last executing test programs: 12m27.243893788s ago: executing program 4 (id=53): socket(0x39, 0x9, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000008000000030000000900000000000000a91105cdd00899dde2250438ff44de22fff639ed929396f0f84b2a03cbfecb543dc1b4d803f9b94b1de1cdff1b503f217be91ebba348cc6ebef432ea9e673d596bb65a8f472f44d35104f8cc6a49202573989a0987f522ec2838e6c7ceb7512b6b54c2264b4c8fae019168047012d8258e954c0869912d25815c3a8a63176721ec7cf7d85550310d503cb764684f86bef830e04fb5d745a4955c0ff95a2aece9", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket(0x11, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'team0\x00', {0x9}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@nfs_export_on}]}) 12m25.174859207s ago: executing program 4 (id=55): pipe(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63", 0xbb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x2) rt_sigaction(0x25, &(0x7f0000000140)={0x0, 0x10000000, 0x0, {[0x5c40]}}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000440)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 12m21.319503551s ago: executing program 4 (id=63): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00'}}, 0x118) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r3) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000880)="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", 0x1fd, r3) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 12m18.185652402s ago: executing program 4 (id=69): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd04, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x0, 0x0, 0x41, 0x105, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25040100800c0002"], 0x114}], 0x1}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000000)=0xc) setuid(r8) fsetxattr(r7, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x0, 0x1) 12m10.146200335s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04090700c9"], 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6000097e) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) 12m5.585897589s ago: executing program 4 (id=89): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6a802, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) semget(0x1, 0x3, 0x204) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)={{0xcc, 0x2, 0xc, 0x369, 0xd7, 0x5, 0x27, 0x25}, "7318dd1bfef107241c8452d384a9aa36dacf64852275a6f15e1a71db1a920922e6be74013f45639b27ca83b0365270507c6ee429ae27552ca90db59f96e7041a571052a094d77c423d2a4fb9bb5c42efb0d39bc44961870c934f928072b591ec9cda1a2ba7d1d23868db6b4a816b0558bfea18bf61294dae0078c4fbe880b17b245250720efb7ad4230021a01b71db012b8bd10a12a98827693d083ac90c357aa77d6527a11c52c00cba00dde31c8f9c83f308cfacd8f1a23254bf32fa8974ccaf94a42d01fccc65942681f23fdff0996a8efccee24765c68dbdb8816249af745ee7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x802) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 11m48.996918383s ago: executing program 32 (id=89): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6a802, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) semget(0x1, 0x3, 0x204) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)={{0xcc, 0x2, 0xc, 0x369, 0xd7, 0x5, 0x27, 0x25}, "7318dd1bfef107241c8452d384a9aa36dacf64852275a6f15e1a71db1a920922e6be74013f45639b27ca83b0365270507c6ee429ae27552ca90db59f96e7041a571052a094d77c423d2a4fb9bb5c42efb0d39bc44961870c934f928072b591ec9cda1a2ba7d1d23868db6b4a816b0558bfea18bf61294dae0078c4fbe880b17b245250720efb7ad4230021a01b71db012b8bd10a12a98827693d083ac90c357aa77d6527a11c52c00cba00dde31c8f9c83f308cfacd8f1a23254bf32fa8974ccaf94a42d01fccc65942681f23fdff0996a8efccee24765c68dbdb8816249af745ee7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x802) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 5m41.833176298s ago: executing program 0 (id=999): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) keyctl$clear(0x5, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r9], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @local, 0x1, 0x630, 0xb8, 0x33b838c43fb1632e, 0x8, 0x800c2, r11}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) socket(0x1, 0x2, 0x0) 5m35.997895773s ago: executing program 0 (id=1004): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x3, 0x53, &(0x7f0000000380)="ce655b548974621e06a7e37b2c472a938ef0309019e500f476e0fd0bf023bff1bafb604c165f59be0a9b1313d1589dd900a2c44ff8ebdf9b80a148da06f7c0ce368766243d78cb061911ee8d6f41fad735302a", 0x1}, {0x1ca, 0x0, &(0x7f0000000400)}, {0x9, 0x86, &(0x7f0000001400)="1bdab88b126f6196b88ee9bdb1284de8aefe736bb9572d7e2b1ae2c8d13e746c7da195d74958b9f3f42566b91cd54ec675fd538b78e9d4d7fd9d7c826b9462cf2afd571195abca059eaf22b3a662e53f8e1c2d1cd740033cf8fd63dca575d6eecbaf17a5bf9b5718642720dfda8f599aefbe7a39b7f1986621c3dbfa8e689384aa961183078e", 0x1}, {0x3, 0x83, &(0x7f00000014c0)="f59684411265459fb4dc71b9c2fbeea989810eb23b486bb2340d09e0d8dec97b044c0c883482eebef04fadd35abcd8b382c9354abc6364e9295ab2c1f78ded58417353b583bedef7fc70f73344e3d2853823f4377991860e90bc74cd520c25f95132b7a4a4f3af038fc520730820814a206b89df9830dd40c2e9b648b6d52cf7b19073", 0x1}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x81, @empty, 0x1, 0x1}, 0x20) sendmmsg$inet6(r2, &(0x7f00000083c0)=[{{0x0, 0x40, 0x0, 0xffffffffffffff5a}}], 0x3fffffffffffe58, 0x4000814) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4000050) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/27) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x20, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3, 0xa, 0x2, 0x0, 0x0, 0x4, 0xc}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}], 0x1, 0x0) read$alg(r2, &(0x7f0000000280)=""/147, 0x93) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000009c0)="b7b013a5c2edaba1fb77ce9ff87b589820723cb4f337e4117ea1ad4ab407117091ec9173cf153851853a2ca9e53ab40e842161c6698678a24392928d7f3ce7970e86509a96daafa910fd4e8b9da3df2810305742940f2415a78c5cf550ca4c19733754220741642eefcd0e4302f77009de701c4a55a8a0d6a3cc48698e40c473764c5faf20d3a211a2cab9edf44ef617a42bfe5fc167eb23be22e141fad21c71caab752b62577d7a74c044a952cc84e061e1979f1da6dd3992a17bab3b845360d99f951500f3557042721a5632ec03b7cc6a38ceea2a4c866d88a837037ad823f8a0ccd9ad9982a648b30301d47d095a5f56fb50e5e33dd80ab84c463159dd7e8e603ef2799fd84b0260a7eaa4121b22fde209a07cef21020fb0fd38af494e7974728e0306475b4b96a3c5ac374c61572fc13b8898ad992a32ad4711ed9203790f90a7bb22cc7a3cb9cd52c0d878e60fb38adfa97ba1fcf77e443b2886397f8ea1ca9194e53f578d30c29b19acf0291695327878b05b502b84dc889bf23bca56498bdcb9742fb3c5e351aa7a6b39123e7a975ea42814634a2d984b528eecc31a48192d2acee32dded16b7d07907416d8ffb70fbc2954b90d74f1772adec04a8d472f8fad6f814770e429672c4a4b86c0e7c23bf3c29f8f6e5d145a5a3821cfa5577512", 0x11c}, {&(0x7f0000000600)="fc48968f8dec582f6b1fbfb1ea70e0a11db116f742ebce247568895c752bd920c4504fea06f1e038e03aeb5ece194f29b70bc33ce00976cd4d7bbaf85f2e3f4fb8ea87a67a8b00ad6d0bf4b147f53afc1f173addefd0e851b6e1bc164e771a4bcde3bce3afab00253f3e8f2d04c588d983c74ef9c4b4f607bffb5e44dd61821ea37d48960322c26c0942e97834208eff8bd21225fe4fdccf9d82cafac3fb151c761b64920200"/180, 0xb1}, {&(0x7f0000001640)="8fa1986fdacf831cf42f9a851f2255b4c78051193b37eac611469455852c0d8bdaaba9026ec11f8a19bc7e283cf34866504d9f765dbca93691f014577ff26f52067b3a7c2b3ef93bd43285981d104d546f4fdb2f52badb54725a33acd9f5fbcf9ef251584233abbdf749849718244dc5ef12cb016586273f0b9e6dac09c9cfd843f7681936efaec7722bb0bd9be15aca96600ab7b3e48f6ff3461f50fa4411f76766a3760edb2ba47a2193fdc48c96d83953626732a222e1091eda187a14054aee1b036a0104b5d0486e2d8b3f7672b9d86a50d41fce499a1825a25e2bd234402df865d914124b911f2d47952467f75a4e110f996a8a8aed865385751d10b99e168251c4fbf35b3c313dee2f7a5fa09595af3098faace1a91a440b6a23a1ed5077c3966d8f579629f491410db4c03591535195078514165950d6fa35b62bab89cbe2503bcf2b27b5255ffc29aa26941d9d7e3f65d449d4666e6e2ee9cbf096d3d36c19486ea3a0bf914a65ecf91f2754ac1c80b19635ac4a95424ce43e02c95fe1120fae0a050317610dae1ea941781826bc6cdaa73af6f522bec253824819a72ced8fcbf33b7d3c091d79cc970c32a4fae176341ecafef81eb7da614f85650ebf4807ec47db1dc3dd009c1e54a29a3eca7cbdcdfb95e9f428d69ff027582362e3ee00824c977fa5eb44a97ee7c6c46f0a8342f1b5ce877b44e510983f9fd3306d8d8ba6f80fb39e51d1811ec16f9ea66230cb6af225c13f69100e5aad82f015ac6dafe7a7b7d6366328b8fce14d80ae9b040ac5fd3dc7187064766a75e10b80171339584379d7b5e8be340f901063cc58703ac54e745942e2e7d019e0c78724bf36ee1a355865c99509f34e0c21a45e54258655805869b105269fea1807aa02ff561fef73b5bfc507146a88d8866919ad80886d6ab43c950775652d1019947e9461399718a176ca27a856e064d09c89f6081de286cf90ef963cca52c293dcd0974b39b867c987f541a24ef2869d4a54208b496c736e1b28624aaca5e7237bde363296f3bda95d5c20d8933bd28122bac3eda6b367db0772eb0a94a4c3f9bd2cd6aefa50cce172029dd8e2d525d5780c84cff5bd491af0bcbc2beafb32c6ba8cc1659acd6fa7f60aae969c4dd01f3bc880fc41cfb6f151ee5b0587e4ce158dada600dd1fd849cee645b8f99bd26c3b5a9126ada3e2cd675d096e34521f49af7a4eaa3536b9aab08b80d0164b79815d1cd4efcee8c61601800da17416f0f9711c21ea9316ac16825d43463354aa4d98fe53955ea404890e0f9c014a21b4831034fcfdbc5799926961f4049e0f54a53732fdd4c60ee1ed08e538569222d0fba470f510518b85268e2139fb28c472eae789ec17fdcfed13141d378e878df54ffd2c67303a547277857c36106956e7603ca29aa20c3e2eb39f801ae22c1683eb284fa753b99aefe417109064d72cb1f59eb70d4ce3181bcbd991ba7739325a8ae337548bbc3c9966ddcdbc59493e9ecd0584097e339663589b1fe04d86c3a5f3821eb7807f8e6635963c3305846faa92859831e9f193ee5fc412cc5651393aa59da8e71dcda5b2956bb82f8a8cf5c1beef12aa1a15275b7aea199c8e2ac4cd6996098984d676a09d4d65a8c69d556470a80c212cb09053732ef3c2bab0a935b6ceaf128ceda11edb3ff7cdd011da31184f69a537c30bcbf2d54b49c51e7fd6dbc9f668ebeefb6646b69eee2ca49e437559f8957c65d1e3eed89448d9e541cb1dece7df0b077184add91b31a2175f135e68aaacef9da508ae0c8df29b3e7a707bdfd103d43a25dfa47ec62871c290e71f741f57c5353f6a7fd3ae4d5ab79abf8dc5350346054ae2a3c01b34086abfcfa5df04c39ef730aab58f401869fe31611aab3bb6a072f13fc0b4bbf774885845c8ad460b5e34e66a6da88247c7aa476967bf5b472b39be75616161eaae2b760eb2b22177dcda16c0a25128e31986bfbc7b4ab17845e784ce528498b038dbfbe308321606cb538d67f28ba96a30aa6c6bf21e4e0dff4c88d9215a74abbc558315701060d6c030cf6e8539486502233024e1929e13da6d7cb57c7e551c6010970033f79ee536d4b51268c6c43f63439498b5917be3299212e8664c1bda7c2d908f631b407c3db00bfb93bc751d7bc3cbe3249364a8694637377110019190aa921fa7addda5cae21b12e78ab61dba93938b8c8f6a2fa850bb66f8a10ca9751e2984a717b24d0115f35ef6c0f8aabb965f0eccd14635fdf269a73032c65081c0e6929ebc46ddc2dea0a5de41cf9e248b0c446e175599c5f924cb827e39e61ef45b3c071fcca82a4455894ef21bd924e18500f2ea07ac3418747d9e700e812c58258cc1ff542fabdb4add6a7165e637fc81ef6626ea978559b9c3fe2ebfaeee9f54fef18a4f38fe923ae89e3327cafcf59029b319f77da366e265da3e68d2f1f7e4ef14f33cb82902c8f79f961ae44724dd01973d8022bcac755260cd6f8adcb9a70540c2b2a893b9e68617590fd68b2563465e132ecd6adfcfe63a8a8a462e56f4e3338d389b6c7412290dbd59c6af10816de99d16c993c64861c98579e3c159d608e58525e7957a34a93e8deae68fb7ea46708ef6be54729aa03712f29ac11ba9be77777e35d3a2fa18b4be24618efb3061716fc01a17e8bd4523a56a4060b4722bb98e6f1acf0563a49e30cb949db8b4e9023c2312ad7527f84a6a262443e4b02be0f7aea5a464c3290dde8978805eb93f37fdb6f4a29d1a0b922569d96f90414a9dac3249cc6cc3276c807686593508bcbd4cd27b72bd079c4a001ed5f5720443dbd491d458ba2685b702218259b0b3603ac56b81a0aed11a7c384653c04307e533ad434c75491467de09389f35482499238fcfb1f41c9307e18b05cb2c0f3bd356bee9eefd3a4d551f83ef8c695f7ad576d1a11308e8298fa863dab9d64710b56587824d9e48d9b1288dc5dc2656f18b9961684e79a8629af65a67661420464d62b00b346e5f6d2e5dad2f6e5d8cffce52dc20e77c0ada6c28b550b50c201bd70f4f148afc32faa5cfdac225d3f440ffbb23bd176b8a6b5c46abda41b2c73c5b00b4892428a0d31eb94215e2baa3f27dfc262cab980e0cf45cd32e0b3866f058fb7ddb78d34342f94c61c38d647bd4b061f346f742f13846a6a567947bb47210dc8af5fdc0c747568e66da42b67b73f72ee281c5edcd37c4f6c6844eda7e3d75608ef5175dea8b3b8ce11f7e4f41326e0c1e45c9a52f0c12969db8263f8a47152473c7ce432f04323b085501c1bc38eeec4e3c8d54e0a027938856e1844e4e8ec9b38aca16d1e0c925c34722ddb448a7f2e6aa3ff9139b397e9717a195cd5b314d4b09fc085f2e79f40530f38b7766a460907d76133d46a8b8e7f45dc45270325b8a778c5b8f34e82a827bffc58d8e05742518a8514594c32b49bd847eaafc2584e00a53919f34aae930916af89c0dade9f773dd97c3400b30abdcd6fd64626af47a5cff4e9327c0b28034bd0668c862c7bc97f3609188659eb7a22441d7a78d3ed00e15fca595d6767239044d2f9e744cff9da272e7c091c1b58a1d2667a653eedc88262ab0f644a27f3e04ac94bd7473168397b477f61d61f5ba8e0e918bd01b3e671236695778930c24115c47460562f6ee398b4bcb4e3259de4b74c50013c37d2294477a65572ab40baf9238af885435352b78e7ec5c026c160765e5997c55363220880e7a7942b7364deaba667fc11dfcfe189c670f04f9d15c02c64abd634a7e7bb06192662ba8745dbc3f28e704fc9e8075851edc4b053b5247d543f48cf772b6f12af6bc50f025e3db70359686ed2f84fbf3392a045096a58a3fea705df52ce13d05f19eb95f1a3a63fc32b4461461d90929ff4f75023541de2240d8b1dc4694265b36583f61dc751981d662b1fce879a06801db8251b3eccc8a8a9f29d524c643460579d4d69745c119e5a37a1b88203436a45317d18a776b9decb9f24e8f56daf770437f24821f0ae241edc36136a9036eaffe1efaa19fc6ce58229058f3af00d2a15ab40c9c95c7e7bc2ef6444310617f3f5c1dae03e52dcfad0f17494c92150422783e21ea66499854a69a9bffd75095211016fadd75d732d08bf288eb402d1dcea2175afb92193ab5370c9fd7d35b508926ef828af8ac0bcef19a8ec7b452554e439f932719068f7d36da37376cca8c6475536892bbb137a283e190e938e42a6d2e303543221cf1e44a01db6b401f84aeaa86adbcdf8cd42f8e3fbea1bd683d112ad2f102facf6d27b5feca8598d9ba1f62a2fde65b1f15a75b42bc4f7a18d412ea0b13bbac89da3774979cb3bb8984513625b0ad94aa2384d91ed71ad7b35bf757d34c8f91df34ffb4758a41f0e7635c0ffa2149c3f7b1707fbed176334f9844267057ffeece6443a4222dfb6596c164630f3f2ac3fc6e3bab0b7e6b6dc058c3e1db5cb3af7aea4421269ae101090c22836df9b0f9f7d5696fe402ad3641a70eb41c3a0b39bd1e383381e1c2778bf96c01fcf5a56f58194e78b52f331f4ec1a8b3dafa311c305b932227cfb93f9b3fb251afb69b8dfea00cd36c0d57bf7b4406a62c8ab67d7517b663a0de8e02d44b397127029245e967ae479580561ba1b2ead953fa0b791eb5bb338add3f1642861a5c2f0d4449d01261b4ac708176c3cf777052c7e0c1cb55ac2e4872414b6e52ff173ba2b945eb734a9569c47ef1c17b220a953feb1091ddd8caee80b12400b3ab6c59098d6db4200cb190bc1e674c1ebc9c71d7976245ce13227ba74a169b5074c7772344cb7959046c7a46f33eab9c3a3839a685ebdde111b6c6939e9fa465abdbb366d31e4c67a3366fb6f1bcf87a4fa1a8f018bbdb39c22cd01bacb0a4f1a52daebddad1081541c88b7590c34a2d53210d998b6d57154844bdf83f959e8d1dc562dde05fecde6bab6c7461cf44beb7f0729a1de4265247a76e6ce5a7559c541ca10aff8eb045a3a9ec8c1ebc20a2ed51cb2295ab809e9fbbe66d53b26c2bd8da5cddf3b785eda655c25191916b91cabaef57264bd84e483cebe3dd4b032745cad9e48291f86dd98dbe31aa2575db80304c7fc4d636cfbe4b71d4049e756f26a8b8521e77e5c06c17888f3d196211de7d5e5b045cdadbd50a7b1654f7226b805e995732b778ed2956decb2163ebae3b80da33d0cea5b0cd9b092e027cc3fdd25fe9e63b300f61bb308ee16b52fb9bbd7f2742f8b3534c1b19c0b1a6d920558a4ac3f1b3106d4cb981fe474efb49e9171684adaca9364bba63f686da2784ae906361385d87db92c153c2286600ee626ff922158d5a4930ff92454e756bdc664225e9239315ba8fc12ba91ba3264f64507157ad44bdace878248bae03aab58ca3ea477192edc5ce1754ea1a8ca17314deb3d48dfa24131810cd257b912dd01ee27a708ae525ece521b54943a3588f09ce71558f62f8a9afd17a6c4d347e70af4da732dec5ad3ee51654cbc8f0a650604979a3c3cc3d2ca0f4f6f4c7a680a07c6e0d8ba2a5d46f3c8f827bfd8c17c799dcd3267918fe0c241b72c91f1690b5eac676229478bb41ef46375f8720c3f8e608689fd4f7cd0ee82caab03f056b05a6081688b5b0acd35ffdacd5de19f3f7dcf1fb215a54f9de806e3428495eea4cbdb08f3ac97825023bb835a9e9c486c4bee7c909e7243a69ec4987e760c80a669a3d2260f534dac2ed666f48370b6ee62c07ea1601de6f4e7dbc924756cc4717f591ff2e327f4cd3eeb103991c714dd709aeb183d2dee9030e12d54d29b0"}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup(0x6085, &(0x7f0000000340)={0x0, 0x800952f, 0x80, 0x1, 0x151}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x7fffffff) write$dsp(r6, &(0x7f00000007c0)="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", 0x1ec) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000740)={0x20008, "d5a449c6f31a91f553c3769af08d47ed2eda811865a52a5a8e7e07e265cdd31c", 0x1, 0x20, 0x5000000, 0x61, 0x10, 0x5, 0x4, 0xbe70}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) close_range(r4, r7, 0x2) 5m32.768391664s ago: executing program 0 (id=1012): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x10) request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='/selinux/access\x00', 0xfffffffffffffffb) futex(0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = request_key(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r1, &(0x7f0000000740)="120000", 0x3, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000900), 0x0, r3) recvmmsg(r1, &(0x7f00000037c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) syz_emit_ethernet(0x25ac, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "38ff4b", 0x2576, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, {[@routing={0x3d, 0xa, 0x1, 0xa, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @empty]}, @dstopts={0x50df114c9995f7dc, 0x20b, '\x00', [@generic={0x2, 0x3, "af7ca1"}, @generic={0x5, 0x1000, "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"}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x5, [0x4, 0xb0e, 0x2, 0x7, 0xffffffffffffff80]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x2f, 0x0, 0x54, 0x0, 0x0, 0x3, 0x68}, @routing={0x5c, 0xc, 0x1, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x6, 0x10, 0x1, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @local, @dev={0xfe, 0x80, '\x00', 0x1a}, @remote, @private1]}, @hopopts={0xe6}, @srh={0x1, 0x6, 0x4, 0x3, 0xed, 0x4, 0x8, [@local, @private0, @remote]}, @routing={0x8, 0x2, 0x1, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @hopopts={0xff, 0x216, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x40, [0xffffffffffffffff, 0x8, 0x3a9, 0x47, 0x7f, 0x80, 0xffffffffffffffff, 0x2, 0x3]}}, @generic={0xd}, @generic={0xb3, 0x53, "9c447528652c94ae12fe5ca6010494386f75585e140d831e381170ac3e805836be0c3030abc76099d9bcb54533ffa0a3943a04929b71928a5f9d1d49a168b61b9e1a2ea0dfded7eafe1a912d50a1adebc2e0f2"}, @generic={0x9, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x3c, 0x0, 0x9, 0x0, 0x0, 0x8, 0x66}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc0, 0x0, [], "1c8564bc971824d5dd9c5dbbfab060957414eb2b2d24efaa21bd2ae67bde903a5c2acd77762b45afe2225d8f4764294f05861d0296dee5f1bb627a8a9a9f2aafc2c6b25d6765dbe9395601b5def4f559de8a54acff235721b4c760c3ead96cc5338f3a42ac1f2a0df1660bc9dbfeb5946bf5a91530c314c51577fa76ad095808e84db957d7182b5d0cebd678f3baf36c391bcc4a2fe7fa370f13dc16f599969ec2299e5622b2c1748a6420f691891bc7726334e2d95f2123078411c09b8d0aa1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x401, 0xfffa], "95b5b3651afe4bf099ddd3936a33b5ae0ddf8dfee9def5ff62654e126018ccf09e99eb434ec1f15e0897c2d052fbf597324f6dbf3585d0611afb2a2f315ef17ee96563b397f031c1354173e33f7083f6c4304a521c827c22b204560806d5cb8a4cb7ef235c43e41d5e475d355a592b0dafbcf9592351ac7f1e53de385f7df138388c3da85482085ed40d3a9a55ea3e08671c136c51412038d507acf72c61a31cdcc17e6f9366939179a66b2a95fc16c6c4705a58fd51d082e9b1e38bb199718f4447a14d2d2effe750a1bddfb2e05fb1e46e3ec3942eedf0b061acbf4f19de8d481b9b408d4a2e76db29610289f80ba9575ca23a59e0"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x42, 0x67, 0xb], "b99428c6871d740c0a2846ed1d6519bd39542ec018d6e4848cca58cce570b285a90e7e7584f57ae6a1b14d040ebe4c0489f04c1f1c213584a668e5fa1ef944d61f62b0fc96aa8c49d36598c92138771da8204c336aee15a381df0ee9b04bf4579cc25a9d2e8da9ec293520b5f13c75815cbbb09a3310dd86ad4d7869d67972b27f91"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0xbc, 0x0, 0x0, 0x1, 0x7, 0x93}, 0x1, {0x2000000}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x3, 0x3, 0x0, 0x0, 0x6, 0x8}, 0x2, {0xe290, 0x9, 0x1, 0x3, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "3b7e6d5c29c67d863dc5bd66ee5ca6e0855d68541f5868a5c9414edbaedf348573dcebe8b7dbdd4391b92bda688b1518ca3959cdfff86aea"}}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) 5m31.553826521s ago: executing program 0 (id=1017): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x39}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x318, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x53, 0x3, "7ccaafd5b373cec023e52f30bd4ff103ba7b8d1c6e7386bb681ae58dfcb69dc2bb74d37af5bcb82890ee42e10194fe94c4d9fb6554b6cf1c5bdab6ed22dd05d8e1e21d55212770498682263589c29e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5fab661e4f4b9c53ce31a73649958e82a43273d47717bd8819b618a9a3aea0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a5568dcd94359bc22392d4bc66aaf405c8a61530"}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff0f2}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffacd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x40040}, 0x810) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r8, 0x1000000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000001e40)=0x5) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5m30.900099359s ago: executing program 0 (id=1019): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, ':dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x42) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0x6e) sendto(r2, &(0x7f0000000280)="3d07058779795882414508023b603a09257a34799f46960113561d87b45aa5ea873f35173a6968b1e56ec104037013cf2a5c5fad4f8296a1887c861eae3337efc2442c37", 0x44, 0x4004084, &(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x3, {0xfffffffffffe0706}}}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000200)={0xe1}) syz_emit_vhci(0x0, 0xd) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r5, &(0x7f0000000180)=ANY=[], 0x6c) write$qrtrtun(r5, &(0x7f0000000500)="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", 0x1b8) write$qrtrtun(r5, &(0x7f0000000900)="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", 0x23a) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2bbd336a}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20000090) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r7}, './file0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90000"], 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r1}, 0x18) 5m30.133090625s ago: executing program 0 (id=1022): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x3, 0x53, &(0x7f0000000380)="ce655b548974621e06a7e37b2c472a938ef0309019e500f476e0fd0bf023bff1bafb604c165f59be0a9b1313d1589dd900a2c44ff8ebdf9b80a148da06f7c0ce368766243d78cb061911ee8d6f41fad735302a", 0x1}, {0x1ca, 0x0, &(0x7f0000000400)}, {0x9, 0x86, &(0x7f0000001400)="1bdab88b126f6196b88ee9bdb1284de8aefe736bb9572d7e2b1ae2c8d13e746c7da195d74958b9f3f42566b91cd54ec675fd538b78e9d4d7fd9d7c826b9462cf2afd571195abca059eaf22b3a662e53f8e1c2d1cd740033cf8fd63dca575d6eecbaf17a5bf9b5718642720dfda8f599aefbe7a39b7f1986621c3dbfa8e689384aa961183078e", 0x1}, {0x3, 0x83, &(0x7f00000014c0)="f59684411265459fb4dc71b9c2fbeea989810eb23b486bb2340d09e0d8dec97b044c0c883482eebef04fadd35abcd8b382c9354abc6364e9295ab2c1f78ded58417353b583bedef7fc70f73344e3d2853823f4377991860e90bc74cd520c25f95132b7a4a4f3af038fc520730820814a206b89df9830dd40c2e9b648b6d52cf7b19073", 0x1}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x81, @empty, 0x1, 0x1}, 0x20) sendmmsg$inet6(r2, &(0x7f00000083c0)=[{{0x0, 0x40, 0x0, 0xffffffffffffff5a}}], 0x3fffffffffffe58, 0x4000814) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4000050) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/27) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x20, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3, 0xa, 0x2, 0x0, 0x0, 0x4, 0xc}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}], 0x1, 0x0) read$alg(r2, &(0x7f0000000280)=""/147, 0x93) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000009c0)="b7b013a5c2edaba1fb77ce9ff87b589820723cb4f337e4117ea1ad4ab407117091ec9173cf153851853a2ca9e53ab40e842161c6698678a24392928d7f3ce7970e86509a96daafa910fd4e8b9da3df2810305742940f2415a78c5cf550ca4c19733754220741642eefcd0e4302f77009de701c4a55a8a0d6a3cc48698e40c473764c5faf20d3a211a2cab9edf44ef617a42bfe5fc167eb23be22e141fad21c71caab752b62577d7a74c044a952cc84e061e1979f1da6dd3992a17bab3b845360d99f951500f3557042721a5632ec03b7cc6a38ceea2a4c866d88a837037ad823f8a0ccd9ad9982a648b30301d47d095a5f56fb50e5e33dd80ab84c463159dd7e8e603ef2799fd84b0260a7eaa4121b22fde209a07cef21020fb0fd38af494e7974728e0306475b4b96a3c5ac374c61572fc13b8898ad992a32ad4711ed9203790f90a7bb22cc7a3cb9cd52c0d878e60fb38adfa97ba1fcf77e443b2886397f8ea1ca9194e53f578d30c29b19acf0291695327878b05b502b84dc889bf23bca56498bdcb9742fb3c5e351aa7a6b39123e7a975ea42814634a2d984b528eecc31a48192d2acee32dded16b7d07907416d8ffb70fbc2954b90d74f1772adec04a8d472f8fad6f814770e429672c4a4b86c0e7c23bf3c29f8f6e5d145a5a3821cfa5577512", 0x11c}, {&(0x7f0000000600)="fc48968f8dec582f6b1fbfb1ea70e0a11db116f742ebce247568895c752bd920c4504fea06f1e038e03aeb5ece194f29b70bc33ce00976cd4d7bbaf85f2e3f4fb8ea87a67a8b00ad6d0bf4b147f53afc1f173addefd0e851b6e1bc164e771a4bcde3bce3afab00253f3e8f2d04c588d983c74ef9c4b4f607bffb5e44dd61821ea37d48960322c26c0942e97834208eff8bd21225fe4fdccf9d82cafac3fb151c761b64920200"/180, 0xb1}, {&(0x7f0000001640)="8fa1986fdacf831cf42f9a851f2255b4c78051193b37eac611469455852c0d8bdaaba9026ec11f8a19bc7e283cf34866504d9f765dbca93691f014577ff26f52067b3a7c2b3ef93bd43285981d104d546f4fdb2f52badb54725a33acd9f5fbcf9ef251584233abbdf749849718244dc5ef12cb016586273f0b9e6dac09c9cfd843f7681936efaec7722bb0bd9be15aca96600ab7b3e48f6ff3461f50fa4411f76766a3760edb2ba47a2193fdc48c96d83953626732a222e1091eda187a14054aee1b036a0104b5d0486e2d8b3f7672b9d86a50d41fce499a1825a25e2bd234402df865d914124b911f2d47952467f75a4e110f996a8a8aed865385751d10b99e168251c4fbf35b3c313dee2f7a5fa09595af3098faace1a91a440b6a23a1ed5077c3966d8f579629f491410db4c03591535195078514165950d6fa35b62bab89cbe2503bcf2b27b5255ffc29aa26941d9d7e3f65d449d4666e6e2ee9cbf096d3d36c19486ea3a0bf914a65ecf91f2754ac1c80b19635ac4a95424ce43e02c95fe1120fae0a050317610dae1ea941781826bc6cdaa73af6f522bec253824819a72ced8fcbf33b7d3c091d79cc970c32a4fae176341ecafef81eb7da614f85650ebf4807ec47db1dc3dd009c1e54a29a3eca7cbdcdfb95e9f428d69ff027582362e3ee00824c977fa5eb44a97ee7c6c46f0a8342f1b5ce877b44e510983f9fd3306d8d8ba6f80fb39e51d1811ec16f9ea66230cb6af225c13f69100e5aad82f015ac6dafe7a7b7d6366328b8fce14d80ae9b040ac5fd3dc7187064766a75e10b80171339584379d7b5e8be340f901063cc58703ac54e745942e2e7d019e0c78724bf36ee1a355865c99509f34e0c21a45e54258655805869b105269fea1807aa02ff561fef73b5bfc507146a88d8866919ad80886d6ab43c950775652d1019947e9461399718a176ca27a856e064d09c89f6081de286cf90ef963cca52c293dcd0974b39b867c987f541a24ef2869d4a54208b496c736e1b28624aaca5e7237bde363296f3bda95d5c20d8933bd28122bac3eda6b367db0772eb0a94a4c3f9bd2cd6aefa50cce172029dd8e2d525d5780c84cff5bd491af0bcbc2beafb32c6ba8cc1659acd6fa7f60aae969c4dd01f3bc880fc41cfb6f151ee5b0587e4ce158dada600dd1fd849cee645b8f99bd26c3b5a9126ada3e2cd675d096e34521f49af7a4eaa3536b9aab08b80d0164b79815d1cd4efcee8c61601800da17416f0f9711c21ea9316ac16825d43463354aa4d98fe53955ea404890e0f9c014a21b4831034fcfdbc5799926961f4049e0f54a53732fdd4c60ee1ed08e538569222d0fba470f510518b85268e2139fb28c472eae789ec17fdcfed13141d378e878df54ffd2c67303a547277857c36106956e7603ca29aa20c3e2eb39f801ae22c1683eb284fa753b99aefe417109064d72cb1f59eb70d4ce3181bcbd991ba7739325a8ae337548bbc3c9966ddcdbc59493e9ecd0584097e339663589b1fe04d86c3a5f3821eb7807f8e6635963c3305846faa92859831e9f193ee5fc412cc5651393aa59da8e71dcda5b2956bb82f8a8cf5c1beef12aa1a15275b7aea199c8e2ac4cd6996098984d676a09d4d65a8c69d556470a80c212cb09053732ef3c2bab0a935b6ceaf128ceda11edb3ff7cdd011da31184f69a537c30bcbf2d54b49c51e7fd6dbc9f668ebeefb6646b69eee2ca49e437559f8957c65d1e3eed89448d9e541cb1dece7df0b077184add91b31a2175f135e68aaacef9da508ae0c8df29b3e7a707bdfd103d43a25dfa47ec62871c290e71f741f57c5353f6a7fd3ae4d5ab79abf8dc5350346054ae2a3c01b34086abfcfa5df04c39ef730aab58f401869fe31611aab3bb6a072f13fc0b4bbf774885845c8ad460b5e34e66a6da88247c7aa476967bf5b472b39be75616161eaae2b760eb2b22177dcda16c0a25128e31986bfbc7b4ab17845e784ce528498b038dbfbe308321606cb538d67f28ba96a30aa6c6bf21e4e0dff4c88d9215a74abbc558315701060d6c030cf6e8539486502233024e1929e13da6d7cb57c7e551c6010970033f79ee536d4b51268c6c43f63439498b5917be3299212e8664c1bda7c2d908f631b407c3db00bfb93bc751d7bc3cbe3249364a8694637377110019190aa921fa7addda5cae21b12e78ab61dba93938b8c8f6a2fa850bb66f8a10ca9751e2984a717b24d0115f35ef6c0f8aabb965f0eccd14635fdf269a73032c65081c0e6929ebc46ddc2dea0a5de41cf9e248b0c446e175599c5f924cb827e39e61ef45b3c071fcca82a4455894ef21bd924e18500f2ea07ac3418747d9e700e812c58258cc1ff542fabdb4add6a7165e637fc81ef6626ea978559b9c3fe2ebfaeee9f54fef18a4f38fe923ae89e3327cafcf59029b319f77da366e265da3e68d2f1f7e4ef14f33cb82902c8f79f961ae44724dd01973d8022bcac755260cd6f8adcb9a70540c2b2a893b9e68617590fd68b2563465e132ecd6adfcfe63a8a8a462e56f4e3338d389b6c7412290dbd59c6af10816de99d16c993c64861c98579e3c159d608e58525e7957a34a93e8deae68fb7ea46708ef6be54729aa03712f29ac11ba9be77777e35d3a2fa18b4be24618efb3061716fc01a17e8bd4523a56a4060b4722bb98e6f1acf0563a49e30cb949db8b4e9023c2312ad7527f84a6a262443e4b02be0f7aea5a464c3290dde8978805eb93f37fdb6f4a29d1a0b922569d96f90414a9dac3249cc6cc3276c807686593508bcbd4cd27b72bd079c4a001ed5f5720443dbd491d458ba2685b702218259b0b3603ac56b81a0aed11a7c384653c04307e533ad434c75491467de09389f35482499238fcfb1f41c9307e18b05cb2c0f3bd356bee9eefd3a4d551f83ef8c695f7ad576d1a11308e8298fa863dab9d64710b56587824d9e48d9b1288dc5dc2656f18b9961684e79a8629af65a67661420464d62b00b346e5f6d2e5dad2f6e5d8cffce52dc20e77c0ada6c28b550b50c201bd70f4f148afc32faa5cfdac225d3f440ffbb23bd176b8a6b5c46abda41b2c73c5b00b4892428a0d31eb94215e2baa3f27dfc262cab980e0cf45cd32e0b3866f058fb7ddb78d34342f94c61c38d647bd4b061f346f742f13846a6a567947bb47210dc8af5fdc0c747568e66da42b67b73f72ee281c5edcd37c4f6c6844eda7e3d75608ef5175dea8b3b8ce11f7e4f41326e0c1e45c9a52f0c12969db8263f8a47152473c7ce432f04323b085501c1bc38eeec4e3c8d54e0a027938856e1844e4e8ec9b38aca16d1e0c925c34722ddb448a7f2e6aa3ff9139b397e9717a195cd5b314d4b09fc085f2e79f40530f38b7766a460907d76133d46a8b8e7f45dc45270325b8a778c5b8f34e82a827bffc58d8e05742518a8514594c32b49bd847eaafc2584e00a53919f34aae930916af89c0dade9f773dd97c3400b30abdcd6fd64626af47a5cff4e9327c0b28034bd0668c862c7bc97f3609188659eb7a22441d7a78d3ed00e15fca595d6767239044d2f9e744cff9da272e7c091c1b58a1d2667a653eedc88262ab0f644a27f3e04ac94bd7473168397b477f61d61f5ba8e0e918bd01b3e671236695778930c24115c47460562f6ee398b4bcb4e3259de4b74c50013c37d2294477a65572ab40baf9238af885435352b78e7ec5c026c160765e5997c55363220880e7a7942b7364deaba667fc11dfcfe189c670f04f9d15c02c64abd634a7e7bb06192662ba8745dbc3f28e704fc9e8075851edc4b053b5247d543f48cf772b6f12af6bc50f025e3db70359686ed2f84fbf3392a045096a58a3fea705df52ce13d05f19eb95f1a3a63fc32b4461461d90929ff4f75023541de2240d8b1dc4694265b36583f61dc751981d662b1fce879a06801db8251b3eccc8a8a9f29d524c643460579d4d69745c119e5a37a1b88203436a45317d18a776b9decb9f24e8f56daf770437f24821f0ae241edc36136a9036eaffe1efaa19fc6ce58229058f3af00d2a15ab40c9c95c7e7bc2ef6444310617f3f5c1dae03e52dcfad0f17494c92150422783e21ea66499854a69a9bffd75095211016fadd75d732d08bf288eb402d1dcea2175afb92193ab5370c9fd7d35b508926ef828af8ac0bcef19a8ec7b452554e439f932719068f7d36da37376cca8c6475536892bbb137a283e190e938e42a6d2e303543221cf1e44a01db6b401f84aeaa86adbcdf8cd42f8e3fbea1bd683d112ad2f102facf6d27b5feca8598d9ba1f62a2fde65b1f15a75b42bc4f7a18d412ea0b13bbac89da3774979cb3bb8984513625b0ad94aa2384d91ed71ad7b35bf757d34c8f91df34ffb4758a41f0e7635c0ffa2149c3f7b1707fbed176334f9844267057ffeece6443a4222dfb6596c164630f3f2ac3fc6e3bab0b7e6b6dc058c3e1db5cb3af7aea4421269ae101090c22836df9b0f9f7d5696fe402ad3641a70eb41c3a0b39bd1e383381e1c2778bf96c01fcf5a56f58194e78b52f331f4ec1a8b3dafa311c305b932227cfb93f9b3fb251afb69b8dfea00cd36c0d57bf7b4406a62c8ab67d7517b663a0de8e02d44b397127029245e967ae479580561ba1b2ead953fa0b791eb5bb338add3f1642861a5c2f0d4449d01261b4ac708176c3cf777052c7e0c1cb55ac2e4872414b6e52ff173ba2b945eb734a9569c47ef1c17b220a953feb1091ddd8caee80b12400b3ab6c59098d6db4200cb190bc1e674c1ebc9c71d7976245ce13227ba74a169b5074c7772344cb7959046c7a46f33eab9c3a3839a685ebdde111b6c6939e9fa465abdbb366d31e4c67a3366fb6f1bcf87a4fa1a8f018bbdb39c22cd01bacb0a4f1a52daebddad1081541c88b7590c34a2d53210d998b6d57154844bdf83f959e8d1dc562dde05fecde6bab6c7461cf44beb7f0729a1de4265247a76e6ce5a7559c541ca10aff8eb045a3a9ec8c1ebc20a2ed51cb2295ab809e9fbbe66d53b26c2bd8da5cddf3b785eda655c25191916b91cabaef57264bd84e483cebe3dd4b032745cad9e48291f86dd98dbe31aa2575db80304c7fc4d636cfbe4b71d4049e756f26a8b8521e77e5c06c17888f3d196211de7d5e5b045cdadbd50a7b1654f7226b805e995732b778ed2956decb2163ebae3b80da33d0cea5b0cd9b092e027cc3fdd25fe9e63b300f61bb308ee16b52fb9bbd7f2742f8b3534c1b19c0b1a6d920558a4ac3f1b3106d4cb981fe474efb49e9171684adaca9364bba63f686da2784ae906361385d87db92c153c2286600ee626ff922158d5a4930ff92454e756bdc664225e9239315ba8fc12ba91ba3264f64507157ad44bdace878248bae03aab58ca3ea477192edc5ce1754ea1a8ca17314deb3d48dfa24131810cd257b912dd01ee27a708ae525ece521b54943a3588f09ce71558f62f8a9afd17a6c4d347e70af4da732dec5ad3ee51654cbc8f0a650604979a3c3cc3d2ca0f4f6f4c7a680a07c6e0d8ba2a5d46f3c8f827bfd8c17c799dcd3267918fe0c241b72c91f1690b5eac676229478bb41ef46375f8720c3f8e608689fd4f7cd0ee82caab03f056b05a6081688b5b0acd35ffdacd5de19f3f7dcf1fb215a54f9de806e3428495eea4cbdb08f3ac97825023bb835a9e9c486c4bee7c909e7243a69ec4987e760c80a669a3d2260f534dac2ed666f48370b6ee62c07ea1601de6f4e7dbc924756cc4717f591ff2e327f4cd3eeb103991c714dd709aeb183d2dee9030e12d54d29b0"}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup(0x6085, &(0x7f0000000340)={0x0, 0x800952f, 0x80, 0x1, 0x151}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x7fffffff) write$dsp(r6, &(0x7f00000007c0)="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", 0x1ec) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000740)={0x20008, "d5a449c6f31a91f553c3769af08d47ed2eda811865a52a5a8e7e07e265cdd31c", 0x1, 0x20, 0x5000000, 0x61, 0x10, 0x5, 0x4, 0xbe70}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) close_range(r4, r7, 0x2) 5m14.206191372s ago: executing program 33 (id=1022): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x3, 0x53, &(0x7f0000000380)="ce655b548974621e06a7e37b2c472a938ef0309019e500f476e0fd0bf023bff1bafb604c165f59be0a9b1313d1589dd900a2c44ff8ebdf9b80a148da06f7c0ce368766243d78cb061911ee8d6f41fad735302a", 0x1}, {0x1ca, 0x0, &(0x7f0000000400)}, {0x9, 0x86, &(0x7f0000001400)="1bdab88b126f6196b88ee9bdb1284de8aefe736bb9572d7e2b1ae2c8d13e746c7da195d74958b9f3f42566b91cd54ec675fd538b78e9d4d7fd9d7c826b9462cf2afd571195abca059eaf22b3a662e53f8e1c2d1cd740033cf8fd63dca575d6eecbaf17a5bf9b5718642720dfda8f599aefbe7a39b7f1986621c3dbfa8e689384aa961183078e", 0x1}, {0x3, 0x83, &(0x7f00000014c0)="f59684411265459fb4dc71b9c2fbeea989810eb23b486bb2340d09e0d8dec97b044c0c883482eebef04fadd35abcd8b382c9354abc6364e9295ab2c1f78ded58417353b583bedef7fc70f73344e3d2853823f4377991860e90bc74cd520c25f95132b7a4a4f3af038fc520730820814a206b89df9830dd40c2e9b648b6d52cf7b19073", 0x1}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x81, @empty, 0x1, 0x1}, 0x20) sendmmsg$inet6(r2, &(0x7f00000083c0)=[{{0x0, 0x40, 0x0, 0xffffffffffffff5a}}], 0x3fffffffffffe58, 0x4000814) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4000050) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/27) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x20, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3, 0xa, 0x2, 0x0, 0x0, 0x4, 0xc}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}], 0x1, 0x0) read$alg(r2, &(0x7f0000000280)=""/147, 0x93) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000009c0)="b7b013a5c2edaba1fb77ce9ff87b589820723cb4f337e4117ea1ad4ab407117091ec9173cf153851853a2ca9e53ab40e842161c6698678a24392928d7f3ce7970e86509a96daafa910fd4e8b9da3df2810305742940f2415a78c5cf550ca4c19733754220741642eefcd0e4302f77009de701c4a55a8a0d6a3cc48698e40c473764c5faf20d3a211a2cab9edf44ef617a42bfe5fc167eb23be22e141fad21c71caab752b62577d7a74c044a952cc84e061e1979f1da6dd3992a17bab3b845360d99f951500f3557042721a5632ec03b7cc6a38ceea2a4c866d88a837037ad823f8a0ccd9ad9982a648b30301d47d095a5f56fb50e5e33dd80ab84c463159dd7e8e603ef2799fd84b0260a7eaa4121b22fde209a07cef21020fb0fd38af494e7974728e0306475b4b96a3c5ac374c61572fc13b8898ad992a32ad4711ed9203790f90a7bb22cc7a3cb9cd52c0d878e60fb38adfa97ba1fcf77e443b2886397f8ea1ca9194e53f578d30c29b19acf0291695327878b05b502b84dc889bf23bca56498bdcb9742fb3c5e351aa7a6b39123e7a975ea42814634a2d984b528eecc31a48192d2acee32dded16b7d07907416d8ffb70fbc2954b90d74f1772adec04a8d472f8fad6f814770e429672c4a4b86c0e7c23bf3c29f8f6e5d145a5a3821cfa5577512", 0x11c}, {&(0x7f0000000600)="fc48968f8dec582f6b1fbfb1ea70e0a11db116f742ebce247568895c752bd920c4504fea06f1e038e03aeb5ece194f29b70bc33ce00976cd4d7bbaf85f2e3f4fb8ea87a67a8b00ad6d0bf4b147f53afc1f173addefd0e851b6e1bc164e771a4bcde3bce3afab00253f3e8f2d04c588d983c74ef9c4b4f607bffb5e44dd61821ea37d48960322c26c0942e97834208eff8bd21225fe4fdccf9d82cafac3fb151c761b64920200"/180, 0xb1}, {&(0x7f0000001640)="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"}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup(0x6085, &(0x7f0000000340)={0x0, 0x800952f, 0x80, 0x1, 0x151}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x7fffffff) write$dsp(r6, &(0x7f00000007c0)="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", 0x1ec) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000740)={0x20008, "d5a449c6f31a91f553c3769af08d47ed2eda811865a52a5a8e7e07e265cdd31c", 0x1, 0x20, 0x5000000, 0x61, 0x10, 0x5, 0x4, 0xbe70}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) close_range(r4, r7, 0x2) 4m52.982596319s ago: executing program 2 (id=1108): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x3}}}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r10, 0xfe12482fe0801d67, 0x1, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffc}, {0xc, 0x90, 0x17c0000}}]}, 0x54}}, 0x4000) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) 4m51.628743573s ago: executing program 2 (id=1110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800000000000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000007c0)=0x4) 4m49.502305807s ago: executing program 2 (id=1114): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x4010, r0, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESOCT, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) recvmmsg(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) close(0x4) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x7, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x16d902, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 4m48.653264993s ago: executing program 2 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x200, 0xfffffffffffffffb, 0x2, 0xd0613f7, 0x3, 0x0, [{0x564, 0x3, 0x6, '\x00', 0x5}, {0x4, 0xfffffff800000000, 0x100000000}, {0x8, 0x4, 0x6, '\x00', 0x2000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) (fail_nth: 3) 4m48.502675929s ago: executing program 2 (id=1120): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x00#\x00', 0x3a, ':dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x42) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0x6e) sendto(r2, &(0x7f0000000280)="3d07058779795882414508023b603a09257a34799f46960113561d87b45aa5ea873f35173a6968b1e56ec104037013cf2a5c5fad4f8296a1887c861eae3337efc2442c37", 0x44, 0x4004084, &(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x3, {0xfffffffffffe0706}}}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000200)={0xe1}) syz_emit_vhci(0x0, 0xd) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r5, &(0x7f0000000180)=ANY=[], 0x6c) write$qrtrtun(r5, &(0x7f0000000500)="ca0c808bb35bdabb49f35c25d460591f0c15a08769bcd5107053ea1f85250ac10e3ec14ffda0a7a98740f8cb969408000000b95936415d21a753d982b3d5ab52070adabe6f61dce71ee97249cf86cdd7b9a6b3b3d24ddebcf8ea9f1ae197c9a9cd65f15210181da8dbdfab0266cb1d27ace86e7fb0a470f1eb3b722ded77cd4d2428fc9d49f3e3a98a8407c1edae8f083e2b5cbef42d22aae4ae53e2aebd6d47ae0a9ebf3bb914d07f5b2963117a2bdb18ef5a2f61aa18b6624327e958797e799986dc307954c6e5dd3c146d94b444a2ca9ab936095f5ed1fdada909246505f9952190f42a4fa593971bda17dccab1a14693ee7f669052782a502f3b3c2ed866e0efc09f685d34f6db7fc9f2c2b11e9d7f88f7abb78e36ee824fbb6e5e23d7de6cbcf14161d0a66d4d83e8511463cc9c333c4a0bf6b86dc449c115db85c177350f3aa8a7d8533c1085f9190d81b62baef71c809f8f6f99ba2094969aea0eb4a6fae0fadcbb8da2bad0b8450c632bee355bbbad9fa70f9b01124df400a389c5089a1a662d5987ee5673ecd9d7c948d0d95e40cb898b5d777ea2a5a7868432cedbe0ce1f90f59368453149ee04bcf0a620a111b5374ae7bcb0", 0x1b8) write$qrtrtun(r5, &(0x7f0000000900)="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", 0x23a) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2bbd336a}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20000090) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r7}, './file0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 4m47.655351442s ago: executing program 2 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) mkdir(&(0x7f0000001080)='./file0\x00', 0x74) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000010c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = syz_open_dev$video(&(0x7f0000000380), 0x0, 0x1) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000003c0)={0x2, 0x0, 0x2, {0x80000001, 0x7f, 0x2, 0x1ff}}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x60) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0002000000000000fbffffffffffffff02000000f713060d03000000000000006405000000000000030000000000000006000000000000000000000000000000000000000000000005000000000000000000000000000000040000000000000000000000f8ffffff000000000100000000000000000000000000000000000000000000000000000000000000000000000800000000000000040000000000000006000000000000000000000000000000000000000000000000200000000000000000000000000000d08f1880307363af0d9640df82b9cd05b6f174350aacbeaa81b091d441ff3d56d62d9a0b4debac67"]) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) 4m32.360550739s ago: executing program 34 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) mkdir(&(0x7f0000001080)='./file0\x00', 0x74) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000010c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = syz_open_dev$video(&(0x7f0000000380), 0x0, 0x1) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000003c0)={0x2, 0x0, 0x2, {0x80000001, 0x7f, 0x2, 0x1ff}}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x60) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0002000000000000fbffffffffffffff02000000f713060d03000000000000006405000000000000030000000000000006000000000000000000000000000000000000000000000005000000000000000000000000000000040000000000000000000000f8ffffff000000000100000000000000000000000000000000000000000000000000000000000000000000000800000000000000040000000000000006000000000000000000000000000000000000000000000000200000000000000000000000000000d08f1880307363af0d9640df82b9cd05b6f174350aacbeaa81b091d441ff3d56d62d9a0b4debac67"]) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) 4m10.996284229s ago: executing program 6 (id=1204): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r5, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r9, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x14}}, 0xc040) 4m9.595820703s ago: executing program 6 (id=1205): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001380)={{r0}, "263a42b06b79aba26658a8825d4730471a0c054ff44821c82848e8d0839986aeabcddec4cdba3959a9b12226d535bc6eb4409ec1502f712de5c79a043664fac001194470a742ca70b7e3aa1a818781239ad99ea7eaf5f39e20fc2b74162f1470f09a53364c73162bf5dfe8be5825508e85652d3bb14dc3ddbcfec1f6d5eafdf2aa73752bf3616f665b6bacbb701a25539fde7a240a0080dbbc278e0ad408ac0eb9bad44e689b0e71cf0bdfee568204c7e4a807c6316f84b790ed78bd8a791d561e6cbe32a7eb271e70c38075ce966cdcc36cfb246ac1c6ed76f2541d41cbbfd3c1cd8994cc61219c1e8aa7365ad42fa0f4afe4deaa7851095f5910e1d092a6fa0e7be343cd0ef9d221606042f4f9c6a62747e3744a7f9687eb7cf49d4b3109a3e230ba81e997aab379a0231ccc347aebd20aeffd033220435af1442e952bd0ccc3d967c2b5bf3b017a4d0a82794646570ff6418b4bbb5bb9c20b3b2b90573646060f9534556e50d0b097ae7f2623a038ebe93c83b9959b23211630e907662feb0da8ffe2cb6320ea1993984108544ea97335cf82df25554005980f06eb083beac53adcda1224735e21279f71ae5fa5fffee3df1afbef0eebe00d32f0cb7741efd07269602c7da52057f60404efaa18db8ed51270709dbc937ca1e55f55c8709d5af8fbc5959f5e0e6a1bf626a6af821db0e659ecb685fa37a4b5d86f39c2a6ff7c98fae5fc78c29fd71ca949333c741206d957bb6fccf3a7dd889ee862ea2257cb827a1e4f7cf585a4a49e2b11c1a0d6121bdbcc8f1dcafc0dfa46bce3e63635ed76accd01ee875034bff2310b280598ae7be34bdffea74eab044d470c9eee6d9251a6ad05f65ec1126b8d9872c19e51520b5e8a7d7737791898673118add24c06caae0a3ef2ee44d5433d061fc3d5e42cac6a4f123c9106b2b398cea6031550c3b7a677c4a9960d24afb3918d6d2cd5c364e1c7d006c3945b4c9cb5a0c2d0959a51192b8d111b04cbc9cb8b151c06c655feae1aadef5a621f18edd9eeed9dc34e030106d1e00318fe285c567a7a1b0f7bd41d05c6157a1a36f925ca2f52be3cd88535c188c5f7ca4384a42ff23d8a8ba7835e2b54812f538d4fda34c25092927fc50cfea696eb636a5efe6c7fcec7e5c4c6a6e4df166a6b77f9c1dff7d19461a49bafa72db1bae986b531a09013872ae4d255564653f8e6a944a0c2c4b123131391bfb159d8d0c8ae0b464140d34515b475c6f12c9b7e4a3e0608d9c97c6580820d8d4721272ab0193cb534669298a457f5c7b13c5f3548361a72d231ef9098bd936f1f0f4d3d0b54bd361215ed5b24460443f1331f6359185fda43e8c4b332e55999373521d6742b0acbc3d941fbbb7fd7d5d2c129353c1bfcb2d3f14507146e54e0797eceda74f6b859f52d3d9611f81e86e02c262108b00e2e485fb565e14a58ae302a3a749b42d66ad42ad452bc20b79f30b197b0d7d776746fa6332d5afd10e38aa8faa287499154cadfdb2b206792357c9c632967044fbe5335f06c21debf8c3b833e25d4876d1f678e7aef4548fd88662d28e85e9f5f246a62371303c3dfb752cf08f2cf03528dd4fe38c42aed6b4d2e7d4c7fae514cf4a82c622b10982e94166d212023eedc321a9a6a52789b5dd91c65ec2338ab5ff8981b9dc8851b03c3c8a0c3af6907284b7dfb37873e14a1de4e1db69ce910a10443b0045aed76edb148e891e176c4a6f84d058615063e43e316ae6d9aef0c933ce470ab8e01852de213c5b06e0a805802d196c62934c0d8a4f2b60fd58c288e8700f9438d59c89e964b8ac33445b863a0bcb58b8b28452c1f7f36edced0e8df8b0b97fa6aed0e39e32d41cd9b7ca0a201898cadf98258ac2b917a035dc19f366a43b77d9e7a246998075d9f7b288f61a538ce5100e7f5fbc55251fe585bcdac384fba4db6c7ca7dbf112b24f22be3438e16a7edc2bb87210b0cd3ff5c801edd87502591cb43eff96af4c568b0ea0c4fb97376f348efd73e13742cd78d981cb0bc29ec2fccf6134b0407cd1fd5a9eddc0089aba2c7ac58715a091b98aa58aea8ea0f2f1e4b9bd0d4523827ee7f4bf456e34416f61a0f633ddedee366dc1f7ccd80c1ca6b079713cb8b043dd91eb32bc1c7a3770850e5f74dde1e72fbf9a424f22a34c0275fe6c730f8b340f31b29495ea09ced5467d45e0b90c96bee1c4ca593a7888069bd7081de6355a00c61f9dab4a2644d92b6e9c5e30ca5567609b7785375f3ce94c168d63926a95f5477537af92c98804d8e9699aa49c52e7ea82c37bea905ed33324a40a42bef8cc69a9b31388163230d09d67f69ae70a8dcfcc9a257b3354ad447c0cc6bacb4067586a51172a7662b51b233d525760657eed0b539cba3ee63e31426af637996b251ac14063c184ba3db7514f39cb2322fb57e7408114663c0bea68a8b0fc329120e67adaa3b7ce948f34839061d02cf85a69cd198e8ff0fa74107b23df8534cff048acafbafe71b2b1ce3a3f4ede7f0f06011c913235ae2403f8e6ce8ba157ee2216501cc6f70256c47667387a67e156adddc2bca4da151a04842dec10f53785b4c64e1f39de0ad0f9670fbb365f412c33afb6e8c17981210db933c16a7f6d255c4808a0f7a240cb9f8c882417b2bdcb934e09fe201f925db0ea756352ff6d48862c36190d77b5e90795c7776602461dd5b96827abd44185d8efa17106297ef3d43589c6ca3e140e243579f6df7fc26b7633726dc7cb55ee3c9cbd69c6e2dd3a6d3166016df03713f64ca0a2174b6cb950bad7ac13f8bd2985aa23f92b3addd5622e161b89628ee50837a2dac971b97286e8e868b328ca17a133738327011c7383591a920515c7602ef31def0506c80248d9da67bb7d9d34af813f7eef9f5b410c60afea513ac068408ece6dd42c331178d7a13a9b77f9f44b8e23647dadea603ea28d182ad92b748bb57a61b9fed37df376be1ae735eab19172d84c73e6931ebe1ee263054ba101b60c08b89f5c569cd4e68a57d3aafe43419de90b2392f6cd0d45d2afe839de77a43e20561c5f961c2a5af68f43860fcc84de9de56dab6c46e3f5471371c2291aa1377bffa1d07ed6647fad0f0e297b0d4a3ac2ed893a15c7b2fb7b11f081436ac71606581e6345b514f004e1ebfe4f1a572ae0baf4d6443922fa6dfb242a2afe0a13121a9412355ba52eb84b96ccb72c397434699584b220dae13a0f83298b7f22d470d5ea97669b608eaca74c440c0591716e0426ae71fd2d0a2a3e393027daec00d0793a12b246a8e3b1210eb776cc52b9378f5a16cd63f7e3a254f26a0c8928cf1e9544aa9644ca0bbc1ba81bc3af94f6d959e6feced3c69026790958e8ac7fcba2271ae2f5a92fdaa024a8b37fa50a9cca9459f73a88b334f3515ed601b2c9a8c6637314f9a49ad0028779fd53e2fbd21a315b53e54ad2686a205d5e6709238499d434aec79ff6aaee188cf2f326d3e508e66f1ef5db1e6d20a4b14ef51a89d25eea9046f5a915ccf99b2192ef04454c8969578babcbe15b090259a1e756a01e9246cd3af419e28b2209df75bff3ddab842844030619912ef58279aacaeb61a37b13d957f028644d4ef1cae917c81be04e37b8b7c1c3ccd6800aa7735802424213855f9367d2a804b63e26e669ad75100a0ba407f82464cf0f3a939dac7f03f583f0f11389444ce04c657dbc81bdccac524596612e299de49dc1317f7be292a2e5de60bef107bd9107d1f6a69d983dbf3a91c666340209cfc5016f691bb023c90aaec09d08a350546f9ec958ca4d30fd1d44015d75384727e82d60a571df986643c4303ed1e8b190734166480ff87c0bc10dcad7cd85aee90de3642e04a932dc9d9832c5bbdab1a8c4f45faf9236a872dd727d8703f2eef86cd1d5001a83326592a5c8ed97d626e7ea5c98596e6c253df40fe22981d81f39ae93cbf880513b49ab35f8c2e96a993e3df3abf4a805163480f44def2fb323df5f4f831e43deee12485c9b0e7ce6c3d1b87c08f69daf2d22fd085b93cc8acd05ffda6841d463c0972aae1de9539d532d0a95f75ac9d5f3385f2985a334543586efdf8ef92bb4823d723cdd0cfc9eb84a9bda053d750d6400a71c8cd2ac2e01d7df31121e7179990e2864a488bcecf5caf0d3c8d6357e795b4864b58e01009702a961f8c5d1f31c4f8251fea7a24f3403339039244506c671c03ab2ff129878e8098caa5ef48fb41e32ebf0b070fd505f1db6a6d3c30f45fd70f79f7d4e6f0fb4fa13ca51626bdf7ee64087773baec2f17fe6df28f306655c96fdf9ae286a3e811837aaff6291f0cf0238beb9b98872fd523b96bf2f544634301a54fe9e07d7b9e2ef42910f31d7751f113b439835702d7a80e26222891b677b9fe846da5e41ccd4022df05d3dcdcf79ba434fbdbf15ff1fdf401845a21f54bf7ea123f2e4bc58bf8440c2363b796e5c388175dba8a18488bac8a6c13794c0753ae4aed0c9654855335d6d3fb74f778606afe4a55422b815f6277bcbe6999309cc7c9cad21abf4f59461655549640d5c39784ed24de0e368271e7a73ae9f7e9518c31cd14023c1d4650fb516e7b9bc5020e9b3f6c03980ba002337e7223efebff95224c28acd15507d2fb293f6c840ac4194a8209ec37f43c36c94ae9358fcb2e7ae0caf72c6bb1ed08c50f89b7ca920c73ccb86ea0ab1d27e8fbae7de9db1cccd007c3f686180e0b6599b685230e3dc72d000d95fb0acae329ed4d7a7a4b4f79ca84f46872ddcff4f80fcf564eebe0d347d701cf1362c197c6b9c6c727bc1cf6be3c527cce8b482ebc7d07970fbba9ab8319a9e9c22fa5c5b78e8c75c6ffa529a17a128ff77f0c40bc90c75af59ed2d00396195949b2dc46e39eb1c6cea4c8fd19a7c6f725a22927e47fbdf9c8db43117b5c03a005ea69afcef3b3b4881b326d1ecbc9307d4c0c2f7204a2f05ec11ab6225bfab898abfabe9a274c27ae860c8dcf395d2089808c1dc1ea4b18020676364720f01b845cde9195365310d4210a551cf95a8c7916cd14c994e97cae2db4ea19f404bd3860a4b5804d157cf0d3ce3e3b64f640fc2144e7ccd843aabfcd0adcd8d71798fb78f37878a2caaae5fb1db6bf02e7fe914bab07893f140a7168b058f03d3fe1978adc3de6874035ab185bc06e2a5ea5b824e63c46bce2e5d417dfa7e15ad5d9aca3ae0299ae734bfb53bd4efa6cf92764615e99efc781aaec18f1b9dddbfe6a91cf281a67dfb859116c57d055703bfd7617f3fe25e8728ea2c6406d321582b756179f1e2969dadeee13d32e23ba8b4f6590e3adbcf2566a4a6ddfba847b855348c5d8b8b9de181c3c6514c9010f67910c1eff30956d23c11f26e6778b1a8e9f4b0ae0ee947ea9b4b233a33d0012f30bdbd4b525a7eb8ae950a9e5a1d9091e399baf993ffc71ced373987f411ce60806fa55a6f4b0d2bb9118b5d6dcd97ad0f9d908c1471a4b4a679aaacc9fff2400c36a5180c674a2e1372eefbf3700410bd3358687e2d1d32949993d972a38bb356c4c4878e502f611f8003d24ce8d2698fe51d54cce38f53accc1f0e4afafa5505bf2baaf149c50349759381aeb4f0802f4312f4487873c42fcf53c92bb3ed243704861c3202a36350745f1409ea7563f4f5f37aeb9b7ebb0994abebdfea9849151439f455c9c3101ea9a98be5648cca44d7e0a569a3c48681d6af0968134970b7dd35506954881380dba0e36185f1a69b143e864e2ce4633f265e724001e5212b4427532c56e52787190f6441e9a03b2f9f6448484"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x9}, 0x8) keyctl$clear(0x5, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f900000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp}, 0x20) 4m6.091857706s ago: executing program 6 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x58}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007000000ef7d63abc6cfe90e427003cdf9f90af8028a407ae481b14e0150103d85b4a84a3828f04289a4bd76be23f34b0a204d4b5bebe0b38394389bb2069b9302d6"], 0x1c}}, 0x0) r7 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) r8 = socket(0x2b, 0x80801, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 4m3.911413526s ago: executing program 6 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "3cae78117e75c2375b0290fa828d974126c1a70b22f77a37a37b7154cc0c406c", "d27bd50a2942aa283aeb9677e3ef551e", {"e72158200581e0854e6657fe05a72fce", "98d47eff9de7a9dad98d6fde327bb9c3"}}}}}}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) accept4(r0, 0x0, &(0x7f0000000140), 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) 4m2.945210768s ago: executing program 6 (id=1216): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) openat$ptp0(0xffffffffffffff9c, 0x0, 0x10800, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = socket(0x2, 0x80805, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000083c0)=[{{0x0, 0x40, 0x0, 0xffffffffffffff5a}}], 0x3fffffffffffe58, 0x4000814) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x4000050) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/27) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}], 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000009c0)="b7b013a5c2edaba1fb77ce9ff87b589820723cb4f337e4117ea1ad4ab407117091ec9173cf153851853a2ca9e53ab40e842161c6698678a24392928d7f3ce7970e86509a96daafa910fd4e8b9da3df2810305742940f2415a78c5cf550ca4c19733754220741642eefcd0e4302f77009de701c4a55a8a0d6a3cc48698e40c473764c5faf20d3a211a2cab9edf44ef617a42bfe5fc167eb23be22e141fad21c71caab752b62577d7a74c044a952cc84e061e1979f1da6dd3992a17bab3b845360d99f951500f3557042721a5632ec03b7cc6a38ceea2a4c866d88a837037ad823f8a0ccd9ad9982a648b30301d47d095a5f56fb50e5e33dd80ab84c463159dd7e8e603ef2799fd84b0260a7eaa4121b22fde209a07cef21020fb0fd38af494e7974728e0306475b4b96a3c5ac374c61572fc13b8898ad992a32ad4711ed9203790f90a7bb22cc7a3cb9cd52c0d878e60fb38adfa97ba1fcf77e443b2886397f8ea1ca9194e53f578d30c29b19acf0291695327878b05b502b84dc889bf23bca56498bdcb9742fb3c5e351aa7a6b39123e7a975ea42814634a2d984b528eecc31a48192d2acee32dded16b7d07907416d8ffb70fbc2954b90d74f1772adec04a8d472f8fad6f814770e429672c4a4b86c0e7c23bf3c29f8f6e5d145a5a3821cfa5577512", 0x1e3}, {&(0x7f0000000600)="fc48968f8dec582f6b1fbfb1ea70e0a11db116f742ebce247568895c752bd920c4504fea06f1e038e03aeb5ece194f29b70bc33ce00976cd4d7bbaf85f2e3f4fb8ea87a67a8b00ad6d0bf4b147f53afc1f173addefd0e851b6e1bc164e771a4bcde3bce3afab00253f3e8f2d04c588d983c74ef9c4b4f607bffb5e44dd61821ea37d48960322c26c0942e97834208eff8bd21225fe4fdccf9d82cafac3fb151c761b64920200"/179, 0xb3}, {&(0x7f0000001640)="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", 0x1000}], 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_setup(0x6085, &(0x7f0000000340)={0x0, 0x800952f, 0x80, 0x1, 0x151}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x7fffffff) write$dsp(r4, &(0x7f00000007c0)="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", 0x1ec) writev(r2, &(0x7f0000000040)=[{0x0}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000740)={0x20008, "d5a449c6f31a91f553c3769af08d47ed2eda811865a52a5a8e7e07e265cdd31c", 0x1, 0x20, 0x5000000, 0x61, 0x10, 0x5, 0x4, 0xbe70}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 3m57.023341039s ago: executing program 6 (id=1228): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x100800) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0xa, 0x0, r4, &(0x7f0000000340)={0x4}, r6, 0x3, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m40.899243765s ago: executing program 35 (id=1228): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x100800) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0xa, 0x0, r4, &(0x7f0000000340)={0x4}, r6, 0x3, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 43.00224748s ago: executing program 1 (id=1659): r0 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000003c0), 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000015040)={0x0, 0x42b7a, 0x1000, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)={0x5, 0x0, [{0x10000, 0xd8, &(0x7f0000000640)=""/216}, {0x8187004, 0xcb, &(0x7f0000000740)=""/203}, {0xdddd1000, 0x2b, &(0x7f0000000280)=""/43}, {0x100000, 0xaa, &(0x7f0000000840)=""/170}, {0x80a0000, 0xa6, &(0x7f0000000900)=""/166}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x62, &(0x7f0000000600)="61df712b84fef053a7b0a26e9b722780", 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x50) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000340)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$alg(0x26, 0x5, 0x0) ioctl$VT_DISALLOCATE(r7, 0x5608) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfb}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 38.955916594s ago: executing program 1 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) r6 = dup2(r1, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value=r6}, 0x28) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xede55b340485a93, 0x0, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x46, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x83, 0xe1, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x5, 0xc, 0x20, 0x42}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x6a, &(0x7f0000000140)=@string={0x6a, 0x3, "412e531acdc490ead5ab592c4b31b077beef2eece0d0ebe9814febc1b2c7dbede442a9714953b6c08701186d56c19ad1f2e7a645886381c17ead9c39eb86fc3307477d551d495917f961b46e0510fcdb5b7a11ddb9cf7ae509de068ea4ace2049705e9e448faa64e"}}, {0x37, &(0x7f00000001c0)=@string={0x37, 0x3, "ed8ff2484202abfe261198d398382156744d0cbc5df6dbb9c5ebf9bd9017755196087a94f4ec71fec8a82e9d85e5926d3e43a5314e"}}]}) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "31549194"}]}}, 0x0}, 0x0) 34.09551532s ago: executing program 1 (id=1676): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xfb, 0x61, 0x4, 0x9, "cc7531e85fb349a56d880e561bf6c74d", "27844eaa2663ed707f84c8a7daa693ec855a556f5c06ef7bbdf8cc51b514649fbf11699903e7162a58030d021569016ca81c3744e0b939d6d1a1d71058fe63e37975a6c68dc7799c274493ac"}, 0x61, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x7a058a12aa329219, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), 0x0}, 0x20) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c854}, 0x20000014) 32.678351149s ago: executing program 1 (id=1680): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 30.471261094s ago: executing program 1 (id=1683): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r1, 0x0}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x1, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0xf}]}}}]}, 0x44}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 29.108022308s ago: executing program 1 (id=1687): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10110, 0x0, 0x80000000}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000380), 0x3, 0x2000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="1400350064756d6d793000000000000000"], 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 15.545470118s ago: executing program 5 (id=1717): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8a945000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) copy_file_range(r1, &(0x7f0000000740)=0xb4c, r2, &(0x7f0000000780)=0x1400000000000000, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r8, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10001, 0x39}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x310, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x53, 0x3, "7ccaafd5b373cec023e52f30bd4ff103ba7b8d1c6e7386bb681ae58dfcb69dc2bb74d37af5bcb82890ee42e10194fe94c4d9fb6554b6cf1c5bdab6ed22dd05d8e1e21d55212770498682263589c29e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5fab661e4f4b9c53ce31a73649958e82a43273d47717bd8819b618a9a3aea0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a5568dcd94359bc22392d4bc66aaf405c8a61530"}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff0f2}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffacd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x4}]}, 0x310}, 0x1, 0x0, 0x0, 0x40040}, 0x810) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r13, 0x1000000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000001e40)=0x5) write$dsp(r10, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 13.552399075s ago: executing program 36 (id=1687): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10110, 0x0, 0x80000000}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000380), 0x3, 0x2000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="1400350064756d6d793000000000000000"], 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 13.269847751s ago: executing program 5 (id=1719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value}, 0x28) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xede55b340485a93, 0x0, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x46, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x83, 0xe1, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x5, 0xc, 0x20, 0x42}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x6a, &(0x7f0000000140)=@string={0x6a, 0x3, "412e531acdc490ead5ab592c4b31b077beef2eece0d0ebe9814febc1b2c7dbede442a9714953b6c08701186d56c19ad1f2e7a645886381c17ead9c39eb86fc3307477d551d495917f961b46e0510fcdb5b7a11ddb9cf7ae509de068ea4ace2049705e9e448faa64e"}}, {0x37, &(0x7f00000001c0)=@string={0x37, 0x3, "ed8ff2484202abfe261198d398382156744d0cbc5df6dbb9c5ebf9bd9017755196087a94f4ec71fec8a82e9d85e5926d3e43a5314e"}}]}) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "31549194"}]}}, 0x0}, 0x0) 11.278324526s ago: executing program 8 (id=1724): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x1, 0x40, 0xe, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0xa3}, &(0x7f0000000300)=0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004540)=@newtaction={0x14, 0x1c, 0xa09, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x3, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="c4f9ffe0911e", 0x6}], 0x1}], 0x1, 0x4007c) 11.210766557s ago: executing program 8 (id=1726): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x89}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x14, 0x121800) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x40}}, 0x8004) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x40}}, 0x8004) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) syz_usb_connect(0x3, 0xc3, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x36, 0x43, 0xa4, 0x40, 0x3f0, 0x5016, 0x1f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x1, 0x6, 0x0, 0x90, 0x2, [{{0x9, 0x4, 0x60, 0x5f, 0x4, 0x11, 0xa1, 0x33, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "590d7de7"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x19, 0x4, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0xff08, 0x40}}, @hid_hid={0x9, 0x21, 0xda64, 0x2, 0x1, {0x22, 0x8fc}}], [{{0x9, 0x5, 0x0, 0x8, 0x400, 0x1, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x9, 0x5, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x101}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x9, 0xc9}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xff, 0x0, 0xb, [@generic={0x43, 0x24, "804d44f78df68fc68163724d4039705255784bd6a521c28a01088162c9902a9a51a9a364aa302ae42621fe44f97f84c7b28dec577e24664ef00ebf8ac44dc98496"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x4}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x0, 0xf, 0xff}, 0xaf, &(0x7f0000000880)={0x5, 0xf, 0xaf, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xf, 0x10, 0x1, "3d4e0e98d31ddddc67fb8777"}, @ssp_cap={0x24, 0x10, 0xa, 0x62, 0x6, 0x7, 0x1e00, 0x151, [0xcf, 0xcf, 0xff00f0, 0xff000f, 0xf0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x5, 0x1e9c}, @generic={0x6a, 0x10, 0x1, "421ea1877a11e7c27028d0e76e10227cb27a7495ffea7ba26bd03c8ded7dca57781c22efd3511010d4bb63a82debb5d2b1249ea42a63832ecdb6349b95c291169c44f96f1651a15c92415e0c620db6087fac587c97fa9bdb663b03bdbe572e51af3f0fc74b4337"}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "a639decfbc525fadf510d48959b85a66fcd00fd2f32db76cc66354995d914c66ce800316a1923a2ce32b9f19193f42227d23fe24a4ea0b640cdaab4f42271ef6fee6a1245485539c7bf7d2c40cf871ba6f895714fa155c25daab310cd943531364f664892d1173625bc88ce9dfb30ec074d19933528d5af86270081ee2799aa31c85ad42ebd9f2a20daac3187dc800de1116"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "84f06564fbaa6451a24dd08893a510778d046728a07463016f3877d8c1e4093ee6a76c029a0f0f9e8f935d6e512909a40707b45e81969e604b5c33f12e19dc9e4f076ef49c66fb77135954"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0xb6, &(0x7f0000000700)=@string={0xb6, 0x3, "992bc75e45b33665c5bda22968536992a6e56ad3e36cd13ae24d82faf5a8e10e324a45e4b91b49d88623dbfd5155f4fd094b37dbeb2fef5864ff2461c46f79fc96a3a43e3e8465db477c52946b648924d0f64f870eedc2af931b3b8e6b24d1baa71b8221f374a77499e1180cbea50df79c6d16207fe3b180653e5845b5c9c266fa8f61ea3a87b5f3522c73f5280513856642e2a0b1183b63244101272968762382daa2d6e75b57ba34100f8dd0efe7aff2dacfe0"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000500)=@lang_id={0xfdb5, 0x3, 0x43f}}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) syz_usb_disconnect(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x4, &(0x7f00000006c0)=[{0x6, 0x6, 0x0, 0x80000000}, {0x7ff, 0x9, 0x8, 0x3}, {0xffef, 0x0, 0x3, 0xfffffffc}, {0x2, 0x2d, 0x81, 0x3}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) (async) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x6, @name="f4e06b0a1673030000001e8623218cb8167a99b19faf676ddc55586411baebc8"}) (async) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x6, @name="f4e06b0a1673030000001e8623218cb8167a99b19faf676ddc55586411baebc8"}) memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x0) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581", @ANYBLOB="dfd34115"], 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581", @ANYBLOB="dfd34115"], 0x0) 10.259507491s ago: executing program 7 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x58}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007000000ef7d63abc6cfe90e427003cdf9f90af8028a407ae481b14e0150103d85b4a84a3828f04289a4bd76be23f34b0a204d4b5bebe0b38394389bb2069b9302d6"], 0x1c}}, 0x0) r7 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) r8 = socket(0x2b, 0x80801, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 10.258902094s ago: executing program 3 (id=1728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) r6 = dup2(r1, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value=r6}, 0x28) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x46, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x83, 0xe1, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x5, 0xc, 0x20, 0x42}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x6a, &(0x7f0000000140)=@string={0x6a, 0x3, "412e531acdc490ead5ab592c4b31b077beef2eece0d0ebe9814febc1b2c7dbede442a9714953b6c08701186d56c19ad1f2e7a645886381c17ead9c39eb86fc3307477d551d495917f961b46e0510fcdb5b7a11ddb9cf7ae509de068ea4ace2049705e9e448faa64e"}}, {0x37, &(0x7f00000001c0)=@string={0x37, 0x3, "ed8ff2484202abfe261198d398382156744d0cbc5df6dbb9c5ebf9bd9017755196087a94f4ec71fec8a82e9d85e5926d3e43a5314e"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "31549194"}]}}, 0x0}, 0x0) 8.978896362s ago: executing program 5 (id=1729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) r6 = dup2(r1, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value=r6}, 0x28) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x46, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x83, 0xe1, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x5, 0xc, 0x20, 0x42}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x6a, &(0x7f0000000140)=@string={0x6a, 0x3, "412e531acdc490ead5ab592c4b31b077beef2eece0d0ebe9814febc1b2c7dbede442a9714953b6c08701186d56c19ad1f2e7a645886381c17ead9c39eb86fc3307477d551d495917f961b46e0510fcdb5b7a11ddb9cf7ae509de068ea4ace2049705e9e448faa64e"}}, {0x37, &(0x7f00000001c0)=@string={0x37, 0x3, "ed8ff2484202abfe261198d398382156744d0cbc5df6dbb9c5ebf9bd9017755196087a94f4ec71fec8a82e9d85e5926d3e43a5314e"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "31549194"}]}}, 0x0}, 0x0) 8.050403835s ago: executing program 8 (id=1730): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) 7.982080839s ago: executing program 8 (id=1731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x0, 0x3}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lseek(r8, 0x851, 0x0) 7.037060806s ago: executing program 3 (id=1732): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getrandom(&(0x7f0000000300)=""/79, 0x4f, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4}) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) 6.158836896s ago: executing program 7 (id=1733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x10001, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10000007, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x8001, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x437, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x430, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x7fffffff}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000854) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 6.030152288s ago: executing program 3 (id=1734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x0, 0x3}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lseek(r8, 0x851, 0x0) 5.225959379s ago: executing program 5 (id=1735): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 5.061684489s ago: executing program 8 (id=1736): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x3}}}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r10, 0xfe12482fe0801d67, 0x1, 0x25dfdbfe}, 0x14}}, 0x4000) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) 4.943855472s ago: executing program 7 (id=1737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getrandom(&(0x7f0000000300)=""/79, 0x4f, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000700)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r7, r5}) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ece076b6f", 0x5}], 0x1}, 0x880) 3.985588148s ago: executing program 5 (id=1738): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300), &(0x7f0000000180)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x4c, 0x8d, 0x20, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x2, 0xee, 0x89, 0x98, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) 3.842397406s ago: executing program 8 (id=1739): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000800)={0x1, 0x5}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) 3.240690438s ago: executing program 3 (id=1740): r0 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000003c0), 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000015040)={0x0, 0x42b7a, 0x1000, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)={0x5, 0x0, [{0x10000, 0xd8, &(0x7f0000000640)=""/216}, {0x8187004, 0xcb, &(0x7f0000000740)=""/203}, {0xdddd1000, 0x2b, &(0x7f0000000280)=""/43}, {0x100000, 0xaa, &(0x7f0000000840)=""/170}, {0x80a0000, 0xa6, &(0x7f0000000900)=""/166}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x62, &(0x7f0000000600)="61df712b84fef053a7b0a26e9b722780", 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x50) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000340)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$alg(0x26, 0x5, 0x0) accept$alg(r7, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfb}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.716073153s ago: executing program 7 (id=1741): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000400)=0x20000006, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) (fail_nth: 2) 2.483883242s ago: executing program 3 (id=1742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x10001, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10000007, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x8001, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x437, 0x800, 0x0, {0x0, 0x0, 0x0, r4, 0x430, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x7fffffff}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000854) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 2.374265915s ago: executing program 7 (id=1743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x58}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007000000ef7d63abc6cfe90e427003cdf9f90af8028a407ae481b14e0150103d85b4a84a3828f04289a4bd76be23f34b0a204d4b5bebe0b38394389bb2069b9302d6"], 0x1c}}, 0x0) r7 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) r8 = socket(0x2b, 0x80801, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 85.4422ms ago: executing program 7 (id=1744): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0x40f}, {0x2, 0xc}, 0xf, [0x3ff, 0x5, 0xffffffffffffffff, 0xd, 0xc15, 0x7, 0xf, 0x17d8, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0x7, 0x5, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) poll(0x0, 0x0, 0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 84.615085ms ago: executing program 3 (id=1745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x10001, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10000007, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x8001, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x437, 0x800, 0x0, {0x0, 0x0, 0x0, r4, 0x430, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x7fffffff}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000854) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 0s ago: executing program 5 (id=1746): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)}, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000100007000000020000000000fe880000000000000100000000000001fe8000000000000000000000000000bb00000000000000cf283f850080fe00008700", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000011003c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB="140000001e00"/19], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) kernel console output (not intermixed with test programs): oad_vrs: No VRS found [ 646.076273][T11429] UDF-fs: Scanning with blocksize 512 failed [ 646.082723][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.090311][T11429] UDF-fs: Scanning with blocksize 1024 failed [ 646.096631][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.104141][T11429] UDF-fs: Scanning with blocksize 2048 failed [ 646.110615][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.118106][T11429] UDF-fs: Scanning with blocksize 4096 failed [ 647.087585][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.273718][T11133] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.313348][T11133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.323823][T11133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.471899][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.478968][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.591301][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.598433][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.643457][T11453] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 648.655221][T11453] overlayfs: missing 'lowerdir' [ 650.240124][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.133039][T11480] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 651.144697][T11480] overlayfs: missing 'lowerdir' [ 651.816003][ T29] audit: type=1326 audit(1732860738.604:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 652.900008][ T29] audit: type=1326 audit(1732860738.724:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 654.125178][ T29] audit: type=1326 audit(1732860740.744:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 654.218348][ T29] audit: type=1326 audit(1732860740.744:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 654.580235][ T29] audit: type=1326 audit(1732860740.744:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 654.765285][ T29] audit: type=1326 audit(1732860740.744:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 654.817584][T11133] veth0_vlan: entered promiscuous mode [ 654.828929][T11133] veth1_vlan: entered promiscuous mode [ 655.445369][ T29] audit: type=1326 audit(1732860740.744:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 655.500368][ T29] audit: type=1326 audit(1732860740.744:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 655.534527][ T29] audit: type=1326 audit(1732860740.744:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 655.561091][ T29] audit: type=1326 audit(1732860740.744:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 655.606695][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 655.729499][T11133] veth0_macvtap: entered promiscuous mode [ 655.740326][T11133] veth1_macvtap: entered promiscuous mode [ 655.768190][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.829124][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.894989][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.905640][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.915612][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.959403][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.969484][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.980474][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.990615][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.001246][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.063192][T11133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.082268][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.093008][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.103149][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.113833][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.123949][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.134862][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.145057][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.155723][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.166317][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.177542][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.189695][T11133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.199591][T11133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.208468][T11133] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.217647][T11133] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.226490][T11133] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.723179][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.799636][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.469171][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.585349][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.618896][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 658.618908][ T29] audit: type=1400 audit(1732860745.404:1838): avc: denied { getopt } for pid=11547 comm="syz.7.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 659.036561][T11563] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1252'. [ 660.051269][T11567] xt_cgroup: xt_cgroup: no path or classid specified [ 660.473970][T11559] block nbd7: shutting down sockets [ 661.189633][T11581] FAULT_INJECTION: forcing a failure. [ 661.189633][T11581] name failslab, interval 1, probability 0, space 0, times 0 [ 661.246525][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.1.1359 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 661.256973][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.267031][T11581] Call Trace: [ 661.270309][T11581] [ 661.273243][T11581] dump_stack_lvl+0x16c/0x1f0 [ 661.277935][T11581] should_fail_ex+0x497/0x5b0 [ 661.282634][T11581] should_failslab+0xc2/0x120 [ 661.287325][T11581] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 661.292711][T11581] ? skb_clone+0x190/0x3f0 [ 661.297140][T11581] skb_clone+0x190/0x3f0 [ 661.301396][T11581] netlink_deliver_tap+0xabd/0xd30 [ 661.306527][T11581] netlink_unicast+0x5e1/0x7f0 [ 661.311308][T11581] ? __pfx_netlink_unicast+0x10/0x10 [ 661.316614][T11581] netlink_sendmsg+0x8b8/0xd70 [ 661.321386][T11581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.326685][T11581] ____sys_sendmsg+0xaaf/0xc90 [ 661.331451][T11581] ? copy_msghdr_from_user+0x10b/0x160 [ 661.336923][T11581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.342237][T11581] ___sys_sendmsg+0x135/0x1e0 [ 661.346925][T11581] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.352146][T11581] ? __pfx_lock_release+0x10/0x10 [ 661.357184][T11581] ? trace_lock_acquire+0x14e/0x1f0 [ 661.362411][T11581] ? __fget_files+0x206/0x3a0 [ 661.367110][T11581] __sys_sendmsg+0x16e/0x220 [ 661.371709][T11581] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.376852][T11581] do_syscall_64+0xcd/0x250 [ 661.381379][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.387288][T11581] RIP: 0033:0x7f4c83d80809 [ 661.391709][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.411322][T11581] RSP: 002b:00007f4c84bb6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.419745][T11581] RAX: ffffffffffffffda RBX: 00007f4c83f45fa0 RCX: 00007f4c83d80809 [ 661.427717][T11581] RDX: 0000000000044094 RSI: 0000000020000180 RDI: 0000000000000003 [ 661.435695][T11581] RBP: 00007f4c84bb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 661.443672][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.451634][T11581] R13: 0000000000000000 R14: 00007f4c83f45fa0 R15: 00007ffedc000368 [ 661.451665][T11581] [ 662.661511][T11597] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1362'. [ 662.672211][T11597] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1362'. [ 663.828760][T11608] FAULT_INJECTION: forcing a failure. [ 663.828760][T11608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.040402][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.7.1366 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 664.050947][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 664.061014][T11608] Call Trace: [ 664.064293][T11608] [ 664.067223][T11608] dump_stack_lvl+0x16c/0x1f0 [ 664.071922][T11608] should_fail_ex+0x497/0x5b0 [ 664.076622][T11608] _copy_to_user+0x32/0xd0 [ 664.081048][T11608] simple_read_from_buffer+0xd0/0x160 [ 664.086436][T11608] proc_fail_nth_read+0x198/0x270 [ 664.091473][T11608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.097032][T11608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.102590][T11608] vfs_read+0x1df/0xbe0 [ 664.106751][T11608] ? __fget_files+0x1fc/0x3a0 [ 664.111436][T11608] ? __pfx___mutex_lock+0x10/0x10 [ 664.116480][T11608] ? __pfx_vfs_read+0x10/0x10 [ 664.121165][T11608] ? __fget_files+0x206/0x3a0 [ 664.125839][T11608] ksys_read+0x12b/0x250 [ 664.130075][T11608] ? __pfx_ksys_read+0x10/0x10 [ 664.134830][T11608] do_syscall_64+0xcd/0x250 [ 664.139336][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.145222][T11608] RIP: 0033:0x7fdda917f21c [ 664.149625][T11608] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 664.169226][T11608] RSP: 002b:00007fddaa000050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.177629][T11608] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda917f21c [ 664.185586][T11608] RDX: 000000000000000f RSI: 00007fddaa0000b0 RDI: 0000000000000005 [ 664.193543][T11608] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 664.201500][T11608] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 664.209454][T11608] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 664.217424][T11608] [ 664.963079][T11615] input: syz0 as /devices/virtual/input/input13 [ 665.804629][ T29] audit: type=1400 audit(1732860752.594:1839): avc: denied { read } for pid=11614 comm="syz.8.1370" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 665.928424][ T29] audit: type=1400 audit(1732860752.594:1840): avc: denied { open } for pid=11614 comm="syz.8.1370" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 666.049918][T11620] tipc: Enabling of bearer rejected, failed to enable media [ 666.210692][ T29] audit: type=1400 audit(1732860752.684:1841): avc: denied { ioctl } for pid=11614 comm="syz.8.1370" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 666.283054][ T29] audit: type=1800 audit(1732860752.704:1842): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1370" name="file1" dev="overlay" ino=58 res=0 errno=0 [ 666.705255][T11529] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 666.803568][ T29] audit: type=1400 audit(1732860753.594:1843): avc: denied { bind } for pid=11637 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.854932][ T29] audit: type=1400 audit(1732860753.594:1844): avc: denied { getopt } for pid=11637 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.900265][T11529] usb 4-1: Using ep0 maxpacket: 8 [ 666.906997][T11529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.950247][T11529] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 666.966833][T11529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.035192][T11642] FAULT_INJECTION: forcing a failure. [ 667.035192][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 667.048025][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.8.1375 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 667.056251][T11637] block nbd7: shutting down sockets [ 667.058434][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 667.066272][T11529] usb 4-1: config 0 descriptor?? [ 667.073630][T11642] Call Trace: [ 667.073641][T11642] [ 667.073650][T11642] dump_stack_lvl+0x16c/0x1f0 [ 667.073683][T11642] should_fail_ex+0x497/0x5b0 [ 667.073717][T11642] should_failslab+0xc2/0x120 [ 667.073744][T11642] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 667.073775][T11642] ? skb_clone+0x190/0x3f0 [ 667.073804][T11642] skb_clone+0x190/0x3f0 [ 667.073829][T11642] netlink_deliver_tap+0xabd/0xd30 [ 667.073864][T11642] netlink_unicast+0x5e1/0x7f0 [ 667.122729][T11642] ? __pfx_netlink_unicast+0x10/0x10 [ 667.128026][T11642] netlink_sendmsg+0x8b8/0xd70 [ 667.132794][T11642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.138101][T11642] ____sys_sendmsg+0xaaf/0xc90 [ 667.142882][T11642] ? copy_msghdr_from_user+0x10b/0x160 [ 667.148342][T11642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.153651][T11642] ___sys_sendmsg+0x135/0x1e0 [ 667.158334][T11642] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.163555][T11642] ? __pfx_lock_release+0x10/0x10 [ 667.168575][T11642] ? trace_lock_acquire+0x14e/0x1f0 [ 667.173776][T11642] ? __fget_files+0x206/0x3a0 [ 667.178447][T11642] __sys_sendmsg+0x16e/0x220 [ 667.183026][T11642] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.188145][T11642] do_syscall_64+0xcd/0x250 [ 667.192650][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.198541][T11642] RIP: 0033:0x7f2c1d980809 [ 667.202945][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.222546][T11642] RSP: 002b:00007f2c1e868058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.230950][T11642] RAX: ffffffffffffffda RBX: 00007f2c1db45fa0 RCX: 00007f2c1d980809 [ 667.238917][T11642] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 667.246876][T11642] RBP: 00007f2c1e8680a0 R08: 0000000000000000 R09: 0000000000000000 [ 667.254832][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.262795][T11642] R13: 0000000000000000 R14: 00007f2c1db45fa0 R15: 00007fff0aeb5028 [ 667.270765][T11642] [ 667.337617][T11640] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 667.345152][T11640] UDF-fs: Scanning with blocksize 512 failed [ 667.351678][T11640] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 667.359146][T11640] UDF-fs: Scanning with blocksize 1024 failed [ 667.366897][T11640] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 667.374416][T11640] UDF-fs: Scanning with blocksize 2048 failed [ 667.380793][T11640] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 667.388256][T11640] UDF-fs: Scanning with blocksize 4096 failed [ 667.817278][T11529] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 668.564075][ T29] audit: type=1400 audit(1732860755.354:1845): avc: denied { ioctl } for pid=11613 comm="syz.3.1369" path="socket:[32571]" dev="sockfs" ino=32571 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 668.649897][ T9027] usb 4-1: USB disconnect, device number 35 [ 668.655864][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 668.673223][T11657] FAULT_INJECTION: forcing a failure. [ 668.673223][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.677634][ T9027] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 668.686408][ T29] audit: type=1400 audit(1732860755.464:1846): avc: denied { write } for pid=11656 comm="syz.1.1381" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 668.726411][T11657] CPU: 1 UID: 0 PID: 11657 Comm: syz.8.1380 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 668.736867][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.736881][T11657] Call Trace: [ 668.736889][T11657] [ 668.753124][T11657] dump_stack_lvl+0x16c/0x1f0 [ 668.757824][T11657] should_fail_ex+0x497/0x5b0 [ 668.762518][T11657] _copy_from_user+0x2e/0xd0 [ 668.767099][T11657] move_addr_to_kernel+0x68/0x160 [ 668.772114][T11657] __sys_sendto+0x1ba/0x4f0 [ 668.776600][T11657] ? __pfx___sys_sendto+0x10/0x10 [ 668.781620][T11657] ? ksys_write+0x1ba/0x250 [ 668.786110][T11657] ? __pfx_ksys_write+0x10/0x10 [ 668.790956][T11657] __x64_sys_sendto+0xe0/0x1c0 [ 668.795715][T11657] ? do_syscall_64+0x91/0x250 [ 668.800385][T11657] ? lockdep_hardirqs_on+0x7c/0x110 [ 668.805568][T11657] do_syscall_64+0xcd/0x250 [ 668.810058][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.815937][T11657] RIP: 0033:0x7f2c1d980809 [ 668.820332][T11657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.839922][T11657] RSP: 002b:00007f2c1e868058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 668.848316][T11657] RAX: ffffffffffffffda RBX: 00007f2c1db45fa0 RCX: 00007f2c1d980809 [ 668.856267][T11657] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 668.864218][T11657] RBP: 00007f2c1e8680a0 R08: 0000000020000240 R09: 0000000000000014 [ 668.872169][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.880116][T11657] R13: 0000000000000000 R14: 00007f2c1db45fa0 R15: 00007fff0aeb5028 [ 668.888077][T11657] [ 669.031139][ T29] audit: type=1400 audit(1732860755.814:1847): avc: denied { listen } for pid=11659 comm="syz.1.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 669.054538][ T29] audit: type=1400 audit(1732860755.824:1848): avc: denied { accept } for pid=11659 comm="syz.1.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 669.592208][T11673] kernel profiling enabled (shift: 63) [ 669.617397][T11673] profiling shift: 63 too large [ 669.776094][T11678] Invalid ELF header type: 2 != 1 [ 669.875871][T11679] tipc: Enabling of bearer rejected, already enabled [ 670.414692][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1389'. [ 670.423860][T11682] tipc: Started in network mode [ 670.428793][T11682] tipc: Node identity , cluster identity 4711 [ 670.450309][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 670.504207][T11684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.630353][ T8] usb 9-1: device descriptor read/64, error -71 [ 670.698994][T11691] SELinux: policydb string length 42 does not match expected length 8 [ 670.716193][T11691] SELinux: failed to load policy [ 671.230717][ T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 671.370248][ T8] usb 9-1: device descriptor read/64, error -71 [ 671.583649][ T8] usb usb9-port1: attempt power cycle [ 672.277557][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 672.277573][ T29] audit: type=1400 audit(1732860759.064:1851): avc: denied { nlmsg_write } for pid=11707 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 672.461363][ T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 672.492808][ T8] usb 9-1: device descriptor read/8, error -71 [ 672.675109][ T29] audit: type=1400 audit(1732860759.464:1852): avc: denied { bind } for pid=11715 comm="syz.1.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 672.733387][T11723] FAULT_INJECTION: forcing a failure. [ 672.733387][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 672.807303][T11723] CPU: 0 UID: 0 PID: 11723 Comm: syz.8.1402 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 672.817752][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 672.827813][T11723] Call Trace: [ 672.831098][T11723] [ 672.834035][T11723] dump_stack_lvl+0x16c/0x1f0 [ 672.838733][T11723] should_fail_ex+0x497/0x5b0 [ 672.843428][T11723] ? fs_reclaim_acquire+0xae/0x150 [ 672.848569][T11723] should_failslab+0xc2/0x120 [ 672.853257][T11723] __kmalloc_cache_noprof+0x68/0x410 [ 672.858564][T11723] wakeup_source_device_create+0x46/0x2a0 [ 672.864307][T11723] wakeup_source_sysfs_add+0x1c/0x90 [ 672.869611][T11723] wakeup_source_register+0xaa/0x140 [ 672.874909][T11723] ep_create_wakeup_source+0x1df/0x2e0 [ 672.880384][T11723] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 672.886390][T11723] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 672.891781][T11723] ? lock_acquire+0x2f/0xb0 [ 672.896291][T11723] ? do_epoll_ctl+0x2365/0x35d0 [ 672.901161][T11723] do_epoll_ctl+0x1dab/0x35d0 [ 672.905864][T11723] ? __pfx_do_epoll_ctl+0x10/0x10 [ 672.910908][T11723] ? __might_fault+0xe3/0x190 [ 672.915606][T11723] ? __x64_sys_epoll_ctl+0x15d/0x1e0 [ 672.920904][T11723] __x64_sys_epoll_ctl+0x15d/0x1e0 [ 672.926033][T11723] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 672.931693][T11723] do_syscall_64+0xcd/0x250 [ 672.936219][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.942130][T11723] RIP: 0033:0x7f2c1d980809 [ 672.946549][T11723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.966165][T11723] RSP: 002b:00007f2c1e868058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 672.974587][T11723] RAX: ffffffffffffffda RBX: 00007f2c1db45fa0 RCX: 00007f2c1d980809 [ 672.982565][T11723] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 672.990541][T11723] RBP: 00007f2c1e8680a0 R08: 0000000000000000 R09: 0000000000000000 [ 672.998515][T11723] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 673.006488][T11723] R13: 0000000000000000 R14: 00007f2c1db45fa0 R15: 00007fff0aeb5028 [ 673.014480][T11723] [ 673.070257][ T47] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 673.250971][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 673.262289][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.302964][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.335578][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 673.360054][ T47] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 673.385155][ T47] usb 4-1: Product: syz [ 673.389582][ T47] usb 4-1: Manufacturer: syz [ 673.416329][ T47] usb 4-1: config 0 descriptor?? [ 673.840064][ T47] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0xd [ 673.880691][ T47] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 673.905602][T11740] FAULT_INJECTION: forcing a failure. [ 673.905602][T11740] name failslab, interval 1, probability 0, space 0, times 0 [ 673.937556][T11740] CPU: 0 UID: 0 PID: 11740 Comm: syz.7.1407 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 673.947981][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 673.958017][T11740] Call Trace: [ 673.961282][T11740] [ 673.964195][T11740] dump_stack_lvl+0x16c/0x1f0 [ 673.968857][T11740] should_fail_ex+0x497/0x5b0 [ 673.973520][T11740] should_failslab+0xc2/0x120 [ 673.978180][T11740] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 673.983537][T11740] ? skb_clone+0x190/0x3f0 [ 673.987938][T11740] skb_clone+0x190/0x3f0 [ 673.992171][T11740] netlink_deliver_tap+0xabd/0xd30 [ 673.997284][T11740] netlink_unicast+0x5e1/0x7f0 [ 674.002051][T11740] ? __pfx_netlink_unicast+0x10/0x10 [ 674.007343][T11740] netlink_sendmsg+0x8b8/0xd70 [ 674.012100][T11740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.017394][T11740] ____sys_sendmsg+0xaaf/0xc90 [ 674.022154][T11740] ? copy_msghdr_from_user+0x10b/0x160 [ 674.027600][T11740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.032895][T11740] ___sys_sendmsg+0x135/0x1e0 [ 674.037565][T11740] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.042763][T11740] ? __pfx_lock_release+0x10/0x10 [ 674.047778][T11740] ? trace_lock_acquire+0x14e/0x1f0 [ 674.052977][T11740] ? __fget_files+0x206/0x3a0 [ 674.057653][T11740] __sys_sendmsg+0x16e/0x220 [ 674.062237][T11740] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.067355][T11740] do_syscall_64+0xcd/0x250 [ 674.071859][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.077745][T11740] RIP: 0033:0x7fdda9180809 [ 674.082147][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.101748][T11740] RSP: 002b:00007fddaa000058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.110154][T11740] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda9180809 [ 674.118114][T11740] RDX: 0000000020000584 RSI: 0000000020000280 RDI: 0000000000000003 [ 674.126074][T11740] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 674.134038][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.142006][T11740] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 674.149984][T11740] [ 674.314789][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1407'. [ 674.320211][ T5850] block nbd8: Receive control failed (result -32) [ 674.559159][T11736] block nbd8: shutting down sockets [ 674.559162][T11740] vlan2: entered allmulticast mode [ 674.641415][ T47] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device [ 674.649542][ T47] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse [ 674.680904][ T47] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -71 [ 675.570258][ T47] usb 4-1: USB disconnect, device number 36 [ 675.591857][T11750] No such timeout policy "syz1" [ 675.924798][ T9027] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 676.100292][ T9027] usb 2-1: Using ep0 maxpacket: 32 [ 676.118905][ T9027] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 676.207030][ T9027] usb 2-1: config 0 has no interface number 0 [ 676.329303][ T9027] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 676.430551][ T9027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.446517][ T9027] usb 2-1: Product: syz [ 676.452154][ T9027] usb 2-1: Manufacturer: syz [ 676.475926][ T9027] usb 2-1: SerialNumber: syz [ 676.488205][ T9027] usb 2-1: config 0 descriptor?? [ 676.505610][ T9027] smsc95xx v2.0.0 [ 679.294527][ T9027] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 679.306113][ T9027] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 679.316584][ T9027] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 679.327572][ T9027] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 679.391492][ T9027] usb 2-1: USB disconnect, device number 34 [ 679.962206][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 680.042429][ T5890] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 680.439887][T11793] tipc: Enabling of bearer rejected, already enabled [ 680.490355][ T5890] usb 9-1: Using ep0 maxpacket: 32 [ 680.498351][ T5890] usb 9-1: no configurations [ 680.503511][ T5890] usb 9-1: can't read configurations, error -22 [ 680.571229][T11795] trusted_key: encrypted_key: insufficient parameters specified [ 680.596376][T11795] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1423'. [ 681.370238][ T5890] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 681.387752][ T47] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 681.530684][ T29] audit: type=1400 audit(1732860768.314:1853): avc: denied { map } for pid=11785 comm="syz.1.1421" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 681.554819][T11803] FAULT_INJECTION: forcing a failure. [ 681.554819][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 681.569232][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.7.1425 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 681.579662][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 681.589726][T11803] Call Trace: [ 681.593008][T11803] [ 681.595946][T11803] dump_stack_lvl+0x16c/0x1f0 [ 681.600645][T11803] should_fail_ex+0x497/0x5b0 [ 681.605342][T11803] should_failslab+0xc2/0x120 [ 681.610033][T11803] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 681.615422][T11803] ? skb_clone+0x190/0x3f0 [ 681.619858][T11803] skb_clone+0x190/0x3f0 [ 681.624114][T11803] netlink_deliver_tap+0xabd/0xd30 [ 681.629232][T11803] netlink_unicast+0x5e1/0x7f0 [ 681.634000][T11803] ? __pfx_netlink_unicast+0x10/0x10 [ 681.639287][T11803] netlink_sendmsg+0x8b8/0xd70 [ 681.644041][T11803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.649327][T11803] ____sys_sendmsg+0xaaf/0xc90 [ 681.654085][T11803] ? copy_msghdr_from_user+0x10b/0x160 [ 681.659533][T11803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.664822][T11803] ___sys_sendmsg+0x135/0x1e0 [ 681.669509][T11803] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.674717][T11803] ? __pfx_lock_release+0x10/0x10 [ 681.679742][T11803] ? trace_lock_acquire+0x14e/0x1f0 [ 681.684943][T11803] ? __fget_files+0x206/0x3a0 [ 681.689613][T11803] __sys_sendmsg+0x16e/0x220 [ 681.694195][T11803] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.699309][T11803] do_syscall_64+0xcd/0x250 [ 681.703813][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.709699][T11803] RIP: 0033:0x7fdda9180809 [ 681.714103][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.733697][T11803] RSP: 002b:00007fddaa000058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.742099][T11803] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda9180809 [ 681.750066][T11803] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 681.758025][T11803] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 681.765983][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.773942][T11803] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 681.781913][T11803] [ 681.800722][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 681.807069][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.822557][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.834508][ T29] audit: type=1400 audit(1732860768.314:1854): avc: denied { execute } for pid=11785 comm="syz.1.1421" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 681.878048][ T47] usb 6-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 681.899887][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.909267][ T5890] usb 9-1: Using ep0 maxpacket: 32 [ 681.951624][ T47] usb 6-1: config 0 descriptor?? [ 682.195743][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.204419][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.253984][ T5890] usb 9-1: device descriptor read/all, error -71 [ 682.261708][ T5890] usb usb9-port1: attempt power cycle [ 683.626002][ T29] audit: type=1400 audit(1732860770.414:1855): avc: denied { mount } for pid=11822 comm="syz.1.1429" name="/" dev="ramfs" ino=33918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 683.797136][T11828] lo: entered allmulticast mode [ 683.810067][T11826] lo: left allmulticast mode [ 684.090059][ T47] usbhid 6-1:0.0: can't add hid device: -71 [ 684.104796][ T47] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 684.187414][ T47] usb 6-1: USB disconnect, device number 26 [ 684.348949][T11831] block nbd7: shutting down sockets [ 684.447281][ T29] audit: type=1326 audit(1732860771.234:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.507793][ T29] audit: type=1326 audit(1732860771.234:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.559845][ T29] audit: type=1326 audit(1732860771.234:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.635280][ T29] audit: type=1326 audit(1732860771.234:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.684852][ T29] audit: type=1326 audit(1732860771.234:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.730463][ T29] audit: type=1326 audit(1732860771.234:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 684.778999][ T29] audit: type=1326 audit(1732860771.234:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7fc00000 [ 685.479889][ T5850] block nbd5: Receive control failed (result -32) [ 685.490033][T11838] block nbd5: shutting down sockets [ 685.503543][T11847] FAULT_INJECTION: forcing a failure. [ 685.503543][T11847] name failslab, interval 1, probability 0, space 0, times 0 [ 685.516339][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.7.1437 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 685.526762][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 685.536818][T11847] Call Trace: [ 685.540099][T11847] [ 685.543036][T11847] dump_stack_lvl+0x16c/0x1f0 [ 685.547737][T11847] should_fail_ex+0x497/0x5b0 [ 685.552438][T11847] ? fs_reclaim_acquire+0xae/0x150 [ 685.557576][T11847] should_failslab+0xc2/0x120 [ 685.562268][T11847] __kmalloc_cache_noprof+0x68/0x410 [ 685.567571][T11847] wakeup_source_device_create+0x46/0x2a0 [ 685.573308][T11847] wakeup_source_sysfs_add+0x1c/0x90 [ 685.578605][T11847] wakeup_source_register+0xaa/0x140 [ 685.583886][T11847] ep_create_wakeup_source+0x1df/0x2e0 [ 685.589341][T11847] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 685.595323][T11847] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 685.600693][T11847] ? lock_acquire+0x2f/0xb0 [ 685.605185][T11847] ? do_epoll_ctl+0x2365/0x35d0 [ 685.610039][T11847] do_epoll_ctl+0x1dab/0x35d0 [ 685.614722][T11847] ? __pfx_do_epoll_ctl+0x10/0x10 [ 685.619748][T11847] ? __might_fault+0xe3/0x190 [ 685.624427][T11847] ? __x64_sys_epoll_ctl+0x15d/0x1e0 [ 685.629712][T11847] __x64_sys_epoll_ctl+0x15d/0x1e0 [ 685.634821][T11847] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 685.640458][T11847] do_syscall_64+0xcd/0x250 [ 685.644961][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.650860][T11847] RIP: 0033:0x7fdda9180809 [ 685.655271][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.674875][T11847] RSP: 002b:00007fddaa000058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 685.683282][T11847] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda9180809 [ 685.691241][T11847] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 685.699195][T11847] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 685.707150][T11847] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 685.715106][T11847] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 685.723077][T11847] [ 685.742540][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.748834][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.922095][T11854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11854 comm=syz.7.1440 [ 688.327605][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 688.840816][T11885] 9pnet_virtio: no channels available for device syz [ 689.190549][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 689.352669][ T5850] Bluetooth: hci1: ACL packet too small [ 689.450504][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 689.480512][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.515710][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.567946][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 689.601463][ T8] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 689.609844][ T8] usb 2-1: Product: syz [ 689.630815][ T8] usb 2-1: Manufacturer: syz [ 689.648968][ T8] usb 2-1: config 0 descriptor?? [ 690.683937][T11910] xt_limit: Overflow, try lower: 0/0 [ 690.695942][T11910] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1457'. [ 690.709335][ T8] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0xd [ 690.734111][T11910] trusted_key: encrypted_key: insufficient parameters specified [ 690.752526][ T8] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 691.565176][ T8] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device [ 691.575389][ T8] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse [ 691.611462][ T8] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -71 [ 691.663204][ T8] usb 2-1: USB disconnect, device number 35 [ 691.702747][T11928] FAULT_INJECTION: forcing a failure. [ 691.702747][T11928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.777264][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.8.1460 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 691.787684][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 691.797725][T11928] Call Trace: [ 691.801023][T11928] [ 691.803936][T11928] dump_stack_lvl+0x16c/0x1f0 [ 691.808613][T11928] should_fail_ex+0x497/0x5b0 [ 691.813278][T11928] _copy_to_user+0x32/0xd0 [ 691.817674][T11928] simple_read_from_buffer+0xd0/0x160 [ 691.823041][T11928] proc_fail_nth_read+0x198/0x270 [ 691.828049][T11928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.833583][T11928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.839108][T11928] vfs_read+0x1df/0xbe0 [ 691.843243][T11928] ? __fget_files+0x1fc/0x3a0 [ 691.847896][T11928] ? __pfx___mutex_lock+0x10/0x10 [ 691.852902][T11928] ? __pfx_vfs_read+0x10/0x10 [ 691.857562][T11928] ? __fget_files+0x206/0x3a0 [ 691.862221][T11928] ksys_read+0x12b/0x250 [ 691.866438][T11928] ? __pfx_ksys_read+0x10/0x10 [ 691.871183][T11928] do_syscall_64+0xcd/0x250 [ 691.875672][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.881550][T11928] RIP: 0033:0x7f2c1d97f21c [ 691.885949][T11928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 691.905540][T11928] RSP: 002b:00007f2c1e826050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.914024][T11928] RAX: ffffffffffffffda RBX: 00007f2c1db46160 RCX: 00007f2c1d97f21c [ 691.921977][T11928] RDX: 000000000000000f RSI: 00007f2c1e8260b0 RDI: 000000000000000b [ 691.929925][T11928] RBP: 00007f2c1e8260a0 R08: 0000000000000000 R09: 0000000000000000 [ 691.937874][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.945824][T11928] R13: 0000000000000001 R14: 00007f2c1db46160 R15: 00007fff0aeb5028 [ 691.953783][T11928] [ 695.730707][ T5850] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 695.739466][ T5850] Bluetooth: hci4: Injecting HCI hardware error event [ 695.747918][ T5850] Bluetooth: hci4: hardware error 0x00 [ 696.259436][T11962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1470'. [ 696.428946][T11964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1469'. [ 696.581195][T11977] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 696.581227][T11977] overlayfs: missing 'lowerdir' [ 696.639069][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 696.639085][ T29] audit: type=1400 audit(1732860783.424:1927): avc: denied { write } for pid=11975 comm="syz.7.1473" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 696.705473][ T29] audit: type=1400 audit(1732860783.454:1928): avc: denied { ioctl } for pid=11975 comm="syz.7.1473" path="/dev/input/mouse0" dev="devtmpfs" ino=1013 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 696.705509][T11976] pim6reg1: entered promiscuous mode [ 696.759264][T11976] pim6reg1: entered allmulticast mode [ 698.375635][ T5850] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 698.703395][T12005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.710949][T12005] UDF-fs: Scanning with blocksize 512 failed [ 698.717341][T12005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.724859][T12005] UDF-fs: Scanning with blocksize 1024 failed [ 699.686550][T12005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.694196][T12005] UDF-fs: Scanning with blocksize 2048 failed [ 699.700844][T12005] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 699.708346][T12005] UDF-fs: Scanning with blocksize 4096 failed [ 700.290534][ T47] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 700.388190][T12018] No such timeout policy "syz1" [ 700.440343][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 700.448469][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.459692][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.135667][ T47] usb 4-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 701.148713][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.189653][ T47] usb 4-1: config 0 descriptor?? [ 701.402560][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 701.409054][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 701.479098][ T47] usb 4-1: USB disconnect, device number 38 [ 702.491435][T12040] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 702.503105][T12040] overlayfs: missing 'lowerdir' [ 702.723854][ T5892] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 702.880240][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 702.891299][ T5892] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 702.899873][ T5892] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 703.546650][ T5892] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 703.554925][ T5892] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 703.563155][ T5892] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 703.572296][ T5892] usb 6-1: config 0 has no interface number 0 [ 703.579534][ T5892] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 703.590766][ T5892] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 703.600682][ T5892] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 703.610590][ T5892] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.623709][ T5892] usb 6-1: config 0 interface 125 has no altsetting 0 [ 703.630553][ T5892] usb 6-1: config 0 interface 125 has no altsetting 2 [ 703.647363][ T5892] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 703.657915][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.675305][ T5892] usb 6-1: Product: syz [ 703.684672][ T5892] usb 6-1: Manufacturer: syz [ 703.689290][ T5892] usb 6-1: SerialNumber: syz [ 703.720881][ T5892] usb 6-1: config 0 descriptor?? [ 703.745529][ T5892] usb 6-1: selecting invalid altsetting 2 [ 704.910485][ T5892] get_1284_register timeout [ 704.915124][ T5892] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 704.915185][ C0] usb 6-1: async_complete: urb error -104 [ 706.230223][ T47] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 707.256853][T12079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.267715][ T47] usb 9-1: Using ep0 maxpacket: 16 [ 707.623279][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.636515][ T5892] usb 6-1: USB disconnect, device number 27 [ 707.638532][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.686034][ T47] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 707.705292][ T47] usb 9-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 707.725483][ T47] usb 9-1: Product: syz [ 707.729661][ T47] usb 9-1: Manufacturer: syz [ 707.741659][ T47] usb 9-1: config 0 descriptor?? [ 707.918369][T12085] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1502'. [ 708.156310][ T47] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0xd [ 708.167877][ T47] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.8-1/input0 [ 709.639642][T12104] tipc: Enabling of bearer rejected, already enabled [ 710.730368][ T47] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 710.738527][ T47] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 710.813914][T12114] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1508'. [ 711.671647][T12107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 711.926297][ T47] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 711.944380][ T47] usb 9-1: USB disconnect, device number 9 [ 712.933506][ T5889] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 713.322943][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 713.572009][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.666812][T12135] overlayfs: failed to resolve './file1': -2 [ 714.098145][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.108010][ T5889] usb 2-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 714.117319][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.162174][ T5889] usb 2-1: config 0 descriptor?? [ 714.186890][ T29] audit: type=1400 audit(1732860800.974:1929): avc: denied { listen } for pid=12133 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 714.408379][ T29] audit: type=1400 audit(1732860801.194:1930): avc: denied { write } for pid=12141 comm="syz.8.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 714.586843][T12146] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1515'. [ 714.727094][T12145] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1516'. [ 714.805141][ T29] audit: type=1400 audit(1732860801.594:1931): avc: denied { mount } for pid=12141 comm="syz.8.1516" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 717.320855][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 717.326890][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 717.364977][ T5889] usb 2-1: USB disconnect, device number 36 [ 717.371656][T12180] FAULT_INJECTION: forcing a failure. [ 717.371656][T12180] name failslab, interval 1, probability 0, space 0, times 0 [ 717.480440][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.8.1526 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 717.490889][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 717.500951][T12180] Call Trace: [ 717.504230][T12180] [ 717.507166][T12180] dump_stack_lvl+0x16c/0x1f0 [ 717.511864][T12180] should_fail_ex+0x497/0x5b0 [ 717.516557][T12180] ? fs_reclaim_acquire+0xae/0x150 [ 717.521687][T12180] should_failslab+0xc2/0x120 [ 717.526375][T12180] __kmalloc_noprof+0xcb/0x510 [ 717.531150][T12180] ? d_absolute_path+0x137/0x1b0 [ 717.536099][T12180] ? rcu_is_watching+0x12/0xc0 [ 717.540879][T12180] tomoyo_encode2+0x100/0x3e0 [ 717.545576][T12180] tomoyo_encode+0x29/0x50 [ 717.550001][T12180] tomoyo_realpath_from_path+0x19d/0x720 [ 717.555645][T12180] tomoyo_path_number_perm+0x248/0x590 [ 717.561087][T12180] ? tomoyo_path_number_perm+0x235/0x590 [ 717.566700][T12180] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.572688][T12180] ? __pfx_lock_release+0x10/0x10 [ 717.577689][T12180] ? trace_lock_acquire+0x14e/0x1f0 [ 717.582886][T12180] ? lock_acquire+0x2f/0xb0 [ 717.587366][T12180] ? __fget_files+0x40/0x3a0 [ 717.591938][T12180] ? __fget_files+0x206/0x3a0 [ 717.596597][T12180] security_file_ioctl+0x9b/0x240 [ 717.601605][T12180] __x64_sys_ioctl+0xb7/0x200 [ 717.606270][T12180] do_syscall_64+0xcd/0x250 [ 717.610763][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.616640][T12180] RIP: 0033:0x7f2c1d980809 [ 717.621040][T12180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.640623][T12180] RSP: 002b:00007f2c1e868058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.649011][T12180] RAX: ffffffffffffffda RBX: 00007f2c1db45fa0 RCX: 00007f2c1d980809 [ 717.656959][T12180] RDX: 0000000020000100 RSI: 00000000c0205649 RDI: 0000000000000003 [ 717.664906][T12180] RBP: 00007f2c1e8680a0 R08: 0000000000000000 R09: 0000000000000000 [ 717.672853][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.680801][T12180] R13: 0000000000000000 R14: 00007f2c1db45fa0 R15: 00007fff0aeb5028 [ 717.688756][T12180] [ 717.748257][T12185] netlink: 'syz.5.1524': attribute type 7 has an invalid length. [ 717.820636][T12180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 717.900296][T12187] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 717.912504][T12187] overlayfs: missing 'lowerdir' [ 718.487980][T12196] fuse: Unknown parameter 'Y1^f8S@ɛI % -߱~ ۑ͒o(^kO  q>&Qo uџ6#' [ 718.952651][T12204] block nbd1: shutting down sockets [ 719.004269][T12206] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1530'. [ 719.017698][T12199] xt_cgroup: xt_cgroup: no path or classid specified [ 721.370454][T12226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.477396][T12231] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 722.489023][T12231] overlayfs: missing 'lowerdir' [ 722.590878][T12238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1537'. [ 723.062985][T12242] No such timeout policy "syz1" [ 724.331661][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1540'. [ 724.555938][T12254] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1542'. [ 724.567274][T12254] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1542'. [ 725.729876][ T29] audit: type=1400 audit(1732860812.224:1932): avc: denied { read } for pid=12246 comm="syz.8.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 728.479117][T12288] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 728.566478][T12288] overlayfs: missing 'lowerdir' [ 728.825094][T12284] trusted_key: encrypted_key: key user:syz not found [ 728.825761][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1552'. [ 728.878763][T12292] tipc: Enabling of bearer rejected, already enabled [ 729.968348][T12305] overlayfs: failed to resolve './file0': -2 [ 730.580736][ T29] audit: type=1326 audit(1732860817.364:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 730.604336][ T29] audit: type=1326 audit(1732860817.364:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 730.880303][ T29] audit: type=1326 audit(1732860817.364:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 731.410761][ T29] audit: type=1326 audit(1732860817.364:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 731.465836][ T29] audit: type=1326 audit(1732860817.364:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.062887][T12312] netlink: 'syz.8.1556': attribute type 2 has an invalid length. [ 732.073187][T12312] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1556'. [ 732.476092][ T29] audit: type=1326 audit(1732860817.374:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.512033][ T29] audit: type=1326 audit(1732860817.374:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.535827][ T29] audit: type=1326 audit(1732860817.374:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.559900][ T29] audit: type=1326 audit(1732860817.694:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.586017][ T29] audit: type=1326 audit(1732860817.694:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.609766][ T29] audit: type=1326 audit(1732860817.694:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 732.634071][ T29] audit: type=1326 audit(1732860817.694:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 733.263620][T12326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.708168][T12339] overlayfs: failed to resolve './file0': -2 [ 736.696683][T12345] tipc: Started in network mode [ 736.702061][T12345] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 736.718974][T12345] tipc: Enabled bearer , priority 10 [ 736.950310][T12346] tipc: Enabling of bearer rejected, already enabled [ 737.854773][ T47] tipc: Node number set to 4269801491 [ 738.239421][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 738.239437][ T29] audit: type=1326 audit(1732860825.024:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 738.313935][ T29] audit: type=1326 audit(1732860825.024:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 738.345090][ T29] audit: type=1326 audit(1732860825.074:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 738.515193][ T29] audit: type=1326 audit(1732860825.074:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 738.596619][T12360] netlink: 'syz.1.1568': attribute type 2 has an invalid length. [ 738.604602][T12360] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1568'. [ 739.365354][ T29] audit: type=1326 audit(1732860825.074:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.389320][ T29] audit: type=1326 audit(1732860825.074:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.413372][ T29] audit: type=1326 audit(1732860825.074:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.437550][ T29] audit: type=1326 audit(1732860825.074:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.462181][ T29] audit: type=1326 audit(1732860825.084:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.485746][ T29] audit: type=1326 audit(1732860825.084:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 739.697390][T12365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.823130][T12354] uprobe: syz.8.1567:12354 failed to unregister, leaking uprobe [ 745.860491][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.782427][T12427] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 746.794509][T12427] overlayfs: missing 'lowerdir' [ 747.218093][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.230229][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.231889][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'. [ 748.368539][ T47] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 748.830235][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 748.847148][ T47] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 748.860232][ T47] usb 9-1: config 0 has no interface number 0 [ 748.866347][ T47] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.441890][ T47] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 749.454961][ T47] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.466475][ T47] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.480679][ T47] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 749.491132][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.164312][ T47] usb 9-1: config 0 descriptor?? [ 750.320647][ T47] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 750.348562][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1592'. [ 752.518207][ T5892] usb 9-1: USB disconnect, device number 10 [ 752.564386][ T5892] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 754.590461][ T5889] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 754.838347][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 754.847362][ T5889] usb 2-1: config 11 has an invalid interface number: 111 but max is 0 [ 754.862278][ T5889] usb 2-1: config 11 has no interface number 0 [ 754.868477][ T5889] usb 2-1: config 11 interface 111 has no altsetting 0 [ 755.897337][ T5889] usb 2-1: language id specifier not provided by device, defaulting to English [ 755.908858][ T5889] usb 2-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=44.29 [ 755.918423][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.926897][ T5889] usb 2-1: Product: syz [ 755.931131][ T5889] usb 2-1: Manufacturer: syz [ 755.935726][ T5889] usb 2-1: SerialNumber: syz [ 757.126656][ T5889] usb 2-1: can't set config #11, error -71 [ 757.320440][ T5889] usb 2-1: USB disconnect, device number 37 [ 757.486418][T12523] trusted_key: encrypted_key: insufficient parameters specified [ 757.506984][T12523] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1604'. [ 760.328452][T12546] tipc: Started in network mode [ 760.333502][T12546] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 760.344440][T12546] tipc: Enabled bearer , priority 10 [ 760.922581][ T5888] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 761.069042][T12550] FAULT_INJECTION: forcing a failure. [ 761.069042][T12550] name failslab, interval 1, probability 0, space 0, times 0 [ 761.103426][T12550] CPU: 0 UID: 0 PID: 12550 Comm: syz.7.1611 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 761.113869][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 761.123934][T12550] Call Trace: [ 761.127219][T12550] [ 761.130155][T12550] dump_stack_lvl+0x16c/0x1f0 [ 761.134857][T12550] should_fail_ex+0x497/0x5b0 [ 761.139557][T12550] ? fs_reclaim_acquire+0xae/0x150 [ 761.144686][T12550] should_failslab+0xc2/0x120 [ 761.149353][T12550] __kmalloc_noprof+0xcb/0x510 [ 761.154122][T12550] ? rcu_is_watching+0x12/0xc0 [ 761.158903][T12550] tomoyo_encode2+0x100/0x3e0 [ 761.163600][T12550] tomoyo_encode+0x29/0x50 [ 761.168030][T12550] tomoyo_realpath_from_path+0x19d/0x720 [ 761.173678][T12550] ? tomoyo_path_number_perm+0x235/0x590 [ 761.179324][T12550] tomoyo_path_number_perm+0x248/0x590 [ 761.184790][T12550] ? tomoyo_path_number_perm+0x235/0x590 [ 761.190436][T12550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 761.196451][T12550] ? __pfx_lock_release+0x10/0x10 [ 761.201485][T12550] ? trace_lock_acquire+0x14e/0x1f0 [ 761.206702][T12550] ? lock_acquire+0x2f/0xb0 [ 761.210287][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 761.211195][T12550] ? __fget_files+0x40/0x3a0 [ 761.211232][T12550] ? __fget_files+0x206/0x3a0 [ 761.211258][T12550] security_file_ioctl+0x9b/0x240 [ 761.217637][ T5888] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 761.220813][T12550] __x64_sys_ioctl+0xb7/0x200 [ 761.220849][T12550] do_syscall_64+0xcd/0x250 [ 761.220881][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.226419][ T5888] usb 4-1: config 0 has no interface number 0 [ 761.230523][T12550] RIP: 0033:0x7fdda9180809 [ 761.230545][T12550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.230564][T12550] RSP: 002b:00007fddaa000058 EFLAGS: 00000246 [ 761.243019][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 761.243245][T12550] ORIG_RAX: 0000000000000010 [ 761.251044][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 761.253578][T12550] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda9180809 [ 761.253595][T12550] RDX: 0000000020000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 761.253609][T12550] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 761.340433][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.348389][T12550] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 761.356357][T12550] [ 761.376123][ T9027] tipc: Node number set to 4269801491 [ 761.402859][T12550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.412896][ T5888] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.432029][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 761.458994][ T5888] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 761.562436][T12554] No such timeout policy "syz1" [ 761.628838][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.940788][ T5888] usb 4-1: config 0 descriptor?? [ 762.012635][ T5888] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 762.460264][ T9027] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 762.928052][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1613'. [ 764.430728][ T5888] usb 4-1: USB disconnect, device number 39 [ 764.445139][ T5888] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 764.682529][ T9027] usb 9-1: device descriptor read/all, error -71 [ 765.407640][T12580] tipc: Enabling of bearer rejected, already enabled [ 770.178524][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 770.178540][ T29] audit: type=1326 audit(1732860856.964:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 770.211601][ T29] audit: type=1326 audit(1732860856.984:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 770.299183][ T29] audit: type=1326 audit(1732860857.004:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 770.582720][T12606] xt_cgroup: xt_cgroup: no path or classid specified [ 770.686356][ T29] audit: type=1326 audit(1732860857.004:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.350257][ T29] audit: type=1326 audit(1732860857.004:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.385870][T12608] netlink: 'syz.5.1623': attribute type 2 has an invalid length. [ 771.393732][T12608] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1623'. [ 771.598056][ T29] audit: type=1326 audit(1732860857.034:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.730431][ T29] audit: type=1326 audit(1732860857.044:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.760248][T11529] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 771.830319][ T29] audit: type=1326 audit(1732860857.044:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.853934][ T29] audit: type=1326 audit(1732860857.044:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 771.878028][ T29] audit: type=1326 audit(1732860857.044:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12597 comm="syz.5.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89d80809 code=0x7ffc0000 [ 772.106085][T11529] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 772.115461][T11529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.020378][T12621] tipc: Enabling of bearer rejected, already enabled [ 773.200277][ T9027] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 773.320241][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1627'. [ 773.441347][T11529] usb 4-1: config 0 descriptor?? [ 773.451374][T11529] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 773.650860][T11529] gp8psk: usb in 128 operation failed. [ 773.698955][T11529] gp8psk: usb in 137 operation failed. [ 773.720233][ T9027] usb 6-1: Using ep0 maxpacket: 8 [ 773.725977][T11529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.728229][ T9027] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 773.752053][ T9027] usb 6-1: config 0 has no interface number 0 [ 774.672127][T12627] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 774.679624][T12627] UDF-fs: Scanning with blocksize 512 failed [ 774.686046][T12627] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 774.693691][T12627] UDF-fs: Scanning with blocksize 1024 failed [ 774.718751][T11529] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 774.727460][T11529] usb 4-1: media controller created [ 774.743697][T11529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.753554][T12627] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 774.761775][T12627] UDF-fs: Scanning with blocksize 2048 failed [ 774.768108][T12627] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 774.775868][T12627] UDF-fs: Scanning with blocksize 4096 failed [ 774.782439][ T9027] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 774.793272][ T9027] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 774.805023][ T9027] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 774.816167][ T9027] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 774.829928][ T9027] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 774.839042][ T9027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.855256][ T9027] usb 6-1: config 0 descriptor?? [ 774.878470][ T9027] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 774.893811][T11529] gp8psk_fe: Frontend attached [ 774.898975][T11529] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 774.909685][T11529] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 775.173150][ T9027] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 775.181012][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 775.181045][ T29] audit: type=1326 audit(1732860861.554:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 775.358013][ T29] audit: type=1326 audit(1732860861.554:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 775.434914][ T47] usb 6-1: USB disconnect, device number 28 [ 775.486072][ T29] audit: type=1326 audit(1732860861.554:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f4c83d80809 code=0x7ffc0000 [ 775.700624][ T47] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 776.541828][ T9027] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.552184][ T9027] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.561365][ T9027] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 777.516305][T11529] gp8psk: usb in 138 operation failed. [ 777.521989][T11529] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 777.531539][T11529] gp8psk: found Genpix USB device pID = 203 (hex) [ 777.545415][ T9027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.730546][ T9027] usb 9-1: config 0 descriptor?? [ 778.515751][T11529] usb 4-1: USB disconnect, device number 40 [ 778.587269][ T9027] usb 9-1: can't set config #0, error -71 [ 778.895872][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.904771][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.549817][ T9027] usb 9-1: USB disconnect, device number 13 [ 780.124367][T12661] FAULT_INJECTION: forcing a failure. [ 780.124367][T12661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.137527][T12661] CPU: 1 UID: 0 PID: 12661 Comm: syz.8.1637 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 780.147956][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 780.158026][T12661] Call Trace: [ 780.161319][T12661] [ 780.164262][T12661] dump_stack_lvl+0x16c/0x1f0 [ 780.168970][T12661] should_fail_ex+0x497/0x5b0 [ 780.173673][T12661] _copy_from_user+0x2e/0xd0 [ 780.178274][T12661] move_addr_to_kernel+0x68/0x160 [ 780.183317][T12661] __sys_connect+0xb0/0x170 [ 780.187831][T12661] ? __pfx___sys_connect+0x10/0x10 [ 780.192961][T12661] ? __pfx_ksys_write+0x10/0x10 [ 780.197828][T12661] __x64_sys_connect+0x72/0xb0 [ 780.202603][T12661] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.207828][T12661] do_syscall_64+0xcd/0x250 [ 780.212355][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.218271][T12661] RIP: 0033:0x7f2c1d980809 [ 780.222698][T12661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.242319][T12661] RSP: 002b:00007f2c1e868058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 780.250748][T12661] RAX: ffffffffffffffda RBX: 00007f2c1db45fa0 RCX: 00007f2c1d980809 [ 780.258730][T12661] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000007 [ 780.266710][T12661] RBP: 00007f2c1e8680a0 R08: 0000000000000000 R09: 0000000000000000 [ 780.274691][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.282668][T12661] R13: 0000000000000000 R14: 00007f2c1db45fa0 R15: 00007fff0aeb5028 [ 780.290666][T12661] [ 780.319585][T11529] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 780.418335][ T29] audit: type=1400 audit(1732860867.204:2080): avc: denied { unmount } for pid=11133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 781.618756][T12675] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 781.624354][T12682] efs: device does not support 512 byte blocks [ 781.626310][T12675] UDF-fs: Scanning with blocksize 512 failed [ 781.632431][T12682] device does not support 512 byte blocks [ 781.632431][T12682] [ 781.646732][T12675] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 781.654428][T12675] UDF-fs: Scanning with blocksize 1024 failed [ 781.660869][T12675] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 781.668362][T12675] UDF-fs: Scanning with blocksize 2048 failed [ 781.674795][T12675] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 781.682414][T12675] UDF-fs: Scanning with blocksize 4096 failed [ 781.697480][T12683] [U] [ 781.700195][T12683] [U] [ 781.702874][T12683] [U] [ 781.705573][T12683] [U] [ 781.709480][T12683] [U] [ 781.712185][T12683] [U] [ 781.714866][T12683] [U] [ 781.717542][T12683] [U] [ 781.720450][T12683] [U] [ 781.723141][T12683] [U] [ 781.725820][T12683] [U] [ 781.728498][T12683] [U] [ 781.731360][T12683] [U] [ 781.734068][T12683] [U] [ 781.736774][T12683] [U] [ 781.739479][T12683] [U] [ 781.742370][T12683] [U] [ 781.745079][T12683] [U] [ 781.747785][T12683] [U] [ 781.750472][T12683] [U] [ 781.754137][T12683] [U] [ 781.756839][T12683] [U] [ 781.759531][T12683] [U] [ 781.762217][T12683] [U] [ 781.765227][T12683] [U] [ 781.767920][T12683] [U] [ 781.770605][T12683] [U] [ 781.773279][T12683] [U] [ 781.776334][T12683] [U] [ 781.779027][T12683] [U] [ 781.781705][T12683] [U] [ 781.784382][T12683] [U] [ 781.787438][T12683] [U] [ 781.790138][T12683] [U] [ 781.792821][T12683] [U] [ 781.795501][T12683] [U] [ 781.798600][T12683] [U] [ 781.801297][T12683] [U] [ 781.803976][T12683] [U] [ 781.806650][T12683] [U] [ 781.811821][T12683] [U] [ 781.814530][T12683] [U] [ 781.817209][T12683] [U] [ 781.819885][T12683] [U] [ 781.822962][T12683] [U] [ 781.825651][T12683] [U] [ 781.828326][T12683] [U] [ 781.831005][T12683] [U] [ 781.834104][T12683] [U] [ 781.836792][T12683] [U] [ 781.839468][T12683] [U] [ 781.842153][T12683] [U] [ 781.845232][T12683] [U] [ 781.847922][T12683] [U] [ 781.850595][T12683] [U] [ 781.853269][T12683] [U] [ 781.856289][T12683] [U] [ 781.858976][T12683] [U] [ 781.861651][T12683] [U] [ 781.864325][T12683] [U] [ 781.867371][T12683] [U] [ 781.870060][T12683] [U] [ 781.872735][T12683] [U] [ 781.875409][T12683] [U] [ 781.878439][T12683] [U] [ 781.881127][T12683] [U] [ 781.883800][T12683] [U] [ 781.886473][T12683] [U] [ 781.889504][T12683] [U] [ 781.892195][T12683] [U] [ 781.894869][T12683] [U] [ 781.897546][T12683] [U] [ 781.945628][T12683] [U] [ 781.948349][T12683] [U] [ 781.951026][T12683] [U] [ 781.953700][T12683] [U] [ 781.957068][T12683] [U] [ 781.959780][T12683] [U] [ 781.962476][T12683] [U] [ 781.965169][T12683] [U] [ 781.968096][T12683] [U] [ 781.970798][T12683] [U] [ 781.973494][T12683] [U] [ 781.976187][T12683] [U] [ 781.979329][T12683] [U] [ 781.982038][T12683] [U] [ 781.984731][T12683] [U] [ 781.987425][T12683] [U] [ 781.990330][T12683] [U] [ 781.993026][T12683] [U] [ 781.995716][T12683] [U] [ 781.998406][T12683] [U] [ 782.001230][T12683] [U] [ 782.003924][T12683] [U] [ 782.006616][T12683] [U] [ 782.009305][T12683] [U] [ 782.013153][T12683] [U] [ 782.015863][T12683] [U] [ 782.018562][T12683] [U] [ 782.021256][T12683] [U] [ 782.024089][T12683] [U] [ 782.026787][T12683] [U] [ 782.029475][T12683] [U] [ 782.032170][T12683] [U] [ 782.035166][T12683] [U] [ 782.037853][T12683] [U] [ 782.040533][T12683] [U] [ 782.043208][T12683] [U] [ 782.046172][T12683] [U] [ 782.048860][T12683] [U] [ 782.051539][T12683] [U] [ 782.054211][T12683] [U] [ 782.057592][T12683] [U] [ 782.060284][T12683] [U] [ 782.062958][T12683] [U] [ 782.065641][T12683] [U] [ 782.068610][T12683] [U] [ 782.071299][T12683] [U] [ 782.073977][T12683] [U] [ 782.076651][T12683] [U] [ 782.079623][T12683] [U] [ 782.082313][T12683] [U] [ 782.084986][T12683] [U] [ 782.087660][T12683] [U] [ 782.090581][T12683] [U] [ 782.093267][T12683] [U] [ 782.095940][T12683] [U] [ 782.359451][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1642'. [ 782.654009][ T29] audit: type=1326 audit(1732860868.474:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 782.679341][ T29] audit: type=1326 audit(1732860868.474:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 782.973392][ T29] audit: type=1326 audit(1732860868.474:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 783.183596][T12693] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 783.191191][T12693] UDF-fs: Scanning with blocksize 512 failed [ 783.199319][T12693] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 783.206929][T12693] UDF-fs: Scanning with blocksize 1024 failed [ 783.214697][T12693] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 783.222248][T12693] UDF-fs: Scanning with blocksize 2048 failed [ 783.229780][T12693] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 783.237349][T12693] UDF-fs: Scanning with blocksize 4096 failed [ 783.542790][ T29] audit: type=1326 audit(1732860870.064:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.3.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 783.572589][ T29] audit: type=1326 audit(1732860870.064:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.3.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 783.596424][ T29] audit: type=1326 audit(1732860870.064:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.3.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 784.036003][T12702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1646'. [ 784.037678][T12682] [U] [ 787.293635][T12722] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 787.305290][T12722] overlayfs: missing 'lowerdir' [ 790.220760][T12742] FAULT_INJECTION: forcing a failure. [ 790.220760][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.274368][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.1.1654 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 790.284824][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 790.294890][T12742] Call Trace: [ 790.298178][T12742] [ 790.301115][T12742] dump_stack_lvl+0x16c/0x1f0 [ 790.305812][T12742] should_fail_ex+0x497/0x5b0 [ 790.310512][T12742] _copy_from_user+0x2e/0xd0 [ 790.315116][T12742] bpf_prog_get_info_by_fd+0x23d/0x2d30 [ 790.320676][T12742] ? __lock_acquire+0xcc5/0x3c40 [ 790.325639][T12742] ? __pfx_bpf_prog_get_info_by_fd+0x10/0x10 [ 790.331660][T12742] ? __fget_files+0x206/0x3a0 [ 790.336360][T12742] bpf_obj_get_info_by_fd+0x547/0xc80 [ 790.341749][T12742] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 790.347656][T12742] ? __might_fault+0x13b/0x190 [ 790.352435][T12742] ? __pfx_lock_release+0x10/0x10 [ 790.357467][T12742] ? trace_lock_acquire+0x14e/0x1f0 [ 790.362684][T12742] ? lock_acquire+0x2f/0xb0 [ 790.367201][T12742] ? __might_fault+0xe3/0x190 [ 790.371893][T12742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.377804][T12742] ? selinux_bpf+0xee/0x130 [ 790.382328][T12742] __sys_bpf+0x1cc3/0x49c0 [ 790.386760][T12742] ? __pfx_lock_release+0x10/0x10 [ 790.391796][T12742] ? __pfx___sys_bpf+0x10/0x10 [ 790.396570][T12742] ? vfs_write+0x306/0x1150 [ 790.401086][T12742] ? __mutex_unlock_slowpath+0x164/0x690 [ 790.406751][T12742] ? fput+0x67/0x440 [ 790.410665][T12742] ? ksys_write+0x1ba/0x250 [ 790.415177][T12742] ? __pfx_ksys_write+0x10/0x10 [ 790.420041][T12742] __x64_sys_bpf+0x78/0xc0 [ 790.424475][T12742] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.429686][T12742] do_syscall_64+0xcd/0x250 [ 790.434209][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.440119][T12742] RIP: 0033:0x7f4c83d80809 [ 790.444534][T12742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.464134][T12742] RSP: 002b:00007f4c84bb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.472540][T12742] RAX: ffffffffffffffda RBX: 00007f4c83f45fa0 RCX: 00007f4c83d80809 [ 790.480509][T12742] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 000000000000000f [ 790.488480][T12742] RBP: 00007f4c84bb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 790.496452][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.504414][T12742] R13: 0000000000000000 R14: 00007f4c83f45fa0 R15: 00007ffedc000368 [ 790.512390][T12742] [ 790.952108][T12753] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 790.959676][T12753] UDF-fs: Scanning with blocksize 512 failed [ 790.967732][T12753] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 790.975316][T12753] UDF-fs: Scanning with blocksize 1024 failed [ 790.982949][T12753] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 790.990524][T12753] UDF-fs: Scanning with blocksize 2048 failed [ 790.997959][T12753] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 791.005506][T12753] UDF-fs: Scanning with blocksize 4096 failed [ 791.404652][T12757] tipc: Enabling of bearer rejected, already enabled [ 791.840264][ T29] audit: type=1326 audit(1732860877.824:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 791.921238][ T29] audit: type=1326 audit(1732860877.824:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 792.020268][ T29] audit: type=1326 audit(1732860877.824:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 792.130199][ T29] audit: type=1326 audit(1732860877.914:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 792.381787][T12770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1661'. [ 792.495482][ T29] audit: type=1326 audit(1732860877.914:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 792.550685][T12761] efs: device does not support 512 byte blocks [ 792.557089][T12761] device does not support 512 byte blocks [ 792.557089][T12761] [ 792.624313][ T29] audit: type=1326 audit(1732860877.924:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 793.480285][ T29] audit: type=1326 audit(1732860877.924:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 793.529757][ T29] audit: type=1326 audit(1732860877.924:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda9180809 code=0x7ffc0000 [ 793.553422][ T29] audit: type=1400 audit(1732860879.194:2095): avc: denied { override_creds } for pid=12759 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 793.574475][T12782] FAULT_INJECTION: forcing a failure. [ 793.574475][T12782] name failslab, interval 1, probability 0, space 0, times 0 [ 793.589184][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.7.1662 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 793.599616][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 793.609680][T12782] Call Trace: [ 793.612959][T12782] [ 793.615871][T12782] dump_stack_lvl+0x16c/0x1f0 [ 793.620543][T12782] should_fail_ex+0x497/0x5b0 [ 793.625208][T12782] ? fs_reclaim_acquire+0xae/0x150 [ 793.630318][T12782] should_failslab+0xc2/0x120 [ 793.634997][T12782] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 793.640787][T12782] ? __alloc_skb+0x2b1/0x380 [ 793.645359][T12782] __alloc_skb+0x2b1/0x380 [ 793.649755][T12782] ? __pfx___alloc_skb+0x10/0x10 [ 793.654675][T12782] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 793.660646][T12782] netlink_alloc_large_skb+0x69/0x130 [ 793.666004][T12782] netlink_sendmsg+0x689/0xd70 [ 793.670750][T12782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.676037][T12782] ____sys_sendmsg+0xaaf/0xc90 [ 793.680795][T12782] ? copy_msghdr_from_user+0x10b/0x160 [ 793.686245][T12782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.691540][T12782] ___sys_sendmsg+0x135/0x1e0 [ 793.696198][T12782] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.701381][T12782] ? __pfx_lock_release+0x10/0x10 [ 793.706387][T12782] ? trace_lock_acquire+0x14e/0x1f0 [ 793.711574][T12782] ? __fget_files+0x206/0x3a0 [ 793.716233][T12782] __sys_sendmsg+0x16e/0x220 [ 793.720808][T12782] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.725920][T12782] do_syscall_64+0xcd/0x250 [ 793.730417][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.736298][T12782] RIP: 0033:0x7fdda9180809 [ 793.740692][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.760281][T12782] RSP: 002b:00007fddaa000058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.768673][T12782] RAX: ffffffffffffffda RBX: 00007fdda9345fa0 RCX: 00007fdda9180809 [ 793.776623][T12782] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 793.784574][T12782] RBP: 00007fddaa0000a0 R08: 0000000000000000 R09: 0000000000000000 [ 793.792527][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.800479][T12782] R13: 0000000000000000 R14: 00007fdda9345fa0 R15: 00007fffd4ba24a8 [ 793.808435][T12782] [ 796.460246][ T5889] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 796.813592][T12808] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 796.825213][T12808] overlayfs: missing 'lowerdir' [ 797.187546][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 797.201075][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.212016][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.224866][T12803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.231333][ T5889] usb 2-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 797.249452][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.294870][ T5889] usb 2-1: config 0 descriptor?? [ 797.508414][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.517001][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.100523][T12820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 798.108085][T12820] UDF-fs: Scanning with blocksize 512 failed [ 798.115738][T12820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 798.123310][T12820] UDF-fs: Scanning with blocksize 1024 failed [ 798.130375][T12820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 798.137908][T12820] UDF-fs: Scanning with blocksize 2048 failed [ 798.145202][T12820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 798.180245][T12820] UDF-fs: Scanning with blocksize 4096 failed [ 798.204681][ T29] audit: type=1326 audit(1732860884.994:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 798.586878][ T29] audit: type=1326 audit(1732860884.994:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 798.661584][ T29] audit: type=1326 audit(1732860884.994:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 799.598786][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 799.604843][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 799.614784][ T5889] usb 2-1: USB disconnect, device number 38 [ 800.651918][ T29] audit: type=1400 audit(1732860887.444:2099): avc: denied { setattr } for pid=12842 comm="syz.1.1676" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 801.307974][T12853] bridge0: port 3(erspan0) entered blocking state [ 801.315657][T12853] bridge0: port 3(erspan0) entered disabled state [ 801.326297][T12853] erspan0: entered allmulticast mode [ 801.355645][T12853] erspan0: entered promiscuous mode [ 801.366658][T12853] bridge0: port 3(erspan0) entered blocking state [ 801.373168][T12853] bridge0: port 3(erspan0) entered forwarding state [ 802.967506][T12866] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 803.291695][T12873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.408822][T12874] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 803.417123][T12874] UDF-fs: Scanning with blocksize 512 failed [ 803.425567][T12874] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 803.433145][T12874] UDF-fs: Scanning with blocksize 1024 failed [ 803.440735][T12874] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 803.448251][T12874] UDF-fs: Scanning with blocksize 2048 failed [ 803.455615][T12874] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 803.463154][T12874] UDF-fs: Scanning with blocksize 4096 failed [ 803.493677][ T29] audit: type=1326 audit(1732860890.274:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 803.799795][ T29] audit: type=1326 audit(1732860890.284:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 803.870338][ T29] audit: type=1326 audit(1732860890.284:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 804.511060][T12887] FAULT_INJECTION: forcing a failure. [ 804.511060][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.580231][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.5.1686 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 804.590677][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 804.600731][T12887] Call Trace: [ 804.603991][T12887] [ 804.606903][T12887] dump_stack_lvl+0x16c/0x1f0 [ 804.611574][T12887] should_fail_ex+0x497/0x5b0 [ 804.616239][T12887] _copy_from_user+0x2e/0xd0 [ 804.620817][T12887] sctp_getsockopt+0x1696/0x74a0 [ 804.625750][T12887] ? avc_has_perm_noaudit+0x119/0x3a0 [ 804.631126][T12887] ? __pfx_lock_release+0x10/0x10 [ 804.636152][T12887] ? trace_lock_acquire+0x14e/0x1f0 [ 804.641339][T12887] ? __pfx_sctp_getsockopt+0x10/0x10 [ 804.646616][T12887] ? __lock_acquire+0x15a9/0x3c40 [ 804.651635][T12887] ? __pfx___lock_acquire+0x10/0x10 [ 804.656817][T12887] ? hlock_class+0x4e/0x130 [ 804.661305][T12887] ? __lock_acquire+0xcc5/0x3c40 [ 804.666228][T12887] ? find_held_lock+0x2d/0x110 [ 804.670981][T12887] ? __might_fault+0x13b/0x190 [ 804.675729][T12887] ? __pfx_lock_release+0x10/0x10 [ 804.680746][T12887] ? trace_lock_acquire+0x14e/0x1f0 [ 804.685971][T12887] ? lock_acquire+0x2f/0xb0 [ 804.690473][T12887] ? __might_fault+0xe3/0x190 [ 804.695135][T12887] ? __might_fault+0xe3/0x190 [ 804.699804][T12887] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 804.705681][T12887] ? do_sock_getsockopt+0x3fe/0x800 [ 804.710863][T12887] do_sock_getsockopt+0x3fe/0x800 [ 804.715877][T12887] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 804.721426][T12887] ? lock_acquire+0x2f/0xb0 [ 804.725908][T12887] ? __fget_files+0x40/0x3a0 [ 804.730495][T12887] ? __fget_files+0x206/0x3a0 [ 804.735180][T12887] __sys_getsockopt+0x12f/0x260 [ 804.740019][T12887] __x64_sys_getsockopt+0xbd/0x160 [ 804.745125][T12887] ? do_syscall_64+0x91/0x250 [ 804.749813][T12887] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.754997][T12887] do_syscall_64+0xcd/0x250 [ 804.759488][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.765367][T12887] RIP: 0033:0x7f5e89d80809 [ 804.769762][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.789352][T12887] RSP: 002b:00007f5e8ac45058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 804.797756][T12887] RAX: ffffffffffffffda RBX: 00007f5e89f45fa0 RCX: 00007f5e89d80809 [ 804.805712][T12887] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 804.813661][T12887] RBP: 00007f5e8ac450a0 R08: 0000000020000040 R09: 0000000000000000 [ 804.821610][T12887] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 804.829567][T12887] R13: 0000000000000000 R14: 00007f5e89f45fa0 R15: 00007ffde732ec98 [ 804.837530][T12887] [ 806.892031][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 807.311272][T12904] tipc: Enabling of bearer rejected, already enabled [ 808.532157][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.548086][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.189351][T12924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 809.196911][T12924] UDF-fs: Scanning with blocksize 512 failed [ 809.203373][T12924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 809.210912][T12924] UDF-fs: Scanning with blocksize 1024 failed [ 809.217262][T12924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 809.224772][T12924] UDF-fs: Scanning with blocksize 2048 failed [ 809.231138][T12924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 809.238600][T12924] UDF-fs: Scanning with blocksize 4096 failed [ 809.249164][ T29] audit: type=1326 audit(1732860896.034:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.3.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 809.452207][T12928] xt_cgroup: xt_cgroup: no path or classid specified [ 809.682413][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1696'. [ 809.700758][ T29] audit: type=1326 audit(1732860896.034:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.3.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 809.797334][ T29] audit: type=1326 audit(1732860896.034:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.3.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 812.865941][T12957] tipc: Enabling of bearer rejected, already enabled [ 813.391912][T11529] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 813.550412][T11529] usb 9-1: Using ep0 maxpacket: 8 [ 813.557247][T11529] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.588518][T11529] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.618875][T11529] usb 9-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 813.638184][T11529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.697846][T11529] usb 9-1: config 0 descriptor?? [ 813.942524][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.951077][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.377031][T11529] usbhid 9-1:0.0: can't add hid device: -71 [ 815.389838][T11529] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 816.471686][T11529] usb 9-1: USB disconnect, device number 14 [ 816.542558][T12981] FAULT_INJECTION: forcing a failure. [ 816.542558][T12981] name failslab, interval 1, probability 0, space 0, times 0 [ 816.603813][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.3.1709 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 816.614250][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.624302][T12981] Call Trace: [ 816.627581][T12981] [ 816.630509][T12981] dump_stack_lvl+0x16c/0x1f0 [ 816.635186][T12981] should_fail_ex+0x497/0x5b0 [ 816.639860][T12981] ? fs_reclaim_acquire+0xae/0x150 [ 816.644974][T12981] should_failslab+0xc2/0x120 [ 816.649656][T12981] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 816.655468][T12981] ? __alloc_skb+0x2b1/0x380 [ 816.660053][T12981] __alloc_skb+0x2b1/0x380 [ 816.664457][T12981] ? __pfx___alloc_skb+0x10/0x10 [ 816.669386][T12981] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 816.675364][T12981] netlink_alloc_large_skb+0x69/0x130 [ 816.680733][T12981] netlink_sendmsg+0x689/0xd70 [ 816.685486][T12981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.690776][T12981] ____sys_sendmsg+0xaaf/0xc90 [ 816.695535][T12981] ? copy_msghdr_from_user+0x10b/0x160 [ 816.700985][T12981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.706270][T12981] ___sys_sendmsg+0x135/0x1e0 [ 816.710939][T12981] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.716135][T12981] ? __pfx_lock_release+0x10/0x10 [ 816.721235][T12981] ? trace_lock_acquire+0x14e/0x1f0 [ 816.726439][T12981] ? __fget_files+0x206/0x3a0 [ 816.731115][T12981] __sys_sendmsg+0x16e/0x220 [ 816.735698][T12981] ? __pfx___sys_sendmsg+0x10/0x10 [ 816.740812][T12981] do_syscall_64+0xcd/0x250 [ 816.745312][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.751206][T12981] RIP: 0033:0x7f3647380809 [ 816.755608][T12981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.775208][T12981] RSP: 002b:00007f364815c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.783613][T12981] RAX: ffffffffffffffda RBX: 00007f3647545fa0 RCX: 00007f3647380809 [ 816.791573][T12981] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 816.799530][T12981] RBP: 00007f364815c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 816.807487][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.815446][T12981] R13: 0000000000000000 R14: 00007f3647545fa0 R15: 00007ffc3ace77a8 [ 816.823414][T12981] [ 817.335231][T12989] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.343403][T12989] UDF-fs: Scanning with blocksize 512 failed [ 817.350742][T12989] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.358260][T12989] UDF-fs: Scanning with blocksize 1024 failed [ 817.365620][T12989] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.373186][T12989] UDF-fs: Scanning with blocksize 2048 failed [ 817.380287][T12989] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.387822][T12989] UDF-fs: Scanning with blocksize 4096 failed [ 817.421579][ T29] audit: type=1326 audit(1732860904.204:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 817.719542][ T29] audit: type=1326 audit(1732860904.204:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 817.843693][ T29] audit: type=1326 audit(1732860904.214:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f2c1d980809 code=0x7ffc0000 [ 817.867064][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.029583][ T5850] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 819.310371][T13005] random: crng reseeded on system resumption [ 819.553617][T13006] tipc: Enabling of bearer rejected, already enabled [ 819.767096][T13003] could not allocate digest TFM handle sha224-ni [ 821.515872][T11137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 821.527959][T11137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.535842][T11137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.032627][T11137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.060668][T11137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 822.068297][T11137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.096023][T13018] lo speed is unknown, defaulting to 1000 [ 822.113363][ T29] audit: type=1400 audit(1732860908.904:2109): avc: denied { ioctl } for pid=13029 comm="syz.8.1722" path="socket:[37478]" dev="sockfs" ino=37478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 822.309743][T11529] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 822.489121][T13018] chnl_net:caif_netlink_parms(): no params data found [ 822.496495][T11529] usb 6-1: Using ep0 maxpacket: 8 [ 822.503203][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.524613][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.562009][T11529] usb 6-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 822.583035][T11529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.598116][T11529] usb 6-1: config 0 descriptor?? [ 822.685019][T13018] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.692362][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.699525][T13018] bridge_slave_0: entered allmulticast mode [ 822.705792][ T5888] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 822.707258][T13018] bridge_slave_0: entered promiscuous mode [ 822.825461][T13047] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 822.833009][T13047] UDF-fs: Scanning with blocksize 512 failed [ 822.839392][T13047] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 822.846904][T13047] UDF-fs: Scanning with blocksize 1024 failed [ 822.853260][T13047] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 822.860753][T13047] UDF-fs: Scanning with blocksize 2048 failed [ 822.867055][T13047] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 822.876668][T13047] UDF-fs: Scanning with blocksize 4096 failed [ 822.894702][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.911756][ T29] audit: type=1326 audit(1732860909.674:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 823.001259][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.074136][T13018] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.085878][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.212676][ T29] audit: type=1326 audit(1732860909.674:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 823.269115][T13018] bridge_slave_1: entered allmulticast mode [ 823.308355][T13018] bridge_slave_1: entered promiscuous mode [ 823.380769][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 823.410856][ T5888] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 823.427625][ T5888] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 823.446285][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.455538][ T29] audit: type=1326 audit(1732860909.674:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f3647380809 code=0x7ffc0000 [ 823.487739][ T5888] usb 9-1: Product: syz [ 823.493661][ T5888] usb 9-1: Manufacturer: syz [ 823.716516][ T5888] usb 9-1: SerialNumber: syz [ 823.735691][ T5888] usb 9-1: config 0 descriptor?? [ 823.742622][T13040] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 823.746674][T13018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.753447][ T5888] hub 9-1:0.0: bad descriptor, ignoring hub [ 823.765350][ T5888] hub 9-1:0.0: probe with driver hub failed with error -5 [ 824.085442][ T5888] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input14 [ 824.132690][ T5850] Bluetooth: hci2: command tx timeout [ 824.180434][ T5889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 824.235624][T13018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.306616][ T5888] usb 9-1: USB disconnect, device number 15 [ 824.313183][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 824.374405][T13018] team0: Port device team_slave_0 added [ 824.391534][T13018] team0: Port device team_slave_1 added [ 824.400390][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 824.418298][ T5889] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 824.428822][T13018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.442277][ T5889] usb 4-1: config 1 interface 0 has no altsetting 0 [ 824.450309][T13018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.481106][T13018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.492921][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 824.502386][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.511462][ T5889] usb 4-1: Product: syz [ 824.515697][ T5889] usb 4-1: Manufacturer: 迭䣲ɂﺫᄦ페㢘嘡䵴밌맛뷹ថ兵࢖鑺ﹱ꣈鴮涒䌾ㆥ [ 824.530951][T13018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.539076][T13018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.646067][ T5889] usb 4-1: SerialNumber: syz [ 824.651581][T11529] usbhid 6-1:0.0: can't add hid device: -71 [ 824.665979][T11529] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 824.688902][T11529] usb 6-1: USB disconnect, device number 29 [ 824.695999][T13018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.697100][T13057] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 824.851588][T13018] hsr_slave_0: entered promiscuous mode [ 824.877972][T13018] hsr_slave_1: entered promiscuous mode [ 825.673072][T13018] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 825.707236][T13018] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 825.729122][T13018] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 825.752408][T13018] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 825.770342][T11529] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 825.940597][T11529] usb 6-1: Using ep0 maxpacket: 16 [ 825.962111][T11529] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 825.980324][T11529] usb 6-1: config 1 interface 0 has no altsetting 0 [ 826.006899][T11529] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 826.154283][T13018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.166693][T11529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.171383][T13018] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.192968][T11529] usb 6-1: Product: syz [ 826.194860][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.200515][T11529] usb 6-1: Manufacturer: 迭䣲ɂﺫᄦ페㢘嘡䵴밌맛뷹ថ兵࢖鑺ﹱ꣈鴮涒䌾ㆥ [ 826.204225][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.225996][T11529] usb 6-1: SerialNumber: syz [ 826.236420][ T5850] Bluetooth: hci2: command tx timeout [ 826.237875][T13066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 826.262351][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.269412][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.578387][ T5889] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 826.650589][ T5889] usb 4-1: USB disconnect, device number 41 [ 826.703043][ T5889] usblp0: removed [ 828.402367][ T5850] Bluetooth: hci2: command tx timeout [ 828.457839][T11529] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 828.477843][T11529] usb 6-1: USB disconnect, device number 30 [ 828.487170][T13018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.529289][T11529] usblp0: removed [ 830.420391][ T5892] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 830.450813][ T5850] Bluetooth: hci2: command tx timeout [ 830.466916][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1739'. [ 830.487908][T13018] veth0_vlan: entered promiscuous mode [ 830.601801][T13018] veth1_vlan: entered promiscuous mode [ 830.650770][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 830.693841][ T5892] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 830.725680][ T5892] usb 6-1: config 0 has no interface number 0 [ 830.811207][ T5892] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 830.878652][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.975128][ T5892] usb 6-1: Product: syz [ 830.979439][ T5892] usb 6-1: Manufacturer: syz [ 831.010410][ T5892] usb 6-1: SerialNumber: syz [ 831.045284][T13018] veth0_macvtap: entered promiscuous mode [ 831.055987][ T5892] usb 6-1: config 0 descriptor?? [ 831.077432][T13018] veth1_macvtap: entered promiscuous mode [ 831.097146][ T5892] ums-jumpshot 6-1:0.16: USB Mass Storage device detected [ 831.132986][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.177336][ T29] audit: type=1400 audit(1732860917.934:2113): avc: denied { setopt } for pid=13122 comm="syz.7.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 831.198706][ T5892] ums-jumpshot 6-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 831.210293][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.220120][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.240234][ T5892] scsi host1: usb-storage 6-1:0.16 [ 831.258991][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.273064][ T29] audit: type=1400 audit(1732860917.934:2114): avc: denied { bind } for pid=13122 comm="syz.7.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 831.377693][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.398518][ T29] audit: type=1400 audit(1732860917.934:2115): avc: denied { node_bind } for pid=13122 comm="syz.7.1741" saddr=10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 831.423308][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.460419][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.312131][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.333146][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.343852][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.354011][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.446924][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.491632][ T12] scsi 1:0:0:0: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 832.503472][T13018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.516819][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.529754][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.549562][ T12] scsi 1:0:0:1: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 832.578948][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.624718][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.655073][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.686194][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.717261][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.727766][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.737701][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.748242][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.758098][T13018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.768842][T13018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.456571][T13018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.532588][T13018] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.562301][T13018] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.571470][T13018] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.580307][T13018] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.597271][ T5892] usb 6-1: USB disconnect, device number 31 [ 833.622912][ T12] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 833.632972][T12774] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 833.650577][T11281] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 833.660641][ T12] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 833.683447][T12774] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 833.709822][T11281] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 833.730913][T12774] sd 1:0:0:0: [sdb] Sense not available. [ 833.737344][T12774] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 833.748985][T11281] sd 1:0:0:1: [sdc] Sense not available. [ 833.780878][T12774] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 833.795023][T11281] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 833.802649][T12774] sd 1:0:0:0: [sdb] Write Protect is off [ 833.808380][T11281] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 833.909109][T12774] sd 1:0:0:0: [sdb] Asking for cache data failed [ 834.116515][T12774] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 834.136722][T12774] [ 834.139069][T12774] ====================================================== [ 834.146073][T12774] WARNING: possible circular locking dependency detected [ 834.153078][T12774] 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 Not tainted [ 834.159823][T12774] ------------------------------------------------------ [ 834.166827][T12774] kworker/u8:16/12774 is trying to acquire lock: [ 834.173145][T12774] ffff8880296c0918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 834.182727][T12774] [ 834.182727][T12774] but task is already holding lock: [ 834.190075][T12774] ffff8880296c00e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 834.200609][T12774] [ 834.200609][T12774] which lock already depends on the new lock. [ 834.200609][T12774] [ 834.210998][T12774] [ 834.210998][T12774] the existing dependency chain (in reverse order) is: [ 834.219999][T12774] [ 834.219999][T12774] -> #5 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 834.228868][T12774] blk_queue_enter+0x50f/0x640 [ 834.234154][T12774] blk_mq_alloc_request+0x59b/0x950 [ 834.239879][T12774] scsi_execute_cmd+0x1eb/0xf40 [ 834.245253][T12774] read_capacity_10+0x1d4/0x6d0 [ 834.250615][T12774] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 834.256919][T12774] sd_probe+0x904/0x1000 [ 834.261652][T12774] really_probe+0x23e/0xa90 [ 834.266650][T12774] __driver_probe_device+0x1de/0x440 [ 834.272428][T12774] driver_probe_device+0x4c/0x1b0 [ 834.277949][T12774] __device_attach_driver+0x1df/0x310 [ 834.283816][T12774] bus_for_each_drv+0x157/0x1e0 [ 834.289156][T12774] __device_attach_async_helper+0x1d3/0x290 [ 834.295549][T12774] async_run_entry_fn+0x9c/0x530 [ 834.300997][T12774] process_one_work+0x9c5/0x1ba0 [ 834.306435][T12774] worker_thread+0x6c8/0xf00 [ 834.311526][T12774] kthread+0x2c1/0x3a0 [ 834.316099][T12774] ret_from_fork+0x45/0x80 [ 834.321019][T12774] ret_from_fork_asm+0x1a/0x30 [ 834.326289][T12774] [ 834.326289][T12774] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 834.333917][T12774] __mutex_lock+0x19b/0xa60 [ 834.338932][T12774] __nbd_set_size+0x2c0/0x730 [ 834.344111][T12774] nbd_start_device+0x8fd/0xd70 [ 834.349468][T12774] nbd_ioctl+0x21a/0xfd0 [ 834.354213][T12774] blkdev_ioctl+0x276/0x6d0 [ 834.359215][T12774] __x64_sys_ioctl+0x190/0x200 [ 834.364490][T12774] do_syscall_64+0xcd/0x250 [ 834.369500][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.375901][T12774] [ 834.375901][T12774] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 834.384491][T12774] blk_mq_submit_bio+0x1fb6/0x24c0 [ 834.390103][T12774] __submit_bio+0x384/0x540 [ 834.395108][T12774] submit_bio_noacct_nocheck+0x698/0xd70 [ 834.401246][T12774] submit_bio_noacct+0x93a/0x1e20 [ 834.406770][T12774] mpage_readahead+0x41d/0x590 [ 834.412038][T12774] read_pages+0x1a8/0xdc0 [ 834.416876][T12774] page_cache_ra_unbounded+0x3dc/0x750 [ 834.422847][T12774] force_page_cache_ra+0x24b/0x340 [ 834.428468][T12774] page_cache_sync_ra+0x110/0x9c0 [ 834.433991][T12774] filemap_get_pages+0xd7b/0x1be0 [ 834.439530][T12774] filemap_read+0x3ca/0xd70 [ 834.444546][T12774] blkdev_read_iter+0x187/0x480 [ 834.449911][T12774] vfs_read+0x87f/0xbe0 [ 834.454581][T12774] ksys_read+0x12b/0x250 [ 834.459328][T12774] do_syscall_64+0xcd/0x250 [ 834.464343][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.470747][T12774] [ 834.470747][T12774] -> #2 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 834.479252][T12774] down_read+0x9a/0x330 [ 834.483914][T12774] page_cache_ra_unbounded+0x173/0x750 [ 834.489885][T12774] page_cache_ra_order+0x7d9/0xc90 [ 834.495497][T12774] page_cache_async_ra+0x5cb/0x820 [ 834.501110][T12774] filemap_fault+0xd69/0x2820 [ 834.506300][T12774] __do_fault+0x10a/0x490 [ 834.511144][T12774] do_pte_missing+0xec2/0x3e70 [ 834.516413][T12774] __handle_mm_fault+0x103c/0x2a40 [ 834.522029][T12774] handle_mm_fault+0x3fa/0xaa0 [ 834.527299][T12774] __get_user_pages+0x8d9/0x3b50 [ 834.532740][T12774] get_user_pages_unlocked+0x1c2/0x780 [ 834.538705][T12774] hva_to_pfn+0x8be/0xc20 [ 834.543547][T12774] kvm_follow_pfn+0x29f/0x3f0 [ 834.548742][T12774] __kvm_faultin_pfn+0x11c/0x1a0 [ 834.554188][T12774] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 834.559896][T12774] kvm_tdp_page_fault+0x182/0x3d0 [ 834.565435][T12774] kvm_mmu_do_page_fault+0x58d/0x690 [ 834.571236][T12774] kvm_mmu_page_fault+0x20f/0x1bb0 [ 834.576865][T12774] handle_ept_violation+0x25a/0x640 [ 834.582573][T12774] vmx_handle_exit+0x733/0x1f70 [ 834.587935][T12774] vcpu_run+0x3047/0x4f50 [ 834.592776][T12774] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 834.598837][T12774] kvm_vcpu_ioctl+0x6ce/0x1520 [ 834.604105][T12774] __x64_sys_ioctl+0x190/0x200 [ 834.609382][T12774] do_syscall_64+0xcd/0x250 [ 834.614395][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.620797][T12774] [ 834.620797][T12774] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 834.628340][T12774] __might_fault+0x11b/0x190 [ 834.633445][T12774] _copy_from_user+0x29/0xd0 [ 834.638553][T12774] __blk_trace_setup+0xa8/0x180 [ 834.643918][T12774] blk_trace_setup+0x47/0x70 [ 834.649018][T12774] sg_ioctl+0x65e/0x2750 [ 834.653775][T12774] __x64_sys_ioctl+0x190/0x200 [ 834.659054][T12774] do_syscall_64+0xcd/0x250 [ 834.664067][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.670474][T12774] [ 834.670474][T12774] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 834.678277][T12774] __lock_acquire+0x249e/0x3c40 [ 834.683635][T12774] lock_acquire.part.0+0x11b/0x380 [ 834.689249][T12774] __mutex_lock+0x19b/0xa60 [ 834.694263][T12774] blk_mq_init_sched+0x42b/0x640 [ 834.699711][T12774] elevator_init_mq+0x2cd/0x420 [ 834.705065][T12774] add_disk_fwnode+0x113/0x1300 [ 834.710421][T12774] sd_probe+0xa86/0x1000 [ 834.715182][T12774] really_probe+0x23e/0xa90 [ 834.720190][T12774] __driver_probe_device+0x1de/0x440 [ 834.725979][T12774] driver_probe_device+0x4c/0x1b0 [ 834.731508][T12774] __device_attach_driver+0x1df/0x310 [ 834.737387][T12774] bus_for_each_drv+0x157/0x1e0 [ 834.742742][T12774] __device_attach_async_helper+0x1d3/0x290 [ 834.749142][T12774] async_run_entry_fn+0x9c/0x530 [ 834.754591][T12774] process_one_work+0x9c5/0x1ba0 [ 834.760032][T12774] worker_thread+0x6c8/0xf00 [ 834.765128][T12774] kthread+0x2c1/0x3a0 [ 834.769704][T12774] ret_from_fork+0x45/0x80 [ 834.774623][T12774] ret_from_fork_asm+0x1a/0x30 [ 834.779896][T12774] [ 834.779896][T12774] other info that might help us debug this: [ 834.779896][T12774] [ 834.790101][T12774] Chain exists of: [ 834.790101][T12774] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 834.790101][T12774] [ 834.804517][T12774] Possible unsafe locking scenario: [ 834.804517][T12774] [ 834.811944][T12774] CPU0 CPU1 [ 834.817285][T12774] ---- ---- [ 834.822638][T12774] lock(&q->q_usage_counter(queue)#53); [ 834.828271][T12774] lock(&q->limits_lock); [ 834.835185][T12774] lock(&q->q_usage_counter(queue)#53); [ 834.843322][T12774] lock(&q->debugfs_mutex); [ 834.847890][T12774] [ 834.847890][T12774] *** DEADLOCK *** [ 834.847890][T12774] [ 834.856009][T12774] 4 locks held by kworker/u8:16/12774: [ 834.861444][T12774] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 834.871785][T12774] #1: ffffc90004737d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 834.882992][T12774] #2: ffff88802179c378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 834.893334][T12774] #3: ffff8880296c00e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 834.904283][T12774] [ 834.904283][T12774] stack backtrace: [ 834.910151][T12774] CPU: 1 UID: 0 PID: 12774 Comm: kworker/u8:16 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 834.920801][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 834.930843][T12774] Workqueue: async async_run_entry_fn [ 834.936205][T12774] Call Trace: [ 834.939465][T12774] [ 834.942379][T12774] dump_stack_lvl+0x116/0x1f0 [ 834.947048][T12774] print_circular_bug+0x419/0x5d0 [ 834.952058][T12774] check_noncircular+0x31a/0x400 [ 834.956984][T12774] ? __pfx_check_noncircular+0x10/0x10 [ 834.962425][T12774] ? psi_task_switch+0x54b/0x8e0 [ 834.967352][T12774] ? lockdep_lock+0xc6/0x200 [ 834.971929][T12774] ? __pfx_lockdep_lock+0x10/0x10 [ 834.976940][T12774] __lock_acquire+0x249e/0x3c40 [ 834.981777][T12774] ? __pfx___lock_acquire+0x10/0x10 [ 834.986959][T12774] ? hlock_class+0x4e/0x130 [ 834.991449][T12774] lock_acquire.part.0+0x11b/0x380 [ 834.996542][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.001642][T12774] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 835.007260][T12774] ? rcu_is_watching+0x12/0xc0 [ 835.012010][T12774] ? trace_lock_acquire+0x14e/0x1f0 [ 835.017195][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.022296][T12774] ? lock_acquire+0x2f/0xb0 [ 835.026783][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.031884][T12774] __mutex_lock+0x19b/0xa60 [ 835.036376][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.041476][T12774] ? mark_held_locks+0x9f/0xe0 [ 835.046222][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.051319][T12774] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.056507][T12774] ? __pfx___mutex_lock+0x10/0x10 [ 835.061523][T12774] ? blk_queue_flag_set+0x29/0x40 [ 835.066536][T12774] ? blk_mq_init_sched+0x42b/0x640 [ 835.071634][T12774] blk_mq_init_sched+0x42b/0x640 [ 835.076561][T12774] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 835.082009][T12774] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 835.088062][T12774] ? lock_acquire+0x2f/0xb0 [ 835.092548][T12774] ? add_disk_fwnode+0x113/0x1300 [ 835.097557][T12774] elevator_init_mq+0x2cd/0x420 [ 835.102391][T12774] ? add_disk_fwnode+0x113/0x1300 [ 835.107397][T12774] add_disk_fwnode+0x113/0x1300 [ 835.112231][T12774] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.117415][T12774] sd_probe+0xa86/0x1000 [ 835.121638][T12774] ? __pfx_sd_probe+0x10/0x10 [ 835.126296][T12774] really_probe+0x23e/0xa90 [ 835.130788][T12774] __driver_probe_device+0x1de/0x440 [ 835.136071][T12774] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 835.141865][T12774] driver_probe_device+0x4c/0x1b0 [ 835.146881][T12774] __device_attach_driver+0x1df/0x310 [ 835.152243][T12774] ? __pfx___device_attach_driver+0x10/0x10 [ 835.158122][T12774] bus_for_each_drv+0x157/0x1e0 [ 835.162960][T12774] ? __pfx_bus_for_each_drv+0x10/0x10 [ 835.168317][T12774] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.173504][T12774] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 835.179296][T12774] ? __pfx___device_attach_async_helper+0x10/0x10 [ 835.185698][T12774] __device_attach_async_helper+0x1d3/0x290 [ 835.191583][T12774] ? __pfx___device_attach_async_helper+0x10/0x10 [ 835.197981][T12774] ? ktime_get+0x206/0x300 [ 835.202379][T12774] ? read_tsc+0x9/0x20 [ 835.206435][T12774] ? ktime_get+0x1ac/0x300 [ 835.210832][T12774] async_run_entry_fn+0x9c/0x530 [ 835.215756][T12774] process_one_work+0x9c5/0x1ba0 [ 835.220686][T12774] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 835.226304][T12774] ? __pfx_process_one_work+0x10/0x10 [ 835.231655][T12774] ? rcu_is_watching+0x12/0xc0 [ 835.236406][T12774] ? assign_work+0x1a0/0x250 [ 835.240978][T12774] worker_thread+0x6c8/0xf00 [ 835.245551][T12774] ? __kthread_parkme+0x148/0x220 [ 835.250649][T12774] ? __pfx_worker_thread+0x10/0x10 [ 835.255741][T12774] kthread+0x2c1/0x3a0 [ 835.259805][T12774] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.264994][T12774] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 835.269571][T12774] ret_from_fork+0x45/0x80 [ 835.273972][T12774] ? __pfx_kthread+0x10/0x10 [ 835.278547][T12774] ret_from_fork_asm+0x1a/0x30 [ 835.283303][T12774] [ 835.309683][T11281] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 835.350208][ T29] audit: type=1400 audit(1732860922.094:2116): avc: denied { write } for pid=5823 comm="syz-executor" path="pipe:[4626]" dev="pipefs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 835.715056][T11281] sd 1:0:0:1: [sdc] Asking for cache data failed [ 835.876733][T11281] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 836.491374][T11281] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 836.564522][T12774] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 836.575660][ T9941] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 837.107886][T12656] udevd[12656]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 837.114812][ T9941] udevd[9941]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 837.234218][T10866] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.236139][T12656] udevd[12656]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 837.303835][T10866] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.365149][T10866] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.423999][T10866] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.524781][T10866] bridge_slave_1: left allmulticast mode [ 837.530961][T10866] bridge_slave_1: left promiscuous mode [ 837.536556][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.544705][T10866] bridge_slave_0: left allmulticast mode [ 837.550997][T10866] bridge_slave_0: left promiscuous mode [ 837.556576][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.625458][T10866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.635906][T10866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.645181][T10866] bond0 (unregistering): Released all slaves [ 837.701747][T10866] tipc: Disabling bearer [ 837.707031][T10866] tipc: Left network mode [ 837.814784][T10866] hsr_slave_0: left promiscuous mode [ 837.822232][T10866] hsr_slave_1: left promiscuous mode [ 837.828234][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.835735][T10866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.844645][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.852096][T10866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.862197][T10866] veth1_macvtap: left promiscuous mode [ 837.867667][T10866] veth0_macvtap: left promiscuous mode [ 837.873420][T10866] veth1_vlan: left promiscuous mode [ 837.878645][T10866] veth0_vlan: left promiscuous mode [ 837.982314][T10866] team0 (unregistering): Port device team_slave_1 removed [ 838.004321][T10866] team0 (unregistering): Port device team_slave_0 removed [ 838.343623][T10866] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.403736][T10866] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.452722][T10866] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.513895][T10866] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.589196][T10866] bridge_slave_1: left allmulticast mode [ 838.595896][T10866] bridge_slave_1: left promiscuous mode [ 838.601550][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.609396][T10866] bridge_slave_0: left allmulticast mode [ 838.616374][T10866] bridge_slave_0: left promiscuous mode [ 838.623119][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.704710][T10866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.714261][T10866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.724436][T10866] bond0 (unregistering): Released all slaves [ 838.812874][T10866] hsr_slave_0: left promiscuous mode [ 838.818484][T10866] hsr_slave_1: left promiscuous mode [ 838.824433][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.832043][T10866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.839479][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.847516][T10866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.856014][T10866] veth1_macvtap: left promiscuous mode [ 838.861572][T10866] veth0_macvtap: left promiscuous mode [ 838.867062][T10866] veth1_vlan: left promiscuous mode [ 838.872344][T10866] veth0_vlan: left promiscuous mode [ 838.954498][T10866] team0 (unregistering): Port device team_slave_1 removed [ 838.976445][T10866] team0 (unregistering): Port device team_slave_0 removed