last executing test programs: 10m1.212039869s ago: executing program 3 (id=164): creat(&(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x201, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000003c0)="8950e3bc9f69a74d966fbb85a083eeb1a15cdfcbb01d01b12f86f65ce64657d23392ec389e61ffd6f601cfac1911b37c29476818401a4e1c9e63f59cea83ed6c5ac7dea05aa8f1311fa7a7bb119d68ac7bfb82a6847b117ac5d5a3", 0x5b}, {&(0x7f0000000440)="629a94f1594ab2331f5ee1f1f438ac3db1757037cec10e27b11474c6295d0fb25a769716553a1eef1e9dc15faddd191a9f10dd7c22115b60ca69bbabe2f88087cc2b8997cf86741610caa16f195a05b6464ef85c2ddf3598f99a5eea2e885ecfeb59a827df8d44ecdc9ea4106ded1c5ae5388a176d81b98f85a8835f8a627aa66096b15907a0631b1a3ac8cad5a24b4316ac1974bb4a1bab95d4dbd17957606c9cccdf400098b45e6103f14492514566251339c62512fe107c04cc36965407170f70a432c9770b943ae5", 0xca}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000000540)="cf4edac66332def57712bed2c3217c065d9d4158036563f5997f5df48155390fcd62bfed08aabc919c0513f2c44c6a01c0bd1fae28c4bc4ab7a39fcb4146fedd0390d7a9ada176e28ef27981806bb0df57004035c17f23f4f5cc26503e44534e86610a39", 0x64}, {0x0}, {&(0x7f0000004080)="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", 0xd49}], 0x7) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), 0x0) 9m59.213270058s ago: executing program 2 (id=173): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)='^', 0x1}], 0x1, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100dcac969b1bdf790000000000400000201c000180060001000200000008000300ac1414aa080f770f7bc32ae743aa9208add5a8c5671f47b317721e5378f67158fb15d211938fac396cfcddb635489d5bc26e9b999fda24fee9aea429b290921459ae3a3f96ea40387a572383f828be29b23e4726075642360108910aa5a01c92aa6ee9316d9ee50e53a37dad62c896ecd8b4070000000000000029a4986dad5d3e89be9b18b23aecbd42869542d901f32431e06bf19d18300570054db8408c38a9753d2609e1348da46404781402499bc6db4706e04f7aa7b3deb7de5dfd814f6b"], 0x30}}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000200)={r3}, 0xfffffffffffffde6) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$LINK_DETACH(0x22, 0x0, 0x0) 9m57.296775039s ago: executing program 2 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x97, 0xb206, &(0x7f0000006680)) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x400000, 0x0, 0x10000082}, 0x80) 9m50.522828744s ago: executing program 2 (id=181): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8001) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x7, 0x800, 0x0, 'queue0\x00', 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2c, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB="00000000008ce5030000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8fffffdb703000008000000b7041b000000000085000000d3a2000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m49.779922547s ago: executing program 3 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10001, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xfffe}, 0x0, 0x0) 9m49.344071821s ago: executing program 2 (id=186): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x409f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) chown(&(0x7f0000000140)='./file0\x00', 0xee01, r6) (fail_nth: 1) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 9m40.437503511s ago: executing program 3 (id=190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010225bd70f6020000000100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0xf000, 0x0, 0x4008810}, 0x8080) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050002"], 0x64}}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 9m38.818271642s ago: executing program 3 (id=192): r0 = syz_io_uring_setup(0x113, &(0x7f00000002c0)={0x0, 0x40}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb8, 0x2}, 0xe) setsockopt$inet_opts(r4, 0x0, 0x9, 0x0, 0x0) r6 = epoll_create1(0x0) signalfd(r6, &(0x7f0000000140)={[0x69]}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kvm_dirty_ring_reset\x00', r7}, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r8, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x113, &(0x7f00000002c0)={0x0, 0x40}, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb8, 0x2}, 0xe) (async) setsockopt$inet_opts(r4, 0x0, 0x9, 0x0, 0x0) (async) epoll_create1(0x0) (async) signalfd(r6, &(0x7f0000000140)={[0x69]}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kvm_dirty_ring_reset\x00', r7}, 0x22) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r8, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) (async) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 9m38.383477598s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x60800) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r5) write$P9_RSTATu(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000000000000000000000000ffffff90000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x20, 0x0) 9m38.127581086s ago: executing program 3 (id=195): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) (fail_nth: 6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000001540)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 9m35.253984492s ago: executing program 2 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_open_dev$loop(0x0, 0x6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r3, r6, 0x0) epoll_create(0x200008) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9m33.415303757s ago: executing program 3 (id=202): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$unix(r0, &(0x7f0000000640)='\'', 0x1, 0x4000001, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xffffffffffffff09, 0x1d, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x40002000, 0x0, 0xfffffffffffffd5a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2b, 0x801, 0x0) listen(r6, 0xffffa01a) splice(r6, 0x0, r5, 0x0, 0x39000, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 9m18.818406712s ago: executing program 32 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_open_dev$loop(0x0, 0x6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r3, r6, 0x0) epoll_create(0x200008) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9m17.989582624s ago: executing program 33 (id=202): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$unix(r0, &(0x7f0000000640)='\'', 0x1, 0x4000001, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xffffffffffffff09, 0x1d, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x40002000, 0x0, 0xfffffffffffffd5a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2b, 0x801, 0x0) listen(r6, 0xffffa01a) splice(r6, 0x0, r5, 0x0, 0x39000, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 4m4.042086168s ago: executing program 0 (id=1577): mount$afs(&(0x7f0000000200)=ANY=[@ANYBLOB='%\x00\x00\x00'], &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x87, 0x5b, 0xd, 0x20, 0x13d8, 0x1, 0xe22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0xbd, 0x7f}}]}}]}}, 0x0) 3m59.318453041s ago: executing program 0 (id=1594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mknod(&(0x7f00000002c0)='./file0\x00', 0x40, 0x7ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000001300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m58.987928754s ago: executing program 0 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x10000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_delrule={0x28, 0x21, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x40, 0x3, 0x0, 0x0, 0x2, 0x10011}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0xfffffffffffffd09}}, 0x40080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@dellinkprop={0x2cc, 0x6d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5000c, 0x8}, [@IFLA_IFNAME={0x14}, @IFLA_VF_PORTS={0x21c, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "77a9a2b94689ee6393c95fb1a3479ddd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b7f5f8ac1b22dee5d859dc43d0eb5e1"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cb039de587f34c2b8af3ad36ea1c98c7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08d1440f11bb66151f6e7efe61830c22"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "574e642f335acc408987c12e2acc4c7d"}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'ife\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "096fd65fa7f768bcd273c9646787b7fb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "426519a904a623262a8de12efe08e94a"}, @IFLA_PORT_PROFILE={0xf, 0x2, '*/]\xd1}&,)(:\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6b875e4414a7a662955c2964c7cb3f05"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c803164832479e17e52b01a6d34363d"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c24c61e4ae489536c180d14b789370b2"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "863e1f36921451b08153e2e6211d5024"}, @IFLA_PORT_PROFILE={0x7, 0x2, 'ct\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b2a4bf37d27384565d16f8620dc7461"}, @IFLA_PORT_PROFILE={0xa, 0x2, '+/\\:.\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e138dc36c9450d292d59d88d63635205"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5ed837712f182b4e9bf705f54058649e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f1b4cd503d038ed55de74e3e61aaaabb"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c6f3aa29ede7799dd871926287b736e3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "52f483940c00"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "950c3cd7f8374441de3a61b753df19e6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xde5}, @IFLA_PORT_PROFILE={0xb, 0x2, ')H(:}$\x00'}, @IFLA_PORT_PROFILE={0x46, 0x2, '2^rOli\xa5\x17t\fe?\x16\xd3/\xf9j\xc8\xda\x8e\xce\x16\xfe\xd7\xd3v1\x85\x0e{\xca{\xd8n\x13\x12\xfby\xed[\x02\xdc\x1e\xc2\x16\x1d@b\xafRS\x19\xb3^\x16\xa0 \x1e8~=\x1cr\xec\xea?'}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @random="f7a0cb70b22f"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40c15}, 0x4044) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x388, 0x238, 0x238, 0x388, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0x12c00, 0x7, 0x0, 0xac}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 3m57.847374575s ago: executing program 0 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x4, 0x0, 0x4}, {0x17fffffc, 0x7, 0x741}}}, 0x51b402) write$sndseq(r6, &(0x7f00000006c0)=[{0xe, 0x81, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 3m55.577280735s ago: executing program 0 (id=1603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x44, &(0x7f0000002340)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36]}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x0) 3m53.764268309s ago: executing program 0 (id=1609): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000007, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mlock(&(0x7f0000807000/0x1000)=nil, 0x1000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000ff0000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='btrfs_inode_mod_outstanding_extents\x00', r4}, 0x18) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x1000}, &(0x7f0000000140)=0x4, 0x0, 0x1, 0x3, 0x9, 0x3, 0x10, 0x7ff}}], 0x58}, 0x0) syz_open_procfs(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x80000b, 0x20010, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000703030002000f3947d34510801600000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 3m53.648425017s ago: executing program 34 (id=1609): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000007, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mlock(&(0x7f0000807000/0x1000)=nil, 0x1000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000ff0000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='btrfs_inode_mod_outstanding_extents\x00', r4}, 0x18) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x1000}, &(0x7f0000000140)=0x4, 0x0, 0x1, 0x3, 0x9, 0x3, 0x10, 0x7ff}}], 0x58}, 0x0) syz_open_procfs(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x80000b, 0x20010, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000703030002000f3947d34510801600000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 2m51.815686949s ago: executing program 6 (id=1840): syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @private}}}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$P9_RSTATu(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="080200000200000005f80000000000000000000000000000000000c0ffffffffffffff1b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000000e00704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00d299988014986ce982cfc26dd7c500f04cd85f2a70f5e9930e97a59a645500f8f66cfb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac03000038ff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000000000000000000000000048bccabb6819d12681afb147ec85d8a99c9a327bcc605be74c1262204402930afc3a1ee25ec4ac24fe5311dfd90b078cc6a89b19f845a8d400edaba03db7f53b65f623c7bf70226b8fdbce9dff9c07a29dbce0882a5253b78b7e181723afc153891754d5132ff9c094ea5d69b9f03a7fef2c07dbdb73632c9e43f64c0539fd6e2e1175df4e9bb49b3103876c39bfa956780162c1faffd4082c5811f5cdbd64128e2b68670c20ad4990", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x8, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @local, @multicast2}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdir(&(0x7f0000000480)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0x20, &(0x7f0000001b40)={&(0x7f0000001a00)=""/128, 0x80, 0x0, &(0x7f0000001a80)=""/143, 0x8f}}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2m49.823242199s ago: executing program 6 (id=1843): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c9200a00060005001a0102000800a55e23d6980ee8e1a84fe6204839188314122697b355ba9d7aab8ad7c7ad9cca322681eac81fc74360b3f343d6348463fd0581e7edc63dd307b8db680e15cd00bc2b"], 0xf) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000540)={0xa, 0x4e20, 0xfffffffe, @mcast2, 0x6}, 0x1c) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)='M', 0x1}], 0x1}}], 0x2, 0x400c404) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x1, 0x44bebe9d0b61f7e4, 0x8}) mount$afs(&(0x7f0000000100)=@cell={0x6, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=write,flock=local,smackfsroot=\\,pcr=00000000000000000013,euid<', @ANYRESDEC, @ANYBLOB=',pcr=0\a000000000000000018,\x00']) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@mcast2, 0x4e24, 0x200, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x16}, {0x8, 0x9, 0x101, 0x3, 0x4f, 0x401, 0x9, 0x4}, {0x101, 0x3, 0x8000, 0x6}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d2, 0x33}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x2, 0x3, 0x2, 0x1ff, 0xfe00}}, 0xe8) 2m48.532224359s ago: executing program 6 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)='t', 0x1}], 0x1) shutdown(r3, 0x1) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0xbb}, {0x6, 0x0, 0x0, 0x5cbd}]}) write$ppp(r2, &(0x7f00000004c0)="31be", 0x2) 2m46.957749219s ago: executing program 6 (id=1855): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="cfada49eed0300", 0x10) (async, rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x18) (async, rerun: 64) io_uring_setup(0xaab, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000958d010ee2355e6ed6cbfa6a324efe57ff48a50dae4538000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x13d18) (async, rerun: 32) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0xffff) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000340)={r5, 0xfffffffc, 0x0, 0x8000}) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='rdma']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r7}}, 0x18) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0x0, 0x0, 0x7fff8000}]}) (rerun: 32) close_range(r8, 0xffffffffffffffff, 0x0) 2m45.408144237s ago: executing program 6 (id=1857): socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) gettid() open(0x0, 0x41, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), 0x4) syz_open_dev$sg(0x0, 0x0, 0x8002) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2000000009, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x400, 0x3d8, 0x3d8, 0x400, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xb3c738a26429eda, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1000, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x9, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) 2m43.825630015s ago: executing program 6 (id=1866): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x400, 0x1, 0x2ad}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) syz_open_dev$vim2m(&(0x7f0000000680), 0x10007ff, 0x2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x3, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x8001, 0x2, 0x0, 0xf, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m28.551061713s ago: executing program 35 (id=1866): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x400, 0x1, 0x2ad}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) syz_open_dev$vim2m(&(0x7f0000000680), 0x10007ff, 0x2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x3, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x8001, 0x2, 0x0, 0xf, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.446894076s ago: executing program 8 (id=2410): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f0000000300)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffffe) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0) (async) close(r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x1, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = syz_io_uring_setup(0xcf, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd=r3, 0x10000, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x0, 0x7f, 0xf8, 0xae, 0x4c}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 10.529199878s ago: executing program 8 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace(0x4208, r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x80d81, 0x0) r5 = socket$inet6(0xa, 0x2, 0x4) syz_usb_connect(0x1, 0x7de, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x6d, 0x7b, 0xab, 0x20, 0x930, 0x700, 0x1edd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cc, 0x4, 0xad, 0x1f, 0xa0, 0x4, [{{0x9, 0x4, 0x22, 0xfc, 0x5, 0xe7, 0xea, 0x62, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e61cb08b6e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x4, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x4b, 0x56, 0x2}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x1, 0x2, 0xae, "f084ecec43dc178a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0xd, 0xde, "ec"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0xd, "3981a6", "64ce63"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x4}]}], [{{0x9, 0x5, 0x9, 0x4, 0x40, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8d, 0x730}, @generic={0x94, 0x30, "30a14706a4e4716bd9dd541174c1e227799f64176ce49580b06eb32db21c558dabcae133daee7e8a04a1de34e2a6f36161b8b44542bd66e650cbf0cb4a8e2859f5e3abaf74aca24981077ce1f2aef19b0a328733bb0c96b5905250cb6f3009c268a86cfd6e8034bc4934328ecd5b8f9f9a110158b7eadd667d9931ccbc09eaea6eba348ca1201ba81453252a21665b684da6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x40, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0xc9, 0x1, 0xbc, [@generic={0x84, 0x11, "1ffe66237f3588722fda8fdf6ea4ce6d86243e3472ca281bf54e86ea13f491f36259035c8f93c97e8399f91800e50dec3f433eb63c76c67f63c8e0ba92b414028befcd4f924c882b2614de9a9ec6ceda4bde2f96dd8e3b84bec3388f8797dcbba4ebb744807af58731aebe9e2f56124fc5943cab61e0412c9bf5fdd0d2bdf64da266"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x8, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xc7}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x40, 0xcd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x101}]}}]}}, {{0x9, 0x4, 0x9c, 0x9, 0x1, 0x59, 0x48, 0xf4, 0x7d, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5b, 0xc, 0x4, 0x7b}, [@ncm={0x6, 0x24, 0x1a, 0x7a52, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0xc0, 0x4, 0x4, 0x8}, @mdlm_detail={0x94, 0x24, 0x13, 0x0, "26b30e8a42002b53e5c5a57ffb4edc2273c8a53cf712f0669b13894b1b150013acb67a620bd54487db7a177ed0eac1e7073c3c07402974783b4ded49651b9bfc1994721f507c6129983b552c496ed94c55f8cdb989dfaadf04d7f88f00e1f66b965a642d9aab5c342829147f01ad8a1606ea2cba67a89cc4bd7b8660bf3c8a973af2ae9d9d16af18ccc57882befd1c18"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x7, 0x1, [@generic={0x4c, 0xd, "86a169b307fbd184b2ffb26c854ac3b52b3744f0e034aba4abbaacf0ddd104ec650f9d558dbfd0e1250820adc61090b11607fc2fff658d36d2b6d737ba8cd353d3e9bcd02c13ed1b04ae"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}]}}, {{0x9, 0x4, 0x61, 0x3, 0x3, 0x12, 0x1b, 0x31, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x8f}]}], [{{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x4}, @generic={0xd9, 0x6, "6b21ae7778307d28ec55477e4a6a5fa7d7b46f9b244ceeb246b21df5fdf7b78c01229167392782ea738ac14c93b37e0d64a030d68c6ace57188398f66377dae93c44285fa54d7496c7cf67db756ff810a805603f542b6f7367e521f18eb44a6adb9d886490b1c252d6b8448a03727582e451a2022e1ebd2186730e3ab90c9df3da47f63e471f23fc69a0986bb69398341ec1cce16d438cf47656627182193d97113f90c458d83a7e193f519a3911b19bb36a31520e2833a81d979d143630a8c2e3aa14510b94bdd313055046920e2bd97a3e2c1ee93bda"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7, 0x9, 0x7, [@generic={0xec, 0x9, "0981e84156dc5bcd36dcc2513c0a05c505836a0460297fcd65f2db3c526d7331c196c93a4a69bfbbabd82b8c1826bfed6ae3465cd228fe3c25d95877ff4b9c23fda2bffdece7b1f529a446f4ad01f88870eef377bcdfa8db82c4d2e720f2fcf791f0f570a69abe0c4b6b0e92180f2ba39d78ee7487f473d87a122d4fd902ee8509028531739efc5f8dd4d9d72851df50e9a682358f2be6cbdefa79ffce57cf0a4569976175909908f53a5d0e627b17bf16787eeac14911f1fd4aa39cf0a95084417a6dbc56466d16222fe02d1f0d2d35f2a2f6018ae8ebcbc2181b246fea1a017f45f89c61ab301563d8"}, @generic={0xd9, 0x4, "48eb8476fd74aa16a5bfcd7c8182ba6bc30fe89867a6728d4be975cd0bf9f44fa25dc4d6673bde2ed81198148ea80c7aedf74c101f904aee2a3495ca17e0cb382a7f27c939773de07731a0491b45a74fe460d868c794335a022113e48f798d42abbf364656e87b83ce5f92d8f3f1a8593a1be3dd8e1f53b341fbd475397a42fc509c485a095a30985ac0d9cb2d21a1942f7b76a986da11a29517c264c43b18bc80939613cfd3ebf8a230f0ace9d6b361816c72d45445702b6e0fc79dbfab80b562a7097bf1d85c20aad175489c084dcac3e9c65fd27582"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x0, 0xb, 0x7f}}]}}, {{0x9, 0x4, 0x17, 0x0, 0x4, 0xff, 0x6, 0x1a, 0x2, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "a6"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x9, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x7fff, 0x6, 0x9, 0x9, 0x9, 0x8}, @mdlm_detail={0x5c, 0x24, 0x13, 0xb, "c8aa87ddc45d14c9a09ccee9905d43f7755f8554745d226ef3513e4d251a3ab5d12b1502ae99fa7684019b92138dc43dd50b69979df974135e9a4462abf4122eef946847a6fa110b379a060716b5325b2572e798b89705e8"}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "e5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xd322}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0xc, 0x24, 0x7, 0x1, 0x5, [0x7, 0x1, 0x7]}, @mdlm={0x15, 0x24, 0x12, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xf, 0x8, 0xf}, @mdlm_detail={0x8b, 0x24, 0x13, 0xe4, "ce15c29dbc238ce20a6f5e19c8ef507453bd542b6d4ce0b4c8e69c43cb2705cd71290eb5040c701e41cd29910f972a8873a53169ede995c9e00133425dc22626834d2b3aadd163975b963f9fe51b33b60771a2a1a016f195f6fdc5e28dce5db52412cc5e3a74e9b643db06d72ec9e67edceaa6f397a8859e46f820fca3e99dd349d803cef2bb9d"}, @obex={0x5, 0x24, 0x15, 0x9a5a}, @dmm={0x7, 0x24, 0x14, 0x46, 0x18}]}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0xc4, 0x45}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x7, 0x81}}, {{0x9, 0x5, 0x5, 0x10, 0x218, 0x3, 0x6, 0xfd, [@generic={0x7e, 0xd, "09c23d6a97678fdda6a36a080de8929ca9a72f099a7d52f77dceaf2c878ef6b12a1083a59196eaee93d0fb8337b31a6691e9bb0519c3871a2a1b8ea2af2fd7977c741d9b305c011102552c554d900d7a266a19c557f8f960712aeab524477b5c1b7ab3746a707e3cb3e81a8e2bbdc50d8f50a92293fae645422fb460"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x80, 0x3}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x11, 0x9, 0x7, 0x3, 0xff, 0xcb}, 0x25, &(0x7f0000000a00)={0x5, 0xf, 0x25, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x4, 0x80}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xc, 0x0, 0x1, 0xf000, 0xac}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x4, 0x46d}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x409}}]}) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_setup(0x6b2b, &(0x7f0000000ac0)={0x0, 0x317d, 0x4000, 0x0, 0x80}, &(0x7f0000000b40)=0x0, &(0x7f0000000b80)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000bc0)=0x5, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={@rand_addr=0x64010101, 0x1, 0x0, 0x40, 0x0, [{@initdev}, {@broadcast}, {@dev}, {@private}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r4, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r4}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x4, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x5f, 0x4}, @restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x4}]}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0xd, [{0xf, 0x9, 0x4}, {0x1, 0x2, 0x3}]}, @volatile={0xe}, @enum={0x0, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x2}, {0x10, 0xb}, {0xb, 0xff}, {0x4, 0x8}, {0x3, 0x39}, {0x2, 0xd2}, {0x0, 0xb}, {0x6, 0x8}, {0xe, 0x401}, {0x6, 0x1}]}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @fwd={0xd}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0xfc, 0x1000, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002000)={0xfffff0eb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x13, 0x9, &(0x7f0000000d80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000e00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', r3, @fallback=0x1a, r8, 0x8, &(0x7f0000001f80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001fc0)={0x2, 0x2, 0x4, 0x6}, 0x10, r9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002040)=[{0x1, 0x2, 0x7, 0x8}, {0x3, 0x2, 0x2, 0xc}], 0x10, 0x2, @void, @value}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002140)={@loopback, r3}, 0x14) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000021c0)={@initdev, 0x0}, &(0x7f0000002200)=0x14) sendmsg$nl_route(r4, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)=@ipmr_delroute={0x64, 0x19, 0x100, 0x70bd2b, 0x25dfdbfd, {0x80, 0x80, 0x10, 0x3, 0xfe, 0x4, 0xc8, 0x8, 0x800}, [@RTA_TABLE={0x8, 0xf, 0xfffffff8}, @RTA_IIF={0x8, 0x3, r10}, @RTA_FLOW={0x8, 0xb, 0xb69}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_TABLE={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_TABLE={0x8, 0xf, 0x20000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000002340)={0x0, 0x47, "b6e73262e08a331dc6c1765bf3c0faa73bf0047255f35eba4b8a22db55a3587a259d1711d925c6b55dd49ca491092c4066a436e09d803aa2e37b16c323002e0cbddb909d5ae953"}, &(0x7f00000023c0)=0x4f) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000002400)={r12, 0x98, "20ec8631d2df57e6822ce89f281f22524b8a2317fadc82f4d33578ebd1e4c8d4cfb066a8b0330e5c92db10ef64fe0447a8166e9368413f9a23ecbcb3094dea8101e31e46c7491802a9cca54bfc137bbcd394d372aaa0e8669f01781016dd6809895ab60a8037c6e19d2b23a256d80bd0afe6278ee31f9abcbd51bad844c54f6f965bf907127690f541559774f211c2b8b1f414bfff9a981e"}, &(0x7f00000024c0)=0xa0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000002500)=@assoc_id=r12, &(0x7f0000002540)=0x4) bind$alg(r4, &(0x7f0000002580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) write$selinux_create(r4, &(0x7f0000002600)=@objname={'/usr/lib/telepathy/mission-control-5', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x60) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000003680)={&(0x7f0000002680)=[0x2, 0x0, 0x6d, 0x0, 0x0, 0x78, 0x9, 0x2, 0xfff, 0xc, 0x66b9, 0x4, 0xf, 0x1, 0x80000001, 0x3, 0x642, 0x87e, 0x401, 0xfff, 0x8, 0x7f, 0x9, 0x3, 0x6, 0x4, 0x0, 0x7f, 0x9, 0x231, 0x0, 0x3, 0x59, 0x8, 0xeae, 0x9, 0x6, 0x7, 0x0, 0x7, 0xffffffff, 0x0, 0x9, 0x3, 0x5, 0x8, 0x4, 0x2, 0x1, 0x0, 0x400, 0x7ff, 0x2, 0x1, 0x101, 0x0, 0x7, 0x40, 0x4, 0x9, 0x1, 0x0, 0x400, 0x4, 0x10000, 0x4, 0x3, 0xc, 0x2, 0x9a2, 0x10001, 0x5, 0x3, 0x2a17cc6f, 0x7f, 0x7, 0x36f4, 0xa1, 0x9, 0xfffffff7, 0x7, 0x9, 0x3, 0x7ff, 0x43, 0x3972a604, 0x5, 0x7, 0x4, 0x7, 0xa7, 0x3d2, 0xa, 0x7, 0x6, 0x5, 0x9, 0x7, 0xc636, 0xffffffff, 0x7, 0x3cbcb769, 0xd, 0x5, 0xffffffff, 0x5, 0x2, 0xffff, 0x4, 0x51e7dfcb, 0x3, 0x59, 0x5, 0x96, 0x9, 0x7, 0x9, 0x0, 0x78, 0x1ff, 0xb6, 0xd12, 0x5, 0x7, 0x0, 0x6, 0x7, 0x7fff, 0x9dad, 0x5, 0x4, 0x1, 0xa4e, 0x80, 0x115, 0x1, 0xcb7, 0x1, 0x40, 0x9, 0xfff, 0x7fff, 0x1, 0x6f605dc8, 0x57, 0x1, 0x80, 0x0, 0x1, 0x1000, 0x4, 0x2, 0xfffffffd, 0x5, 0x96d6, 0x2, 0x646e, 0x299, 0x80000000, 0x81, 0x1, 0x2, 0x7, 0x4, 0x3, 0xe, 0x2, 0xb6, 0x44, 0x4d7, 0x0, 0x2, 0x9, 0x5, 0x4, 0x7fff, 0x7, 0x101, 0x6, 0x4, 0x4, 0x101, 0x1, 0x80000000, 0xff, 0xffffffff, 0x6, 0x4, 0xf, 0xfffffffe, 0x3, 0xfffff001, 0x2ac, 0x4, 0xfffffff9, 0x3, 0x3, 0x800, 0x1ff, 0x1, 0x6, 0x3, 0xfffffffb, 0x1, 0x8, 0xfff, 0x1, 0x364, 0x8, 0x7, 0x8, 0x5, 0xfffffff7, 0x1, 0x0, 0xd, 0x1, 0xf38d, 0x7, 0x4, 0x8, 0x2, 0x1, 0x9, 0xe81, 0x2, 0x7fff, 0x90, 0x40, 0x6, 0x36be, 0x9, 0x5, 0x3, 0x3, 0x401, 0x8, 0x4, 0x1, 0x2, 0x1, 0x80000001, 0xa99d4575, 0x5, 0x0, 0x52d, 0x7fffffff, 0x7, 0x4, 0x4, 0x4, 0x7f, 0xffff, 0x0, 0x7, 0x1800000, 0x3, 0xffffffff, 0x4, 0xff, 0x44, 0x5, 0x9, 0x8, 0x2, 0x10, 0x219a, 0xde3d, 0x4, 0x9, 0x8, 0x7, 0x1ff, 0x8, 0x9, 0x9934, 0x0, 0x8, 0xa, 0x0, 0x1, 0x45dd9bb2, 0xffff, 0x846e, 0x8, 0x5, 0x9, 0x2, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x6, 0x0, 0x10001, 0x0, 0x1, 0x6, 0xffffffff, 0xb0, 0x3, 0x8, 0x4, 0xc2c, 0x7, 0x0, 0x3, 0x213, 0x7, 0x8, 0x0, 0x401, 0xd6, 0xff, 0x6, 0x2, 0x5, 0x6, 0x80000000, 0x401, 0x1, 0xc, 0x6, 0xa4, 0xfffffffb, 0x1, 0x2, 0x4, 0x9, 0x8000, 0x10000, 0xfffffffc, 0x3, 0x10001, 0x9, 0x4, 0x9, 0x9, 0x1, 0x1, 0x8, 0x7, 0x1, 0x9, 0x5, 0xfffff000, 0x10, 0x3, 0xfffffc00, 0x8, 0xeed8, 0x7, 0x2200, 0xe, 0x10, 0x6, 0x0, 0xed, 0x6, 0xfffffffa, 0xf8, 0x3, 0x29, 0x2, 0x9, 0x7, 0x0, 0x2, 0x8, 0xcc200000, 0x8, 0x8, 0x5, 0x3, 0x0, 0xf6d3, 0x5, 0xc, 0x200, 0x2, 0x8001, 0x3, 0x10001, 0x0, 0x2f1, 0x1ff, 0x2, 0x1, 0x4, 0x401, 0x8000, 0x0, 0xd, 0x2, 0x8, 0xf2c, 0x3, 0x2, 0x7, 0x7, 0xfff, 0xdb90db9, 0x80000001, 0x7ff, 0x3eff, 0x6132, 0x8, 0x3, 0xe19, 0x6, 0x5, 0x6006, 0x1000, 0x1, 0x9, 0x0, 0x20000, 0x27d6b73b, 0xe7d, 0x481, 0x6ee, 0x52c47ae8, 0x6, 0x2, 0x8, 0x0, 0x7, 0x10000, 0x5, 0x81, 0x2, 0x2, 0x3, 0x10001, 0x8001, 0x7, 0x0, 0x0, 0x5, 0x5, 0x200, 0xc0000000, 0x5, 0x400, 0x0, 0x5ba, 0x6, 0x6, 0x0, 0xe, 0x0, 0x8, 0x51, 0x8e9d, 0x4, 0xfffffffe, 0x4, 0x1, 0x67f0, 0x4, 0x80000001, 0x401, 0x400, 0x2, 0xfffffffc, 0x8, 0x6, 0xfffffff6, 0x0, 0xfffffffa, 0x4, 0x9, 0x2, 0x2, 0x1, 0x7, 0x3, 0xfffffff9, 0x4, 0x5, 0x56, 0xfffffff8, 0x9, 0xd, 0x4, 0x22, 0x0, 0x2, 0x9, 0x0, 0x400, 0x1ff, 0x0, 0xb52, 0x0, 0x7fff, 0x1ff, 0x4, 0x101, 0x1, 0xc, 0x10000, 0x235, 0x6, 0x8, 0x2, 0xfffffffc, 0x6, 0x1000, 0x0, 0x1, 0x1, 0x4f15, 0xffffffe4, 0x1ff, 0x800, 0xbc8, 0x358c, 0x0, 0x9, 0x85b6, 0x0, 0xff, 0x34, 0x5, 0x0, 0x6, 0x3, 0xa5, 0xc, 0x81, 0x3, 0x74, 0xff, 0x1, 0x7fffffff, 0x8, 0x5, 0x0, 0x2, 0x9, 0x798c, 0x3, 0x64, 0x10000, 0x683f1803, 0x0, 0x32, 0x4, 0x3, 0xfffffffe, 0x1, 0x4, 0x9, 0x8f, 0x6, 0x3, 0x9, 0x1, 0x4, 0x3, 0x8, 0x8, 0x4, 0xef, 0x10001, 0x57, 0x9, 0x7fffffff, 0x6, 0x5, 0x88c, 0x4, 0x1, 0x7ff, 0x8, 0x9, 0x4, 0x6, 0x1, 0x0, 0x6, 0x7698, 0x34, 0x200, 0x6, 0x80000001, 0x3, 0xfff, 0x80000000, 0x4, 0xf, 0xffffffff, 0x8001, 0x1, 0x4, 0x1, 0x4, 0x3, 0x2, 0x9, 0x1, 0xd, 0x9, 0x3, 0x4000000, 0x100, 0x8000, 0x7, 0xe, 0x9, 0x0, 0x1, 0x80000001, 0x400, 0x5, 0x6, 0x200, 0x80000000, 0x1, 0x7f, 0x7d, 0x5, 0x6, 0x8, 0x1, 0x5, 0xeb, 0x9, 0x2, 0xe44, 0xba, 0x0, 0x59fc, 0xc, 0xfffffffb, 0x9, 0x5, 0x8, 0x5, 0x8, 0x4, 0xc46, 0x5, 0x2be, 0x7fffffff, 0x36, 0x3, 0x7f, 0xef03, 0x4, 0x8, 0x7, 0x6, 0x6, 0x3, 0xe5, 0xffffff01, 0x1, 0xd, 0x1, 0x3, 0x10000, 0x48, 0xeb89, 0x1, 0x8, 0xed6d, 0x10001, 0xab9, 0x2, 0x8, 0xd3, 0x3, 0x0, 0x3, 0x3, 0xb5, 0xffff, 0x9, 0x27, 0x3, 0x8, 0x6, 0x8, 0xfffffffa, 0xe0f, 0x5, 0x3, 0x7, 0x9, 0x9, 0x3, 0x8, 0x4, 0x9, 0x7f, 0x2, 0x6, 0x2, 0x100000, 0x8, 0x5, 0xfffffffd, 0x8001, 0xf1, 0xfffffffe, 0xe8f4, 0x3, 0x7, 0x40, 0x40, 0x9, 0x3, 0x101, 0x3, 0xfffffffd, 0x1, 0x7ff, 0x2, 0x5, 0xec, 0x7, 0x72d, 0x7, 0x9, 0x7, 0x7, 0xf6, 0x9, 0x434, 0x29, 0x7, 0x8, 0x4, 0x3, 0x200, 0xfffffff9, 0x4, 0x7, 0x5, 0xffff585c, 0x3ff, 0x0, 0x4, 0x7ff, 0x9, 0x7, 0xff, 0x8, 0xe, 0x400, 0x4, 0x1, 0x8, 0x5, 0xdb, 0x5b, 0x6, 0x1, 0x1, 0x5320, 0x6, 0x8, 0xffff8001, 0x2, 0xfff, 0x2, 0x8000, 0x4, 0x6, 0x67e5, 0x9, 0x3, 0x1, 0x2, 0x6, 0x2, 0x7, 0x3, 0x4, 0x3ff, 0x4800, 0x4d0b, 0x10001, 0x296, 0x3, 0x7, 0x10, 0x9, 0x9f07, 0xb, 0x4, 0x40000000, 0x4, 0x0, 0x60, 0x0, 0x2, 0x4, 0x80000000, 0x1, 0x8, 0x231f, 0x800, 0x3ff, 0x0, 0x4, 0xb39, 0xffff, 0x0, 0x7, 0x5, 0x5, 0xfffffffe, 0x248d, 0x9, 0x4, 0x7, 0x10001, 0x4, 0xfffffffb, 0x1, 0x6, 0xfff, 0x3ff, 0x5, 0x7, 0x7, 0x2, 0x800, 0x2, 0x101, 0x9, 0x4, 0x8001, 0x3, 0x1, 0x8001, 0x1, 0x0, 0x7, 0x3, 0x200, 0x81, 0x1, 0x8, 0x6, 0x9, 0x800, 0x6, 0x673, 0x6, 0x7723641a, 0x8, 0x5, 0x7, 0x1, 0xf, 0x5c, 0x7, 0x3, 0xff, 0x3000, 0x7, 0x1ff, 0x7fff, 0xa5d, 0x7, 0x4, 0x5, 0xe, 0x8, 0x40, 0x0, 0x9, 0xff, 0x9, 0x9, 0x8, 0x7, 0x1000, 0xfdcc, 0x7f, 0x7, 0x0, 0xc12, 0x3, 0x5, 0x3, 0xfffffff9, 0xc88d, 0x0, 0x6, 0x6, 0x8, 0x6, 0x7, 0x3, 0x1, 0x3, 0x7, 0xfffffc01, 0x4, 0x4, 0x5, 0x3, 0xfffffff8, 0x2, 0x7, 0x10000, 0x7ff, 0x9, 0xa, 0x401, 0x7, 0xfffffff9, 0x80, 0x5, 0x5, 0xeca7, 0xbf, 0x1, 0xffff0001, 0x40, 0x3, 0x7fffffff, 0x3, 0x0, 0x4, 0x1, 0x1, 0x1000, 0x100, 0x8, 0x1025, 0xde98, 0x1, 0x200, 0x800, 0xe2d, 0x6a7b, 0x6af, 0x3ff, 0x4, 0x10000, 0x3, 0x2, 0x4, 0x1, 0x1, 0x7ff, 0xe60, 0x3, 0xd, 0x0, 0x3, 0x5, 0x80000000, 0x80000000, 0x80000001, 0x0, 0x3, 0x1, 0x800, 0x9, 0x7335, 0x3, 0xfffffff8, 0x1, 0x40, 0x5, 0x120000, 0x5, 0x81, 0x364, 0x1, 0x2e7, 0x1, 0x2, 0x8001, 0x8, 0x5, 0x401, 0x8, 0xc807, 0x400, 0x2346, 0x0, 0x6, 0x10, 0xb73, 0xff, 0x8, 0x2, 0x1, 0x1, 0x2, 0x0, 0x8, 0x7fffffff, 0x2, 0x8, 0x4, 0x6, 0x7, 0x4, 0x7, 0x6, 0x4, 0x4, 0x1, 0x7, 0x0, 0xd, 0x6, 0xffff, 0xf, 0x5bb6, 0xfe, 0x9, 0x200], 0x1, 0x400, 0xb9b}) clock_gettime(0x1, &(0x7f00000036c0)) renameat2(r4, &(0x7f0000003700)='./file0\x00', r4, &(0x7f0000003740)='./file0\x00', 0x4) 9.454968725s ago: executing program 4 (id=2417): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100), 0x0) 9.288356327s ago: executing program 4 (id=2419): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) 8.947623531s ago: executing program 4 (id=2421): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd8a", 0x2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r6, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4d, 0xda, 0xcc, 0x20, 0xe41, 0x4750, 0x269c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf4, 0x2, 0x1, 0xd2, 0x98, 0x2c, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.084984371s ago: executing program 5 (id=2423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vcsa(0x0, 0x9, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4082, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 7.316121209s ago: executing program 8 (id=2424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) shutdown(0xffffffffffffffff, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) listen(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x4000) 7.196067128s ago: executing program 7 (id=2425): syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @private}}}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$P9_RSTATu(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x8, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @local, @multicast2}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdir(&(0x7f0000000480)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0x20, &(0x7f0000001b40)={&(0x7f0000001a00)=""/128, 0x80, 0x0, &(0x7f0000001a80)=""/143, 0x8f}}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 7.152166785s ago: executing program 5 (id=2426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) pwritev2(r0, 0x0, 0x0, 0x5405, 0x100, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) symlink(0x0, 0x0) syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r4, 0x0, 0x1000000000, 0x5}) 5.671720245s ago: executing program 7 (id=2428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) ioperm(0x0, 0x6e, 0xe) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 5.312674588s ago: executing program 5 (id=2429): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100), 0x0) 5.156924725s ago: executing program 1 (id=2430): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82781) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result}], 0x1c) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x102) r2 = userfaultfd(0x80801) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) utimensat(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x200000, 0x0) 4.408186945s ago: executing program 4 (id=2431): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0xc0, 0x17, 0x2, "1d3a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.400163692s ago: executing program 5 (id=2432): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004040000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000002000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x9, "ef889c8e"}]}}, 0x0}, 0x0) 4.288609407s ago: executing program 7 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020207025003f000000202020db1af8ff41000000bca100000000000407010000f8ff809eb73b4e0008000000b70300000000000085000000d300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.225093697s ago: executing program 1 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) 4.144075036s ago: executing program 7 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x8800) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000380)=ANY=[], 0x2000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.123923266s ago: executing program 1 (id=2436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x1e}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004804) 3.2880791s ago: executing program 7 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$loop(0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = userfaultfd(0xf5a2f3048d58d0eb) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r3, r6, 0x0) epoll_create(0x200008) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.277856935s ago: executing program 1 (id=2438): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) socket(0x1, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') (rerun: 32) fchdir(r3) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_emit_ethernet(0x200000, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) (async) r8 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) 3.096163814s ago: executing program 1 (id=2439): syz_open_dev$video4linux(0x0, 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @private}}}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$P9_RSTATu(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x8, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @local, @multicast2}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdir(&(0x7f0000000480)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0x20, &(0x7f0000001b40)={&(0x7f0000001a00)=""/128, 0x80, 0x0, &(0x7f0000001a80)=""/143, 0x8f}}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.982438679s ago: executing program 1 (id=2440): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x7, 0x6, 0x304, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x61e}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x22, 0x1, 0x0}) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2022, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x101800) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1.913881802s ago: executing program 8 (id=2441): r0 = socket(0x11, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000ac0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$sock(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="306dfc73818419cd9decc4f075c9b82cf9983c9c4408b64fdbe919948751b3f44e537ed5b404ed0c617ecd2d8c850c2e6d92d119cde4", 0x36}, {&(0x7f0000000480)="fd1532476e1796f4d866dbba4f7a63a405cea4a561fa86c77f6b3702610f1266ec3dc8b4ec0bf1b28d5d47bfe83cb2684ac052c73aa726bdcba5ed96ef5d338b972ad58526052a273f2b03766e59b58096b4a9bcfa2facdae808f61e5df106aa24778389d7375828fb1f9c47dd95effc03bbe07eaa57c2e962669da4c5368656ce91ec5129992ca0c1811d", 0x8b}, {&(0x7f0000000380)="6baf57ff8ad1fd3575274f0a9a08e57c5e98976513681673cdf86ef56aac5340", 0x20}, {&(0x7f0000000600)="0d63b9b60ee5d36104b0a731de6cfaa337cd68b82855820711213c7466ca38b1416324fce4308644a2c2a3ab17f34c9df8e3fcb0f485464ed2473b47eea756b433f2bb36d9278414f706c29bf213c312e8ad2915c1a50c9954a5b846011513934b0fa27e5af51902fe6ff9755b2a8ea0182c46e5c4f6502176e247841435e41e30b77a60aeaeadae412d155f43898292875b3dcaadb96aa8f8d3d053", 0x9c}, {&(0x7f00000006c0)="d674e7ae82812311cb68443b5aa9dfc336abdda928bfc14e711e9d5e1638e39d1586f687bf2dc7777f2bf858a906b32ed57c34d20dbc46321871a27e3264ebe0610f0068489bc85544ce781591ed12d8e5cf9a23f4e61c8d095f6287827945824e587efa578cfdcaa174c3c5edc99c7298c6cd19ffb0b262be73e721821ff1acbfadf259d4139547d227db8f427a5a69376e29006fe733dec64c667a0da326bf266f3ee794692f9ce7e4090b5b252dd487ec5a62a3e132241ff5df32b9bdbb88e4326ca8604fffc882e85116af4e26414be0df4af5b58b6315757ff41243f91653908ef6fe11be8e8dbdba", 0xeb}, {&(0x7f00000007c0)="f01efeb2b8082d54fd012b83f532036ca50750c013e14af81b4c3bc1c6b894c209be0109bc55c61875fc78a62293b5be4de592db513fa3af8741b9a921fe6d289fd0dade3be293b1e055d4c7eae1945b6ffeee28446f79337a11d7060792db66f0820b3794276e72c207814744e76e466ea88c8e8c9453a1c10496007ebf78892469f9d2e25631afb4f9e93ebba15adcc6a02e79447770c19915c95b18ac570976c03eabff1bf200b457c9ef71efb0ad2ab269c13f2635e50f82e860544bf66b3bbd2539d8545a61619d9251905d4c829dcae2", 0xd3}, {&(0x7f0000000540)="7189b59428cf9d111025b75fc0b29b25d1", 0x11}, {&(0x7f0000000580)="daa324c67c7a", 0x6}], 0x8, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x4bb9ffe7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1d7}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}]}]}, 0x44}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2003, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) 1.383324362s ago: executing program 8 (id=2442): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100), 0x0) 1.204186134s ago: executing program 8 (id=2443): pipe2(&(0x7f0000000040), 0x0) io_setup(0x8, 0x0) socket(0x2b, 0x80801, 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae50003c00fbff008311001f9f660fcf0e5a05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xfffd, 0x6, @empty, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000002500000b"], 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x123280, 0x0) write$binfmt_aout(r6, 0x0, 0xff2e) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 1.203587303s ago: executing program 5 (id=2444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) ioperm(0x0, 0x6e, 0xe) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 194.703417ms ago: executing program 5 (id=2445): socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000280)={0x0, 0x80f8, 0x10100, 0x0, 0x12c}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @val=@netfilter}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "c06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000300)={0x20, 0xe, 0x6, "8717a0de9630"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 194.231926ms ago: executing program 4 (id=2446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x1f) 102.537972ms ago: executing program 4 (id=2447): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x36bc, &(0x7f0000000540)={0x0, 0x2, 0x10148}, &(0x7f00000005c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0xbd, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x161600, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0x57, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES64=r5], 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0x2bf, 0x0, r3}, &(0x7f0000000240), &(0x7f0000000200)) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f0000002000/0x1000)=nil}) r9 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r9}, 0x68) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700ff"], 0x48}, 0x1, 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000079f8bd312519f1e426a2e5ff02a1bf74bd4a2b72fdb1a2080000000000000000", @ANYRESHEX=r11, @ANYBLOB="0000000000000000480012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc"], 0x6c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 0s ago: executing program 7 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r2, &(0x7f00000000c0), 0x0, 0x100001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x0, 0xf2473ed90fb552e1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "77edbc57c4c1688c209be218c1cd552c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x44800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x1000c010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x44) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3f53, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="01000100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x16, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @func, @call={0x85, 0x0, 0x0, 0x6f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x16, &(0x7f0000000580)=""/22, 0x41000, 0x2, '\x00', r4, 0x0, r6, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x9, 0xd2f6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r7, r8, r9, r1], 0x0, 0x10, 0x7, @void, @value}, 0x94) r10 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r10, &(0x7f0000002700)=""/102392, 0x18ff8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bind$bt_hci(r11, 0x0, 0x0) write$binfmt_misc(r11, &(0x7f0000000100), 0x6) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) kernel console output (not intermixed with test programs): 6871][T12285] ? __pfx_lock_release+0x10/0x10 [ 528.586901][T12285] ? __might_fault+0xe3/0x190 [ 528.586924][T12285] ? rcu_is_watching+0x12/0xc0 [ 528.586946][T12285] do_syscall_64+0xcd/0x250 [ 528.586972][T12285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.586995][T12285] RIP: 0033:0x7ff58cf8d169 [ 528.587009][T12285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.587025][T12285] RSP: 002b:00007ff58dd60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.587042][T12285] RAX: ffffffffffffffda RBX: 00007ff58d1a6160 RCX: 00007ff58cf8d169 [ 528.587053][T12285] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 000000000000000a [ 528.587063][T12285] RBP: 00007ff58dd60090 R08: 0000000000000000 R09: 0000000000000000 [ 528.587074][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.587084][T12285] R13: 0000000000000000 R14: 00007ff58d1a6160 R15: 00007ffd7f169ab8 [ 528.587108][T12285] [ 529.334217][T12300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62750 sclass=netlink_route_socket pid=12300 comm=syz.4.1812 [ 529.875439][T12301] veth1_to_batadv: vlans aren't supported yet for dev_uc|mc_add() [ 529.952175][T12292] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 529.984144][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 529.984155][ T30] audit: type=1400 audit(1742665048.908:1265): avc: denied { write } for pid=12296 comm="syz.7.1811" path="socket:[41547]" dev="sockfs" ino=41547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 530.019706][T12306] veth1_to_batadv: vlans aren't supported yet for dev_uc|mc_add() [ 530.052432][T12313] ALSA: seq fatal error: cannot create timer (-22) [ 530.939611][ T5869] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 531.152958][ T5869] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 531.186838][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.269981][ T5869] usb 5-1: config 0 descriptor?? [ 531.503152][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 531.719666][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 531.727202][ T10] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 531.737663][ T10] usb 7-1: config 2 has no interface number 0 [ 531.745239][ T10] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.764004][ T10] usb 7-1: config 2 interface 241 has no altsetting 0 [ 531.780702][ T10] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 531.792444][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.802104][ T10] usb 7-1: Product: syz [ 531.807290][ T10] usb 7-1: Manufacturer: syz [ 531.813327][ T10] usb 7-1: SerialNumber: syz [ 531.823749][ T10] ti_usb_3410_5052 7-1:2.241: TI USB 3410 1 port adapter converter detected [ 531.949859][ T10] ti_usb_3410_5052 7-1:2.241: missing endpoints [ 532.041239][T12349] FAULT_INJECTION: forcing a failure. [ 532.041239][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 532.056390][T12349] CPU: 1 UID: 0 PID: 12349 Comm: syz.1.1821 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 532.056413][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.056424][T12349] Call Trace: [ 532.056436][T12349] [ 532.056443][T12349] dump_stack_lvl+0x16c/0x1f0 [ 532.056471][T12349] should_fail_ex+0x50a/0x650 [ 532.056503][T12349] should_failslab+0xc2/0x120 [ 532.056523][T12349] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 532.056540][T12349] ? trace_lock_acquire+0x14e/0x1f0 [ 532.056560][T12349] ? skb_clone+0x190/0x3f0 [ 532.056590][T12349] skb_clone+0x190/0x3f0 [ 532.056616][T12349] dev_queue_xmit_nit+0x38f/0xbc0 [ 532.056645][T12349] ? netif_skb_features+0x3b0/0xd50 [ 532.056670][T12349] dev_hard_start_xmit+0x283/0x7b0 [ 532.056696][T12349] __dev_queue_xmit+0x7f0/0x43e0 [ 532.056729][T12349] ? __pfx___dev_queue_xmit+0x10/0x10 [ 532.056772][T12349] ? __asan_memcpy+0x3c/0x60 [ 532.056798][T12349] ? __asan_memcpy+0x3c/0x60 [ 532.056823][T12349] ? __skb_clone+0x570/0x760 [ 532.056853][T12349] netlink_deliver_tap+0xa87/0xd30 [ 532.056884][T12349] netlink_unicast+0x5e1/0x7f0 [ 532.056911][T12349] ? __pfx_netlink_unicast+0x10/0x10 [ 532.056943][T12349] netlink_sendmsg+0x8b8/0xd70 [ 532.056972][T12349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.057013][T12349] ____sys_sendmsg+0xaaf/0xc90 [ 532.057033][T12349] ? copy_msghdr_from_user+0x10b/0x160 [ 532.057059][T12349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.057092][T12349] ___sys_sendmsg+0x135/0x1e0 [ 532.057119][T12349] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.057168][T12349] ? __fget_files+0x206/0x3a0 [ 532.057192][T12349] __sys_sendmsg+0x16e/0x220 [ 532.057218][T12349] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.057261][T12349] do_syscall_64+0xcd/0x250 [ 532.057287][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.057310][T12349] RIP: 0033:0x7ff87838d169 [ 532.057324][T12349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.057340][T12349] RSP: 002b:00007ff8791c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.057357][T12349] RAX: ffffffffffffffda RBX: 00007ff8785a6160 RCX: 00007ff87838d169 [ 532.057369][T12349] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 000000000000000a [ 532.057380][T12349] RBP: 00007ff8791c5090 R08: 0000000000000000 R09: 0000000000000000 [ 532.057391][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.057401][T12349] R13: 0000000000000000 R14: 00007ff8785a6160 R15: 00007ffcad7e4348 [ 532.057426][T12349] [ 532.408727][ T10] usb 7-1: USB disconnect, device number 39 [ 532.808703][T12353] xt_hashlimit: max too large, truncated to 1048576 [ 533.060035][T12358] ALSA: seq fatal error: cannot create timer (-22) [ 533.080326][ T5871] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 533.539916][ T5871] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 533.551779][ T5869] ath6kl: Failed to read usb control message: -110 [ 533.576893][ T5869] ath6kl: Unable to read the bmi data from the device: -110 [ 533.590381][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.605531][ T5869] ath6kl: Unable to recv target info: -110 [ 533.616735][ T5869] ath6kl: Failed to init ath6kl core: -110 [ 533.623991][ T5869] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 533.636953][ T5871] usb 2-1: config 0 descriptor?? [ 533.653302][ T5869] usb 5-1: USB disconnect, device number 48 [ 533.673720][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 533.696289][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 533.697556][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.728315][T12364] netlink: 'syz.4.1829': attribute type 11 has an invalid length. [ 533.877250][ T5871] kaweth 2-1:0.0: Firmware present in device. [ 533.890146][ T5871] kaweth 2-1:0.0: Statistics collection: 92b67af3 [ 533.897889][ T5871] kaweth 2-1:0.0: Multicast filter limit: e20 [ 533.905487][ T5871] kaweth 2-1:0.0: MTU: 8346 [ 533.911475][ T5871] kaweth 2-1:0.0: Read MAC address 94:0c:be:0d:02:f3 [ 534.366011][ T5871] kaweth 2-1:0.0: kaweth interface created at eth9 [ 535.200060][T12390] FAULT_INJECTION: forcing a failure. [ 535.200060][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 535.215213][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.5.1833 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 535.215236][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.215247][T12390] Call Trace: [ 535.215253][T12390] [ 535.215260][T12390] dump_stack_lvl+0x16c/0x1f0 [ 535.215288][T12390] should_fail_ex+0x50a/0x650 [ 535.215320][T12390] should_failslab+0xc2/0x120 [ 535.215340][T12390] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 535.215358][T12390] ? trace_lock_acquire+0x14e/0x1f0 [ 535.215384][T12390] ? skb_clone+0x190/0x3f0 [ 535.215414][T12390] skb_clone+0x190/0x3f0 [ 535.215442][T12390] dev_queue_xmit_nit+0x38f/0xbc0 [ 535.215471][T12390] ? netif_skb_features+0x3b0/0xd50 [ 535.215496][T12390] dev_hard_start_xmit+0x283/0x7b0 [ 535.215523][T12390] __dev_queue_xmit+0x7f0/0x43e0 [ 535.215556][T12390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 535.215600][T12390] ? __asan_memcpy+0x3c/0x60 [ 535.215626][T12390] ? __asan_memcpy+0x3c/0x60 [ 535.215651][T12390] ? __skb_clone+0x570/0x760 [ 535.215682][T12390] netlink_deliver_tap+0xa87/0xd30 [ 535.215712][T12390] netlink_unicast+0x5e1/0x7f0 [ 535.215740][T12390] ? __pfx_netlink_unicast+0x10/0x10 [ 535.215772][T12390] netlink_sendmsg+0x8b8/0xd70 [ 535.215801][T12390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.215837][T12390] ____sys_sendmsg+0xaaf/0xc90 [ 535.215857][T12390] ? copy_msghdr_from_user+0x10b/0x160 [ 535.215883][T12390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.215916][T12390] ___sys_sendmsg+0x135/0x1e0 [ 535.215943][T12390] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.215980][T12390] ? __pfx_lock_release+0x10/0x10 [ 535.216004][T12390] ? trace_lock_acquire+0x14e/0x1f0 [ 535.216033][T12390] ? __fget_files+0x206/0x3a0 [ 535.216058][T12390] __sys_sendmsg+0x16e/0x220 [ 535.216084][T12390] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.216127][T12390] do_syscall_64+0xcd/0x250 [ 535.216153][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.216177][T12390] RIP: 0033:0x7f4bb498d169 [ 535.216191][T12390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.216207][T12390] RSP: 002b:00007f4bb5720038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.216224][T12390] RAX: ffffffffffffffda RBX: 00007f4bb4ba6160 RCX: 00007f4bb498d169 [ 535.216235][T12390] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 000000000000000a [ 535.216246][T12390] RBP: 00007f4bb5720090 R08: 0000000000000000 R09: 0000000000000000 [ 535.216256][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.216266][T12390] R13: 0000000000000000 R14: 00007f4bb4ba6160 R15: 00007ffd7b9bd038 [ 535.216290][T12390] [ 535.574307][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'. [ 535.830725][ T5898] usb 2-1: USB disconnect, device number 50 [ 535.931848][T12399] ALSA: seq fatal error: cannot create timer (-22) [ 538.494803][ T30] audit: type=1326 audit(1742665057.428:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.494833][ T30] audit: type=1326 audit(1742665057.428:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495017][ T30] audit: type=1326 audit(1742665057.428:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495231][ T30] audit: type=1326 audit(1742665057.428:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495370][ T30] audit: type=1326 audit(1742665057.428:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495550][ T30] audit: type=1326 audit(1742665057.428:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495777][ T30] audit: type=1326 audit(1742665057.428:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.495929][ T30] audit: type=1326 audit(1742665057.428:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.496796][ T30] audit: type=1326 audit(1742665057.428:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.497010][ T30] audit: type=1326 audit(1742665057.428:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf138d169 code=0x7ffc0000 [ 538.510310][T12421] kAFS: unparsable volume name [ 538.838222][T12425] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 538.850360][T12425] VFS: Can't find a romfs filesystem on dev nullb0. [ 538.850360][T12425] [ 539.014318][T12429] hsr0: entered promiscuous mode [ 539.234456][T12433] sp0: Synchronizing with TNC [ 539.246188][T12436] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 539.255950][T12433] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 539.268899][T12436] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1846'. [ 539.280303][T12433] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1846'. [ 539.923975][T12455] ALSA: seq fatal error: cannot create timer (-22) [ 541.008355][T12460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=12460 comm=syz.1.1853 [ 542.381478][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1853'. [ 543.039767][T12429] hsr0: left promiscuous mode [ 543.121687][T12483] xt_recent: Unsupported userspace flags (000000da) [ 543.136740][T12482] kAFS: No cell specified [ 543.966764][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 543.966779][ T30] audit: type=1326 audit(1742665062.898:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.966933][ T30] audit: type=1326 audit(1742665062.898:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.971070][ T30] audit: type=1326 audit(1742665062.908:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.971552][ T30] audit: type=1326 audit(1742665062.908:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.971693][ T30] audit: type=1326 audit(1742665062.908:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.971966][ T30] audit: type=1326 audit(1742665062.908:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.972139][ T30] audit: type=1326 audit(1742665062.908:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 543.972273][ T30] audit: type=1326 audit(1742665062.908:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.7.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 544.006530][ T30] audit: type=1400 audit(1742665062.938:1298): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 544.405511][ T30] audit: type=1400 audit(1742665063.338:1299): avc: denied { write } for pid=12502 comm="syz.6.1866" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 544.917885][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.402978][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.554535][T12531] netlink: 'syz.1.1872': attribute type 1 has an invalid length. [ 547.615728][T12531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.826646][T12531] veth3: entered promiscuous mode [ 547.842421][T12531] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 548.095505][T11785] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 548.178944][T12539] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 548.188629][T12539] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 548.199374][T12539] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 548.208790][T12539] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 548.593512][T11785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 548.628419][T11785] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 548.660282][T11785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 548.705401][T11785] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 548.786592][T11785] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 548.830602][T12549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.834828][T11785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.933594][T11785] usb 5-1: Product: syz [ 548.939740][T11785] usb 5-1: Manufacturer: syz [ 548.945368][T11785] usb 5-1: SerialNumber: syz [ 549.185821][T11785] usb 5-1: config 0 descriptor?? [ 549.202354][T11785] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 549.220620][T12547] atomic_op ffff8880527f5998 conn xmit_atomic 0000000000000000 [ 549.457058][T11785] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 549.599747][ T47] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 549.748545][ T5898] usb 5-1: USB disconnect, device number 49 [ 549.779690][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 549.788186][ T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.825806][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 549.837589][ T47] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 549.851448][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.870310][ T47] usb 2-1: config 0 descriptor?? [ 550.946173][T12572] use of bytesused == 0 is deprecated and will be removed in the future, [ 550.964014][T12572] use the actual size instead. [ 551.067341][ T5823] usb 2-1: USB disconnect, device number 51 [ 552.489771][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 552.489808][ T30] audit: type=1400 audit(1742665071.388:1302): avc: denied { ioctl } for pid=12580 comm="syz.7.1885" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.620341][T12611] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 554.650663][T12611] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1894'. [ 554.690822][T12611] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 554.740484][T12611] netlink: 'syz.1.1894': attribute type 2 has an invalid length. [ 556.199714][ T5871] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 556.379636][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 556.396013][ T5871] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 556.419633][ T5871] usb 2-1: config 179 has no interface number 0 [ 556.437310][ T5871] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 556.481752][ T5871] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 556.576430][ T5871] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 556.679633][ T5871] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 556.709646][ T5871] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 556.864772][ T5871] usb 2-1: config 179 interface 65 has no altsetting 0 [ 556.889585][ T5871] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 556.919674][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.989023][ T5871] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input36 [ 557.069934][ T5180] input input36: unable to receive magic message: -110 [ 557.098520][ T5180] input input36: unable to receive magic message: -32 [ 557.191912][ T5180] input input36: unable to receive magic message: -32 [ 557.214072][ T30] audit: type=1400 audit(1742665076.148:1303): avc: denied { ioctl } for pid=12627 comm="syz.5.1897" path="socket:[42272]" dev="sockfs" ino=42272 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 557.370461][ T5180] input input36: unable to receive magic message: -32 [ 557.408266][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.418462][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.429568][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.439695][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.469196][ T47] usb 2-1: USB disconnect, device number 52 [ 557.476494][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.490873][ T47] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 557.781250][ T30] audit: type=1400 audit(1742665076.718:1304): avc: denied { shutdown } for pid=12643 comm="syz.7.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 557.805022][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.984404][T12677] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[12677] [ 559.367650][T12680] netlink: 'syz.7.1914': attribute type 7 has an invalid length. [ 559.377079][T12680] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1914'. [ 559.491312][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 559.535934][T12682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53760 sclass=netlink_route_socket pid=12682 comm=syz.1.1916 [ 559.559612][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 559.581586][T12687] fuse: Bad value for 'fd' [ 559.806999][T12696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=12696 comm=syz.1.1918 [ 559.843576][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.857717][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.868513][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.877683][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.886532][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.895189][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.119664][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1921'. [ 560.242957][T12695] chnl_net:caif_netlink_parms(): no params data found [ 560.416921][ T30] audit: type=1326 audit(1742665079.348:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.463336][ T30] audit: type=1326 audit(1742665079.348:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.491464][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.508474][T12713] kAFS: unparsable volume name [ 560.514285][ T30] audit: type=1326 audit(1742665079.398:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.542387][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.554860][ T30] audit: type=1326 audit(1742665079.398:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.583494][ T30] audit: type=1326 audit(1742665079.398:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.611593][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.618951][ T30] audit: type=1326 audit(1742665079.428:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.646942][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.654277][ T30] audit: type=1326 audit(1742665079.428:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.683546][ T30] audit: type=1326 audit(1742665079.428:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 560.711682][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.721574][ T30] audit: type=1326 audit(1742665079.438:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 561.106237][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.129772][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.138341][T12695] bridge_slave_0: entered allmulticast mode [ 561.237647][T12695] bridge_slave_0: entered promiscuous mode [ 561.246344][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.349620][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.358247][T12695] bridge_slave_1: entered allmulticast mode [ 561.366354][T12695] bridge_slave_1: entered promiscuous mode [ 561.406739][T12731] fuse: Bad value for 'fd' [ 561.546106][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.568087][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.674154][T12695] team0: Port device team_slave_0 added [ 561.683920][T12695] team0: Port device team_slave_1 added [ 561.730650][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.747594][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.797747][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 561.939696][ T5827] Bluetooth: hci4: command tx timeout [ 561.985192][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.029997][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.124698][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.213053][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.630310][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.701175][T12695] hsr_slave_0: entered promiscuous mode [ 562.740398][T12695] hsr_slave_1: entered promiscuous mode [ 562.747501][T12695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.829673][T12695] Cannot create hsr debugfs directory [ 563.339662][T11785] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 563.543247][T12695] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.590669][T11785] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 563.622877][T11785] usb 2-1: config 0 has no interface number 0 [ 563.633825][T12695] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 563.661538][T12695] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 563.673831][T11785] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 563.684871][T11785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.697667][T11785] usb 2-1: Product: syz [ 563.705771][T12695] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 563.714042][T11785] usb 2-1: Manufacturer: syz [ 563.720025][T11785] usb 2-1: SerialNumber: syz [ 563.727182][T11785] usb 2-1: config 0 descriptor?? [ 563.734359][T11785] hub 2-1:0.30: bad descriptor, ignoring hub [ 563.741801][T11785] hub 2-1:0.30: probe with driver hub failed with error -5 [ 563.821207][ T5827] Bluetooth: Wrong link type (-71) [ 564.517171][ T5827] Bluetooth: hci4: command tx timeout [ 564.539943][T11785] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 564.616214][T12768] kAFS: unparsable volume name [ 564.619640][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 564.619654][ T30] audit: type=1326 audit(1742665083.538:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.676853][ T30] audit: type=1326 audit(1742665083.538:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.706152][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.720206][ T30] audit: type=1326 audit(1742665083.538:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.752051][T12695] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.773208][ T30] audit: type=1326 audit(1742665083.538:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.805028][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.812722][ T30] audit: type=1326 audit(1742665083.538:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.813503][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.922560][ T30] audit: type=1326 audit(1742665083.538:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 564.997797][T12772] fuse: Bad value for 'fd' [ 565.013988][ T30] audit: type=1326 audit(1742665083.538:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 565.111697][T11785] usb 2-1: USB disconnect, device number 53 [ 565.112368][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.119066][T11785] keyspan 2-1:0.30: device disconnected [ 565.127252][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.152589][ T30] audit: type=1326 audit(1742665083.548:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 565.228863][ T30] audit: type=1326 audit(1742665083.548:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 565.269495][ T30] audit: type=1326 audit(1742665083.548:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12763 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 565.795270][T12695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.579659][ T5827] Bluetooth: hci4: command tx timeout [ 567.070876][T12810] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 567.344604][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20752 sclass=netlink_route_socket pid=12816 comm=syz.4.1949 [ 567.390371][T12818] fuse: Bad value for 'fd' [ 567.439863][T12695] veth0_vlan: entered promiscuous mode [ 567.559455][T12695] veth1_vlan: entered promiscuous mode [ 567.630385][T12695] veth0_macvtap: entered promiscuous mode [ 567.649102][T12695] veth1_macvtap: entered promiscuous mode [ 567.713819][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.751988][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.752059][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.814442][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.825408][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.850116][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.859672][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.878684][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.903122][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.949611][T11785] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 567.959634][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.993630][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.038588][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.072084][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.090974][T11785] usb 5-1: device descriptor read/64, error -71 [ 568.122197][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.166447][T12695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.218866][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.269570][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.299646][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.334529][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.377962][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.390760][T11785] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 568.435253][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.454631][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.467626][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.479913][T12695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.492501][T12695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.507069][T12695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.527787][T12695] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.538282][T12695] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.548950][T12695] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.559831][T11785] usb 5-1: device descriptor read/64, error -71 [ 568.567407][T12695] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.660688][ T5827] Bluetooth: hci4: command tx timeout [ 568.671551][T11785] usb usb5-port1: attempt power cycle [ 568.824642][ T8113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.843592][ T8113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.922666][ T8115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.939031][T12841] fuse: Bad value for 'user_id' [ 568.946970][T12841] fuse: Bad value for 'user_id' [ 569.039732][T11785] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 569.092511][ T8115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.142979][T12843] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 569.182504][T12843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.352488][T11785] usb 5-1: device descriptor read/8, error -71 [ 570.089641][T11785] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 570.134487][T11785] usb 5-1: device descriptor read/8, error -71 [ 570.270138][T11785] usb usb5-port1: unable to enumerate USB device [ 570.311965][T12858] fuse: Bad value for 'fd' [ 570.452807][T12862] ALSA: seq fatal error: cannot create timer (-22) [ 570.939642][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 571.102892][ T10] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 571.167684][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 571.191897][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.294298][ T10] usb 2-1: Product: syz [ 571.299404][ T10] usb 2-1: Manufacturer: syz [ 571.305337][ T10] usb 2-1: SerialNumber: syz [ 571.315556][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 571.339437][ T5867] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 571.790250][T11785] usb 2-1: USB disconnect, device number 54 [ 572.105299][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 572.113366][ T30] audit: type=1400 audit(1742665091.028:1338): avc: denied { watch_mount } for pid=12882 comm="syz.5.1968" path="/98" dev="tmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 572.511914][ T5867] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 572.561633][ T5867] ath9k_htc: Failed to initialize the device [ 572.595801][T11785] usb 2-1: ath9k_htc: USB layer deinitialized [ 572.674560][T12894] fuse: Invalid rootmode [ 573.566358][T12902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.659161][T12902] atomic_op ffff888038128998 conn xmit_atomic 0000000000000000 [ 575.120183][T12925] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1979'. [ 575.181818][T12928] ALSA: seq fatal error: cannot create timer (-22) [ 576.384597][T12942] fuse: Invalid rootmode [ 577.386755][ T47] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 577.554372][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 577.569684][ T5867] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 577.569689][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 577.569720][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 577.610931][ T47] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 577.629421][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.639163][ T47] usb 5-1: Product: syz [ 577.644391][ T47] usb 5-1: Manufacturer: syz [ 577.652170][ T47] usb 5-1: SerialNumber: syz [ 577.665340][ T47] usb 5-1: config 0 descriptor?? [ 577.680344][T12964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 577.688993][T12964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 577.729980][ T47] usb 5-1: ucan: probing device on interface #0 [ 577.740910][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.777996][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.818080][ T5867] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 577.858666][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.866089][T12993] fuse: Invalid rootmode [ 577.900549][ T5867] usb 2-1: config 0 descriptor?? [ 578.347956][ T47] ucan 5-1:0.0 can0: registered device [ 578.365149][ T5867] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 578.375535][ T5867] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 578.590465][ T47] ucan 5-1:0.0 can0: firmware string: unknown [ 578.636511][ T5867] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 579.790603][ T10] usb 5-1: USB disconnect, device number 54 [ 580.316741][ T5867] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 580.386857][ T5867] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 580.414368][T13019] ALSA: seq fatal error: cannot create timer (-22) [ 580.752826][T13020] ALSA: seq fatal error: cannot create timer (-22) [ 581.119696][ T5867] usb 2-1: USB disconnect, device number 55 [ 581.185018][T13024] fuse: Bad value for 'rootmode' [ 581.489628][ T5867] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 581.699575][T13033] random: crng reseeded on system resumption [ 581.760138][ T30] audit: type=1400 audit(1742665100.628:1339): avc: denied { append } for pid=13028 comm="syz.5.2013" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 581.760274][ T10] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 582.205997][ T5867] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 582.269730][ T5867] usb 2-1: config 3 has no interface number 0 [ 582.278157][ T5867] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 582.292918][ T5867] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 582.307788][ T5867] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 582.323998][ T5867] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 582.336006][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.348037][T13017] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.465927][ T10] usb 5-1: string descriptor 0 read error: -22 [ 582.474370][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 582.498559][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.578742][ T10] usb 5-1: config 0 descriptor?? [ 582.593931][ T10] usbtest 5-1:0.0: FX2 device [ 582.603209][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.629602][ T10] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 582.649941][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.801336][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.815937][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.843482][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.867524][ T5867] usb 2-1: string descriptor 0 read error: -71 [ 582.888570][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.915604][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.930377][ T5867] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 582.949847][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.962784][ T5867] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 582.975463][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.986943][ T5867] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 582.998477][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.009426][ T5867] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 583.023105][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.036617][ T5867] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 583.055283][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.085760][ T5867] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 583.108229][ T5867] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 583.125906][ T5867] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 583.137758][ T5867] usb 2-1: USB disconnect, device number 56 [ 583.149108][ T5867] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 583.165992][T13026] mkiss: ax0: crc mode is auto. [ 583.175298][ T10] usb 5-1: USB disconnect, device number 55 [ 583.199344][ T5867] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 583.214997][ T5867] keyspan 2-1:3.168: device disconnected [ 584.501153][T13057] ALSA: seq fatal error: cannot create timer (-22) [ 586.697479][T13077] lo speed is unknown, defaulting to 1000 [ 586.704416][T13077] lo speed is unknown, defaulting to 1000 [ 586.713223][T13077] lo speed is unknown, defaulting to 1000 [ 586.722833][T13077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 586.734827][T13077] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 586.762232][T13077] lo speed is unknown, defaulting to 1000 [ 586.770072][T13077] lo speed is unknown, defaulting to 1000 [ 586.777347][T13077] lo speed is unknown, defaulting to 1000 [ 586.784642][T13077] lo speed is unknown, defaulting to 1000 [ 586.791981][T13077] lo speed is unknown, defaulting to 1000 [ 586.799265][T13077] lo speed is unknown, defaulting to 1000 [ 586.808068][T13077] lo speed is unknown, defaulting to 1000 [ 589.289083][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2036'. [ 590.469633][ T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 591.048830][ T26] usb 9-1: config 224 has an invalid descriptor of length 111, skipping remainder of the config [ 591.048856][ T26] usb 9-1: config 224 has 0 interfaces, different from the descriptor's value: 1 [ 591.051009][ T26] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 591.051034][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=252 [ 591.051054][ T26] usb 9-1: Product: syz [ 591.051069][ T26] usb 9-1: Manufacturer: syz [ 591.051085][ T26] usb 9-1: SerialNumber: syz [ 591.230344][ T30] audit: type=1326 audit(1742665110.158:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13123 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 591.244701][T13129] NILFS (nullb0): couldn't find nilfs on the device [ 591.258484][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.404246][ T30] audit: type=1326 audit(1742665110.158:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13123 comm="syz.1.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87838d169 code=0x7ffc0000 [ 591.507278][ T26] usb 9-1: USB disconnect, device number 2 [ 591.593771][T13130] kAFS: unparsable volume name [ 591.624919][ T30] audit: type=1400 audit(1742665110.558:1342): avc: denied { setopt } for pid=13135 comm="syz.7.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 591.648420][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.659376][T13136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.464256][ T30] audit: type=1400 audit(1742665114.398:1343): avc: denied { write } for pid=13159 comm="syz.8.2053" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 595.789310][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 595.895328][T13177] netlink: 'syz.5.2057': attribute type 22 has an invalid length. [ 595.999840][ T10] usb 9-1: device descriptor read/64, error -71 [ 596.334179][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 596.844450][ T10] usb 9-1: device descriptor read/64, error -71 [ 596.995850][ T10] usb usb9-port1: attempt power cycle [ 598.762201][T13214] trusted_key: encrypted_key: master key parameter 'ddfault' is invalid [ 598.792874][T13214] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 599.873745][ T5827] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 600.794471][ T30] audit: type=1400 audit(1742665119.688:1344): avc: denied { mounton } for pid=13252 comm="syz.8.2080" path="/24/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 600.891020][T13253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.941057][T13256] fuse: Unknown parameter 'user_i00000000000000000000' [ 600.956402][T13253] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 601.379629][T11785] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 601.879638][T11785] usb 2-1: Using ep0 maxpacket: 32 [ 601.924432][T11785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.988811][T11785] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 602.036117][T11785] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 602.071784][T11785] usb 2-1: Product: syz [ 602.107280][T11785] usb 2-1: Manufacturer: syz [ 602.134951][T11785] usb 2-1: SerialNumber: syz [ 602.343719][T11785] usb 2-1: config 0 descriptor?? [ 602.361801][T11785] hub 2-1:0.0: bad descriptor, ignoring hub [ 602.368891][T11785] hub 2-1:0.0: probe with driver hub failed with error -5 [ 602.528703][ T5867] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 602.915750][ T9] usb 2-1: USB disconnect, device number 57 [ 602.947103][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.969423][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.001951][T13298] FAULT_INJECTION: forcing a failure. [ 603.001951][T13298] name failslab, interval 1, probability 0, space 0, times 0 [ 603.027341][ T5867] usb 9-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 603.037040][T13298] CPU: 1 UID: 0 PID: 13298 Comm: syz.7.2096 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 603.037063][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 603.037073][T13298] Call Trace: [ 603.037078][T13298] [ 603.037084][T13298] dump_stack_lvl+0x16c/0x1f0 [ 603.037110][T13298] should_fail_ex+0x50a/0x650 [ 603.037134][T13298] ? fs_reclaim_acquire+0xae/0x150 [ 603.037158][T13298] should_failslab+0xc2/0x120 [ 603.037175][T13298] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 603.037192][T13298] ? vm_area_dup+0x53/0x2f0 [ 603.037217][T13298] vm_area_dup+0x53/0x2f0 [ 603.037239][T13298] __split_vma+0x181/0x1160 [ 603.037257][T13298] ? __pfx___split_vma+0x10/0x10 [ 603.037283][T13298] vms_gather_munmap_vmas+0x38b/0x1730 [ 603.037305][T13298] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 603.037321][T13298] ? __lock_acquire+0xcc5/0x3c40 [ 603.037348][T13298] ? hlock_class+0x4e/0x130 [ 603.037367][T13298] do_vmi_align_munmap+0x27f/0x890 [ 603.037391][T13298] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 603.037436][T13298] do_vmi_munmap+0x208/0x3e0 [ 603.037455][T13298] __do_sys_mremap+0x3d0/0x1630 [ 603.037477][T13298] ? __pfx___cant_migrate+0x10/0x10 [ 603.037492][T13298] ? __pfx___do_sys_mremap+0x10/0x10 [ 603.037509][T13298] ? find_held_lock+0x2d/0x110 [ 603.037529][T13298] ? __pfx_lock_release+0x10/0x10 [ 603.037557][T13298] ? rcu_is_watching+0x12/0xc0 [ 603.037575][T13298] do_syscall_64+0xcd/0x250 [ 603.037598][T13298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.037618][T13298] RIP: 0033:0x7f477278d169 [ 603.037631][T13298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.037645][T13298] RSP: 002b:00007f4773509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 603.037660][T13298] RAX: ffffffffffffffda RBX: 00007f47729a5fa0 RCX: 00007f477278d169 [ 603.037670][T13298] RDX: 0000000000002000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 603.037680][T13298] RBP: 00007f4773509090 R08: 0000200000c87000 R09: 0000000000000000 [ 603.037689][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.037698][T13298] R13: 0000000000000000 R14: 00007f47729a5fa0 R15: 00007fffbb9145a8 [ 603.037724][T13298] [ 603.640050][T12903] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 603.766848][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2098'. [ 603.823229][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.829630][T12903] usb 5-1: device descriptor read/64, error -71 [ 603.839524][ T5867] usb 9-1: config 0 descriptor?? [ 603.878690][T13312] bond1 (unregistering): Released all slaves [ 603.949799][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 603.962917][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 603.986581][ T5827] Bluetooth: hci2: hardware error 0x00 [ 604.073429][ T5867] usbhid 9-1:0.0: can't add hid device: -71 [ 604.085852][ T5867] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 604.108133][ T5867] usb 9-1: USB disconnect, device number 6 [ 604.179782][T12903] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 604.281155][T11785] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 604.339619][T12903] usb 5-1: device descriptor read/64, error -71 [ 604.450023][T11785] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 604.500170][T12903] usb usb5-port1: attempt power cycle [ 604.503346][T13332] kAFS: unparsable volume name [ 604.817467][T11785] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 604.849308][T11785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.861553][T11785] usb 2-1: Product: syz [ 604.877690][T11785] usb 2-1: Manufacturer: syz [ 604.886507][T11785] usb 2-1: SerialNumber: syz [ 604.898320][T11785] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 604.919303][ T26] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 605.099877][T12903] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 605.110131][ T30] audit: type=1400 audit(1742665124.038:1345): avc: denied { accept } for pid=13335 comm="syz.8.2106" path="socket:[46806]" dev="sockfs" ino=46806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 605.138173][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.162161][T12903] usb 5-1: device descriptor read/8, error -71 [ 605.218100][T13337] lo speed is unknown, defaulting to 1000 [ 605.261780][T11785] usb 2-1: USB disconnect, device number 58 [ 605.479745][T12903] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 605.689627][T12903] usb 5-1: device descriptor read/8, error -71 [ 605.729103][T13348] FAULT_INJECTION: forcing a failure. [ 605.729103][T13348] name failslab, interval 1, probability 0, space 0, times 0 [ 605.744479][T13348] CPU: 0 UID: 0 PID: 13348 Comm: syz.5.2108 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 605.744495][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.744501][T13348] Call Trace: [ 605.744504][T13348] [ 605.744509][T13348] dump_stack_lvl+0x16c/0x1f0 [ 605.744528][T13348] should_fail_ex+0x50a/0x650 [ 605.744545][T13348] ? fs_reclaim_acquire+0xae/0x150 [ 605.744562][T13348] should_failslab+0xc2/0x120 [ 605.744575][T13348] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 605.744587][T13348] ? mas_alloc_nodes+0x18b/0x8b0 [ 605.744601][T13348] mas_alloc_nodes+0x18b/0x8b0 [ 605.744617][T13348] mas_node_count_gfp+0x105/0x130 [ 605.744631][T13348] mas_preallocate+0x53f/0xce0 [ 605.744649][T13348] ? __pfx_mas_preallocate+0x10/0x10 [ 605.744671][T13348] ? anon_vma_name+0x75/0x100 [ 605.744686][T13348] __split_vma+0x474/0x1160 [ 605.744698][T13348] ? __pfx___split_vma+0x10/0x10 [ 605.744715][T13348] vms_gather_munmap_vmas+0x38b/0x1730 [ 605.744730][T13348] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 605.744741][T13348] ? __lock_acquire+0xcc5/0x3c40 [ 605.744761][T13348] ? hlock_class+0x4e/0x130 [ 605.744774][T13348] do_vmi_align_munmap+0x27f/0x890 [ 605.744793][T13348] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 605.744821][T13348] do_vmi_munmap+0x208/0x3e0 [ 605.744834][T13348] __do_sys_mremap+0x3d0/0x1630 [ 605.744850][T13348] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.744866][T13348] ? __pfx___do_sys_mremap+0x10/0x10 [ 605.744879][T13348] ? __fget_files+0x206/0x3a0 [ 605.744899][T13348] do_syscall_64+0xcd/0x250 [ 605.744915][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.744930][T13348] RIP: 0033:0x7f4bb498d169 [ 605.744939][T13348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.744949][T13348] RSP: 002b:00007f4bb5762038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 605.744959][T13348] RAX: ffffffffffffffda RBX: 00007f4bb4ba5fa0 RCX: 00007f4bb498d169 [ 605.744966][T13348] RDX: 0000000000002000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 605.744972][T13348] RBP: 00007f4bb5762090 R08: 0000200000c87000 R09: 0000000000000000 [ 605.744979][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.744984][T13348] R13: 0000000000000000 R14: 00007f4bb4ba5fa0 R15: 00007ffd7b9bd038 [ 605.744997][T13348] [ 606.027526][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.329955][T12903] usb usb5-port1: unable to enumerate USB device [ 606.339724][ T26] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 606.339721][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 606.348012][ T26] ath9k_htc: Failed to initialize the device [ 606.548354][T11785] usb 2-1: ath9k_htc: USB layer deinitialized [ 606.993656][T13367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=13367 comm=syz.1.2112 [ 607.063559][T13369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13369 comm=syz.1.2112 [ 607.126246][ T30] audit: type=1400 audit(1742665126.058:1346): avc: denied { ioctl } for pid=13366 comm="syz.1.2112" path="socket:[47302]" dev="sockfs" ino=47302 ioctlcmd=0x7ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 608.299936][T13404] kAFS: unparsable volume name [ 608.343734][T13402] SELinux: policydb magic number 0x6d616574 does not match expected magic number 0xf97cff8c [ 608.415746][T13402] SELinux: failed to load policy [ 608.510854][T12903] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 608.539665][T11785] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 608.699617][T12903] usb 9-1: Using ep0 maxpacket: 32 [ 608.728242][T12903] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 608.776615][T12903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 608.935355][T12903] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 609.029305][T12903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.257590][T12903] usb 9-1: Product: syz [ 609.296387][T12903] usb 9-1: Manufacturer: syz [ 609.319690][T12903] usb 9-1: SerialNumber: syz [ 609.344499][T12903] usb 9-1: config 0 descriptor?? [ 609.485798][T12903] usb 9-1: no audio or video endpoints found [ 609.776766][T12903] usb 9-1: USB disconnect, device number 7 [ 610.076192][T13411] syz.5.2124 (13411): drop_caches: 2 [ 611.335649][ T30] audit: type=1400 audit(1742665130.268:1347): avc: denied { setattr } for pid=13424 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 611.699860][ T30] audit: type=1400 audit(1742665130.358:1348): avc: denied { setopt } for pid=13424 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 612.681231][T13446] ALSA: seq fatal error: cannot create timer (-22) [ 612.929746][T11785] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 613.029466][T13451] kAFS: unparsable volume name [ 613.099954][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 613.135226][T13454] 9pnet_fd: Insufficient options for proto=fd [ 613.147733][T13454] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 613.159486][T13454] netlink: 'syz.4.2132': attribute type 2 has an invalid length. [ 613.209634][T11785] usb 9-1: Using ep0 maxpacket: 16 [ 613.233034][T11785] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 613.293953][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 613.309635][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.329368][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 613.340319][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2137'. [ 613.354156][ T10] usb 2-1: config 0 has no interface number 0 [ 613.359562][T11785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 613.415040][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 613.426190][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.442617][ T10] usb 2-1: Product: syz [ 613.447797][ T10] usb 2-1: Manufacturer: syz [ 613.456186][ T10] usb 2-1: SerialNumber: syz [ 613.477242][T11785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 613.494476][ T10] usb 2-1: config 0 descriptor?? [ 613.510497][ T10] ims_pcu 2-1:0.41: Zero length descriptor [ 613.526835][ T10] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 613.548699][T11785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.580392][T11785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 613.651063][T11785] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 613.668116][T11785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.699706][ T5867] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 613.729266][T11785] usb 9-1: Product: syz [ 613.735000][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.739632][T11785] usb 9-1: Manufacturer: syz [ 613.764329][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.775764][T12903] usb 2-1: USB disconnect, device number 60 [ 613.786199][T11785] usb 9-1: SerialNumber: syz [ 613.794001][T11785] usb 9-1: config 0 descriptor?? [ 613.800533][T13450] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 613.814311][T11785] mcba_usb 9-1:0.0 can0: couldn't setup read URBs [ 613.827457][T11785] mcba_usb 9-1:0.0 can0: couldn't start device: -90 [ 613.860552][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 613.882014][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.900577][T11785] mcba_usb 9-1:0.0: probe with driver mcba_usb failed with error -90 [ 613.906810][ T5867] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 614.024631][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.040406][ T5867] usb 5-1: config 0 descriptor?? [ 614.068731][T12903] usb 9-1: USB disconnect, device number 8 [ 614.700279][ T5867] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 614.883124][T13471] netlink: 'syz.8.2141': attribute type 4 has an invalid length. [ 614.943890][T13472] netlink: 'syz.8.2141': attribute type 4 has an invalid length. [ 615.131007][T12903] usb 5-1: USB disconnect, device number 60 [ 615.264750][T13481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.304561][T13481] atomic_op ffff88807f1d3998 conn xmit_atomic 0000000000000000 [ 616.014855][ T30] audit: type=1400 audit(1742665134.948:1349): avc: denied { getopt } for pid=13482 comm="syz.7.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 616.129273][ T30] audit: type=1400 audit(1742665135.008:1350): avc: denied { write } for pid=13482 comm="syz.7.2144" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 617.149785][ T30] audit: type=1400 audit(1742665136.088:1351): avc: denied { setopt } for pid=13482 comm="syz.7.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 617.186213][ T30] audit: type=1400 audit(1742665136.088:1352): avc: denied { connect } for pid=13482 comm="syz.7.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 617.231764][ T30] audit: type=1400 audit(1742665136.088:1353): avc: denied { getopt } for pid=13482 comm="syz.7.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 617.285119][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 617.325851][T13499] ALSA: seq fatal error: cannot create timer (-22) [ 617.337016][T13505] kAFS: unparsable volume name [ 617.709885][ T5867] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 617.842743][T13508] ALSA: seq fatal error: cannot create timer (-22) [ 617.904063][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 618.103589][ T30] audit: type=1400 audit(1742665136.888:1354): avc: granted { setsecparam } for pid=13509 comm="syz.5.2153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 618.236907][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 618.286231][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 618.559814][ T5867] usb 2-1: config 1 has an invalid interface descriptor of length 2, skipping [ 618.573262][ T30] audit: type=1400 audit(1742665137.178:1355): avc: denied { execute } for pid=13507 comm="syz.7.2151" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 618.629778][ T5867] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 618.649642][ T5867] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 619.438145][ T5867] usb 2-1: config 1 has no interface number 1 [ 619.452081][ T5867] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x9 has invalid maxpacket 256, setting to 64 [ 619.491385][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.542894][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.578090][ T5867] usb 2-1: Product: 扖迦齋ᬭ桶ἅ੧ꙻ噐ல쏴졘貢ᆤ끉䕖ꐋ陣牿언ᨋꅚ辑鄜밶䏾ᖣੲ꽠དྷ蛈稬䍹굙淣姧鯟툼栜㛷Ű㵿鐑ޠ↚폭蘧휙ᶭ磸팻丣먔ꫨ⟳ꁨ톝ꪤ粃쑇䐼ꛫ⧓资㥃댷†욨ꁢ罩뻄领綽咑ϑ秦ፁ髱衊퇁享૎螙면턙땋퍕숇 [ 619.749925][ T5867] usb 2-1: Manufacturer: 䝈㡁ۘ㈂蕈໧⋆쿗矁䆮녀锖勪ΰ샎퉬醓悌剴䨯㕬苿쬼昺袉︉㻭告華㯍韛眍幅퐩㽥때糌鄯幀菩騠滨⿪䆁ﳤ紟⏦伯츄쉜ꓡ၎椡↩ஞ纻鉚茒ⓡぉ [ 619.836803][ T5867] usb 2-1: SerialNumber: Ф [ 620.014378][T13536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2160'. [ 620.081648][ T5867] usb 2-1: USB disconnect, device number 61 [ 620.089605][ T5823] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 620.252784][ T5823] usb 9-1: Using ep0 maxpacket: 8 [ 620.263955][ T5823] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 620.296108][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.366286][ T5823] usb 9-1: Product: syz [ 620.391385][ T5823] usb 9-1: Manufacturer: syz [ 620.447722][ T5823] usb 9-1: SerialNumber: syz [ 621.000498][ T5823] usb 9-1: config 0 descriptor?? [ 621.031048][ T5823] gspca_main: se401-2.14.0 probing 047d:5003 [ 621.196959][T13549] ALSA: seq fatal error: cannot create timer (-22) [ 621.556138][ T30] audit: type=1326 audit(1742665140.488:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.4.2164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x0 [ 621.691120][T13558] kAFS: unparsable volume name [ 621.804182][ T5823] gspca_se401: ExtraFeatures: 115 [ 621.813673][ T5823] gspca_se401: Too many frame sizes [ 623.386958][ T5823] usb 9-1: USB disconnect, device number 9 [ 624.070001][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.197413][T13576] overlayfs: failed to resolve './file0': -2 [ 624.555863][T13581] netlink: 'syz.5.2170': attribute type 10 has an invalid length. [ 624.608121][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.616917][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.722131][T13584] netlink: 'syz.7.2171': attribute type 58 has an invalid length. [ 624.731782][T13584] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2171'. [ 624.755229][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.763768][T13581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.772592][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.781076][T13581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.854059][T13586] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 625.145368][T13581] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 625.178516][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2175'. [ 625.218623][T13595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.301455][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 625.352267][T13598] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2173'. [ 625.620874][ T10] usb 5-1: config 0 has no interfaces? [ 625.629645][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 625.657591][T13598] 0{X: renamed from gretap0 [ 625.675615][T13598] 0{X: entered allmulticast mode [ 625.688253][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.693035][T13598] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 625.742374][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.759004][ T10] usb 5-1: config 0 descriptor?? [ 626.068632][T13608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.078763][T13608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.155911][T13609] xt_limit: Overflow, try lower: 0/0 [ 626.295410][T13608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.339783][T13608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.527165][T13617] SET target dimension over the limit! [ 626.639789][ T26] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 626.679753][T12903] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 626.959651][T12903] usb 9-1: Using ep0 maxpacket: 16 [ 627.014364][T12903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.040707][ T26] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 627.054239][T12903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.066011][ T26] usb 2-1: config 0 has no interface number 0 [ 627.077222][ T26] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 627.091386][T12903] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.110357][ T26] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 627.122857][T12903] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.135037][ T26] usb 2-1: config 0 interface 200 has no altsetting 0 [ 627.145293][T12903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.158123][ T26] usb 2-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 627.172268][T12903] usb 9-1: config 0 descriptor?? [ 627.178203][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.188441][ T26] usb 2-1: Product: syz [ 627.195086][ T26] usb 2-1: Manufacturer: syz [ 627.200714][ T26] usb 2-1: SerialNumber: syz [ 627.207473][ T26] usb 2-1: config 0 descriptor?? [ 627.598721][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.608899][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.621959][T12903] microsoft 0003:045E:07DA.0013: unknown main item tag 0x1 [ 627.635969][ T26] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 627.638688][T13628] kAFS: unparsable volume name [ 627.837288][T12903] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0013/input/input40 [ 627.851942][ T26] usb 2-1: USB disconnect, device number 62 [ 627.943201][T12903] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 627.989432][T12903] usb 9-1: USB disconnect, device number 10 [ 628.014536][ T5898] usb 5-1: USB disconnect, device number 61 [ 628.195858][ T30] audit: type=1326 audit(1742665147.128:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.281235][ T30] audit: type=1326 audit(1742665147.128:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.385612][ T30] audit: type=1326 audit(1742665147.168:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.513605][ T30] audit: type=1326 audit(1742665147.168:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.617910][ T30] audit: type=1326 audit(1742665147.168:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.709680][ T30] audit: type=1326 audit(1742665147.178:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 628.780408][ T30] audit: type=1326 audit(1742665147.178:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff58cf8d1a3 code=0x7ffc0000 [ 629.329634][ T30] audit: type=1326 audit(1742665147.178:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff58cf8d1a3 code=0x7ffc0000 [ 629.405449][ T30] audit: type=1326 audit(1742665147.178:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 629.436546][T13650] syz.7.2188: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 629.509871][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.7.2188 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 629.509898][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.509908][T13650] Call Trace: [ 629.509913][T13650] [ 629.509920][T13650] dump_stack_lvl+0x16c/0x1f0 [ 629.509948][T13650] warn_alloc+0x24d/0x3a0 [ 629.509967][T13650] ? __pfx_warn_alloc+0x10/0x10 [ 629.509994][T13650] ? __get_vm_area_node+0x1b0/0x2f0 [ 629.510018][T13650] ? __get_vm_area_node+0x1dc/0x2f0 [ 629.510049][T13650] __vmalloc_node_range_noprof+0x1102/0x1530 [ 629.510074][T13650] ? __pfx___mutex_trylock_common+0x10/0x10 [ 629.510098][T13650] ? __kasan_kmalloc+0xaa/0xb0 [ 629.510121][T13650] ? __vcalloc_noprof+0x4d/0x80 [ 629.510141][T13650] ? kvm_set_memslot+0x34/0x1380 [ 629.510156][T13650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 629.510174][T13650] ? __pfx___mutex_lock+0x10/0x10 [ 629.510204][T13650] ? __vcalloc_noprof+0x4d/0x80 [ 629.510227][T13650] __vmalloc_noprof+0x6d/0x90 [ 629.510252][T13650] ? __vcalloc_noprof+0x4d/0x80 [ 629.510275][T13650] __vcalloc_noprof+0x4d/0x80 [ 629.510301][T13650] kvm_set_memslot+0xee3/0x1380 [ 629.510324][T13650] ? kasan_save_track+0x14/0x30 [ 629.510343][T13650] kvm_set_memory_region+0xea1/0x1630 [ 629.510367][T13650] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 629.510381][T13650] ? __might_fault+0xe3/0x190 [ 629.510397][T13650] kvm_vm_ioctl+0x1551/0x3d70 [ 629.510416][T13650] ? __pfx_mark_lock+0x10/0x10 [ 629.510434][T13650] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 629.510462][T13650] ? find_held_lock+0x2d/0x110 [ 629.510476][T13650] ? tomoyo_path_number_perm+0x298/0x590 [ 629.510491][T13650] ? __pfx_lock_release+0x10/0x10 [ 629.510510][T13650] ? tomoyo_path_number_perm+0x46d/0x590 [ 629.510536][T13650] ? tomoyo_path_number_perm+0x190/0x590 [ 629.510560][T13650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.510579][T13650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.510607][T13650] ? do_vfs_ioctl+0x513/0x1990 [ 629.510626][T13650] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 629.510656][T13650] ? selinux_file_ioctl+0x180/0x270 [ 629.510672][T13650] ? selinux_file_ioctl+0xb4/0x270 [ 629.510689][T13650] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 629.510706][T13650] __x64_sys_ioctl+0x190/0x200 [ 629.510721][T13650] do_syscall_64+0xcd/0x250 [ 629.510738][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.510753][T13650] RIP: 0033:0x7f477278d169 [ 629.510763][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.510773][T13650] RSP: 002b:00007f4773509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.510784][T13650] RAX: ffffffffffffffda RBX: 00007f47729a5fa0 RCX: 00007f477278d169 [ 629.510791][T13650] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 629.510797][T13650] RBP: 00007f477280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 629.510803][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.510810][T13650] R13: 0000000000000000 R14: 00007f47729a5fa0 R15: 00007fffbb9145a8 [ 629.510823][T13650] [ 629.510916][T13650] Mem-Info: [ 629.939606][ T30] audit: type=1326 audit(1742665147.178:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58cf8d169 code=0x7ffc0000 [ 629.988236][T12903] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 629.997403][T13650] active_anon:5243 inactive_anon:0 isolated_anon:0 [ 629.997403][T13650] active_file:7306 inactive_file:48995 isolated_file:0 [ 629.997403][T13650] unevictable:768 dirty:33 writeback:0 [ 629.997403][T13650] slab_reclaimable:12121 slab_unreclaimable:201524 [ 629.997403][T13650] mapped:35600 shmem:1448 pagetables:912 [ 629.997403][T13650] sec_pagetables:0 bounce:0 [ 629.997403][T13650] kernel_misc_reclaimable:0 [ 629.997403][T13650] free:1192976 free_pcp:3420 free_cma:0 [ 630.093346][T13639] lo speed is unknown, defaulting to 1000 [ 630.238237][T13650] Node 0 active_anon:38872kB inactive_anon:0kB active_file:29224kB inactive_file:195908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153800kB dirty:132kB writeback:0kB shmem:15656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13120kB pagetables:3448kB sec_pagetables:0kB all_unreclaimable? no [ 630.350900][ T26] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 630.387152][T13665] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2190'. [ 630.423342][T12903] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 630.521598][T13650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 630.749612][ T26] usb 9-1: Using ep0 maxpacket: 32 [ 630.769703][T13650] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.802429][T12903] usb 5-1: config 0 has no interface number 0 [ 630.811768][ T26] usb 9-1: config 5 has an invalid interface number: 211 but max is 0 [ 630.821990][ T26] usb 9-1: config 5 has no interface number 0 [ 630.829641][ T26] usb 9-1: config 5 interface 211 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 630.845665][T12903] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 630.856799][T13650] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 630.863780][T12903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.946016][T13650] Node 0 DMA32 free:854016kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:27372kB inactive_anon:0kB active_file:29224kB inactive_file:195808kB unevictable:1536kB writepending:132kB present:3129332kB managed:2547360kB mlocked:0kB bounce:0kB free_pcp:20292kB local_pcp:4980kB free_cma:0kB [ 630.987804][ T26] usb 9-1: config 5 interface 211 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 631.001005][T12903] usb 5-1: Product: syz [ 631.004107][T13650] lowmem_reserve[]: [ 631.005969][T12903] usb 5-1: Manufacturer: syz [ 631.005989][T12903] usb 5-1: SerialNumber: syz [ 631.022676][ T26] usb 9-1: config 5 interface 211 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 631.036312][T13650] 0 0 0 0 0 [ 631.037394][ T26] usb 9-1: config 5 interface 211 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 631.054275][T12903] usb 5-1: config 0 descriptor?? [ 631.061096][ T26] usb 9-1: config 5 interface 211 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 64 [ 631.074055][ T26] usb 9-1: config 5 interface 211 has no altsetting 0 [ 631.085361][ T26] usb 9-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=d9.4d [ 631.096585][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.113701][ T26] usb 9-1: Product: syz [ 631.129033][ T26] usb 9-1: Manufacturer: п [ 631.134832][ T26] usb 9-1: SerialNumber: syz [ 631.189748][T13650] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 631.249400][T13650] lowmem_reserve[]: 0 0 0 0 0 [ 631.264821][T13642] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 631.277717][T12903] cdc_subset 5-1:0.90: probe with driver cdc_subset failed with error -22 [ 631.374039][T13650] Node 1 Normal free:3887840kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 631.454620][T13650] lowmem_reserve[]: 0 0 0 0 0 [ 631.461941][T13650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 631.494659][T13650] Node 0 DMA32: 30*4kB (ME) 25*8kB (ME) 236*16kB (UME) 712*32kB (UME) 1364*64kB (UME) 261*128kB (UME) 38*256kB (UME) 21*512kB (M) 24*1024kB (M) 5*2048kB (UME) 160*4096kB (UM) = 858240kB [ 631.574636][T13650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.623493][T13650] Node 1 Normal: 4*4kB (ME) 8*8kB (UME) 9*16kB (ME) 11*32kB (ME) 9*64kB (ME) 1*128kB (M) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 5*2048kB (UME) 945*4096kB (UM) = 3887616kB [ 632.069667][T13650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.099791][T13650] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 632.111745][T13650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.123853][T13650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 632.138634][T13650] 57734 total pagecache pages [ 632.144472][T13650] 0 pages in swap cache [ 632.150100][T13650] Free swap = 124500kB [ 632.155153][T13650] Total swap = 124996kB [ 632.160709][T13650] 2097051 pages RAM [ 632.165389][T13650] 0 pages HighMem/MovableOnly [ 632.173218][T13650] 428553 pages reserved [ 632.178563][T13650] 0 pages cma reserved [ 632.360496][T13684] ALSA: seq fatal error: cannot create timer (-22) [ 632.884410][ T5823] usb 5-1: USB disconnect, device number 62 [ 632.894362][ T26] qmi_wwan 9-1:5.211: skipping garbage [ 632.910131][ T26] qmi_wwan 9-1:5.211: probe with driver qmi_wwan failed with error -22 [ 632.929914][ T26] usb 9-1: USB disconnect, device number 11 [ 635.512453][T13700] ALSA: seq fatal error: cannot create timer (-22) [ 636.093494][T13714] ALSA: seq fatal error: cannot create timer (-22) [ 637.397499][T13716] overlayfs: missing 'lowerdir' [ 637.441922][T13718] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2210'. [ 642.497917][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 642.497929][ T30] audit: type=1400 audit(1742665161.428:1383): avc: denied { bind } for pid=13767 comm="syz.8.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 642.894165][T13771] block device autoloading is deprecated and will be removed. [ 642.906272][T13771] syz.1.2225: attempt to access beyond end of device [ 642.906272][T13771] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 643.792136][T13783] lo speed is unknown, defaulting to 1000 [ 643.987157][ T5898] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 645.436876][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 645.616498][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 645.836765][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 646.407248][ T5898] usb 9-1: string descriptor 0 read error: -71 [ 646.435352][ T5898] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 646.462257][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.649664][ T5898] usb 9-1: config 0 descriptor?? [ 647.195845][T13800] block device autoloading is deprecated and will be removed. [ 647.218040][T13800] syz.8.2233: attempt to access beyond end of device [ 647.218040][T13800] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 647.246142][ T5898] usb 9-1: can't set config #0, error -71 [ 648.021019][ T5898] usb 9-1: USB disconnect, device number 12 [ 648.839575][T11785] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 649.059632][T11785] usb 2-1: Using ep0 maxpacket: 16 [ 650.070952][T11785] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.096342][T11785] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 650.149659][T11785] usb 2-1: can't read configurations, error -71 [ 650.429917][T13837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.513823][T13837] batadv_slave_1: entered promiscuous mode [ 653.112138][ T30] audit: type=1400 audit(1742665172.038:1384): avc: denied { append } for pid=13863 comm="syz.8.2253" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 654.058197][T13879] kAFS: unparsable volume name [ 654.139602][ T5898] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 654.239581][T11785] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 654.349623][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 654.393622][T11785] usb 2-1: device descriptor read/64, error -71 [ 654.540453][ T5898] usb 9-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 654.739647][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.789653][T11785] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 654.829137][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 62207, setting to 1024 [ 654.927446][ T5898] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 654.949594][T11785] usb 2-1: device descriptor read/64, error -71 [ 655.000040][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.079792][T11785] usb usb2-port1: attempt power cycle [ 655.430287][T11785] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 655.550024][T11785] usb 2-1: device descriptor read/8, error -71 [ 655.559944][ T5898] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 655.598030][ T5898] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 655.646501][ T5898] usb 9-1: Manufacturer: syz [ 655.697519][ T5898] usb 9-1: config 0 descriptor?? [ 655.799639][T11785] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 655.841553][T11785] usb 2-1: device descriptor read/8, error -71 [ 655.961067][T11785] usb usb2-port1: unable to enumerate USB device [ 656.155233][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2267'. [ 656.199662][ T5898] rc_core: IR keymap rc-hauppauge not found [ 656.209583][ T5898] Registered IR keymap rc-empty [ 656.407717][T11785] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 656.429248][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.461682][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.509885][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 656.554526][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input41 [ 656.579752][T11785] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 656.590174][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.597873][T11785] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 656.600591][ C0] mceusb 9-1:0.0: long-range (0xf1) receiver active [ 656.609406][T11785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.644600][T11785] usb 5-1: Product: syz [ 656.661440][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.676805][T11785] usb 5-1: Manufacturer: syz [ 656.682818][T11785] usb 5-1: SerialNumber: syz [ 656.691042][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.703279][T11785] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 656.729209][ T47] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 656.769773][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.820763][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.850095][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.871470][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.892444][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.920133][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.953424][ T5898] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 656.999079][ T5898] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 657.078844][ T5898] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xf1 active) [ 657.099196][ T5898] usb 9-1: USB disconnect, device number 13 [ 657.196192][T13920] kAFS: unparsable volume name [ 657.212576][T13919] Bluetooth: MGMT ver 1.23 [ 657.225610][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 657.779892][ T47] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 658.030035][ T47] ath9k_htc: Failed to initialize the device [ 658.095793][ T47] usb 5-1: ath9k_htc: USB layer deinitialized [ 658.647396][T13937] ALSA: seq fatal error: cannot create timer (-22) [ 659.402739][ T5898] usb 5-1: USB disconnect, device number 63 [ 659.696964][T13958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13958 comm=syz.4.2280 [ 659.799843][T11785] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 660.279734][ T5823] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 660.400413][T11785] usb 2-1: device descriptor read/64, error -71 [ 660.460141][ T5823] usb 9-1: too many configurations: 249, using maximum allowed: 8 [ 660.517669][ T5823] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 660.545731][ T5827] Bluetooth: Wrong link type (-71) [ 660.554638][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.591907][ T5823] usb 9-1: Product: syz [ 660.609283][ T5823] usb 9-1: Manufacturer: syz [ 660.619726][ T5823] usb 9-1: SerialNumber: syz [ 660.675078][T13973] kAFS: unparsable volume name [ 660.749749][T11785] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 661.502596][T11785] usb 2-1: device descriptor read/64, error -71 [ 661.603020][ T5823] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.662105][T11785] usb usb2-port1: attempt power cycle [ 662.069720][T11785] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 662.151525][T11785] usb 2-1: device descriptor read/8, error -71 [ 662.381469][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 662.459694][T11785] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 662.542547][T13980] autofs4:pid:13980:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 662.868194][T12903] usb 9-1: USB disconnect, device number 14 [ 663.186166][T11785] usb 2-1: device descriptor read/8, error -71 [ 663.529744][T11785] usb usb2-port1: unable to enumerate USB device [ 663.531152][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 663.625555][ T10] ath9k_htc: Failed to initialize the device [ 663.643397][T12903] usb 9-1: ath9k_htc: USB layer deinitialized [ 663.680093][T13997] ALSA: seq fatal error: cannot create timer (-22) [ 664.104195][T14001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=14001 comm=syz.5.2294 [ 667.432434][T14044] ALSA: seq fatal error: cannot create timer (-22) [ 667.456691][ T30] audit: type=1326 audit(1742665186.378:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.8.2309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7798d169 code=0x0 [ 667.649733][ T26] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 668.001389][ T26] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 668.022923][ T26] usb 5-1: config 0 has no interface number 0 [ 668.063063][ T26] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.079884][T14058] 9pnet_fd: Insufficient options for proto=fd [ 668.091269][ T26] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.106300][ T26] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 668.132204][ T26] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 668.163478][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.165460][ T26] usb 5-1: config 0 descriptor?? [ 668.165859][T14035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 668.167204][ T26] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input42 [ 668.417840][ T5898] usb 5-1: USB disconnect, device number 64 [ 670.960797][T14074] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(267797097990928) <= P.seqno(0) <= S.SWH(267797097991002)) and (P.ackno exists or LAWL(16952098716548) <= P.ackno(16952098716549) <= S.AWH(16952098716549), sending SYNC... [ 671.180403][ T30] audit: type=1400 audit(1742665189.898:1386): avc: denied { accept } for pid=14073 comm="syz.5.2318" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 671.418479][T14094] FAULT_INJECTION: forcing a failure. [ 671.418479][T14094] name failslab, interval 1, probability 0, space 0, times 0 [ 671.433681][T14094] CPU: 1 UID: 0 PID: 14094 Comm: syz.1.2324 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 671.433696][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 671.433702][T14094] Call Trace: [ 671.433705][T14094] [ 671.433710][T14094] dump_stack_lvl+0x16c/0x1f0 [ 671.433729][T14094] should_fail_ex+0x50a/0x650 [ 671.433746][T14094] ? fs_reclaim_acquire+0xae/0x150 [ 671.433763][T14094] ? tomoyo_encode2+0x100/0x3e0 [ 671.433779][T14094] should_failslab+0xc2/0x120 [ 671.433792][T14094] __kmalloc_noprof+0xcb/0x510 [ 671.433802][T14094] ? d_absolute_path+0x137/0x1b0 [ 671.433818][T14094] tomoyo_encode2+0x100/0x3e0 [ 671.433835][T14094] tomoyo_encode+0x29/0x50 [ 671.433850][T14094] tomoyo_realpath_from_path+0x19d/0x720 [ 671.433869][T14094] tomoyo_check_open_permission+0x2ad/0x3c0 [ 671.433884][T14094] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 671.433903][T14094] ? avc_has_perm_noaudit+0x119/0x3a0 [ 671.433922][T14094] ? __pfx_hook_file_open+0x10/0x10 [ 671.433936][T14094] ? lock_acquire+0x2f/0xb0 [ 671.433952][T14094] tomoyo_file_open+0x6b/0x90 [ 671.433963][T14094] security_file_open+0x84/0x1e0 [ 671.433979][T14094] do_dentry_open+0x57c/0x1c40 [ 671.433994][T14094] vfs_open+0x82/0x3f0 [ 671.434005][T14094] ? may_open+0x1f2/0x400 [ 671.434020][T14094] path_openat+0x1e88/0x2d80 [ 671.434041][T14094] ? __pfx_path_openat+0x10/0x10 [ 671.434051][T14094] ? __pfx___lock_acquire+0x10/0x10 [ 671.434065][T14094] ? lock_acquire.part.0+0x11b/0x380 [ 671.434080][T14094] ? find_held_lock+0x2d/0x110 [ 671.434093][T14094] do_filp_open+0x20c/0x470 [ 671.434103][T14094] ? __pfx_do_filp_open+0x10/0x10 [ 671.434113][T14094] ? find_held_lock+0x2d/0x110 [ 671.434132][T14094] ? alloc_fd+0x41f/0x760 [ 671.434146][T14094] do_sys_openat2+0x17a/0x1e0 [ 671.434159][T14094] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.434174][T14094] ? __fget_files+0x206/0x3a0 [ 671.434186][T14094] __x64_sys_openat+0x175/0x210 [ 671.434199][T14094] ? __pfx___x64_sys_openat+0x10/0x10 [ 671.434212][T14094] ? ksys_write+0x1ba/0x250 [ 671.434226][T14094] do_syscall_64+0xcd/0x250 [ 671.434242][T14094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.434257][T14094] RIP: 0033:0x7ff87838d169 [ 671.434266][T14094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.434276][T14094] RSP: 002b:00007ff879207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 671.434286][T14094] RAX: ffffffffffffffda RBX: 00007ff8785a5fa0 RCX: 00007ff87838d169 [ 671.434292][T14094] RDX: 0000000000040001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 671.434298][T14094] RBP: 00007ff879207090 R08: 0000000000000000 R09: 0000000000000000 [ 671.434305][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.434311][T14094] R13: 0000000000000000 R14: 00007ff8785a5fa0 R15: 00007ffcad7e4348 [ 671.434324][T14094] [ 671.434332][T14094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.895831][T14099] nbd: must specify an index to disconnect [ 671.983262][ T30] audit: type=1400 audit(1742665190.918:1387): avc: denied { map } for pid=14098 comm="syz.1.2326" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 672.394074][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 672.425103][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2332'. [ 672.435883][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 672.737342][T14114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.763521][ T10] usb 9-1: too many configurations: 249, using maximum allowed: 8 [ 672.795831][T14114] atomic_op ffff888024e63198 conn xmit_atomic 0000000000000000 [ 672.882620][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 672.928546][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.968328][ T10] usb 9-1: Product: syz [ 672.987074][ T10] usb 9-1: Manufacturer: syz [ 673.637078][ T10] usb 9-1: SerialNumber: syz [ 673.647207][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 673.726720][ T5898] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 674.133206][T14129] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 674.829720][ T5898] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 674.845404][T11785] usb 9-1: USB disconnect, device number 15 [ 675.011404][ T5898] ath9k_htc: Failed to initialize the device [ 675.062522][T11785] usb 9-1: ath9k_htc: USB layer deinitialized [ 675.539973][ T26] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 675.723347][ T26] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 675.828325][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.848664][ T26] usb 5-1: Product: syz [ 675.853850][ T26] usb 5-1: Manufacturer: syz [ 675.864793][ T26] usb 5-1: SerialNumber: syz [ 676.404942][ T30] audit: type=1400 audit(1742665194.928:1388): avc: denied { append } for pid=14150 comm="syz.7.2341" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 676.440165][ T26] usb 5-1: config 0 descriptor?? [ 676.769642][T12903] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 677.106386][T12903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.430603][T14166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.479823][T14166] atomic_op ffff888028fc8198 conn xmit_atomic 0000000000000000 [ 677.720450][T12903] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 677.763281][T12903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.890187][T12903] usb 2-1: config 0 descriptor?? [ 677.951569][T12903] pwc: Askey VC010 type 2 USB webcam detected. [ 678.608728][ T26] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 678.622385][T12903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 678.674206][ T26] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 678.692573][T12903] pwc: recv_control_msg error -32 req 02 val 2700 [ 678.752580][T12903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 678.774366][T12903] pwc: recv_control_msg error -32 req 04 val 1000 [ 678.806525][T12903] pwc: recv_control_msg error -32 req 04 val 1300 [ 678.820754][ T26] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 678.908690][T12903] pwc: recv_control_msg error -32 req 04 val 1400 [ 678.927975][ T26] usb 5-1: USB disconnect, device number 65 [ 678.946020][T12903] pwc: recv_control_msg error -32 req 02 val 2000 [ 678.959330][T12903] pwc: recv_control_msg error -32 req 02 val 2100 [ 679.158365][T14188] FAULT_INJECTION: forcing a failure. [ 679.158365][T14188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.174150][T14188] CPU: 0 UID: 0 PID: 14188 Comm: syz.8.2354 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 679.174173][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 679.174183][T14188] Call Trace: [ 679.174188][T14188] [ 679.174192][T14188] dump_stack_lvl+0x16c/0x1f0 [ 679.174211][T14188] should_fail_ex+0x50a/0x650 [ 679.174230][T14188] _copy_to_user+0x32/0xd0 [ 679.174243][T14188] simple_read_from_buffer+0xd0/0x160 [ 679.174260][T14188] proc_fail_nth_read+0x198/0x270 [ 679.174276][T14188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.174299][T14188] ? rw_verify_area+0xcf/0x680 [ 679.174322][T14188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.174342][T14188] vfs_read+0x1df/0xbf0 [ 679.174358][T14188] ? __fget_files+0x1fc/0x3a0 [ 679.174368][T14188] ? __pfx___mutex_lock+0x10/0x10 [ 679.174383][T14188] ? __pfx_vfs_read+0x10/0x10 [ 679.174403][T14188] ? __fget_files+0x206/0x3a0 [ 679.174416][T14188] ksys_read+0x12b/0x250 [ 679.174435][T14188] ? __pfx_ksys_read+0x10/0x10 [ 679.174466][T14188] do_syscall_64+0xcd/0x250 [ 679.174490][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.174510][T14188] RIP: 0033:0x7fad7798bb7c [ 679.174518][T14188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 679.174529][T14188] RSP: 002b:00007fad78786030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.174539][T14188] RAX: ffffffffffffffda RBX: 00007fad77ba5fa0 RCX: 00007fad7798bb7c [ 679.174546][T14188] RDX: 000000000000000f RSI: 00007fad787860a0 RDI: 0000000000000005 [ 679.174552][T14188] RBP: 00007fad78786090 R08: 0000000000000000 R09: 0000000000000000 [ 679.174558][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.174564][T14188] R13: 0000000000000000 R14: 00007fad77ba5fa0 R15: 00007ffce5a1dfd8 [ 679.174582][T14188] [ 679.178916][T12903] pwc: recv_control_msg error -32 req 02 val 2500 [ 679.418458][T12903] pwc: recv_control_msg error -71 req 02 val 2400 [ 679.426457][T12903] pwc: recv_control_msg error -71 req 02 val 2600 [ 679.444290][T12903] pwc: recv_control_msg error -71 req 02 val 2900 [ 679.460884][T12903] pwc: recv_control_msg error -71 req 02 val 2800 [ 679.478203][T12903] pwc: recv_control_msg error -71 req 04 val 1100 [ 679.510311][T12903] pwc: recv_control_msg error -71 req 04 val 1200 [ 679.533963][T12903] pwc: Registered as video103. [ 679.539877][ T26] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 679.557276][T12903] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 679.594743][T12903] usb 2-1: USB disconnect, device number 73 [ 679.700324][ T26] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 679.722941][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 679.734014][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.759773][ T26] usb 5-1: Product: syz [ 679.778074][ T26] usb 5-1: Manufacturer: syz [ 679.796367][ T26] usb 5-1: SerialNumber: syz [ 679.830695][ T26] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 679.864410][ T47] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 680.091528][T14198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.105264][T14198] atomic_op ffff88807c742198 conn xmit_atomic 0000000000000000 [ 680.625707][T14206] No control pipe specified [ 680.654063][ T30] audit: type=1326 audit(1742665199.588:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 680.682190][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.770247][T12903] usb 5-1: USB disconnect, device number 66 [ 680.904156][ T47] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 680.923119][ T30] audit: type=1326 audit(1742665199.588:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 680.951147][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.962724][ T47] ath9k_htc: Failed to initialize the device [ 680.992444][T12903] usb 5-1: ath9k_htc: USB layer deinitialized [ 681.023546][ T30] audit: type=1326 audit(1742665199.718:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 681.051659][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.147374][ T30] audit: type=1326 audit(1742665199.718:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 681.175401][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.262719][ T26] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 681.297909][ T30] audit: type=1326 audit(1742665199.718:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 681.326061][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.337274][T14212] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 681.345544][T14212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 681.362388][T14212] vhci_hcd vhci_hcd.0: Device attached [ 681.421290][ T30] audit: type=1326 audit(1742665199.718:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 681.449411][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.463270][ T30] audit: type=1326 audit(1742665199.718:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bb498bad0 code=0x7ffc0000 [ 681.491445][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.500680][ T26] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.521797][ T26] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 681.544750][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.563036][ T30] audit: type=1326 audit(1742665199.718:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4bb498e997 code=0x7ffc0000 [ 681.591169][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.624484][ T26] usb 9-1: config 0 descriptor?? [ 681.631535][T14217] evm: overlay not supported [ 681.640113][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 681.659669][T11785] usb 48-1: SetAddress Request (2) to port 0 [ 681.667640][T11785] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 681.680174][T14206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 681.691687][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 681.937097][ T30] audit: type=1326 audit(1742665199.718:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 681.965136][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.551073][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 682.573736][T14213] vhci_hcd: connection closed [ 682.581917][T14201] Bluetooth: hci4: command 0x0406 tx timeout [ 682.584734][ T30] audit: type=1326 audit(1742665199.718:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4bb498e997 code=0x7ffc0000 [ 682.626342][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 682.634269][ T30] audit: type=1326 audit(1742665199.718:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4bb498bdca code=0x7ffc0000 [ 682.662198][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.670374][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 682.690663][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 682.709634][ T8019] vhci_hcd: stop threads [ 682.716397][ T8019] vhci_hcd: release socket [ 682.732927][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 682.752224][ T8019] vhci_hcd: disconnect device [ 682.758497][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 682.788016][ T30] audit: type=1326 audit(1742665199.728:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 682.816194][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.824785][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 682.835087][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 682.854196][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 682.890287][ T26] pwc: recv_control_msg error -32 req 02 val 2500 [ 682.906287][ T26] pwc: recv_control_msg error -32 req 02 val 2400 [ 682.916488][ T30] audit: type=1326 audit(1742665199.728:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 682.944594][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.957447][ T26] pwc: recv_control_msg error -32 req 02 val 2600 [ 682.966757][ T30] audit: type=1326 audit(1742665199.728:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bb498d169 code=0x7ffc0000 [ 682.994906][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.002850][ T26] pwc: recv_control_msg error -32 req 02 val 2900 [ 683.011089][ T26] pwc: recv_control_msg error -32 req 02 val 2800 [ 683.018936][ T30] audit: type=1326 audit(1742665200.228:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.7.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477278d169 code=0x7ffc0000 [ 683.047040][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.097440][T14232] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1634036803 (104578355392 ns) > initial count (53909915648 ns). Using initial count to start timer. [ 683.189671][ T47] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 683.267523][ T26] pwc: Registered as video103. [ 683.275871][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 683.340636][ T47] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 683.595914][T14243] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 683.732950][ T47] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 683.732981][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.732999][ T47] usb 5-1: Product: syz [ 683.733013][ T47] usb 5-1: Manufacturer: syz [ 683.733027][ T47] usb 5-1: SerialNumber: syz [ 683.736210][ T47] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 683.744974][ T47] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 684.011583][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.100865][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.417399][ T26] usb 5-1: USB disconnect, device number 67 [ 684.539852][T12903] usb 9-1: USB disconnect, device number 16 [ 684.689195][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2378'. [ 685.339341][ T47] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 685.347718][ T47] ath9k_htc: Failed to initialize the device [ 685.355469][ T26] usb 5-1: ath9k_htc: USB layer deinitialized [ 685.372087][T14262] nbd: must specify a device to reconfigure [ 685.466166][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.477690][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 686.477705][ T30] audit: type=1400 audit(1742665205.308:1453): avc: denied { execmem } for pid=14281 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 686.950394][ T10] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 687.038952][ T5827] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 687.039750][T14296] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 687.112272][ T10] usb 2-1: No LPM exit latency info found, disabling LPM. [ 687.158767][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 687.213158][ T10] usb 2-1: can't read configurations, error -71 [ 688.178760][T11785] usb 48-1: device descriptor read/8, error -110 [ 688.570216][T11785] usb usb48-port1: attempt power cycle [ 689.571173][T11785] usb usb48-port1: unable to enumerate USB device [ 693.591935][T14331] ubi: mtd0 is already attached to ubi31 [ 697.099463][ T30] audit: type=1400 audit(1742665216.028:1454): avc: denied { create } for pid=14381 comm="syz.8.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 697.201559][ T30] audit: type=1400 audit(1742665216.038:1455): avc: denied { write } for pid=14381 comm="syz.8.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 697.299813][ T30] audit: type=1400 audit(1742665216.038:1456): avc: denied { nlmsg_write } for pid=14381 comm="syz.8.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 697.503676][ T30] audit: type=1400 audit(1742665216.438:1457): avc: denied { listen } for pid=14393 comm="syz.8.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.849702][ T26] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 697.999820][ T26] usb 9-1: Invalid ep0 maxpacket: 32 [ 698.139655][ T26] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 698.319603][ T26] usb 9-1: Invalid ep0 maxpacket: 32 [ 698.357613][ T26] usb usb9-port1: attempt power cycle [ 698.699591][ T26] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 698.710715][T14408] block nbd4: shutting down sockets [ 698.772412][ T26] usb 9-1: Invalid ep0 maxpacket: 32 [ 698.909626][ T26] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 698.950252][ T26] usb 9-1: Invalid ep0 maxpacket: 32 [ 698.959753][ T26] usb usb9-port1: unable to enumerate USB device [ 699.589555][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 700.523440][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 700.617458][ T10] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 700.743485][ T10] usb 5-1: config 0 has no interface number 0 [ 700.780693][ T10] usb 5-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 700.910085][ T10] usb 5-1: config 0 interface 244 has no altsetting 0 [ 700.921762][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 700.932762][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.942457][ T10] usb 5-1: Product: syz [ 700.947865][ T10] usb 5-1: Manufacturer: syz [ 700.953392][ T10] usb 5-1: SerialNumber: syz [ 700.959952][ T10] usb 5-1: config 0 descriptor?? [ 700.967586][ T10] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 702.171000][ T10] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 702.220496][ T10] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 702.261364][T14436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.540546][ T10] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 703.368851][T14448] syz.1.2430: attempt to access beyond end of device [ 703.368851][T14448] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 703.399685][T14448] qnx4: unable to read the superblock [ 703.445094][ T5823] usb 5-1: USB disconnect, device number 68 [ 703.848223][ T5823] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 704.700094][ T5823] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 704.761784][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.782529][ T5823] usb 5-1: Product: syz [ 704.797469][ T5823] usb 5-1: Manufacturer: syz [ 704.979641][ T5823] usb 5-1: SerialNumber: syz [ 704.990436][ T5823] usb 5-1: config 0 descriptor?? [ 705.012469][ T5823] ch341 5-1:0.0: ch341-uart converter detected [ 706.009288][T14483] ALSA: seq fatal error: cannot create timer (-22) [ 706.904519][ T5823] ch341-uart ttyUSB0: failed to read break control: -71 [ 706.917120][ T5823] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 706.933605][ T30] audit: type=1400 audit(1742665225.868:1458): avc: denied { connect } for pid=14494 comm="syz.8.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.396816][ T5823] usb 5-1: USB disconnect, device number 69 [ 707.419943][ T5823] ch341 5-1:0.0: device disconnected [ 708.627562][ T31] INFO: task syz.6.1866:12512 blocked for more than 143 seconds. [ 708.647634][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 708.820590][ T31] Blocked by coredump. [ 708.879890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.919618][ T31] task:syz.6.1866 state:D stack:26512 pid:12512 tgid:12502 ppid:6734 task_flags:0x400448 flags:0x00024000 [ 708.934972][ T31] Call Trace: [ 708.944129][ T31] [ 709.006752][ T31] __schedule+0xf43/0x5890 [ 709.020862][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 709.033306][ T31] ? __pfx___schedule+0x10/0x10 [ 709.049222][ T31] ? schedule+0x298/0x350 [ 709.062601][ T31] ? __pfx_lock_release+0x10/0x10 [ 709.077543][ T31] ? lock_acquire+0x2f/0xb0 [ 709.105338][ T31] ? schedule+0x1fd/0x350 [ 709.127113][ T31] schedule+0xe7/0x350 [ 709.138768][ T31] schedule_timeout+0x244/0x280 [ 709.162444][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 709.182704][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.197664][ T31] __wait_for_common+0x3e1/0x600 [ 709.210472][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 709.237244][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 709.272682][ T31] ? xa_find_after+0x10d/0x480 [ 709.296155][ T31] ? lock_acquire+0x2f/0xb0 [ 709.314746][ T31] ? io_wq_put_and_exit+0x18f/0x8a0 [ 709.332500][ T31] io_wq_put_and_exit+0x232/0x8a0 [ 709.350070][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 709.363451][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 709.377840][ T31] ? __pfx___might_resched+0x10/0x10 [ 709.396341][ T31] io_uring_clean_tctx+0x10e/0x190 [ 709.409558][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 709.423890][ T31] ? percpu_counter_add_batch+0x174/0x1e0 [ 709.448515][ T31] io_uring_cancel_generic+0x67d/0x8f0 [ 709.467436][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 709.482538][ T31] ? do_exit+0x313/0x2db0 [ 709.487883][ T31] ? __pfx_lock_release+0x10/0x10 [ 709.494038][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 709.504063][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 709.510775][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 709.517250][ T31] do_exit+0x53c/0x2db0 [ 709.525530][ T31] ? get_signal+0x8f7/0x26c0 [ 709.532285][ T31] ? __pfx_do_exit+0x10/0x10 [ 709.538094][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 709.549310][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 709.557422][ T31] do_group_exit+0xd3/0x2a0 [ 709.563042][ T31] get_signal+0x24ed/0x26c0 [ 709.571937][ T31] ? __pfx_get_signal+0x10/0x10 [ 709.577846][ T31] ? __pfx_do_futex+0x10/0x10 [ 709.584061][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 709.596351][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 709.603822][ T31] ? rcu_is_watching+0x12/0xc0 [ 709.609800][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 709.616808][ T31] do_syscall_64+0xda/0x250 [ 709.623805][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.630992][ T31] RIP: 0033:0x7f2bf138d169 [ 709.636555][ T31] RSP: 002b:00007f2bf225d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 709.647102][ T31] RAX: fffffffffffffe00 RBX: 00007f2bf15a6248 RCX: 00007f2bf138d169 [ 709.662887][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bf15a6248 [ 709.673748][ T31] RBP: 00007f2bf15a6240 R08: 0000000000000000 R09: 0000000000000000 [ 709.685753][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2bf15a624c [ 709.696201][ T31] R13: 0000000000000000 R14: 00007ffdf18142f0 R15: 00007ffdf18143d8 [ 709.711429][ T31] [ 709.715262][ T31] [ 709.715262][ T31] Showing all locks held in the system: [ 709.725793][ T31] 1 lock held by khungtaskd/31: [ 709.733911][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 709.747340][ T31] 2 locks held by getty/5578: [ 709.755729][ T31] #0: ffff8880326a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 709.770624][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 709.787654][ T31] 2 locks held by iou-wrk-12512/12514: [ 709.795031][ T31] 1 lock held by syz.4.2447/14505: [ 709.804200][ T31] #0: ffffffff8e1c8480 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 709.816821][ T31] [ 709.828926][ T31] ============================================= [ 709.828926][ T31] [ 709.839997][ T31] NMI backtrace for cpu 0 [ 709.840010][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 709.840029][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 709.840039][ T31] Call Trace: [ 709.840045][ T31] [ 709.840052][ T31] dump_stack_lvl+0x116/0x1f0 [ 709.840080][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 709.840100][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 709.840124][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 709.840145][ T31] watchdog+0xf62/0x12b0 [ 709.840176][ T31] ? __pfx_watchdog+0x10/0x10 [ 709.840200][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.840225][ T31] ? __kthread_parkme+0x148/0x220 [ 709.840243][ T31] ? __pfx_watchdog+0x10/0x10 [ 709.840269][ T31] kthread+0x3af/0x750 [ 709.840290][ T31] ? __pfx_kthread+0x10/0x10 [ 709.840316][ T31] ? __pfx_kthread+0x10/0x10 [ 709.840337][ T31] ret_from_fork+0x45/0x80 [ 709.840359][ T31] ? __pfx_kthread+0x10/0x10 [ 709.840379][ T31] ret_from_fork_asm+0x1a/0x30 [ 709.840409][ T31] [ 709.840420][ T31] Sending NMI from CPU 0 to CPUs 1: [ 709.974510][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 710.131795][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 710.140016][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 710.152593][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 710.164640][ T31] Call Trace: [ 710.168557][ T31] [ 710.172055][ T31] dump_stack_lvl+0x3d/0x1f0 [ 710.177557][ T31] panic+0x71d/0x800 [ 710.182230][ T31] ? __pfx_panic+0x10/0x10 [ 710.187519][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 710.193960][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 710.201129][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 710.207562][ T31] ? watchdog+0xdcc/0x12b0 [ 710.212849][ T31] ? watchdog+0xdbf/0x12b0 [ 710.218143][ T31] watchdog+0xddd/0x12b0 [ 710.223229][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.228830][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.235061][ T31] ? __kthread_parkme+0x148/0x220 [ 710.241073][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.246680][ T31] kthread+0x3af/0x750 [ 710.251548][ T31] ? __pfx_kthread+0x10/0x10 [ 710.257046][ T31] ? __pfx_kthread+0x10/0x10 [ 710.262540][ T31] ret_from_fork+0x45/0x80 [ 710.267830][ T31] ? __pfx_kthread+0x10/0x10 [ 710.273336][ T31] ret_from_fork_asm+0x1a/0x30 [ 710.279051][ T31] [ 710.282856][ T31] Kernel Offset: disabled [ 710.288008][ T31] Rebooting in 86400 seconds..