e0001000000000000000000000000000000000000000001000000000001800900000000000000fcffffffffffff000000000000000000000006000000000000000000000000000000000000000000000000000000000000000d0000000000000004000000000000000000000006000000200000002bbd7000000000000a000400650000000000000024000900040000000000000008000000000000000300000000000000472200000000000048000100636d61632863617374352d67656e657269632900"/270], 0x15c}, 0x1, 0x0, 0x0, 0x20040891}, 0x40080) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000380)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x4000) 12.641834779s ago: executing program 1 (id=1899): prlimit64(0x0, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x7, 0x0, 0x180, 0x4, 0x400000000000004, 0x80000000, 0xfffffffffffffffd, 0x5d, 0x4, 0x0, 0x9, 0x20000000001, 0x4, 0x0, 0xbd9], 0x4, 0x344a50}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r3, 0x57c6a000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r7, 0x1) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) 8.801532243s ago: executing program 1 (id=1906): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x14927e, 0x91) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) lseek(r6, 0x0, 0x3) syz_fuse_handle_req(r4, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.514090741s ago: executing program 7 (id=1909): mmap(&(0x7f0000357000/0x4000)=nil, 0x4000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x80}}, 0x0) (async) r5 = inotify_init1(0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) (async) syz_open_procfs(r1, &(0x7f0000000080)='net/fib_triestat\x00') (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x1, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) 7.445688947s ago: executing program 1 (id=1911): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000021401006abd700002dcdf2508000100000000000900020073797a32000000007f9f108cffca6623b74202a42fc9acd30a4974b7cc30501aeb4f", @ANYBLOB="3e8829a2ef3805450119be04184be444921a87ac516d1db5b3885045b39e75de3700b6720ab22154a65e7d4b80afd7f5cecfef7d1a83dbd8e6abad44eb8bb67a8755bc75c52ae6580f2807b7000000000000009f04480a65cb1f605ccc2d68bdff14868f0f326dceedb9c5724c46b9714289fbd3d605c68146d4a6eb88102997fd0915b1cc6adb9222c0f6d41c824a1c6959658aebf816de9dba7dbab33e56c9e44398a236", @ANYRES32=r1], 0x29}, 0x1, 0x0, 0x0, 0x10000801}, 0x40810) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) shutdown(r3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0xf700000000000000, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 7.345178797s ago: executing program 7 (id=1913): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) semget$private(0x0, 0x0, 0x2) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0)={0x4b3c}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 7.185986297s ago: executing program 3 (id=1914): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x207b00, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) epoll_create1(0x80000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x4, 0x4, 0x0, 'queue1\x00', 0x8000}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \''], 0x86) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r3, 0xd, &(0x7f0000000240)={0x5, 0x8}, &(0x7f0000000280)) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r1, 0x0) 6.272349636s ago: executing program 1 (id=1917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010025bd7000000000000ac095fd", @ANYRES32=0x0, @ANYBLOB="1400016311"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x7) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.134213106s ago: executing program 3 (id=1919): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000008380)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="5147e8f4d868601923a6816175682b3b8909f3f942fde9bb1d7032b7fb75ff6f59b43283a409a38b5f16a100c36318c0f39e52a64c29d44821302b6e04ae1db65cf6ae5b8eb90e14806d4d8dc817bb4308a62c03ae2e654f917e4e7f09a5a1a68e949bcc3f236c780d0d6575b636d3d21206ebca25300fcf8b095f742d9202707a40bfd5663f9c5590def4210aba23b6ab9bf789e1d4488191aca629782d7cf3", 0xa0}, {&(0x7f00000004c0)="f80816abb7ef", 0x6}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000580)="0f068b1c3cade7bf68764280dd09ba80418450a78cadb20d0337933fc6c1631aff11c6c36dd876d5eb6df4c0a7a37dc5b665c73b9f5144122e434cb84df9a0b9ae8143754e6263273e91c9e3fa30c74865fbdeaf2f398ad8bb02516339accd467853cf73acfc6466b927e606f593c7e04fdf697af844a5d804bedb970a87f5bfa30f3684c3547e26676e79a0ce62589fd0dcb4dc744383b9e3ca1c7c3c02381f9f083bdf85a568af5f33ebe8c0c1b2c0aaef486e38aca3685292adaa149ffc43aa866d6e3aa982e76f4d31551880648c0b56392e82c2fa70", 0xd8}, {&(0x7f0000000780)="7ac69894c1296792741e1fc031641205cb9152fca4780ae4ca13d1a01da19a110153cc04dab864266a06803ce465ca6a2d80afc40cf0584cc7c8f3cfa140b07c7b63d368eb1f4f24e94aa4bad5bbed78a4d6ec4a9ad3851a5db323fd0d54ea32504f852b36b812b92eaabb5ee7cdb7e5195d16d4113eb0dacd7121edd34a8bb29558fc3ed0d430e4fc136347765e2a2273f6bc26980e544a570cc1a926c11e44dce47134e2da6831c4593484196280d7971ac2dd59ce90f5b8419ade1190b2d99ec0c41af37b544f78206a524db210", 0xcf}, {&(0x7f0000000880)="71ac1f4fd1bb28d5e265c73cd3c259539ecbc39eb664c2281de2271a0bd873669a51af2389070efc768a8d16d7a9b87ff6fd150e98b16f15f679b3e5490f0656bd8fc6ae3d2214e2d3ae57c7683a6aadd8757d489a410ecba9c6471d0a9d3b08ce2f9fc8ad6cd446f349b9279ef38fdff7fa34fd42e231aefed1798e4947f4799702681b5bae", 0x86}, {&(0x7f0000000500)="b131", 0x2}], 0x7, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x20004000}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000003900)="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", 0x1000}], 0x1, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r1]}}, @rights={{0x2c, 0x1, 0x1, [r5, r0, r1, r1, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r5, r1]}}], 0x90, 0x1}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000dc0)="7d14cbc3cc13dfcc80151cab3eecd9a747083580ca49dcee10664942f7d4f244eb83f2f5175ea9d1a00f802c5caaea614b40e976d8f65432410ef6c2caae50a251080de09575fe4ec42478f22e34dd5ce05f027765fafa6c4fd31397c8b485bfd6d90536ff34379756cc8aade6e7f613b33723e3bc3c01bfd46af7ccbe16e0fed155af379be33c21278d33117c8e60e990494301feafe2fc8f8cddb2572e01767d92c5de0170e5ee5f4ca3d29c729386a963aad189707263daff95b60106e8f2aeeb84a2d261ca77e0c6420a445fbb15f3fd8ba10c", 0xd5}], 0x1, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r5, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r4]}}], 0xf8, 0x8004}}, {{&(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000067c0)=[{&(0x7f0000006380)="efd69b76de11ccc4a186dabe77f5e85e093d1323aada6c2fd09aac8aeaa1800ed9052ac39f95fba8f6cacc8a3e676c72d933f59617b607a131b1c8501ef7858b0babaef4bd74bdd6fa5c802ae1cc358ba8f074084a9bad02214e2477ed44c66641c026a900d41b2bd993e86e3989cf558c3fd83c40377547b448b5ac767f23f28f90af1c0deb0b4ab498961b2c9dd8dec7bb1e68755bbc6c64d538745e64d941c6184b6cb0acc2d2868067b1d066edfffa396b59f26d96e049e14af2c5f318bf8c6b21285e8e9b2a643d7a918df7ce977af0e70fab30de7640a633ff8be4ad755c828ab399013dfdd464b83791015f2e9ad5cedfb7", 0xf5}, {&(0x7f00000011c0)="1abca5c74a2e0680c446d2cabee7510fabad408d45533e80e0b68e5c3f58ca28ccfea9900f49b01238c0925e620307b21264b7ae3405b68a85bb23a1", 0x3c}, {&(0x7f00000062c0)="496195df97d92cd147a0aa43c2dbf01011f3250670a0f22a9a16b20bb08db782fbd208edf508505e62d78fd3d26277be34a49edf6c8c53cc36b2def725880bba88554c4743fe14", 0x47}, {&(0x7f0000006480)="2527228c0337e281f4d604986a36e6487e65399abb4d00d4a72273e820036cd04b14da35cd1310d69d5561a5b2954c8565fac30ca4cd028ea4c388321cb7d7686f262b684b79ec0f2ba2a847e2093c648ca520d50172a2189c372f47da6befc6dcd7821bf6239b62228e6d5b0c532421efeb091db314d2a1e07755b675ed25c49257a58e4d7391f20688d120b66e615c4397944eeed5c094f03f30f9cf82579ccc5b6520db2a29ed45fc2106c14afc0104f9f0caed2c22f00ce89fff7403c88243b8f5fb103494fca0577f8398aedef434227e9c675ba270caca2ffb7ce71970b128e9c25a7c2481adc665eaf0", 0xed}, {&(0x7f0000006580)="ebb37dadcea78ece5129c90e0c61a63bdda196ba84b3b15322d786ab6a86d6dfe3bb3ed994a468934a45f5fc1ef64192f67222ae5891475c54d2043f1eacac5c44535f76e2cf345ffb1542a56c18d60cab0efa9828cfa7967713fc120171431641ab6663dd932d34c5d718276bd598cd14a8b30ce14c273baeb764cc20b832aae5454cded86388709b96edd1354d1a3d6c5b9cb6df869b52089147bca375e75e", 0xa0}, {&(0x7f0000006640)="12242dbd733df84dc43975facd7d6bf523ea1839fe0e82cd27c866fd4883db0696ff526ad020448806b337a77f8cb893f107eb0087a94479a15ea29d9e512370119e4d4f50a268a1ad", 0x49}, {&(0x7f00000066c0)="24c6ffe065ee770750b058108339fdc7cfff0d68428c8248232a3dd6ae9b03e82832491681b480b9f386ff5dcec496e6615f7fae0602cd144632bab1b27db2268023a5972feaa6988e9abae5e727b80cf49da700d9315364504a4ada559d81833b2f16b6d7341774d33f67a19671a3cbb403d1", 0x73}, {&(0x7f0000006740)="b025f4debb11110fad5f693d63386a9ac015220bca6f825e521d17324d426e59e120cf5d21a084cf8c897ebfc07a19f1e93a26c5fc3c9f6781d37f3730684083e214401591c464747add56845c53958b103d", 0x52}], 0x8, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r0, r4]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r3, r5, r0, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x110, 0x4810}}, {{&(0x7f0000006a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000006b00)="d55a147799aaf0458d7abba3f4a6f838d4e9d9052d6865711475a6efc232758ef16ea4b42e8cf2535e6a68c5c41675c8acc06eb94b7c1deef26f9a5e1e3b478f20be96b072e1f7de212c2bff17811ca5d50ed82ed21301a95c00cb91fd5e37346aaf119ad6d9f10d9b22b903701892fd7f85ec5c8977294f78888e4f3444c7e187d9b952cd75da1d77dfe93edba97f5313a42278dcb3a5904772fdfbcfc8e78555b5624ff3d7940526c87ee1fe0377a36a9c95a1baaa338f564c5a93b152ec267d8c6e0da795b4b4019f83ab775001feeba36bb880c9f6f8ddf75254169e86d32c50c39c36dcfafcb1d705e6e561331551", 0xf1}, {&(0x7f0000006c00)="6840e6b1aa264b2838215f1d0af7b7a5eb6d1151623407e0bf1fba3ab75381f55e2d4b3b117b4cd22705fbd0e02c00d4ee14ecfb1bcdf831af68b71b7988796c49177abd83fb156227711c0cf1fb59ed7fc557d990c37812d72b1fe487ff90f9c51f9a70ffc7f2bb976ac3030a313715e4004cb2a109b374d24b5ef292b9be74d03ccbda1bd25a", 0x87}, {&(0x7f0000006cc0)="9713978a8ece10c91ad4c1822481d8ed0702256d3664dc484ae5561a840f3114b74f1eed5711d838e7f391cfb4ddd94a59ae598b64c1a1fb", 0x38}, {&(0x7f0000006d00)="16f1843149a59c6b08851304c068ee8aa2f95c5a436cd88603f52f68d70e0636970ead1e741947623f42d8198fa9a53b862573b2117732f11a11bdbb308f880213dc8028bfaa9eb4646fbb759f5911a381d9b90557209fd3b19ba7e063e814f8d3951da5c3b7940ba90d1bb1a4110a2bb8ea3e70fdd542d5b0", 0x79}, {&(0x7f0000006d80)="113d1765607d0b0845eee9fb5a2e787e0d3189", 0x13}, {&(0x7f0000006dc0)="1ddcb46099aea9a2d9893baeba40711c10ee9a1cf53f9b7629a3b56427eaba6ae6618fa398ede437657d4971602848f976a648d95061376eec01c3902a4584971e26ab0043d40644d94a2db70c435be043bc207d27c0bc1ea846d3266b11811a9b914eb98d5df71c2a25dae143f35c60b23b117fc45e6a263b9a9209a7be331a629dc446242257650e8b2d0fe07719f22da12225f3b24055c2a443f485e520d5ea569ec82deb85b71e8cbf20f0173981f43c9997cde8536a04954f35b65081f5db849f63143b49062965a92eaf5efe158a0cf27e9d2b42be423c9417eab47b7e0d6ea6c1a33777628de4a89cee017e0d00dcf7d10292984cda", 0xf9}, {&(0x7f0000006ec0)="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", 0x1000}, {&(0x7f0000007ec0)="5440accf49b4d8951b2337a22177a6d7e7a420ae66ea01ef1b8a97dd9d9190a5467376df4d44", 0x26}, {&(0x7f0000007f00)="42fa1fb871802711598c24e3671aef4f456fbbdfe1187220eebcd24d1ef0cf2ad9f9b9f598e543c40e4dec5888f02f54a63b46aa45c16e6c29cb471096c0e297366a887fee79bd08bd3328", 0x4b}], 0x9, &(0x7f0000002800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x180, 0x20040054}}], 0x5, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r10 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r11 = add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r10, r11, r10}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000038c0)={&(0x7f0000003880)={'sm3\x00'}, 0x0, 0x27}) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8, @value=0x3}) r12 = getuid() quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000240)=@md0, r12, &(0x7f00000002c0)={0x6, 0xba, 0xffffffff, 0x9, 0x1, 0x29b, 0x8, 0xfffffffffffff4cf, 0x8}) syz_open_dev$evdev(0x0, 0x2, 0x822b01) 6.119040653s ago: executing program 7 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000680)) unshare(0x6a040000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000be0000000000006484999ea504fd2c470000"]) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@empty, 0x5f, r4}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xfe, 0x9, 0x0, 0x0, 0x2, 0x7, 0xff, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x9, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000008c0)={0xc1, 0x0, 0x3}) 5.562312898s ago: executing program 0 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1a031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000080ffffffff000000396f5e00000700000000000000080000807f"]) 5.379697828s ago: executing program 5 (id=1922): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x5}) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) 4.798120956s ago: executing program 3 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2010, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4.742545725s ago: executing program 3 (id=1924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x45, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000390f0000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086030000184a0000040000000000000000000000182f0000", @ANYRES32, @ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r7], &(0x7f00000000c0)='GPL\x00', 0xf, 0x65, &(0x7f0000000280)=""/101, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0x2}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x1, @void, @value}, 0x94) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000a00)) stat(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)) 4.576373734s ago: executing program 5 (id=1925): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x11, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) 4.493797123s ago: executing program 0 (id=1926): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6000}, 0x48) 3.892935111s ago: executing program 1 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000007200010300000000000000000700ffff", @ANYRES32=0x0, @ANYBLOB="0800010012"], 0x20}, 0x1, 0xf00}, 0x0) 3.886951671s ago: executing program 5 (id=1928): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000000000009500000000000000"], &(0x7f00000012c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 3.745729705s ago: executing program 0 (id=1929): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000), 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x2c, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x50000000, 0x400c801}, 0x4008094) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.744361737s ago: executing program 7 (id=1930): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x4000000) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r5, &(0x7f0000000080)=""/121, 0x79, 0x40010122, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x4000000) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvfrom$inet6(r5, &(0x7f0000000080)=""/121, 0x79, 0x40010122, 0x0, 0x0) (async) 3.226329179s ago: executing program 3 (id=1931): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xf500000000000000) 2.767093255s ago: executing program 5 (id=1932): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x207b00, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x0, 0x1000) epoll_create1(0x80000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x4, 0x4, 0x0, 'queue1\x00', 0x8000}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \''], 0x86) r2 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r3, 0xd, &(0x7f0000000240)={0x5, 0x8}, &(0x7f0000000280)) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r1, 0x0) 2.613786167s ago: executing program 0 (id=1933): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000000000009500000000000000"], &(0x7f00000012c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) 2.207859432s ago: executing program 5 (id=1934): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) mknod(0x0, 0x8001420, 0x1) rename(0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.206892517s ago: executing program 7 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x11, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000540)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) unshare(0x22020600) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0xff0f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) 1.724012548s ago: executing program 0 (id=1936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x40048c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)=0x7ffd) write$ppp(r8, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, 0x0, 0x4008004) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r11, 0x0, 0x7}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x509], 0x0, 0x7, 0x1}}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000002b87d0b66f1a0d40e7bf8aa82c471f778387f49b6515859c1c5041a6eb6c5cc7baa2963ee622422018e23af6f35beea33a4bb3d0544a58b10b13d73d5f6c5e1598000fb5c08637cbea46eb30442ae0ad46ab1f4fd6066fec66c0010d5d037bb8a9ad9df8", @ANYRES16=r1, @ANYBLOB="0500000000000000000022000000"], 0x14}}, 0x2000c094) 1.177866793s ago: executing program 3 (id=1937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x4, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x24}}, 0x20044010) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000402) lseek(r6, 0x0, 0x3) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 99.465694ms ago: executing program 5 (id=1938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 90.496918ms ago: executing program 7 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @remote}], 0x40) close(0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xb, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002"], 0x60}, 0x1, 0x7}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000020000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf25080001"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x1302, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), &(0x7f0000000380)=@udp, 0x1}, 0x20) 0s ago: executing program 0 (id=1940): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x181882, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, &(0x7f0000000300)='attr/current\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a0001000900b4f58a4b21ca95f2f84c", @ANYRES32=0x0, @ANYBLOB="00000000140003000700"/24], 0x30}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/248, 0xf8}], 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): /0x3c0 [ 446.125934][T11188] __x64_sys_openat+0x174/0x210 [ 446.125947][T11188] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.125960][T11188] ? ksys_write+0x1b9/0x240 [ 446.125991][T11188] do_syscall_64+0xcd/0x260 [ 446.126016][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.126034][T11188] RIP: 0033:0x7f9c65d8e969 [ 446.126048][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.126059][T11188] RSP: 002b:00007f9c66b44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.126070][T11188] RAX: ffffffffffffffda RBX: 00007f9c65fb6080 RCX: 00007f9c65d8e969 [ 446.126077][T11188] RDX: 0000000000105040 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 446.126084][T11188] RBP: 00007f9c66b44090 R08: 0000000000000000 R09: 0000000000000000 [ 446.126090][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.126097][T11188] R13: 0000000000000000 R14: 00007f9c65fb6080 R15: 00007fff1b1b3d68 [ 446.126111][T11188] [ 446.126140][T11188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.373873][T11188] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.396252][T11188] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.436464][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 446.527924][T11166] xt_policy: too many policy elements [ 446.696789][ T5169] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.713232][ T5169] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.725098][ T5894] usb 6-1: USB disconnect, device number 53 [ 446.738490][ T5824] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 446.748288][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.760056][ T5824] usb 7-1: Product: syz [ 446.776541][ T5824] usb 7-1: Manufacturer: syz [ 446.781616][ T5824] usb 7-1: SerialNumber: syz [ 446.788011][ T5893] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 446.806495][ T5824] usb 7-1: config 0 descriptor?? [ 446.809512][ T5893] usb 2-1: No valid video chain found. [ 446.846309][ T5893] usb 2-1: USB disconnect, device number 33 [ 447.049659][T11179] binder: BINDER_SET_CONTEXT_MGR already set [ 447.055791][T11179] binder: 11178:11179 ioctl 4018620d 200000000100 returned -16 [ 447.084870][ T30] audit: type=1400 audit(1747288435.013:953): avc: denied { bind } for pid=11191 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.124319][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.306362][ T5824] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 447.318641][ T5824] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 447.333459][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.359956][T11179] binder: 11178:11179 ioctl c0306201 0 returned -14 [ 447.417890][ T5824] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 447.862258][ T5893] usb 1-1: USB disconnect, device number 32 [ 447.878359][T11193] SELinux: failed to load policy [ 448.392721][ T5824] usb 7-1: USB disconnect, device number 3 [ 448.402616][ T30] audit: type=1400 audit(1747288436.113:954): avc: denied { write } for pid=11196 comm="syz.5.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 448.409266][T11197] netlink: 182564 bytes leftover after parsing attributes in process `syz.5.1327'. [ 448.452186][ T30] audit: type=1400 audit(1747288436.373:955): avc: denied { append } for pid=11201 comm="syz.0.1329" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 448.475313][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.178864][T11212] binder: BINDER_SET_CONTEXT_MGR already set [ 449.233697][T11212] binder: 11208:11212 ioctl 4018620d 2000000002c0 returned -16 [ 449.570664][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 449.571386][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 449.812558][ T5893] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 449.862601][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 450.509297][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 450.523821][ T5893] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 450.540450][ T5893] usb 1-1: config 0 has no interface number 0 [ 450.566027][ T5893] usb 1-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.585450][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 450.601272][ T5893] usb 1-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.621907][ T10] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 450.646663][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.748131][ T5893] usb 1-1: config 0 interface 2 has no altsetting 0 [ 450.778167][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 450.784679][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 451.041738][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.049946][ T10] usb 7-1: Product: syz [ 451.049970][ T10] usb 7-1: Manufacturer: syz [ 451.049983][ T10] usb 7-1: SerialNumber: syz [ 451.055260][ T10] usb 7-1: config 0 descriptor?? [ 451.109338][ T5893] usb 1-1: config 0 descriptor?? [ 451.285873][T11212] binder: BINDER_SET_CONTEXT_MGR already set [ 451.292016][ T10] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 451.302755][T11246] binder: Unknown parameter 'stats9gloal' [ 451.343496][T11212] binder: 11208:11212 ioctl 4018620d 200000000100 returned -16 [ 451.352190][ T10] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 451.371194][T11249] fuse: Bad value for 'rootmode' [ 451.774227][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.826052][ T5893] logitech-djreceiver 0003:046D:C517.0022: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input2 [ 451.827894][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.028597][T11256] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 452.075635][ T10] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 452.114686][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.208000][ T9135] usb 1-1: USB disconnect, device number 33 [ 452.488796][ T5893] usb 7-1: USB disconnect, device number 4 [ 452.549020][ T30] audit: type=1400 audit(1747288440.473:956): avc: denied { setopt } for pid=11266 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 452.583288][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 452.683052][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'. [ 453.466051][T11271] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1342'. [ 453.887868][T11280] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1343'. [ 455.127653][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 455.140979][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 455.697777][T11304] syzkaller1: entered allmulticast mode [ 455.787433][T11307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.801723][T11307] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 455.822139][T11307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.484493][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 456.498890][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 457.045684][T11322] input: syz1 as /devices/virtual/input/input31 [ 457.471734][T11335] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1355'. [ 458.022228][T11337] fuse: Invalid rootmode [ 458.649429][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 458.867445][T11350] fuse: Unknown parameter 'use00000000000000000000' [ 459.260229][ T951] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 459.672613][ T951] usb 6-1: device descriptor read/64, error -71 [ 459.892549][ T9135] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 459.942122][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 459.954835][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 460.052654][ T9135] usb 4-1: device descriptor read/64, error -71 [ 460.325112][ T951] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 460.484231][ T951] usb 6-1: device descriptor read/64, error -71 [ 460.522656][ T9135] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 460.781375][ T951] usb usb6-port1: attempt power cycle [ 460.832485][ T9135] usb 4-1: device descriptor read/64, error -71 [ 460.875371][ T30] audit: type=1400 audit(1747288448.803:957): avc: denied { setopt } for pid=11376 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 460.937164][ T30] audit: type=1400 audit(1747288448.803:958): avc: denied { write } for pid=11376 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 460.956979][ T30] audit: type=1400 audit(1747288448.803:959): avc: denied { name_connect } for pid=11376 comm="syz.0.1364" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 460.966381][ T9135] usb usb4-port1: attempt power cycle [ 461.132794][ T951] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 461.154948][ T951] usb 6-1: device descriptor read/8, error -71 [ 461.316444][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 461.452987][ T5893] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 461.461580][ T9135] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 461.513638][ T9135] usb 4-1: device descriptor read/8, error -71 [ 461.585921][ T951] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 461.613327][ T951] usb 6-1: device descriptor read/8, error -71 [ 461.722520][ T5893] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 461.731712][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.226505][ T951] usb usb6-port1: unable to enumerate USB device [ 462.252562][ T9135] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 462.317743][ T5893] usb 1-1: config 0 descriptor?? [ 462.325652][T11405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1369'. [ 462.326215][ T9135] usb 4-1: device descriptor read/8, error -71 [ 462.509621][ T9135] usb usb4-port1: unable to enumerate USB device [ 462.729613][ T5893] kaweth 1-1:0.0: Firmware present in device. [ 462.828628][ T30] audit: type=1400 audit(1747288450.733:960): avc: denied { write } for pid=11408 comm="syz.6.1371" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 462.852490][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.287310][ T30] audit: type=1400 audit(1747288450.733:961): avc: denied { open } for pid=11408 comm="syz.6.1371" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 463.576984][ T5893] kaweth 1-1:0.0: Statistics collection: 0 [ 463.597558][ T5893] kaweth 1-1:0.0: Multicast filter limit: 0 [ 463.603985][ T5893] kaweth 1-1:0.0: MTU: 0 [ 463.606375][ T30] audit: type=1400 audit(1747288450.823:962): avc: denied { ioctl } for pid=11408 comm="syz.6.1371" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 463.608233][ T5893] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 463.633903][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.020481][T11429] fuse: Bad value for 'rootmode' [ 464.673643][T11393] lo speed is unknown, defaulting to 1000 [ 464.782301][T11393] lo speed is unknown, defaulting to 1000 [ 464.885656][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1375'. [ 464.894731][T11437] tipc: Started in network mode [ 464.899598][T11437] tipc: Node identity 1, cluster identity 4711 [ 464.905823][T11437] tipc: Node number set to 1 [ 464.921998][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1374'. [ 464.936607][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1374'. [ 465.138209][T11441] vlan0: entered allmulticast mode [ 465.159516][T11441] erspan0: entered allmulticast mode [ 465.793151][T11445] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 465.832220][T11464] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 466.043914][ T951] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 466.067834][ T5893] kaweth 1-1:0.0: Error setting SOFS wait [ 466.081811][ T5893] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 466.114272][ T5893] usb 1-1: USB disconnect, device number 34 [ 466.142826][T11475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1383'. [ 466.199156][ T951] usb 7-1: device descriptor read/64, error -71 [ 466.548651][ T951] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 467.152693][ T951] usb 7-1: device descriptor read/64, error -71 [ 467.262719][ T951] usb usb7-port1: attempt power cycle [ 467.602532][ T951] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 467.685734][ T951] usb 7-1: device descriptor read/8, error -71 [ 467.972686][ T951] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 468.034648][ T951] usb 7-1: device descriptor read/8, error -71 [ 468.153333][ T951] usb usb7-port1: unable to enumerate USB device [ 468.877371][T11515] fuse: Unknown parameter 'user_i00000000000000000000' [ 469.464594][T11520] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 469.476278][T11520] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 469.491500][ T30] audit: type=1400 audit(1747288457.403:963): avc: denied { firmware_load } for pid=11514 comm="syz.0.1391" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 469.544229][T11521] mmap: syz.0.1391 (11521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 470.067617][T11523] syzkaller1: entered promiscuous mode [ 470.211063][T11523] syzkaller1: entered allmulticast mode [ 471.838536][T11560] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1400'. [ 472.942049][ T5824] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 473.083436][ T5824] usb 7-1: device descriptor read/64, error -71 [ 473.144575][T11577] fuse: Unknown parameter 'user_i00000000000000000000' [ 473.534710][ T5824] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 473.691691][ T5824] usb 7-1: device descriptor read/64, error -71 [ 473.830324][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 473.850485][ T5824] usb usb7-port1: attempt power cycle [ 474.266494][T11592] fuse: Unknown parameter 'use00000000000000000000' [ 474.342821][ T5824] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 474.555317][ T5824] usb 7-1: device descriptor read/8, error -71 [ 474.842635][ T5824] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 474.948779][ T5824] usb 7-1: device descriptor read/8, error -71 [ 475.136861][T11600] fuse: Unknown parameter 'use00000000000000000000' [ 475.430602][ T5824] usb usb7-port1: unable to enumerate USB device [ 477.248377][T11639] fuse: Unknown parameter 'user_id00000000000000000000' [ 477.557593][T11643] fuse: Unknown parameter 'user_i00000000000000000000' [ 477.582483][T11631] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 477.590234][T11632] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 477.806392][T11632] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 477.815801][T11632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.919756][T11632] usb 7-1: Product: syz [ 477.929919][T11632] usb 7-1: Manufacturer: syz [ 477.974077][T11632] usb 7-1: SerialNumber: syz [ 477.992312][T11632] usb 7-1: config 0 descriptor?? [ 478.003671][T11632] ch341 7-1:0.0: ch341-uart converter detected [ 478.015912][T11631] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 478.025667][T11631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.037504][T11631] usb 2-1: Product: syz [ 478.041728][T11631] usb 2-1: Manufacturer: syz [ 478.045391][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1420'. [ 478.046565][T11631] usb 2-1: SerialNumber: syz [ 478.085266][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1421'. [ 478.099568][T11631] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 478.129533][T11635] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.252601][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.286023][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.386307][T11632] usb 7-1: failed to receive control message: -71 [ 478.404112][T11632] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 478.412659][T11168] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 478.430795][T11632] usb 7-1: USB disconnect, device number 13 [ 478.449612][T11632] ch341 7-1:0.0: device disconnected [ 478.500321][ T951] usb 2-1: USB disconnect, device number 34 [ 478.552456][T11631] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 478.565886][T11168] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 478.575910][T11168] usb 6-1: config 8 has no interface number 0 [ 478.582072][T11168] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 478.602860][T11168] usb 6-1: config 8 interface 177 has no altsetting 0 [ 478.602899][T11168] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 478.623461][T11168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.638603][T11648] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 478.714090][T11631] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 478.728656][T11631] usb 1-1: config 8 has no interface number 0 [ 478.741187][T11631] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 478.765360][T11631] usb 1-1: config 8 interface 177 has no altsetting 0 [ 478.772308][T11631] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 478.781618][T11631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.794464][T11650] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 478.917315][T11168] usb 6-1: string descriptor 0 read error: -71 [ 478.935789][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 479.101106][T11631] usb 1-1: string descriptor 0 read error: -71 [ 479.135119][ C1] ir_toy 1-1:8.177: out urb status: -71 [ 479.232928][T11635] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 479.239951][ T30] audit: type=1400 audit(1747288467.153:964): avc: denied { map } for pid=11656 comm="syz.3.1423" path="socket:[35113]" dev="sockfs" ino=35113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 479.265711][T11635] ath9k_htc: Failed to initialize the device [ 479.272740][ T951] usb 2-1: ath9k_htc: USB layer deinitialized [ 479.442717][T11168] ir_toy 6-1:8.177: could not write reset command: -110 [ 479.454814][T11168] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 479.480391][T11168] usb 6-1: USB disconnect, device number 58 [ 479.703295][T11631] ir_toy 1-1:8.177: could not write reset command: -110 [ 479.710496][T11631] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 479.739830][T11631] usb 1-1: USB disconnect, device number 35 [ 480.213421][ T30] audit: type=1400 audit(1747288468.133:965): avc: denied { shutdown } for pid=11664 comm="syz.3.1426" lport=55907 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.271991][T11672] overlay: ./file0 is not a directory [ 481.296653][T11683] fuse: Unknown parameter 'user_id00000000000000000000' [ 482.186623][T11696] fuse: Unknown parameter 'use00000000000000000000' [ 482.916869][T11703] fuse: Unknown parameter 'user_i00000000000000000000' [ 483.567753][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'. [ 485.888991][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 486.635972][T11736] macvtap1: entered allmulticast mode [ 486.641445][T11736] veth0_macvtap: entered allmulticast mode [ 487.412467][T11742] fuse: Unknown parameter 'user_id00000000000000000000' [ 489.451949][ T951] hid-generic 0000:0007:07FF.0023: unknown main item tag 0x0 [ 489.480537][ T951] hid-generic 0000:0007:07FF.0023: hidraw0: HID v0.04 Device [syz0] on syz1 [ 489.775974][T11774] bridge0: entered promiscuous mode [ 489.902775][T11775] befs: (nbd3): No write support. Marking filesystem read-only [ 489.911301][T11775] syz.3.1454: attempt to access beyond end of device [ 489.911301][T11775] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 489.924424][T11775] befs: (nbd3): unable to read superblock [ 490.286798][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 490.581776][T11767] fido_id[11767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.813579][T11780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.828663][T11780] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 490.844751][T11780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.381569][ T30] audit: type=1326 audit(1747288479.303:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fdd38e969 code=0x0 [ 491.751443][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 491.771642][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 493.022451][T11631] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 493.122730][ T951] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 493.282803][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 493.302031][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 493.335072][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 493.360831][ T951] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 493.389214][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.435874][ T951] usb 4-1: config 0 descriptor?? [ 494.177001][ T30] audit: type=1400 audit(1747288481.893:967): avc: denied { write } for pid=11809 comm="syz.0.1464" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 494.914753][ T951] hid-multitouch 0003:0EEF:72C4.0024: unknown main item tag 0x0 [ 494.925934][ T951] hid-multitouch 0003:0EEF:72C4.0024: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 494.966424][T11631] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 494.976157][T11631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.992818][T11631] usb 2-1: Product: syz [ 494.997030][T11631] usb 2-1: Manufacturer: syz [ 495.001639][T11631] usb 2-1: SerialNumber: syz [ 495.040149][T11631] usb 2-1: config 0 descriptor?? [ 495.048489][T11631] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 495.118822][T11826] binder: BINDER_SET_CONTEXT_MGR already set [ 495.118838][T11826] binder: 11824:11826 ioctl 4018620d 2000000002c0 returned -16 [ 495.352524][ T951] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 495.498785][ T30] audit: type=1400 audit(1747288483.423:968): avc: denied { ioctl } for pid=11802 comm="syz.1.1461" path="socket:[35926]" dev="sockfs" ino=35926 ioctlcmd=0x54df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 495.528402][T11631] usb 2-1: USB disconnect, device number 35 [ 495.542711][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 495.553014][ T951] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 495.565710][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.574555][ T951] usb 6-1: Product: syz [ 495.578744][ T951] usb 6-1: Manufacturer: syz [ 495.584669][ T951] usb 6-1: SerialNumber: syz [ 495.598486][ T951] usb 6-1: config 0 descriptor?? [ 495.808225][ T951] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 495.817305][ T951] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 495.827541][T11826] binder: BINDER_SET_CONTEXT_MGR already set [ 495.835428][T11826] binder: 11824:11826 ioctl 4018620d 200000000100 returned -16 [ 495.845973][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.855824][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.873574][ T951] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 495.902838][ T951] usb 6-1: USB disconnect, device number 59 [ 496.130917][ T951] usb 4-1: USB disconnect, device number 45 [ 496.196551][T11836] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 497.238576][T11849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 497.327301][T11855] tipc: New replicast peer: 255.255.255.255 [ 497.333911][T11855] tipc: Enabled bearer , priority 10 [ 497.340690][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1476'. [ 497.350635][T11855] tipc: Disabling bearer [ 497.512518][ T951] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 497.520189][ T5861] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 497.622648][T11631] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 497.682509][ T951] usb 2-1: Using ep0 maxpacket: 16 [ 497.689617][ T5861] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 497.698019][ T951] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 497.705264][ T5861] usb 1-1: config 8 has no interface number 0 [ 497.711325][ T5861] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 497.722371][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 497.733524][ T5861] usb 1-1: config 8 interface 177 has no altsetting 0 [ 497.740297][ T5861] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 497.749463][ T951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 497.759484][ T951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 497.769485][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.774834][T11631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.779445][ T951] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 497.790217][T11631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 497.806396][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.808251][T11849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 497.815859][ T951] usb 2-1: Product: syz [ 497.827257][ T951] usb 2-1: Manufacturer: syz [ 497.831885][ T951] usb 2-1: SerialNumber: syz [ 497.832120][T11631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 497.849223][T11631] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 497.849475][ T951] usb 2-1: config 0 descriptor?? [ 497.867715][T11631] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 497.868033][T11851] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.877947][T11631] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 497.885218][T11851] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.895349][T11631] usb 6-1: Manufacturer: syz [ 497.909422][T11631] usb 6-1: config 0 descriptor?? [ 497.920460][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 497.932735][ T951] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 497.939872][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 498.061644][ T5861] usb 1-1: string descriptor 0 read error: -71 [ 498.078814][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 498.143548][T11851] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 498.178010][T11634] usb 2-1: USB disconnect, device number 36 [ 498.179004][ T30] audit: type=1400 audit(1747288486.103:969): avc: denied { relabelto } for pid=11848 comm="syz.1.1474" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 498.186006][T11634] mcba_usb 2-1:0.0 can0: device disconnected [ 498.228803][ T30] audit: type=1400 audit(1747288486.103:970): avc: denied { associate } for pid=11848 comm="syz.1.1474" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 498.259963][T11631] rc_core: IR keymap rc-hauppauge not found [ 498.269041][T11631] Registered IR keymap rc-empty [ 498.276507][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.302702][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.324649][T11631] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 498.339671][T11631] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 498.357328][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.382499][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.403675][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.422562][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.454777][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.472588][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.502837][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.524699][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.542564][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.562587][T11631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 498.582650][ T5861] ir_toy 1-1:8.177: could not write reset command: -110 [ 498.593762][T11631] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 498.602934][ T5861] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 498.609149][T11631] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 498.636377][ T5861] usb 1-1: USB disconnect, device number 36 [ 498.703761][T11884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.074585][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.087656][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.526069][T11913] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 499.566813][T11913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.587220][T11913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.596406][T11913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.605623][T11913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.614745][T11913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.627093][T11913] bond1: (slave geneve2): making interface the new active one [ 499.637904][T11913] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 499.681318][T11913] veth3: entered promiscuous mode [ 499.791345][T11913] bond1: (slave veth3): Enslaving as an active interface with a down link [ 500.723023][T11634] usb 6-1: USB disconnect, device number 60 [ 501.084665][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.958836][ T30] audit: type=1400 audit(1747288489.873:971): avc: denied { write } for pid=11930 comm="syz.5.1492" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 502.192507][T11631] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 503.686755][T11631] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 503.695086][T11631] usb 2-1: config 0 has no interface number 0 [ 503.701179][T11631] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.712445][T11631] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 503.723290][T11631] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 503.735047][T11631] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 503.746270][T11631] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 503.757216][T11631] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.770725][T11631] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 503.780338][T11631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.804934][T11631] usb 2-1: config 0 descriptor?? [ 503.813054][T11936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 503.835366][T11936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.023747][T11631] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 504.242405][T11950] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 504.242405][T11950] program syz.0.1495 not setting count and/or reply_len properly [ 504.717201][T11634] usb 2-1: USB disconnect, device number 37 [ 504.723285][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 504.743328][T11634] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 504.787490][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.799350][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.811095][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.827539][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.836508][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.072480][T11635] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 505.073012][T11936] ldusb: No device or device unplugged -19 [ 505.104829][T11952] lo speed is unknown, defaulting to 1000 [ 505.145553][T11952] lo speed is unknown, defaulting to 1000 [ 505.783321][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 505.869989][ T30] audit: type=1400 audit(1747288493.783:972): avc: denied { mounton } for pid=11964 comm="syz.1.1502" path="/311/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 505.892607][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.908040][T11635] usb 1-1: Using ep0 maxpacket: 16 [ 505.910296][T11952] chnl_net:caif_netlink_parms(): no params data found [ 505.917777][T11635] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.932131][T11635] usb 1-1: config 0 has no interface number 0 [ 505.941527][T11635] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 505.955924][T11635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.964529][T11635] usb 1-1: Product: syz [ 505.968940][T11635] usb 1-1: Manufacturer: syz [ 505.975354][T11635] usb 1-1: SerialNumber: syz [ 505.982171][T11635] usb 1-1: config 0 descriptor?? [ 505.990867][T11635] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 506.022551][T11952] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.029776][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.037382][T11952] bridge_slave_0: entered allmulticast mode [ 506.045616][T11952] bridge_slave_0: entered promiscuous mode [ 506.052566][T11634] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 506.054331][T11952] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.067426][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.074699][T11952] bridge_slave_1: entered allmulticast mode [ 506.081749][T11952] bridge_slave_1: entered promiscuous mode [ 506.102595][T11168] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 506.119723][T11952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.131203][T11952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.163193][T11952] team0: Port device team_slave_0 added [ 506.175195][T11952] team0: Port device team_slave_1 added [ 506.205045][T11952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.212309][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.238195][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.244702][T11952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.254415][T11168] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 506.259274][T11952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.267393][T11168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.271371][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.282184][T11168] usb 2-1: config 0 descriptor?? [ 506.305315][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.305954][T11634] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 506.323363][T11168] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 506.332621][T11634] usb 4-1: config 8 has no interface number 0 [ 506.333765][T11634] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 506.341672][T11168] dvb-usb: bulk message failed: -22 (3/0) [ 506.350929][T11634] usb 4-1: config 8 interface 177 has no altsetting 0 [ 506.363778][T11952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.370278][T11168] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 506.374684][T11634] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 506.385900][T11168] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 506.400265][T11168] usb 2-1: media controller created [ 506.403119][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.407918][T11168] dvb-usb: bulk message failed: -22 (5/0) [ 506.420528][T11168] dvb-usb: MAC address reading failed. [ 506.429217][T11962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 506.439091][T11168] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.459146][T11168] dvb-usb: bulk message failed: -22 (6/0) [ 506.465228][T11168] dvb-usb: bulk message failed: -22 (6/0) [ 506.471203][T11168] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 506.477992][T11952] hsr_slave_0: entered promiscuous mode [ 506.484383][T11168] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 506.504694][T11952] hsr_slave_1: entered promiscuous mode [ 506.511403][T11168] dvb-usb: schedule remote query interval to 100 msecs. [ 506.518688][T11952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.527081][T11952] Cannot create hsr debugfs directory [ 506.531895][T11168] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 506.543192][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.553823][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.629599][T11168] usb 2-1: USB disconnect, device number 38 [ 506.667038][T11168] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 506.701533][T11634] usb 4-1: string descriptor 0 read error: -71 [ 506.724662][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 506.782288][T11952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.791798][T11952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.801441][T11952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.811774][T11952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.839335][T11952] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.846503][T11952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.853911][T11952] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.861019][T11952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.911329][T11952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.919228][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.926488][ T5810] Bluetooth: hci2: command tx timeout [ 506.937102][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.969222][T11952] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.980208][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.987350][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.004949][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.012075][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.100439][T11952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.244463][T11634] ir_toy 4-1:8.177: could not write reset command: -110 [ 507.301917][T11634] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 507.386156][T11977] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 507.386156][T11977] program syz.5.1503 not setting count and/or reply_len properly [ 507.483275][T11952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.797469][T11635] gspca_spca1528: reg_r err -71 [ 507.802569][T11635] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 507.815273][T11634] usb 4-1: USB disconnect, device number 46 [ 507.831195][T11635] usb 1-1: USB disconnect, device number 37 [ 508.053524][ T30] audit: type=1400 audit(1747288495.973:973): avc: denied { name_bind } for pid=11983 comm="syz.1.1505" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 508.794970][T11952] veth0_vlan: entered promiscuous mode [ 508.836202][T11952] veth1_vlan: entered promiscuous mode [ 508.875840][T12003] lo speed is unknown, defaulting to 1000 [ 508.887204][T12003] lo speed is unknown, defaulting to 1000 [ 508.991426][T11952] veth0_macvtap: entered promiscuous mode [ 508.998039][ T5810] Bluetooth: hci2: command tx timeout [ 509.031385][T11952] veth1_macvtap: entered promiscuous mode [ 509.083504][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.094142][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.104036][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.115346][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.126669][T11952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.136993][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.170157][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.180652][T11952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.191367][T11952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.203862][T11952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.219812][T11952] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.239292][T11952] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.263802][T11952] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.284040][ T5861] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 509.306538][T11952] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.492139][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short [ 509.529606][ T5861] usb 4-1: not running at top speed; connect to a high speed hub [ 509.556385][ T5861] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 509.581563][ T5861] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 509.677469][ T5861] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 509.824590][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.058077][ T5861] usb 4-1: config 128 has no interface number 0 [ 510.443337][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.470614][ T5861] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 510.555406][ T5861] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.567901][T12003] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 510.590676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.614672][ T5861] usb 4-1: config 128 interface 127 has no altsetting 0 [ 510.666198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.746174][ T5861] usb 4-1: language id specifier not provided by device, defaulting to English [ 510.896240][ T5861] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 511.045011][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.111658][ T5810] Bluetooth: hci2: command tx timeout [ 511.198683][ T5861] usb 4-1: Manufacturer: á Š [ 511.262047][ T5861] usb 4-1: SerialNumber: syz [ 511.740562][ T5861] usb 4-1: USB disconnect, device number 47 [ 511.754678][T12003] syz.0.1510 (12003) used greatest stack depth: 20904 bytes left [ 511.887858][T12031] fuse: Bad value for 'fd' [ 512.266366][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.391143][T12041] xt_hashlimit: size too large, truncated to 1048576 [ 512.893555][T12054] netlink: 'syz.0.1522': attribute type 4 has an invalid length. [ 513.153284][ T5810] Bluetooth: hci2: command tx timeout [ 513.981407][T12064] Bluetooth: MGMT ver 1.23 [ 513.991492][ T30] audit: type=1400 audit(1747288501.903:974): avc: denied { bind } for pid=12060 comm="syz.3.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 514.310697][T12065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1527'. [ 514.608960][T11635] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 514.702616][T11631] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 514.709475][T12073] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1525'. [ 514.719556][T12073] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1525'. [ 514.832696][T11635] usb 6-1: Using ep0 maxpacket: 8 [ 515.786876][T11635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 515.812885][T11635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 515.830492][T11631] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 515.840744][T11631] usb 1-1: config 8 has no interface number 0 [ 515.853702][T11635] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 515.869445][T11631] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 515.882000][T11635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.892413][T11631] usb 1-1: config 8 interface 177 has no altsetting 0 [ 515.900386][T11631] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 515.909559][T11631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.918941][T11635] usb 6-1: config 0 descriptor?? [ 515.934079][T12065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.148662][ T30] audit: type=1400 audit(1747288504.063:975): avc: denied { getopt } for pid=12086 comm="syz.7.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 516.282496][T11634] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 516.354413][T12093] Invalid source name [ 516.541346][T12093] UBIFS error (pid: 12093): cannot open "ubifs", error -22 [ 517.124770][T11631] usb 1-1: string descriptor 0 read error: -71 [ 517.142162][T11635] hid-multitouch 0003:0EEF:72C4.0025: unknown main item tag 0x0 [ 517.185881][T11635] hid-multitouch 0003:0EEF:72C4.0025: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 517.221673][ C1] ir_toy 1-1:8.177: out urb status: -71 [ 517.332904][T11634] usb 2-1: Using ep0 maxpacket: 16 [ 517.348207][T11634] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 517.366063][T11634] usb 2-1: config 0 has no interface number 0 [ 517.622459][T11634] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 517.642701][T11634] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 517.654805][T11634] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 517.668005][T11634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.689678][T11634] usb 2-1: Product: syz [ 517.702791][T11634] usb 2-1: Manufacturer: syz [ 517.717640][T11634] usb 2-1: SerialNumber: syz [ 517.722678][T11631] ir_toy 1-1:8.177: could not write reset command: -110 [ 517.730013][T11631] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 517.752303][T11634] usb 2-1: config 0 descriptor?? [ 517.780496][T12087] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 517.787924][T12087] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 517.795340][T11631] usb 1-1: USB disconnect, device number 38 [ 518.032282][T12087] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 518.040300][T12087] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 518.225875][T12118] fuse: Unknown parameter '0x0000000000000009' [ 518.553969][T11634] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 518.572966][T11635] usb 6-1: USB disconnect, device number 61 [ 518.587051][T11634] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 518.600754][T11634] asix 2-1:0.251: probe with driver asix failed with error -5 [ 518.751461][T11634] usb 2-1: USB disconnect, device number 39 [ 518.844674][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1542'. [ 518.863845][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.930143][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.453423][T11632] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 519.623195][T11635] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 519.720263][T11632] usb 4-1: Using ep0 maxpacket: 8 [ 519.754547][T11632] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 519.849061][T11635] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 519.879829][T11632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.916794][T11635] usb 6-1: config 8 has no interface number 0 [ 519.928687][T11632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.943601][T11635] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 519.957117][T11632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 520.774491][T12135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.324731][T11635] usb 6-1: config 8 interface 177 has no altsetting 0 [ 521.342242][T11635] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 521.362295][T11632] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 521.377846][T11635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.386228][T11632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.399482][T11632] usb 4-1: config 0 descriptor?? [ 521.415568][T12121] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 521.627770][T11632] usbhid 4-1:0.0: can't add hid device: -71 [ 521.635300][T11632] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 521.656553][T11635] usb 6-1: string descriptor 0 read error: -71 [ 521.664285][T11632] usb 4-1: USB disconnect, device number 48 [ 521.699130][ C1] ir_toy 6-1:8.177: out urb status: -71 [ 522.217369][T11635] ir_toy 6-1:8.177: could not write reset command: -110 [ 522.247140][T11635] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 522.574220][T11635] usb 6-1: USB disconnect, device number 62 [ 522.638906][ T30] audit: type=1400 audit(1747288510.563:976): avc: denied { write } for pid=12149 comm="syz.0.1550" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 522.746736][T12158] overlayfs: failed to resolve './file0': -2 [ 522.961702][T12163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.104300][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 524.828735][T12184] fuse: Unknown parameter '0x0000000000000009' [ 525.225406][T12183] QAT: Stopping all acceleration devices. [ 525.236270][T12183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=12183 comm=syz.5.1561 [ 525.772696][ T951] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 525.943909][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 525.953444][T11634] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 525.956252][ T951] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 525.978961][ T951] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 525.990376][ T951] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 526.004247][ T951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 526.018184][ T951] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 526.027442][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.038431][ T951] usb 4-1: Product: syz [ 526.049659][ T951] usb 4-1: Manufacturer: syz [ 526.062191][ T951] usb 4-1: SerialNumber: syz [ 526.083389][ T951] usb 4-1: config 0 descriptor?? [ 526.133484][T11634] usb 2-1: Using ep0 maxpacket: 16 [ 526.142867][T11634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.155951][T11634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.167212][T11634] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 526.176461][T11634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.198316][T11634] usb 2-1: config 0 descriptor?? [ 527.243634][ T951] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 527.255436][ T30] audit: type=1326 audit(1747288515.043:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 527.313936][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.333072][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 527.335360][T11634] hid-multitouch 0003:1FD2:6007.0026: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 527.355991][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 527.369330][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 527.372641][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.424961][ T30] audit: type=1326 audit(1747288515.043:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 527.492159][T11634] usb 2-1: USB disconnect, device number 40 [ 527.508059][T10512] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 527.540423][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 527.565234][ T30] audit: type=1326 audit(1747288515.043:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 527.588521][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.726522][ T30] audit: type=1326 audit(1747288515.043:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 527.728876][T12213] fido_id[12213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 527.757509][ T30] audit: type=1326 audit(1747288515.043:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 527.788013][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.933259][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.273551][ T30] audit: type=1326 audit(1747288515.043:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 528.307989][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 528.329986][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 528.355683][ T30] audit: type=1326 audit(1747288515.043:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 529.341019][T11634] usb 4-1: USB disconnect, device number 49 [ 529.362721][ T30] audit: type=1326 audit(1747288515.043:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 529.491265][ T30] audit: type=1326 audit(1747288515.053:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 529.615280][ T30] audit: type=1326 audit(1747288515.053:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 529.638671][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.851388][T12238] fuse: Unknown parameter '0x0000000000000009' [ 530.158907][ T30] audit: type=1326 audit(1747288515.053:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 530.184451][ T30] audit: type=1326 audit(1747288515.133:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 530.215311][ T30] audit: type=1326 audit(1747288515.133:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12187 comm="syz.3.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 530.238739][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.378871][T12246] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.971649][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 531.001678][T12253] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 531.047113][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 532.167869][T12266] Cannot find add_set index 0 as target [ 533.444879][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.659524][T12285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1587'. [ 535.177913][T12302] tipc: Enabled bearer , priority 25 [ 536.286570][T12294] loop6: detected capacity change from 0 to 524287999 [ 536.293886][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.301745][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.309667][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.317563][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.325703][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.334027][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.341881][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.349742][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.357631][T12294] ldm_validate_partition_table(): Disk read failed. [ 536.364274][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.372165][T12294] Buffer I/O error on dev loop6, logical block 0, async page read [ 536.380203][T12294] Dev loop6: unable to read RDB block 0 [ 536.386387][T12294] loop6: unable to read partition table [ 536.392104][T12294] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 537.517618][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 537.517634][ T30] audit: type=1400 audit(1747288525.443:995): avc: denied { setopt } for pid=12316 comm="syz.3.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 537.762499][ T30] audit: type=1326 audit(1747288525.623:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12314 comm="syz.5.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c65d8e969 code=0x0 [ 537.793667][T12321] vlan2: entered allmulticast mode [ 537.798797][T12321] erspan0: entered allmulticast mode [ 537.813480][T12323] program syz.0.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.924158][T12321] bond2: entered allmulticast mode [ 538.122479][ T5861] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 538.302557][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 538.320439][ T5861] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 538.340939][ T30] audit: type=1400 audit(1747288526.263:997): avc: denied { bind } for pid=12328 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 538.388145][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.429743][ T5861] pvrusb2: Hardware description: Terratec Grabster AV400 [ 538.455970][ T5861] pvrusb2: ********** [ 538.464753][ T5861] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 538.475504][ T5861] pvrusb2: Important functionality might not be entirely working. [ 538.485813][ T5861] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 538.498283][ T5861] pvrusb2: ********** [ 538.626861][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.640459][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.652717][T11632] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 538.658510][ T2334] pvrusb2: Invalid write control endpoint [ 538.667081][ T5861] usb 1-1: USB disconnect, device number 39 [ 538.805837][T11632] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 538.820983][T11632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.830730][T11632] usb 4-1: Product: syz [ 538.838921][T11632] usb 4-1: Manufacturer: syz [ 538.857367][T11632] usb 4-1: SerialNumber: syz [ 538.875179][ T2334] pvrusb2: Invalid write control endpoint [ 538.879806][T11632] usb 4-1: config 0 descriptor?? [ 538.884538][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 538.899473][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 538.907501][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 538.967384][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1593'. [ 538.993840][ T2334] pvrusb2: Device being rendered inoperable [ 539.002263][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 539.025763][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 539.050355][ T2334] pvrusb2: Attached sub-driver cx25840 [ 539.062629][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 539.677701][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 540.019528][T11632] hub 4-1:0.0: bad descriptor, ignoring hub [ 540.038527][T11632] hub 4-1:0.0: probe with driver hub failed with error -5 [ 540.060806][T11632] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 540.353701][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 540.439233][T12353] FAULT_INJECTION: forcing a failure. [ 540.439233][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.454363][T12353] CPU: 0 UID: 0 PID: 12353 Comm: syz.1.1608 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 540.454389][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.454399][T12353] Call Trace: [ 540.454405][T12353] [ 540.454412][T12353] dump_stack_lvl+0x16c/0x1f0 [ 540.454442][T12353] should_fail_ex+0x512/0x640 [ 540.454469][T12353] _copy_from_user+0x2e/0xd0 [ 540.454493][T12353] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 540.454525][T12353] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 540.454557][T12353] do_replace+0xc0/0x480 [ 540.454581][T12353] ? __pfx_do_replace+0x10/0x10 [ 540.454614][T12353] ? bpf_lsm_capable+0x9/0x10 [ 540.454629][T12353] ? security_capable+0x7e/0x260 [ 540.454654][T12353] do_ebt_set_ctl+0x407/0x4d0 [ 540.454679][T12353] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 540.454704][T12353] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 540.454735][T12353] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 540.454759][T12353] nf_setsockopt+0x8d/0xf0 [ 540.454782][T12353] ip_setsockopt+0xcb/0xf0 [ 540.454809][T12353] tcp_setsockopt+0xa7/0x100 [ 540.454830][T12353] smc_setsockopt+0x1b6/0xa00 [ 540.454847][T12353] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 540.454874][T12353] ? __pfx_smc_setsockopt+0x10/0x10 [ 540.454896][T12353] ? selinux_socket_setsockopt+0x6a/0x80 [ 540.454921][T12353] ? __pfx_smc_setsockopt+0x10/0x10 [ 540.454939][T12353] do_sock_setsockopt+0x224/0x470 [ 540.454962][T12353] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 540.455001][T12353] __sys_setsockopt+0x1a0/0x230 [ 540.455024][T12353] __x64_sys_setsockopt+0xbd/0x160 [ 540.455040][T12353] ? do_syscall_64+0x91/0x260 [ 540.455063][T12353] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.455086][T12353] do_syscall_64+0xcd/0x260 [ 540.455111][T12353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.455128][T12353] RIP: 0033:0x7f0cf678e969 [ 540.455144][T12353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.455161][T12353] RSP: 002b:00007f0cf7609038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 540.455179][T12353] RAX: ffffffffffffffda RBX: 00007f0cf69b5fa0 RCX: 00007f0cf678e969 [ 540.455190][T12353] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 540.455201][T12353] RBP: 00007f0cf7609090 R08: 0000000000000108 R09: 0000000000000000 [ 540.455211][T12353] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 540.455221][T12353] R13: 0000000000000000 R14: 00007f0cf69b5fa0 R15: 00007fff2be12e88 [ 540.455245][T12353] [ 540.803936][T11632] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 540.811404][T11632] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 541.328081][T11632] usb 4-1: USB disconnect, device number 50 [ 542.481221][T12368] fuse: Unknown parameter 'fd0x0000000000000009' [ 542.836710][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1613'. [ 542.845782][T12370] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1613'. [ 544.559643][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 544.675339][T12391] xt_hashlimit: size too large, truncated to 1048576 [ 545.112967][T12401] infiniband syz!: set down [ 545.117544][T12401] infiniband syz!: added team_slave_0 [ 545.181449][T12401] RDS/IB: syz!: added [ 545.185581][T12401] smc: adding ib device syz! with port count 1 [ 545.191763][T12401] smc: ib device syz! port 1 has pnetid [ 546.032607][T11634] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 546.544206][T11634] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 546.562116][T11634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.007734][T11634] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 547.026892][T11634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 547.036544][T11634] usb 2-1: SerialNumber: syz [ 547.264361][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.273211][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.841497][ T30] audit: type=1400 audit(1747288535.763:998): avc: denied { unmount } for pid=6241 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 549.055390][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1634'. [ 549.166940][T11634] usb 2-1: 0:2 : does not exist [ 549.207684][T11634] usb 2-1: unit 5: unexpected type 0x0c [ 549.278454][T11634] usb 2-1: USB disconnect, device number 41 [ 550.076371][T12447] fuse: Unknown parameter 'fd0x000000000000000a' [ 550.191039][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.300898][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1638'. [ 550.720460][ T30] audit: type=1400 audit(1747288538.643:999): avc: denied { bind } for pid=12455 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.752902][T12458] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 550.752902][T12458] program syz.0.1639 not setting count and/or reply_len properly [ 550.951303][ T30] audit: type=1400 audit(1747288538.673:1000): avc: denied { listen } for pid=12455 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.070104][T12456] lo speed is unknown, defaulting to 1000 [ 551.110484][T12456] lo speed is unknown, defaulting to 1000 [ 551.461149][T12466] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 551.469598][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1643'. [ 551.481620][T12464] netlink: 'syz.7.1643': attribute type 7 has an invalid length. [ 551.492498][T12464] netlink: 'syz.7.1643': attribute type 8 has an invalid length. [ 551.515923][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1643'. [ 551.586608][T12464] team0: entered promiscuous mode [ 551.610487][T12464] team_slave_0: entered promiscuous mode [ 551.630184][T12464] team_slave_1: entered promiscuous mode [ 551.652843][T12464] bond0: entered promiscuous mode [ 551.666986][T12464] bond_slave_0: entered promiscuous mode [ 551.686670][T12464] bond_slave_1: entered promiscuous mode [ 551.710104][T12464] gretap0: entered promiscuous mode [ 551.748648][T12464] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 551.789542][T12464] Cannot create hsr debugfs directory [ 551.828206][T12464] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 552.102887][T12477] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 553.110804][T12482] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1650'. [ 553.853036][T12482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1650'. [ 553.923238][T12486] dlm: Unknown command passed to DLM device : 0 [ 553.923238][T12486] [ 555.426448][ T30] audit: type=1400 audit(1747288543.353:1001): avc: denied { write } for pid=12495 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 555.839341][T12504] fuse: Unknown parameter 'fd0x000000000000000a' [ 557.979410][ T5861] IPVS: starting estimator thread 0... [ 558.082843][T12523] IPVS: using max 36 ests per chain, 86400 per kthread [ 558.923448][T12524] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 559.007336][T12524] SELinux: failed to load policy [ 559.058626][ T30] audit: type=1400 audit(1747288546.983:1002): avc: denied { read } for pid=12531 comm="syz.0.1662" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 559.082461][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.581185][T12536] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1663'. [ 560.184122][T12542] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1663'. [ 560.948005][T12558] fuse: Unknown parameter 'fd0x000000000000000a' [ 561.312519][T11635] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 561.544093][T11635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.560730][T11635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.574134][T11635] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 561.590976][T11635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.602106][T11635] usb 4-1: config 0 descriptor?? [ 562.118821][T11635] elan 0003:04F3:0755.0027: unknown main item tag 0x0 [ 562.158186][T11635] elan 0003:04F3:0755.0027: unknown main item tag 0x0 [ 562.184667][T11635] elan 0003:04F3:0755.0027: unknown main item tag 0x0 [ 562.195651][T11635] elan 0003:04F3:0755.0027: failed to start in urb: -90 [ 562.210787][T11635] elan 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 562.380887][T12578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.392618][T12578] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 562.406683][T11635] usb 4-1: USB disconnect, device number 51 [ 562.515986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.682207][T12578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.735488][T12578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 562.746262][T12586] fido_id[12586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 562.770346][T12578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 564.272476][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 564.762851][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout [ 564.966576][T12615] netlink: 'syz.0.1683': attribute type 11 has an invalid length. [ 564.974516][T12615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1683'. [ 565.412440][T11634] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 565.506429][ T30] audit: type=1400 audit(1747288553.433:1003): avc: denied { append } for pid=12617 comm="syz.1.1685" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 565.529821][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.582918][T11634] usb 4-1: Using ep0 maxpacket: 8 [ 565.683999][T11634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 565.735079][T11634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 565.926078][T11634] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 565.935564][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.966142][T11634] usb 4-1: config 0 descriptor?? [ 566.468809][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 566.834250][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout [ 567.676582][T11634] hid-multitouch 0003:0EEF:72C4.0028: unknown main item tag 0x0 [ 567.750473][T11634] hid-multitouch 0003:0EEF:72C4.0028: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 567.839596][T12657] fuse: Bad value for 'fd' [ 567.842623][ T30] audit: type=1400 audit(1747288555.753:1004): avc: denied { name_bind } for pid=12659 comm="syz.0.1692" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 568.747638][ T5861] usb 4-1: USB disconnect, device number 52 [ 568.912980][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout [ 569.308332][T12683] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 569.480667][T12683] overlayfs: missing 'lowerdir' [ 569.632537][ T5861] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 569.824115][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 570.182886][ T5861] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 570.206182][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.326820][ T5861] usb 4-1: config 0 descriptor?? [ 570.611697][ T5861] ath6kl: Failed to submit usb control message: -71 [ 570.642192][ T5861] ath6kl: unable to send the bmi data to the device: -71 [ 570.684973][ T5861] ath6kl: Unable to send get target info: -71 [ 570.709486][ T5861] ath6kl: Failed to init ath6kl core: -71 [ 570.721991][ T5861] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 570.877172][ T5861] usb 4-1: USB disconnect, device number 53 [ 570.961991][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 571.363551][T12717] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 573.498012][T12746] ubi31: attaching mtd0 [ 573.510628][T12746] ubi31: scanning is finished [ 573.515460][T12746] ubi31: empty MTD device detected [ 573.553886][T12747] loop4: detected capacity change from 0 to 524255232 [ 573.912641][T12742] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 573.992183][T12746] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 573.999857][T12746] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 574.007232][T12746] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 574.014275][T12746] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 574.021704][T12746] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 574.028561][T12746] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 574.037484][T12746] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1825470779 [ 574.047599][T12746] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 574.058758][T12749] ubi31: background thread "ubi_bgt31d" started, PID 12749 [ 574.090810][T12742] syz.3.1713: attempt to access beyond end of device [ 574.090810][T12742] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 576.701904][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.711001][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.922592][T11634] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 577.092528][T11634] usb 4-1: Using ep0 maxpacket: 16 [ 577.179996][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 577.315752][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 577.351448][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 577.372533][T11634] usb 4-1: config 0 interface 0 has no altsetting 0 [ 577.388848][T11634] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 577.403957][T11634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.421729][T11634] usb 4-1: Product: syz [ 577.430285][T11634] usb 4-1: Manufacturer: syz [ 577.456877][T11634] usb 4-1: SerialNumber: syz [ 577.486478][T11634] usb 4-1: config 0 descriptor?? [ 577.656724][T12753] tipc: Resetting bearer [ 577.785038][T11634] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 577.825290][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 577.835375][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 577.861562][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 578.427412][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 578.436621][T12776] FAULT_INJECTION: forcing a failure. [ 578.436621][T12776] name failslab, interval 1, probability 0, space 0, times 0 [ 578.449319][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.3.1722 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 578.449337][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.449343][T12776] Call Trace: [ 578.449347][T12776] [ 578.449352][T12776] dump_stack_lvl+0x16c/0x1f0 [ 578.449373][T12776] should_fail_ex+0x512/0x640 [ 578.449388][T12776] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 578.449407][T12776] should_failslab+0xc2/0x120 [ 578.449421][T12776] __kmalloc_cache_noprof+0x6a/0x3e0 [ 578.449438][T12776] ? mousedev_open+0xdc/0x580 [ 578.449452][T12776] ? __pfx_mousedev_open+0x10/0x10 [ 578.449463][T12776] mousedev_open+0xdc/0x580 [ 578.449476][T12776] ? __pfx_mousedev_open+0x10/0x10 [ 578.449487][T12776] chrdev_open+0x231/0x6a0 [ 578.449499][T12776] ? __pfx_chrdev_open+0x10/0x10 [ 578.449512][T12776] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 578.449532][T12776] do_dentry_open+0x741/0x1c10 [ 578.449551][T12776] ? __pfx_chrdev_open+0x10/0x10 [ 578.449565][T12776] vfs_open+0x82/0x3f0 [ 578.449579][T12776] path_openat+0x1e5e/0x2d40 [ 578.449596][T12776] ? __pfx_path_openat+0x10/0x10 [ 578.449609][T12776] do_filp_open+0x20b/0x470 [ 578.449620][T12776] ? __pfx_do_filp_open+0x10/0x10 [ 578.449640][T12776] ? alloc_fd+0x471/0x7d0 [ 578.449654][T12776] do_sys_openat2+0x11b/0x1d0 [ 578.449667][T12776] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.449682][T12776] ? __fget_files+0x20e/0x3c0 [ 578.449695][T12776] __x64_sys_openat+0x174/0x210 [ 578.449708][T12776] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.449721][T12776] ? ksys_write+0x1b9/0x240 [ 578.449738][T12776] ? rcu_is_watching+0x12/0xc0 [ 578.449757][T12776] do_syscall_64+0xcd/0x260 [ 578.449774][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.449786][T12776] RIP: 0033:0x7f7c7f98e969 [ 578.449795][T12776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.449806][T12776] RSP: 002b:00007f7c80721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.449817][T12776] RAX: ffffffffffffffda RBX: 00007f7c7fbb5fa0 RCX: 00007f7c7f98e969 [ 578.449824][T12776] RDX: 0000000000105040 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 578.449831][T12776] RBP: 00007f7c80721090 R08: 0000000000000000 R09: 0000000000000000 [ 578.449837][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.449844][T12776] R13: 0000000000000000 R14: 00007f7c7fbb5fa0 R15: 00007fff430fd8a8 [ 578.449857][T12776] [ 578.452297][ T9] usb 4-1: USB disconnect, device number 54 [ 578.884557][ T5831] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 579.421499][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 579.460733][T12753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.585088][T12753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.014768][T12812] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 581.412730][ T951] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 581.454388][T12753] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.474236][T12753] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.522447][T12753] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.554443][T12753] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.652614][ T951] usb 1-1: Using ep0 maxpacket: 8 [ 581.665605][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 581.692003][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 581.885541][ T951] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 581.898390][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.939412][ T951] usb 1-1: config 0 descriptor?? [ 582.210318][T12825] gfs2: gfs2 mount does not exist [ 583.598384][ T951] hid-multitouch 0003:0EEF:72C4.0029: unknown main item tag 0x0 [ 583.647780][T12840] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 583.689750][ T951] hid-multitouch 0003:0EEF:72C4.0029: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 584.062561][T12840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.632463][T11631] usb 1-1: USB disconnect, device number 40 [ 584.894352][T12877] netlink: 642 bytes leftover after parsing attributes in process `syz.3.1744'. [ 585.864545][T12877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12877 comm=syz.3.1744 [ 585.888076][ T30] audit: type=1326 audit(1747288573.200:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.1.1742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cf678e969 code=0x0 [ 586.194178][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 586.972463][ T951] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 587.164167][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 587.187952][ T951] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 587.216935][ T951] usb 1-1: config 0 has no interface number 0 [ 587.248322][ T951] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 587.266258][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.284892][ T951] usb 1-1: Product: syz [ 587.295048][ T951] usb 1-1: Manufacturer: syz [ 587.306212][ T951] usb 1-1: SerialNumber: syz [ 587.339445][ T951] usb 1-1: config 0 descriptor?? [ 587.352573][T11631] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 587.361787][ T951] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 587.612441][T11631] usb 6-1: Using ep0 maxpacket: 8 [ 587.756757][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.776806][T11631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 587.780915][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.819228][T11631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 587.825948][ T951] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 587.848343][ T951] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 587.858481][T11631] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 587.895499][T11631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.965335][T11631] usb 6-1: config 0 descriptor?? [ 588.851034][ T30] audit: type=1400 audit(1747288576.770:1006): avc: denied { ioctl } for pid=12935 comm="syz.3.1760" path="socket:[39921]" dev="sockfs" ino=39921 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 589.098309][ T30] audit: type=1400 audit(1747288576.960:1007): avc: denied { read } for pid=12935 comm="syz.3.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 589.289208][T11631] hid-multitouch 0003:0EEF:72C4.002A: unknown main item tag 0x0 [ 589.334102][T11631] hid-multitouch 0003:0EEF:72C4.002A: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 590.000734][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 590.018811][T11635] usb 1-1: USB disconnect, device number 41 [ 590.555003][T11631] usb 6-1: USB disconnect, device number 63 [ 590.582895][T11635] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 590.704276][T11635] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 590.856911][T11635] quatech2 1-1:0.51: device disconnected [ 592.321570][T12970] fuse: Unknown parameter 'fd0x0000000000000003' [ 593.132396][T11635] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 593.584431][T12990] netlink: 'syz.1.1773': attribute type 3 has an invalid length. [ 593.688536][T11635] usb 6-1: Using ep0 maxpacket: 32 [ 593.695433][T12988] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1771'. [ 593.713331][T11635] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 593.721717][T11635] usb 6-1: config 1 has no interface number 0 [ 593.727931][T11635] usb 6-1: config 1 interface 242 has no altsetting 0 [ 593.736907][T11635] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 593.746442][T11635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.754498][T11635] usb 6-1: Product: syz [ 593.762075][T11635] usb 6-1: Manufacturer: syz [ 593.772233][T11635] usb 6-1: SerialNumber: syz [ 593.789340][T12992] vlan2: entered allmulticast mode [ 593.842486][T12992] erspan0: entered allmulticast mode [ 593.908669][T12993] bond2: entered allmulticast mode [ 594.132464][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 594.489585][T13007] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[13007] [ 595.134113][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1777'. [ 595.162437][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 595.176220][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 595.194369][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 595.322559][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 595.807863][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.826602][T11635] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 595.851789][ T9] usb 2-1: config 0 descriptor?? [ 595.877765][T11635] aqc111 6-1:1.242: probe with driver aqc111 failed with error -71 [ 597.839346][ T9] hid-multitouch 0003:0EEF:72C4.002B: unknown main item tag 0x0 [ 597.863234][ T9] hid-multitouch 0003:0EEF:72C4.002B: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 597.868124][T11635] usb 6-1: USB disconnect, device number 64 [ 599.039382][ T5824] usb 2-1: USB disconnect, device number 42 [ 599.414066][ T30] audit: type=1326 audit(1747288587.340:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 599.437566][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.552703][ T30] audit: type=1326 audit(1747288587.340:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 599.732761][T13058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1788'. [ 600.041068][ T30] audit: type=1326 audit(1747288587.340:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.084783][ T30] audit: type=1326 audit(1747288587.370:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.145418][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1790'. [ 600.181328][ T30] audit: type=1326 audit(1747288587.380:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.204803][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.232439][ T30] audit: type=1326 audit(1747288587.380:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.304440][ T30] audit: type=1326 audit(1747288587.380:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.337949][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1791'. [ 600.381213][ T30] audit: type=1326 audit(1747288587.380:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.422471][ T5824] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 600.427226][ T30] audit: type=1326 audit(1747288587.380:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.495350][ T30] audit: type=1326 audit(1747288587.380:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13049 comm="syz.3.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f98e969 code=0x7ffc0000 [ 600.642759][T11629] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 600.693907][T13067] Failed to initialize the IGMP autojoin socket (err -2) [ 600.709381][ T5824] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 600.738021][ T5824] usb 1-1: config 8 has no interface number 0 [ 600.901581][ T5824] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 600.953141][T11629] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 600.964290][T11629] usb 2-1: config 8 has no interface number 0 [ 600.971358][T11629] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 600.986023][T11629] usb 2-1: config 8 interface 177 has no altsetting 0 [ 600.993740][T11629] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 601.011218][T11629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.084377][ T5824] usb 1-1: config 8 interface 177 has no altsetting 0 [ 601.091343][ T5824] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 601.101802][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.103759][T13062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 601.665774][T13060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 602.657394][ T5824] usb 1-1: string descriptor 0 read error: -71 [ 602.686527][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 602.704565][T11629] usb 2-1: string descriptor 0 read error: -71 [ 602.727303][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 602.759543][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1796'. [ 602.979552][T13090] (unnamed net_device) (uninitialized): option mode: invalid value (14) [ 603.085722][T13091] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1801'. [ 603.236240][T11629] ir_toy 2-1:8.177: could not write reset command: -110 [ 603.242418][ T5824] ir_toy 1-1:8.177: could not write reset command: -110 [ 603.315197][T11629] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 603.326084][ T5824] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 603.538848][T11629] usb 2-1: USB disconnect, device number 43 [ 603.566960][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'. [ 603.573827][ T5824] usb 1-1: USB disconnect, device number 42 [ 603.695353][T13097] netlink: 'syz.0.1802': attribute type 7 has an invalid length. [ 603.723825][T13097] netlink: 'syz.0.1802': attribute type 8 has an invalid length. [ 604.189550][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 604.217461][T13097] bond0: entered promiscuous mode [ 604.439965][T13097] bond0: left promiscuous mode [ 604.503532][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1805'. [ 606.921741][T13137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1813'. [ 607.129797][T13141] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 607.212673][ T5824] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 607.404240][ T5824] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 608.088544][ T5824] usb 6-1: config 8 has no interface number 0 [ 608.099084][ T5824] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 608.110350][ T5824] usb 6-1: config 8 interface 177 has no altsetting 0 [ 608.117509][ T5824] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 608.127596][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.139359][T13136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 608.837464][ T5824] usb 6-1: string descriptor 0 read error: -71 [ 608.882287][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 609.682100][ T5824] ir_toy 6-1:8.177: could not write reset command: -110 [ 609.855830][ T5824] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 609.874458][ T5824] usb 6-1: USB disconnect, device number 65 [ 609.907986][T13153] ALSA: mixer_oss: invalid OSS volume 'ÿÿ01777777777777777777777' [ 611.629087][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1829'. [ 611.725118][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 611.725140][ T30] audit: type=1400 audit(1747288599.640:1019): avc: denied { getopt } for pid=13183 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 612.022053][T13194] tmpfs: Unknown parameter 'smackfstransmute' [ 612.216506][T13196] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1832'. [ 612.603203][T11631] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 612.771628][T11631] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.825982][T11631] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.862163][T11631] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.909245][T11631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.975646][T13202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 613.005305][T11631] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.300740][T13202] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1833'. [ 613.312571][T11631] usb 2-1: USB disconnect, device number 44 [ 613.324000][T13218] FAULT_INJECTION: forcing a failure. [ 613.324000][T13218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.298011][T13218] CPU: 1 UID: 0 PID: 13218 Comm: syz.0.1838 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 614.298038][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.298047][T13218] Call Trace: [ 614.298053][T13218] [ 614.298060][T13218] dump_stack_lvl+0x16c/0x1f0 [ 614.298089][T13218] should_fail_ex+0x512/0x640 [ 614.298116][T13218] _copy_to_user+0x32/0xd0 [ 614.298141][T13218] simple_read_from_buffer+0xcb/0x170 [ 614.298168][T13218] proc_fail_nth_read+0x197/0x270 [ 614.298194][T13218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.298220][T13218] ? rw_verify_area+0xcf/0x680 [ 614.298241][T13218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.298265][T13218] vfs_read+0x1e1/0xc70 [ 614.298293][T13218] ? __pfx___mutex_lock+0x10/0x10 [ 614.298315][T13218] ? __pfx_vfs_read+0x10/0x10 [ 614.298346][T13218] ? __fget_files+0x20e/0x3c0 [ 614.298368][T13218] ksys_read+0x12a/0x240 [ 614.298392][T13218] ? __pfx_ksys_read+0x10/0x10 [ 614.298413][T13218] ? rcu_is_watching+0x12/0xc0 [ 614.298441][T13218] do_syscall_64+0xcd/0x260 [ 614.298466][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.298483][T13218] RIP: 0033:0x7f2fdd38d37c [ 614.298497][T13218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 614.298512][T13218] RSP: 002b:00007f2fde211030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.298528][T13218] RAX: ffffffffffffffda RBX: 00007f2fdd5b6080 RCX: 00007f2fdd38d37c [ 614.298539][T13218] RDX: 000000000000000f RSI: 00007f2fde2110a0 RDI: 000000000000000a [ 614.298549][T13218] RBP: 00007f2fde211090 R08: 0000000000000000 R09: 0000000000000000 [ 614.298558][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.298568][T13218] R13: 0000000000000000 R14: 00007f2fdd5b6080 R15: 00007ffd1fdcb4e8 [ 614.298590][T13218] [ 614.488226][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.558908][T13250] FAULT_INJECTION: forcing a failure. [ 616.558908][T13250] name failslab, interval 1, probability 0, space 0, times 0 [ 616.571727][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.0.1845 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 616.571754][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.571764][T13250] Call Trace: [ 616.571772][T13250] [ 616.571780][T13250] dump_stack_lvl+0x16c/0x1f0 [ 616.571816][T13250] should_fail_ex+0x512/0x640 [ 616.571840][T13250] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 616.571862][T13250] should_failslab+0xc2/0x120 [ 616.571882][T13250] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 616.571901][T13250] ? getname_kernel+0x52/0x370 [ 616.571926][T13250] getname_kernel+0x52/0x370 [ 616.571955][T13250] kern_path+0x1d/0x50 [ 616.571982][T13250] tomoyo_mount_acl+0x624/0x850 [ 616.572016][T13250] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 616.572071][T13250] ? tomoyo_domain+0xbb/0x150 [ 616.572088][T13250] ? tomoyo_profile+0x47/0x60 [ 616.572108][T13250] tomoyo_mount_permission+0x16d/0x420 [ 616.572132][T13250] ? tomoyo_mount_permission+0x14f/0x420 [ 616.572158][T13250] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 616.572199][T13250] security_sb_mount+0x9b/0x260 [ 616.572225][T13250] path_mount+0x128/0x1f20 [ 616.572250][T13250] ? __pfx_path_mount+0x10/0x10 [ 616.572274][T13250] ? path_mount+0xd/0x1f20 [ 616.572297][T13250] __x64_sys_mount+0x28d/0x310 [ 616.572317][T13250] ? __pfx___x64_sys_mount+0x10/0x10 [ 616.572334][T13250] ? rcu_is_watching+0x12/0xc0 [ 616.572360][T13250] do_syscall_64+0xcd/0x260 [ 616.572385][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.572403][T13250] RIP: 0033:0x7f2fdd38e969 [ 616.572418][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.572435][T13250] RSP: 002b:00007f2fde232038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.572453][T13250] RAX: ffffffffffffffda RBX: 00007f2fdd5b5fa0 RCX: 00007f2fdd38e969 [ 616.572465][T13250] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 00002000000000c0 [ 616.572477][T13250] RBP: 00007f2fde232090 R08: 0000000000000000 R09: 0000000000000000 [ 616.572488][T13250] R10: 0000000000200440 R11: 0000000000000246 R12: 0000000000000002 [ 616.572499][T13250] R13: 0000000000000000 R14: 00007f2fdd5b5fa0 R15: 00007ffd1fdcb4e8 [ 616.572524][T13250] [ 618.250954][ T30] audit: type=1400 audit(1747288606.170:1020): avc: denied { accept } for pid=13264 comm="syz.5.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 619.078808][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1854'. [ 620.687135][ T30] audit: type=1400 audit(1747288608.610:1021): avc: denied { bind } for pid=13282 comm="syz.7.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 621.934634][T13312] input: syz0 as /devices/virtual/input/input46 [ 622.523027][T13325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 623.690007][T13329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13329 comm=syz.0.1865 [ 623.902633][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 623.959669][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.343984][ T9] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 625.061279][ T9] usb 6-1: config 0 has no interface number 0 [ 625.159413][ T9] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 625.179587][ T9] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 625.211448][ T9] usb 6-1: config 0 interface 255 has no altsetting 0 [ 625.235290][ T9] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 625.244583][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.262368][ T9] usb 6-1: Product: syz [ 625.280878][ T9] usb 6-1: Manufacturer: syz [ 625.292455][ T9] usb 6-1: SerialNumber: syz [ 625.338715][ T9] usb 6-1: config 0 descriptor?? [ 625.614028][T13362] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 625.633835][T13362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.386470][ T9] i2c-tiny-usb 6-1:0.255: version 6d.cc found at bus 006 address 066 [ 626.401522][ T9] (null): failure setting delay to 10us [ 626.413551][ T9] i2c-tiny-usb 6-1:0.255: probe with driver i2c-tiny-usb failed with error -5 [ 626.607589][ T9] usb 6-1: USB disconnect, device number 66 [ 627.038691][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1877'. [ 627.215717][T13370] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 628.082632][T13387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.111926][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 628.213050][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 628.293464][T13391] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 628.372910][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 628.393202][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 629.690926][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1886'. [ 629.710400][ T30] audit: type=1400 audit(1747288617.550:1022): avc: denied { ioctl } for pid=13399 comm="syz.7.1886" path="socket:[43104]" dev="sockfs" ino=43104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 629.844954][T13404] netlink: 'syz.7.1888': attribute type 21 has an invalid length. [ 629.858677][T13404] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1888'. [ 630.000771][T13405] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1887'. [ 631.207923][ T30] audit: type=1326 audit(1747288619.130:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.397143][ T30] audit: type=1326 audit(1747288619.170:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.426556][ T30] audit: type=1326 audit(1747288619.170:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.900159][ T30] audit: type=1326 audit(1747288619.170:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.923936][ T30] audit: type=1326 audit(1747288619.170:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.947739][ T30] audit: type=1326 audit(1747288619.170:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 631.984985][ T30] audit: type=1326 audit(1747288619.170:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 632.058023][ T30] audit: type=1326 audit(1747288619.170:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 632.093366][ T30] audit: type=1326 audit(1747288619.170:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13416 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7ffc0000 [ 632.217311][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.235583][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.375563][T13432] block device autoloading is deprecated and will be removed. [ 632.406976][T13441] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1898'. [ 632.416265][T11634] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 632.437759][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.450711][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.458742][ T951] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 632.572527][T11634] usb 4-1: Using ep0 maxpacket: 16 [ 632.582945][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 632.595948][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 632.612620][ T951] usb 1-1: device descriptor read/64, error -71 [ 632.622405][T11634] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 632.662699][T11634] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.683117][T11634] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 632.698773][T11634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.707949][T11634] usb 4-1: Product: syz [ 632.725178][T11634] usb 4-1: Manufacturer: syz [ 632.734950][T11634] usb 4-1: SerialNumber: syz [ 632.743966][T11634] usb 4-1: config 0 descriptor?? [ 632.862605][ T951] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 633.013013][ T951] usb 1-1: device descriptor read/64, error -71 [ 633.036977][T11634] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 633.051303][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 633.068454][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 633.128053][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 633.137102][ T951] usb usb1-port1: attempt power cycle [ 633.702852][T13428] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 633.712509][ T951] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 633.896672][T11634] usb 4-1: USB disconnect, device number 55 [ 633.914750][ T5169] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 634.382990][ T951] usb 1-1: device descriptor read/8, error -71 [ 635.123652][ T951] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 635.758452][T13455] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 635.852421][T13461] netlink: 320 bytes leftover after parsing attributes in process `syz.7.1901'. [ 636.166361][T13455] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 636.313432][ T951] usb 1-1: device descriptor read/8, error -71 [ 636.410021][T13473] FAULT_INJECTION: forcing a failure. [ 636.410021][T13473] name failslab, interval 1, probability 0, space 0, times 0 [ 636.424738][T13473] CPU: 0 UID: 0 PID: 13473 Comm: syz.5.1907 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 636.424768][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.424779][T13473] Call Trace: [ 636.424785][T13473] [ 636.424792][T13473] dump_stack_lvl+0x16c/0x1f0 [ 636.424824][T13473] should_fail_ex+0x512/0x640 [ 636.424848][T13473] ? fs_reclaim_acquire+0xae/0x150 [ 636.424874][T13473] ? tomoyo_encode2+0x100/0x3e0 [ 636.424899][T13473] should_failslab+0xc2/0x120 [ 636.424920][T13473] __kmalloc_noprof+0xd2/0x510 [ 636.424937][T13473] ? d_absolute_path+0x136/0x1a0 [ 636.424964][T13473] tomoyo_encode2+0x100/0x3e0 [ 636.424993][T13473] tomoyo_encode+0x29/0x50 [ 636.425017][T13473] tomoyo_realpath_from_path+0x18f/0x6e0 [ 636.425051][T13473] tomoyo_path_number_perm+0x245/0x580 [ 636.425073][T13473] ? tomoyo_path_number_perm+0x237/0x580 [ 636.425098][T13473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.425122][T13473] ? find_held_lock+0x2b/0x80 [ 636.425169][T13473] ? find_held_lock+0x2b/0x80 [ 636.425190][T13473] ? hook_file_ioctl_common+0x145/0x410 [ 636.425214][T13473] ? __fget_files+0x20e/0x3c0 [ 636.425237][T13473] security_file_ioctl+0x9b/0x240 [ 636.425264][T13473] __x64_sys_ioctl+0xb7/0x200 [ 636.425291][T13473] do_syscall_64+0xcd/0x260 [ 636.425318][T13473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.425337][T13473] RIP: 0033:0x7f9c65d8e969 [ 636.425352][T13473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.425370][T13473] RSP: 002b:00007f9c66b65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.425389][T13473] RAX: ffffffffffffffda RBX: 00007f9c65fb5fa0 RCX: 00007f9c65d8e969 [ 636.425400][T13473] RDX: 00002000000006c0 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 636.425411][T13473] RBP: 00007f9c66b65090 R08: 0000000000000000 R09: 0000000000000000 [ 636.425422][T13473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.425432][T13473] R13: 0000000000000000 R14: 00007f9c65fb5fa0 R15: 00007fff1b1b3d68 [ 636.425455][T13473] [ 636.425471][T13473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 636.642611][T13479] netlink: 'syz.7.1909': attribute type 7 has an invalid length. [ 636.649368][ T951] usb usb1-port1: unable to enumerate USB device [ 636.996864][T13479] netlink: 'syz.7.1909': attribute type 8 has an invalid length. [ 637.737476][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 639.116768][T13511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1919'. [ 639.178278][T13512] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 639.315336][T11168] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 639.608029][T13501] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1915'. [ 639.742072][T13522] Failed to initialize the IGMP autojoin socket (err -2) [ 639.757187][T11168] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 639.765608][T11168] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 639.777000][T11168] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 639.790961][T11168] usb 2-1: config 220 has no interface number 2 [ 639.816996][T11168] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 640.309305][T11168] usb 2-1: config 220 interface 0 has no altsetting 0 [ 640.346331][T11168] usb 2-1: config 220 interface 76 has no altsetting 0 [ 640.362120][T11168] usb 2-1: config 220 interface 1 has no altsetting 0 [ 640.374197][T13522] kvm: pic: non byte read [ 640.379426][T13522] kvm: pic: level sensitive irq not supported [ 640.379697][T13522] kvm: pic: non byte read [ 640.398138][T11168] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 640.409631][T11168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.424173][T11168] usb 2-1: Product: syz [ 640.428851][T13522] kvm: pic: level sensitive irq not supported [ 640.428911][T13522] kvm: pic: non byte read [ 640.444301][T11168] usb 2-1: Manufacturer: syz [ 640.449029][T11168] usb 2-1: SerialNumber: syz [ 640.456581][T13522] kvm: pic: level sensitive irq not supported [ 640.456649][T13522] kvm: pic: non byte read [ 640.480309][T13522] kvm: pic: level sensitive irq not supported [ 640.480411][T13522] kvm: pic: non byte read [ 640.522839][T13522] kvm: pic: level sensitive irq not supported [ 640.522903][T13522] kvm: pic: non byte read [ 640.580046][T13522] kvm: pic: level sensitive irq not supported [ 640.580111][T13522] kvm: pic: non byte read [ 640.618283][T13535] input: syz1 as /devices/virtual/input/input48 [ 640.656927][T13522] kvm: pic: level sensitive irq not supported [ 640.656989][T13522] kvm: pic: non byte read [ 640.667807][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 640.667823][ T30] audit: type=1326 audit(1747288628.590:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.697419][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.703161][T11168] usb 2-1: selecting invalid altsetting 0 [ 640.723117][ T30] audit: type=1326 audit(1747288628.590:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.748175][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.755441][T11168] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 640.771818][ T30] audit: type=1326 audit(1747288628.590:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.782344][T11168] usb 2-1: No valid video chain found. [ 640.795359][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.808674][T13522] kvm: pic: level sensitive irq not supported [ 640.808733][T13522] kvm: pic: non byte read [ 640.816199][ T30] audit: type=1326 audit(1747288628.590:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.842793][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.870356][ T30] audit: type=1326 audit(1747288628.590:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.871230][T11168] usb 2-1: selecting invalid altsetting 0 [ 640.893859][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.898585][ T30] audit: type=1326 audit(1747288628.590:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.924861][T11168] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 640.929124][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.947546][ T30] audit: type=1326 audit(1747288628.590:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 640.977962][ T30] audit: type=1326 audit(1747288628.590:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 641.010616][ T30] audit: type=1326 audit(1747288628.590:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 641.037859][ T30] audit: type=1326 audit(1747288628.590:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13517 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8db78e969 code=0x7fc00000 [ 641.061340][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.162594][T11168] usb 2-1: USB disconnect, device number 45 [ 642.483735][T13557] netlink: 'syz.7.1930': attribute type 3 has an invalid length. [ 643.548917][T13576] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 645.047007][T13587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=13587 comm=syz.3.1937 [ 645.555793][T13594] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN NOPTI [ 645.567925][T13594] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 645.576326][T13594] CPU: 1 UID: 0 PID: 13594 Comm: syz.3.1937 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 645.588369][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.598406][T13594] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 645.603859][T13594] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 645.623458][T13594] RSP: 0000:ffffc9000f447db8 EFLAGS: 00010206 [ 645.629530][T13594] RAX: dffffc0000000000 RBX: ffff8880253fe100 RCX: ffffc90011d02000 [ 645.637502][T13594] RDX: 0000000000000009 RSI: ffffffff823dc364 RDI: ffff88801dee1908 [ 645.645454][T13594] RBP: ffff8880351056e0 R08: 0000000000000007 R09: fffffffffffff000 [ 645.653413][T13594] R10: ffff8880253fe100 R11: 0000000000000000 R12: 0000000000000000 [ 645.661384][T13594] R13: ffff88805da9d600 R14: ffff88805da9d600 R15: ffffc9000f447e90 [ 645.669348][T13594] FS: 00007f7c7cf8f6c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 645.678261][T13594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.684832][T13594] CR2: 00007f7c7c748f98 CR3: 0000000058237000 CR4: 00000000003526f0 [ 645.692800][T13594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.700764][T13594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.708717][T13594] Call Trace: [ 645.711978][T13594] [ 645.714904][T13594] __do_sys_move_mount+0x3b0/0x7c0 [ 645.720009][T13594] ? __pfx___do_sys_move_mount+0x10/0x10 [ 645.725643][T13594] ? rcu_is_watching+0x12/0xc0 [ 645.730406][T13594] do_syscall_64+0xcd/0x260 [ 645.734920][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.740839][T13594] RIP: 0033:0x7f7c7f98e969 [ 645.745271][T13594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.764874][T13594] RSP: 002b:00007f7c7cf8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 645.773282][T13594] RAX: ffffffffffffffda RBX: 00007f7c7fbb6320 RCX: 00007f7c7f98e969 [ 645.781242][T13594] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000009 [ 645.789196][T13594] RBP: 00007f7c7fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 645.797149][T13594] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 645.805102][T13594] R13: 0000000000000000 R14: 00007f7c7fbb6320 R15: 00007fff430fd8a8 [ 645.813063][T13594] [ 645.816062][T13594] Modules linked in: [ 645.819955][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.826231][T13594] ---[ end trace 0000000000000000 ]--- [ 645.892207][ T30] kauditd_printk_skb: 632 callbacks suppressed [ 645.892229][ T30] audit: type=1400 audit(1747288633.800:1737): avc: denied { read } for pid=5166 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 645.953455][T13594] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 646.030219][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 646.072596][T13601] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1939'. [ 646.081755][T13594] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 646.101575][T13594] RSP: 0000:ffffc9000f447db8 EFLAGS: 00010206 [ 646.107729][T13594] RAX: dffffc0000000000 RBX: ffff8880253fe100 RCX: ffffc90011d02000 [ 646.116170][T13594] RDX: 0000000000000009 RSI: ffffffff823dc364 RDI: ffff88801dee1908 [ 646.127097][T11635] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 646.282685][T11635] usb 6-1: Using ep0 maxpacket: 8 [ 646.300868][T11635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 646.348100][T11635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24931, setting to 1024 [ 646.348136][ T30] audit: type=1400 audit(1747288633.810:1738): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.359368][T11635] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 646.391724][T11635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.405410][T13594] RBP: ffff8880351056e0 R08: 0000000000000007 R09: fffffffffffff000 [ 646.421496][ T30] audit: type=1400 audit(1747288633.810:1739): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.442942][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.457135][T13594] R10: ffff8880253fe100 R11: 0000000000000000 R12: 0000000000000000 [ 646.465561][T11635] usb 6-1: config 0 descriptor?? [ 646.481269][ T30] audit: type=1400 audit(1747288633.810:1740): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.502252][T13594] R13: ffff88805da9d600 R14: ffff88805da9d600 R15: ffffc9000f447e90 [ 646.510550][T13594] FS: 00007f7c7cf8f6c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 646.519754][ T30] audit: type=1400 audit(1747288633.810:1741): avc: denied { create } for pid=5166 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 646.540610][ T30] audit: type=1400 audit(1747288633.810:1742): avc: denied { append open } for pid=5166 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 646.563714][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.570122][T13594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.577722][T13594] CR2: 00007ffd1fdc9fc8 CR3: 0000000058237000 CR4: 00000000003526f0 [ 646.587229][T13594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.595468][ T30] audit: type=1400 audit(1747288633.810:1743): avc: denied { getattr } for pid=5166 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 646.618471][T13594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 646.626949][T13594] Kernel panic - not syncing: Fatal exception [ 646.633215][T13594] Kernel Offset: disabled [ 646.637517][T13594] Rebooting in 86400 seconds..