last executing test programs: 25m39.997628476s ago: executing program 3 (id=2765): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x0, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 25m39.820557227s ago: executing program 0 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040), 0x6) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 25m38.523311374s ago: executing program 3 (id=2767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0xb, 0x1002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 25m38.288881099s ago: executing program 0 (id=2769): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) r6 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 25m36.86560456s ago: executing program 0 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040), 0x6) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 25m36.708245688s ago: executing program 4 (id=2775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xbf, 0xffffffffffffffff) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 25m36.235186049s ago: executing program 4 (id=2776): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fc, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) 25m35.595845536s ago: executing program 32 (id=2740): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000380)={0x6e, 0x7d, 0x1, {0x0, 0x67, 0x9, 0x4, {0x4, 0x2, 0x4}, 0xd0ad0000, 0x1000, 0x0, 0x0, 0x18, '![}!/.}H.-/\\--&%%[.:\\/&@', 0x3, '-:)', 0xa, '/dev/ptp0\x00', 0xf, '/dev/cpu/#/msr\x00'}}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000200)={'\x00', 0xd, 0x2, 0xf8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 25m35.527904449s ago: executing program 4 (id=2779): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 25m34.651217486s ago: executing program 4 (id=2781): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 25m33.585516699s ago: executing program 2 (id=2783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 25m33.5841187s ago: executing program 4 (id=2784): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x6000c0c1) 25m32.202960839s ago: executing program 2 (id=2785): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 25m32.15085226s ago: executing program 4 (id=2786): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x203000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x28280300, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3d737461d512bddfcba623f8faec4a9d7469633a00"]) msgsnd(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000000c0)={0x2, 0x5, 0x76, &(0x7f0000000280)=""/118}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000002000/0x3000)=nil, &(0x7f0000004000/0x400000)=nil, 0x7fffffff, &(0x7f0000000000)=[{0x9e4, 0xbfd7, 0x8}, {0x2, 0x8, 0xac48}, {0xc, 0x4, 0x5}, {0x9, 0x3, 0x1}, {0x2, 0x7ff, 0x4}, {0x44, 0xe, 0x101}], 0x6, 0x1000, 0xe, 0x64, 0x0, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@secondary) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}) 25m31.738684496s ago: executing program 3 (id=2787): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) r8 = dup(r0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 25m31.712998452s ago: executing program 2 (id=2788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040), 0x6) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 25m27.820430392s ago: executing program 3 (id=2789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040), 0x6) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 25m25.96480537s ago: executing program 2 (id=2790): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) r8 = dup(r0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 25m22.740129228s ago: executing program 3 (id=2791): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* rr'], 0xa) 25m22.735085852s ago: executing program 0 (id=2792): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 25m22.097526358s ago: executing program 3 (id=2793): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r2], 0x50}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 25m22.091258099s ago: executing program 0 (id=2794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) pipe2$9p(0x0, 0x0) setitimer(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 25m21.794956195s ago: executing program 2 (id=2795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4018aee3, &(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00']) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x3ffe, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408000000000000000200000020000000000000000000000903000000000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 25m19.952883357s ago: executing program 2 (id=2796): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) 25m19.849067845s ago: executing program 0 (id=2797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fc, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x77259066ac3910ad) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 24m59.869368687s ago: executing program 33 (id=2786): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x203000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x28280300, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3d737461d512bddfcba623f8faec4a9d7469633a00"]) msgsnd(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0300000000000000ccc038e6c1811bb93fb0fff199a17ff1d35bea8fa76c6fb3427a59f08c72c3d8cca2e18a4322791fd8b85da1b744a3b55718a0995c42fd13e67a6bf56d90dd0b93965cfd2bf2a9f519a4976f97bffd5620c77df50c8e16f43c130be1d141e8669e0c5fec20b09de2820969f0c1c8fd56a287183a431cbe0f236e2ab0b31298f44fe6a4f3b00a423134db5401084cf825e1712beb998c2766ff4e94f62daea89091093343b684154185d8751a8b0408b7b3b67a7ca64f0b17f0d11d60c8d6160948f09a7c39ae17e580edbe71ac500bf1585ae80eecd86c334e551756ad8a1a6588e9ed315a3cd88380effc5751ed448dda7ffd426a7fcbe488f57fc900e5c50cbaf36df64e943a9b2d17643b8bce34f730d06bc3c6603ccf13d4053a9127058433514b081f6d7e7b2dd20d653f3ac64f8da442b0f8e3e69791400ab667153ac6279663070aad353e5fb0b1d5006f41d78dc2d9646420cef9e55080112538004eb10975677cab1d56bfaeed2ee9680cd8edc9be87b14cf5014c46ec33b6e279e7d16132d396648f2fce87e42b072bab826351605885e05542c787d65c9e1bf66a31e3c796fdf4f48a7b05b5f66be510f7cdd8a35ee84219f3c9f338205c2588ac6e91df1a38896a8dddb2a4f9f665e94c94f7b01dbe1ed7063dd2b565c0f63e6029faa1b5074b49f26b68685a4a6268292a01c7989f9b790a538f18fd1f14d30554161f540aeebb1767e3cc68de35d3e024b4d07a382a42bd81d5d3278947fe13244fcd087f6ebab0f9ae22cf090480279b8bc5b112994a54625add85b947e96dfe42e4ea3834350efa5e3548c9b5240a11484cf84ce175483c8bd78fb47c050e97c6a89ae67fda0da9e54219b3a52ad4a99b991cd4eb5e5fd0199f79a1ac40d97bce5402a92a6bcdb9a9e7a3775a97d1ff71fb8f15937775a9397d51bbe5363f18c04f8c4a2ed56fe75ef76d1b9c721631aed9d42513e9319e87e78738544bae042cc4c40e86249cfc32e4fae85a7b2b3486cc2337f6998efc0762570c8e59383339eb6127014f0ce192d4beb2b81b20d155e53b412fb24941005e9609f2f2fa335e457e1db4ddffe2c9aaa30227cb87bccf92c6a41505ace98544953ff43f1bd0be3109284f0fc3aa3f4680779439576d0c5eb9e0eca109061004cf592369091188bd1fedea1dcb435eb12e72fed5c4ecfb854e690319be047928352d8fc1dffd7f3e9b8d877da260a05b93e6b9baaf53cc896efb234feee1af20d341b8295d25f4a4b88a52668c32de7edfb368fccd7dbe7e4de590c2fd0dc45f4fb9b221bf676379053d4ad1d6265b0f7dc1fdbcc402f124b3ad1828bbc067701da51bea2320a716557f4269a8df8bb6d0ef452d3878c3b47610048771e2e8659bdd62414c8d67596288c7266816e1326a83b711bd89949270417c441694b7ee72d9a8234d0399ebe33036ba2e4ef6f7ca7b19eac0d2d6bd2dc037a8a6f21be906c98ad43a199be9cb500ea3e25e8d7f3afa2841d41381dcef2700554d9560a50676b5f463510fc166052ade0d716e6b4f32c14d940ad8215cbb67f5715a5c5bd14346042ada0c4f8f3d251b81a2d1e2066b016fe694cef976c5cf44fe7733c850aa5bfd9886ab0b08ddb5d3499c047e29d7c2e0c5e9eaa6b651d4a6c9e60f6338279dd5fa1062a8b6811b9fbc5c430d2904debc3307b45bc6e7b2930e62fdeac4fac60b548aaa8c0b338825d2a0028123c2cff093beb9c3ea40dea23ac17f04577d2f1fa907ccc55ea17bd2411aca8cddf6753340be88f66ff6ff3cd0a29332ee4fb9f7297dd820dc9f16eb2b758c25090f4bbf55fcdd6e11f6196758b6367d2f1fc7c8eeed969accb3e5d4a4d9d715d26045b609c1e5bf21c1e99d9fe9c1e58bc95461740efee204f1770c37df6a1e57bf92d6c6b8374b0295b8731f0dd004744225bb80f250573f119866d83b04005df80fcdc0f96dd2f3a542d10407e66621fbab1d40a5c5d721c6d493ee3ebeb43fe5e4b26aa4e465ecf57fbeda5aa1d3d84d41cbf14da60a93a16f9fea27983dd637fd61c2f596b111ba9bdaa33584793bb8c6bdbab3454fe84d6555f3af296047ae6efde9581419872e83760781c1d6c2dcec2d158863714d3da76ad519405fb8bf7afd9c678619abee6378e0057a19468f18349ba3388d33bac8d6632bb111f3eb0c7ef91ba28ccef5c7d2ab93e5a9ca25f96ee0fc1232ed5460c247e36c076c744c0040b1a10daad03b56b78d3e73f335a29243701b4747e8e752b3801c2c6843da12ea08a06f2380358ea1efcdddf700e2dfda60a41a7b394fe7c215059a808e2ce58e57af7e1776b93e59f3240bc9e8cd49e65ce2382202482530918621614a3c8030c281b5ff211b21294ee3c52af5da48047a654a6b17d38c2f49c5f006999bd5d6ca6f02c5fb96e0f9478369811c3c273bce4525ee36d51d7c74188be53c28ac5288acbc14b89164cd27777a0ba2ab068395641df63d02cc120c00ebad84bcb116002e19c322e47051e47c79865595740eff0f3d9bc68e1fd42313a31e254c4b3c4ffffe75e64dd6396115760bbaf66108a3a7adc0561b9a73ae14096b9a158c2d99c0fd73ccf69b83c7e8c4859c94f6070c77ffae26a27c70811a1c696869e251cb678a3e4725b8f446b30b7b223a038fc3297d0e3a6c61032d14d6ec43c038dbb7ceb61194a0a89df89235ba47561bd224f17b32fc4a5e173109f76c0f9fd60bcb1c04fa0c9fe80ff17612eab6abb08e2fa485a7762e5300936c3a84bccba1003cc568e0238bf39a004d3a322b551bc72621ae135d616e1bfe47e16290e9fc20a9a139cb3008d92463db3a86905a68511760ce82e94c7fa28bdbb65fef5516aa68fa511275fbdc26b4e0d838ef50aeffbc0ac2ba32c1cf98e92252b084b6576aa4b021f737a13255599c4e5ce4e307ff829fe84bda3b418562c15c2479b7e0b91dbd2fdc43cd231c3484d7e557c72b15900b0d3b1b37cbb4c426a084ff99305d8d2622ee129f8382eb9b60ab829c048689599b45061e88e3a657a7f688a0331e3250f872d60c18f4e9d6dffce5b1a034eeeabc0a7256e88b0a00ffaa074797cd73319c4c6d5202eb56a4fc2c0ea1e247261363ece15e53692c1ede55c5c896b92f9ec806dc04cf42ce70643b679ca501a55740a22f0a4d099f9bcec95f10e37277a43825cd9cbb62400911c930d9d05903e1c43b1356386bab843c84c2108b2bd2cc5ff09e0b75ce855105ac3937599010b26668e5022b25eca4e672d3c426786ebfd0bd5113bb161b53a36fecabf226afca9f57cc541da76ee5818b84913590ab3eb4a1dc3f0868fddcccffcf7f3b751e3ab36cde0fdf2f1c1f325ca108dd2b43aace2f208b88b0313dadf51973a8306ccbc1e97d3174a6958fb986f8cdd9548587cf8192dc57eaf81c6262ede9a9d7c6df104e8e717fc609f3427a1272df39f4ec5d89010edaaf74ce859b3efd4fa44473e0c2efeac38306720e6595f0f2aeaeb151ab1299529a1c3799018fc9575ae3acad02723e08fd57a55ca7fb9f785cd05b68d542d8a8469bd455151f7ae30864f3d635702bb4ec6c3875206907e49b7507dbd0dbfc652ae1bd6ef22f739fbacf5873d51ff10c083bc0d6c277da389556799389f3d99c2b7327d612c7ef8c4d9a1dd22d1fc02fb95efdb63359e9cc9bc7e895cf60a6788082a86b12e6ede24cf07ac19ded5ce19443b43cbb54e629a3706f4c2967bb36940ff55821ac4f089a36056501f1f02472d284ee31ac70dd4ce18ec2f98aaf87ce43e4ec9e6900cc5bf46dd2aabcd362baab5540db19cda3c694f5bc541bb18db34be0d899413d877044022878c0ccc29fd5145284346f5addca6662f262726daf1f671e90029a767b084af657c99b7df8f1c42e22a1c3e789aadb1f840f8b32f2d336a142599bd467468d66db2c2b64b3469a7e5c5db748573a003f448872170a90696483c14c4e0bafd9f4bd2e2f659148c01233bac62dce59985e50daee34da799ffb3e5e1cdcdeec961bc39441e23cc641f03523ab6203f1d342a0c9da236fc26fc7e60d2943cf7d8c24a92698112304be2c2e237118b5194f6b5fa8622a67e5496075f3ae763a56d6d8322c93e02338f6672be5d3c8765906c3b714ac0640c676f3dbdd9f978d1780e58f4da756f5b3c570702f9e90789aa80eafe9c53c5f977855105b5543c20148619b64fbe0aad27d3c7aa21f69cb1a13324804497df3dd820a6cf8dd9fc7a88c50df24d618033fd9ed165edbeffc03d8cb89342085761554261b0c4b9aae69bb2aadf58e523be616b1b3b439d4c853a41667e906dad881cc36bc59ad5b8cca1ac32e2f4bf61e7d9fcefa74b4fbfdbc0084065781c982c9e2c1a2fc1220117b079ad18ee3ec8b7fd647f6ddd779ac39556c5d9b3d887d111c5710b006b3c6f6c808b2cc7ec68fa7388f30edf2c4b8d7595cffa58bc3f3e073b15ca2c32be80e8d258a51b56b6528bb0cd7502b43cdb3e960cc0bc8bf544a0e082f1b712062932c34e2774366653d7da94cc5a93b5f76ac504536c528d99d1ed7565e12eb80f35c45fb0bcb598014d334aaf685f8b4314d72c9569a8ff09f2a9ee9caaabaa0d18014233829bc5077cbb4b7ddd62980556b85da8eaba45ce82b7757162b37e36ad682885c96db30cb553040e9b0122fa3260f465e83429d1bbeb0f3f13ba919cb7c1dd734aca5afedd4516b2bb48a25f32d0d26a19cfb15859b2fd095eb300447b2584da1d47abb46f7056365e49ccbed9a8ba95dc1d6c0c22118a192b23ec039a0309888fff0cf189079b4c7f85deec7360d9024e48857f90cbb517c3cfd7492cc168b2e0b1d0bb3f3a76c22d09185806cde0079858fe40523f96bf42c093064ceacf50ded0586953a442bdb7d751236d6ccfebc9ab329d40464b7750879b8eb9a5576de47e92d98ca4dfbc877c805d05ebcee5e35323fca744927586dbf4f8b0a809e5c37bdc8e6075684bc922113a7943728d03f6983c66ba79156746340013bfad382e5a15721589ca7f5a7a4d18b78856c4d99f673a821658b952d72137705c173423f2e151a583952125a07c42cfdc52120b19f8232f8404948cb7b33b2430c31fcba9f3aee72b28eab84e733dc133b8c6e264b8f106d1311af0092058717488138affdbcd673d5ccda667b92654f071a9f63d8729b4f4dd262228428088b653cdc1b0205f6c7063006773ab97416d26e0cf78de6ee7595a47e43e10d8c1b3e6ce465110fba4d1ad7426ed94385d02c4732956b17a2ec4af4328f446cda3e89987c822a5a61643451a93ac151114799fb02a13bc9a04926efbef360d692f6e90da3c99b5afbd64c99539c3a7238ecd68b671b8b08d6ef3772f6dcf5b53fdb76ae6c37a5a60070b76d3b92d3d9ed51813198aabe3f76f9affabae128972dd1749137a7190a47dccb5c118ee1a461e9ce180ed130cd40b94203fdccfad8444020fe4add01174ee6af1e1f724cd19e381d9bdda116876566c9c9b9e368510a5f9b98234a5716e540adfcc1c12f362c975da7057a4c197b8667c6088480460e82263cc64412c547ecba7986ed48785516b106d9d73087a125989c1b367b826ccd63744386b3d4ddf3d9fb881a0fcea818c59b2eba25d431d2eead8a812f12e4b668b547236484a71ba111ec907d0ba2e8cfae7c05da"], 0xfd1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000000c0)={0x2, 0x5, 0x76, &(0x7f0000000280)=""/118}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000002000/0x3000)=nil, &(0x7f0000004000/0x400000)=nil, 0x7fffffff, &(0x7f0000000000)=[{0x9e4, 0xbfd7, 0x8}, {0x2, 0x8, 0xac48}, {0xc, 0x4, 0x5}, {0x9, 0x3, 0x1}, {0x2, 0x7ff, 0x4}, {0x44, 0xe, 0x101}], 0x6, 0x1000, 0xe, 0x64, 0x0, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@secondary) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}) 24m51.243263494s ago: executing program 34 (id=2797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fc, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x77259066ac3910ad) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 24m51.089730185s ago: executing program 35 (id=2796): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) 24m50.927261775s ago: executing program 36 (id=2793): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r2], 0x50}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 19m35.040168257s ago: executing program 5 (id=2891): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$igmp(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x18, 0x0, &(0x7f0000000040)="0990ddc84839db92", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r7 = fanotify_init(0x0, 0x400) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r7, 0x1, 0x40001019, r6, 0x0) read$FUSE(r6, &(0x7f0000003fc0)={0x2020}, 0x1d34) 19m30.970462365s ago: executing program 5 (id=2903): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x14ba80, 0x80) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x40302) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "000000b000", "a8708da2b9b6f1000bb381a26486d7f542e0e3badcb2845d78ba9e7d94ce966e", '\x00', "4277e3835ec926bf"}, 0x38) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 19m24.787468648s ago: executing program 5 (id=2918): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) 19m23.287168642s ago: executing program 5 (id=2922): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1003b6, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m22.55940648s ago: executing program 5 (id=2925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) creat(0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 19m18.573694627s ago: executing program 5 (id=2930): gettid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493cc2f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x50) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) io_setup(0x8, &(0x7f0000002740)=0x0) io_destroy(r5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) 19m2.003347645s ago: executing program 37 (id=2930): gettid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493cc2f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x50) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) io_setup(0x8, &(0x7f0000002740)=0x0) io_destroy(r5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) 2m52.82783154s ago: executing program 6 (id=5737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m52.093897968s ago: executing program 6 (id=5741): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) tee(r2, r0, 0x3, 0x6) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="b4000000420000002abd7000ffdbdf25b88fbb64e8fa2ee94f681df322d3bb082bf270a16beb703473f12c5aba9269a0cf983640b2ca22172d7529df32303336131a8506d8ed8eb18f758d06b58c10139b87110ddd095918bf3a0f282905d867c72b1a41013d456e5708c0a7908fc42fa9a6623085879c0fb1dad724214ad92875b5811460a108002500", @ANYRES32=0x0, @ANYBLOB="080004f010a300ba35a07f52444c1cc9fafefb02cf3fe48b675d8a0cc9550688ce01fcf0000000", @ANYRES32=0x0, @ANYBLOB="14006a00fc01000000000000000000000000000008005600", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0xb4}, {&(0x7f00000007c0)={0xa0, 0x41, 0x422, 0x70bd2c, 0x25dfdbfb, "", [@generic="e7477fc1a27180ba1efbffd95bd1d0afef5130b7c4afb4f428b47d36ed67441210846eaffefd29cb7d43afc45dbcfbaf7264265edaac90ceba0376dd980d08d147770eee9150491306b1cd72e23f763558bd8c287e098c8cfd893929c189afffa5f9aae7c2a2ccd883426c81bb16c1c2d500083a15f39dd5256bbd8d5deeef0414e7d7bff995c9acbeb08fabac3e"]}, 0xa0}, {&(0x7f0000000880)={0xf4, 0x3d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0xe1, 0x6c, 0x0, 0x1, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@empty}, @generic="baa6dab4f3e43cc5db5cfe0172267504c00390cf4507406e2407af0560f88a2e748b8b92ace2ba0e4ebf7c9c7b52c78b15820e7373ffb6c101eed4f5cb23ac0d29be125bc0f44ca81c941a77d026d10501208b0821af8915a16e6aa90e5527a44b1f0fa83bc3a28b6e862f84d28833e122975ff4b1dafeba3cd6fb02bbc627186029ee988018d1770c4d965f934c83429130cb9d02a20fc8708092002d7886829eead11fc8dfea10c17a7ab4c025beeceb13211238c79e1377e7f349e55d0d0021", @nested={0x4, 0x118}, @nested={0x4, 0x907}]}]}, 0xf4}, {0x0}, {&(0x7f0000000b80)={0x14, 0x33, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0x4, 0x2b}]}, 0x14}, {0x0, 0x508}], 0x6}, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000340)=""/13) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = accept4$alg(r1, 0x0, 0x0, 0x800) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000980)=""/244, &(0x7f0000000380)=0xf4) ioperm(0x0, 0x9, 0x1f) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0x5, 0x8, 0x0, 0x3, 0x6, 0xad, 0x0, 0x40, 0x3, 0x9, 0xfd, 0x0, 0x5, 0x7, 0x88, 0x7, 0x13, 0x35, '\x00', 0x8, 0x6}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x4, 0x0, [{0x4, 0x85, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x0, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x0, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0xb7}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x5, '\x00', 0x5}, {0x80, 0x33, 0x8, '\x00', 0x9}, {0x99, 0x0, 0x2, '\x00', 0x1}, {0xbe, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x9, 0x8, 0x0, '\x00', 0x2}, {0x1, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0xa5}, {0xaf, 0x7, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x5, '\x00', 0x7f}, {0x1, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/file0', [{}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x184) ioctl$BLKRRPART(r1, 0x125f, 0x0) gettid() 2m49.015810163s ago: executing program 6 (id=5750): syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0xd0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x5}, {0x52, 0xc, 0x7, 0x3, 0x4, 0x1}}}}, 0xf) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$NS_GET_OWNER_UID(r5, 0x5421, &(0x7f0000000040)) 2m47.74245132s ago: executing program 6 (id=5753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2m46.60479448s ago: executing program 6 (id=5759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0x28, r1, 0x111, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2m46.244278514s ago: executing program 6 (id=5762): socket(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2m26.836270174s ago: executing program 7 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000030400"/18, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x78}, 0x1, 0xba01}, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (fail_nth: 1) r8 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000680)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 2m24.401382204s ago: executing program 8 (id=5827): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x1a3c65) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000002, 0x3, 0x2) socket(0x10, 0x80003, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000", @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m22.762019097s ago: executing program 1 (id=5828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$ITER_CREATE(0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0x40046201, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x121400) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e24, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m22.582891571s ago: executing program 9 (id=5829): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70", 0x43}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eed", 0x25}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d5", 0x65}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707", 0x45}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c50d70d2ea1", 0x11}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b2772151cbdb17e1ddb141ea1e99c28e7482afc2dfc1386d6a8cba0fb55b4997f0e28b04c7642e528fd0b224592d2a7a5cd33d94fb939552713a2547d5ede0d3bbf8037e447ebfb57ec6eb6a74c3e8135158393d4bd15619b37d04c6ffadd5c52928ac7f939112e62145319d353f1f554ada92ab09fe44c8a68e078ace5bdb77b044224359042854adc708438", 0xdd}], 0x7, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)="76dbc0d5db133f8d506c91234e6d", 0xe}, {&(0x7f00000008c0)="0754dc5013d057cd169513cbe6353375cc9c3efbdd65b66665cb22853cb7e3c75ade300e8bd8da3a32d4532822a3d7599164458c14d5306c86b52510a68002ff0230edcfb268a12de4c67cc18598d7b41b0a5103a23800c36727a0340a687bf96bd2467bc1f7ef66d4711f92e2", 0x6d}, {&(0x7f0000001040)}], 0x3}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m22.57138838s ago: executing program 8 (id=5830): socket(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2m18.6561147s ago: executing program 1 (id=5831): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000}) (fail_nth: 1) 2m18.188633606s ago: executing program 9 (id=5832): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x6c}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0b340010", @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b0004000000"], 0x34}}, 0x0) unshare(0x22020400) r4 = syz_open_dev$vim2m(&(0x7f0000000c80), 0xff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000cc0)={0x1, @vbi={0x8, 0x80, 0x8, 0x1806040a, [0xf, 0x5], [0x1, 0x4], 0x108}}) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) ftruncate(r5, 0x100000100000000) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r7}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x1}}], 0x10) sendmmsg$sock(r0, &(0x7f0000004f40)=[{{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x4, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000700)="7619f4cccc75f5694d4bc54575ed01ff38acc9b32ed59805df5bdf755e8a833c6a7220487aeee330798146adc2fc27f2585de6f50685792d2b5b271a22c943ceb4a95ed1cdfd090bc4c399f782e3d5a988d72e27a5ecb03ba0bcc930d4eb095d5f6d28f20d3641d0e4c01baf8099e31e375cfedb86f09ba7d1fb4eea3b93", 0x7e}, {&(0x7f0000000780)="d7acc02a55342fa82a2e125e408cdad38bb32c1e592373170971b8650302aebd94e92174a5bb21c76a881bc20ab252dd90856103fecabda1944626ef7306f28dca3d01fe2314241fa18bbc705500e1ff0188b73186a52287d9bc60d1312f91ff1d5c40835ceba1107a3fde719652b97566f26263bb6a10a7399cfa583f2a80bf0a72695be028890b4754f61a57eeaf2b8140", 0x92}, {&(0x7f0000000840)="8523d66baee807f77e49cd4055c1ef4635f592914ba2a9dbdcc2690fccf7a4", 0x1f}, {&(0x7f0000000880)="c4ede67d44684af3378d81accae229824263ec198a43c92a47d3019bf85b3a6883c8de7e4a92a428d4d0951ad1a45a290ce63816e3ba871cb172c08a3f3718a0ae606aa750e50dc8dbb85faa0d68e2931af78cade7b56298ac96099d4f781cd8593062fb224714098e1b779e97a3f47b49385087d0fd1c38a2fa977a4f4c16630ad35935c76761920a8f03ca3a28f99eb65c3ec66803519bff1b66cdc1ead9a6f14efbce108bee590bba2e39dfc8c52ceba35431b78a4b0dba346e4085a723a719972ae9446859400e485434474c1cf433f2af5f352321b2e1da579839ab", 0xde}, {&(0x7f0000000980)="cb8d0bd0e75f55f2a974eef5d2d31dcace8bf1ae768c7de68dde1804a2fe5c0fa14ac61395c29d1842ccb2eef9b883895c2dbbcb31fb91f8ebc963e74ac8aad0e607cec6fcc140433c9fce10eec587b3480e536b4c91dcd49e84c4f069a93a85ec5c97a066f7f18ed2ba3b7922679121f40e2ca477d76526c1ad662f87950eee4111ae772b841641", 0x88}, {&(0x7f0000000a40)="9a5884e09bf227e4dff8f09ce1bc421d8b48de953813692473d95b7ca5cbeca4b1911dfb242682daceaa8599ee086b89bbd5d0cb9904477a5aeb0be373acdc9023f61982d120615a0e9c66c1e4bfe74d93033bdc365c5cb934b93808a1a356e3e541c8ea11a2b3ecf3f6ba37d093aa57331109bd887a199fd23b16ae7c1fdb55bc4dcf77031387fe60d0c95e567a61a6749bf45bf6862f5d23de088b9a43cd6175f0430ed64e7fbb5d654f38040ba52f6d58095fbd265786faf6b1ba9b6a55254410d4d3f224dd2226b5abedc2841397ed95119bf36131", 0xd7}, {&(0x7f0000000b40)="955f1d2a60730b255f3bcbd18e06737d2961015bc95e8917012b7e08725394ef6b0ef3a76d77485909d871db5b9cf14055cbea43a65f33d4c107a9797172768320c56d77d614c1e672eb7b70294cdffbf50dee66552cdbc932cb5c8ecdd3bfdc7361514eb378f29e69eac326b12f30bc83b7797c492b0940ce73b2331b83a122a6f4dc5c5d7ff0887e851586e42cb651f2db03391ea630fba4d3bd6bd77a545588c4c6d45de5802db0c019c74081a323d615cae2ed9d3f95f3c1c5ffe2988a4f2ad41985b4406e3ac7dffe4ab8e7e86eebc2c00983530998975ca60038c323b7a55d81583fec7c894c3c", 0xea}], 0x7, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}, {{&(0x7f0000000f00)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="dd1697a19b361b41a4cd0eb858419a8b88acc33d848f8063fabd0b55c21003dabf79aa2298b38199078a11b64ef85c7550b7cdddbe0760f564f13bc77e6b20f7d7d808c9b3d7ec84dfa8a1cf4e435a53c06bbb724b96429922ffb4e3ff87ac582cd4d4295ab4d3c5c2e053e3838d", 0x6e}, {&(0x7f0000001000)="da17fb7c92bf88b11f7ae8c7cf1db7987eab580612cd98a6f0decf374df7c9f94045a625daee77cd315e19bb51f84ac461419b6cae0749c2a67211935917c5e12659f135f0110e9401d24743a916fe3c5b03eda020778d6616ed6895d283a8fe59ed2cbadeee", 0x66}, {&(0x7f0000000c40)="b072fe8646d5b76b0d58c7c0ca24b27048bedca0147570267d907ed3e36118f7dce8a35e1ca9629adc76bd", 0x2b}, {&(0x7f0000001080)="bfbb", 0x2}, {&(0x7f00000010c0)="591858bd5cd1f507eb6e1f4c49fd7b1161a158b1df33be34354a1cce4fe2506597e4f5fe9c9cd0d844a0431e1a22ff4c60944fd781cd19c854677d20c46546ecdda7ecc965de7b46dc39eee0a9072be6506fd95c32", 0x55}, {&(0x7f0000001140)="b6a536419077fc3d09601e338771c66ab080bd08684087b84595cae4d84d8d7e9d582dff88333bcf39ba9927c1cb8b53fb1fbcfefc1cba9869195357c7130482983b40c581aa50b7243bbb7076907257f06580c60bd17c5162cdcaf8fdaafb14db", 0x61}], 0x6, &(0x7f0000001240)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}, {{&(0x7f00000012c0)=@qipcrtr={0x2a, 0xffffffff, 0x3fff}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001340)="069f0e8854cf61da7552be07e0a8a8fde7cc384a226b3e1bf41a81c4e4a957230c430e6751ecb5be59f520f5acad48ef788c3579055d9ef3c6376bdddadcc8df0fd1deb3ecd8f483752e4aa655e3e2377991238bc0fe3cffce2a6159f12fd0547963297a4f6e4c840260077ab1611eddbbee615f6c81dbf7851f7042dfe21a9ff34de6390d40e31f98deaa0a79eb4987481a1f8e7f", 0x95}, {&(0x7f0000001400)="81b2b60b95de92bc1f3a4fb1a7ef3191712f8b7e634080fe64a0cb6bfdf2bdd9be13395e9ac5325e3f7965aad8647c6890459fea262bb528611aee550a71cd33a510f8268dd464950de5da4792ed79c7aa30798ecc0d2ba26aa554f46b5b039f81597cf81c70ba71e6aa68cc8298f90ac1de93595e84e8983b79b0a1e26c954301ce43f3f7f1b73cfeb9147bf439697a77f80822e55b36bd39f9aca33ad495b4174721dad49b24391b28fe34ff4c33555fd390339ea5007b505890ba53014e64a9f3bfc87a3945fa2e5679c6eadda89e99aaa01eee5432900fd61c7ed367c709e1d4550f65", 0xe5}, {&(0x7f0000001500)="27b86972c10dda8cd7b8dea4782afee8efd69d4cd0f236e1bc34ae824f1a2e67a26a196bef136391674fcb7e60fc5cb38085813b8f4edcfaf74fabd25b9c2e60a86ccbb2bb6ccb190c7d629a1440fb73efb676a2b33982b0f0020b099aa6e9be91a1a1a79a9f3bb10cf2", 0x6a}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="5dba32265708438e78b0aa0d29dda986e9fd1b756a54eee0ec7e25e9861fe40c44a4780cae6041a8a3672c0946b91d2d3cd58977cdea56b047d8a0d2d5179002b08fb0fe73b7eb4144ee99959d675e60affaf20689a729cea24329a5f5bbbf13f6f4032db723a83c9b57141284b796c49a0079ecf48f16ca75205d54c4c89d7e060b3aad4e7cb9092c378230bbc76d1c2543099f13bd49618fc29d7da05072fae26ab1acbace9c0f6c8887fd6bf58916ac25a1aed54aa0369a9ed1c59b1bf7956badbe1f1567fda344217ed7a97c196d55d825573a7f3d0109a8fe94c744c6ed2cf283f8", 0xe4}, {&(0x7f0000002680)="0edbcead380b3fabd4066c18404a05a12073d5a53332ce23b1f334e422533bbe1bb5e2571a3b09aece0aefbadc38826d25b6e280359b752862cdcc082b3ec585765952fce235d2fdeea0a46d6d725633bd6ef321cdc612cb2e329f6efa33a8409a14e25f6dff709653c9f72f8e2aa189c364fac11eb17b165891b764a9", 0x7d}], 0x6, &(0x7f0000002780)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0xab}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{&(0x7f0000002800)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002880)="3aa78c4d23a0e97fd40f7c04483b6cd38da4ad91eb3f99ac4803aac5a3f4571e254a165f627bdec1718653d911347c0f167c6bd6e9e2c39a964d3cb880bf753ca34b5049b304221f454501f34f83792dba85cded9db3cc5620c421a6f8072715cb08fa1c", 0x64}, {&(0x7f0000002900)="57a57fc9b7a1a134b5836259b3a170e124bfd64b5dcac5541b1823", 0x1b}, {&(0x7f0000002940)="85c64ae3233d51efcd89cd55d495ed", 0xf}, {&(0x7f0000002980)="f3948e1885579cfe26ad67c15512ba50277345457c48288103605befcd6372576bb59f46756f33f40589ae82e88fdfedcb2a69595bc36455f40dfc1e86966d2f02730f08eafb5a010055ac2ccefe8d41c07cbfe13fb592f13f118a57081a5fd12de3fda6d09e61fa6d38b8f2e29748170ab2f831260e624c12f3eaa500050fe12e6e6da4196ba69b1bce7faa3638150d3cef72a99f8163084e132878ce830ab77a198599d890a7f8160f90686066ffad38bbf4a200811d3d7c48ddf89fc56d0d4f56c775bcbabd9f9f71c324e0aae6155c18be42c2f66b020a7f7db4b5ebbab388e02c7d35ad2ab7e1da25112efe42a77bc2", 0xf2}, {&(0x7f0000002a80)="79c15ac0c8d64398350c280b6b61fae6cd083adfa67b2bcf6dd473fb9b9323dfc91e892b1831608e638fc92cf6207e50bcf3fc8870799c39d30593cb405bd2794392e4e8396dd1d5234dfaa2ad8284946572335fe4c8d956080493e6e5f445a46024bdcfcd5dd76b9484049b1279a11711b28092e37ff7c95f4d1d402104cb6de2698f2d0da7b2258ad8e22ced12663197a5b5160a2378d0a18ed246282f8b569582fe2dd332294a970b14a734a80756847cd11a996de196f70d868917a26adca4c20b2790243e5ac728d905970ceb744ae3827723d42b1c3fafece15ed2cbbdf826912c431e", 0xe6}, {&(0x7f0000002b80)="44925d5fc384e5b74e8a275496dd1730ca7b240f33068f692939ce5d46fcfa", 0x1f}, {&(0x7f0000002bc0)="3ec9ff4a1ca5eefdfd0b1820f69c582c6d506d544a6a4636f5647368c882392a94c0bc391be7f1345533134d7e327fe76eabbfd71ff1f0a880ebc92c3daab42952a28cb99c3e98adfc0bbc3be05bea98dec5ebd37362ee3f883379b570c8faf72774fd7a9c405f4a6a378eb3ea26e5ac77e057f5e94093b6e1eed34c5b3cb7b8d2df68793ba0d76f18db9090420578a30d96466e2995ec9ac31228a90f3ed1914555311a87b0978254d9ff0127d8d9cb916616e7bce976bce2a4f076fbf5c83b6a87be72093d9e3043e08206d5a3df338cfec832fad696f57562c9d5", 0xdc}, {&(0x7f0000002cc0)="dd5a4e03ec376494425facee558c252d8182cf09620549c09c9d50cc656021e844", 0x21}, {&(0x7f0000002d00)="0c9736623f485fc6a762fabffa98326bffcb3ae36a45db04b8e664a9a78335c6290f0709e6a7b9895313af97964353027f3086e9fbb4d2e8c83938e508c89b29f4854aa9d283a5fcf82a7f5130ece43e73325e985876d34f5571ed83f50440c0d1a07b9dcee6035f4922453cf693bb97dd43bbc98a639c971c167aef11a2985ea8b2dd3d1c265a8a0c1f61cf82f92eb2e1bdce85bfa986ac65b390001a518f1adbd39bc84c7e8beb", 0xa8}, {&(0x7f0000002dc0)="d1b7763a9bd57bac6d664fb1b16b96acdc74de0a", 0x14}], 0xa, &(0x7f0000002ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}}, {{&(0x7f0000002f80)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x7, 0x7, "2c158c2b6e5628a06d2dbdff22613a221479100b07259a4050ab5e2b8edd037c00e67f5c4bd927548993f5c5c48361d96cccca45998a4b3ca054ddd6cd9fae", 0x4}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003000)="ffe7d5b9983b17ce9e71a5addb9e43e21753991ece9d88643733cfa1a6b765bfb75bdb857c3c7db9a4d3970c4c9086d44056690ddca2c3f059d246d2", 0x3c}, {&(0x7f0000003040)="4caffe197dcc3658e627be6b6b1c4660e29c49add21e5b66720b263d4ef39c180c3a5f2f0ecc8c738a2e329d4540ac38a8c3245a81be1be44c76a75c92676997f03f0b6cd5a9f1d2a4821713e4be8d6f1fa653b6f5aae38bdc9ada9d5a383c8560f58255aef32b8aa4c823f20c8ca7f31d4128e0bf23a0bc42d39cdaaa41261ff0fd3f76d4fc62444df4937c067ecba200ebd54010e3c1177534a55097c06a", 0x9f}, {&(0x7f0000003100)="ecc3992cfd2e53fbf812ca3326e79c3f55f4608305354e7a8c1d0430099bfe2f2bd32d6ad70a61d219db507eae9e5d0c49b6f7458d11b9ba0b09f9556d0c5bade4adcf840463331a470d99562f855b10d1c114dd025edd15c348b0ede0bc38416988586ef75cc02725f728c310e700aece6f6bb7054f5d1986739e0b2862e2933bf6249bd87ddea2102476eb6a2d56904723bfc0de8839ce9f12cfdec6712dc2255bae9da83d095af2e34974951238d17e00ecdb27d0860353a2681ea4221f7e2f9fcdd083749277a05d04d44b58093b", 0xd0}, {&(0x7f0000003200)="69f6a2392ce14c212df50f96eabc24a741ae23902fe5f038adf3f856d433d82d0abdab3ebfaa30472bf47b6882a20b961f1d39139c4379b70ede8355adeec9b35e3a725e40a8ec771e073d8abdaef593f14fcb61611052880e6ea68183a4ba88b396ed968c417004f0ebdc5b5d2faaf01a5a0721c5c131a33aa5186b863cc1b14c84eae38f652135eddfc37a21d55522ed49cf2823ae4d94ec8d35990f0f09368d804e4e30c2e1fa49404de6e8838707a7cfd3eecfbf344e3d4e0a7a352d5ac4c2233cb41172b2cb2e512ae5b26ccc9ffc3e982c0c65ab5f60649bb1832b323850619996dca0c50f0613e1c136eafccd23330df8", 0xf4}, {&(0x7f0000003300)="bfae7e87bf692c02bd2836f580b9b4ef51a1ed5792686a816080dd80d16cc9278ccd659ed3ba453ee3c225fb99378c7758a245e338624008811edc622d56d38eeed49b1322bb3898b579abfad4ee399db2f3943e79d7039dbcdfe9de3a8133b5781f11257fb29e6d1833ae929efe3bba94ae2d5ea4c1f979b7eaf8e3e1290847eecf93ebc8319d3f8eb231cf3cc61659f10e95d0e95749d5edaf7ad7e6dba230545cd57c02d01535d82822984ab540b37e9d888c64c4e23c730e97e12168", 0xbe}, {&(0x7f00000033c0)}, {&(0x7f0000003400)="59309e7bcd95b8888df9d8b88abc4aa9b75ee3fddec8255756fc1f0b08fbb3ac3ab77380a9a25a1caef0541698401c9cdd1b0b84a130ac22c1bcd4c98820ed149090a655b4d37291277eb70dcae711601afa5f509e96a6149890dd2bdabbcf43e7d98b2a413f09164f707e9805533e9261f816f3dc8c002f558c1bd6ebedb47db4b7622de3a8ef626581f93bac93f6bb92525b066839ee3e71754b3e71fd", 0x9e}, {&(0x7f00000034c0)="eb6cf706b382220a1cce54e26e2fa80f3cd745aec7573ec284ee746888a78432d7992684749537a28c5a4f73e34afb6e6a3c335faceb456c7f40cd67d091ea7dd720fd332821d9188fc7194f5c9a5f39b0c5a92728f384f95a08c9c2ec44090f097e6af009fb2e6e62d810034b8544fb89db8f95289cd94e4f2a", 0x7a}, {&(0x7f0000003540)="d5b530f420954963b309e7bc1d54f9e8be2ece0f0c956df372833f5d3ee9032675b5abec254111217efb53839dcf13", 0x2f}], 0x9, &(0x7f0000003640)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x38}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000036c0)="e5b4f553a62b2780d83623b51bddf969eef0158c2a4e433d25970cf5522adcffcf76b49fb4305016b6e7a7", 0x2b}, {&(0x7f0000003700)="e92a1ab524be55192e9e2e6ef725649ddf5e55de05e46dcd78e434538ed3435a21470d0263547aba08d4c3f0764ffb4616ad6be0e773df1b4561d6c38e761a48240ef66db7a702f2ad0aa6c033a61cf2c0fb0e0bc28075dddd1d065c5a4b44403961811911d71ededcd6bb928235159c77f04be9ca09823655e8eddd5777aac7df96364d7598c86a41c7f8d8a064a81c8a8800bf0c79c90e44c43a99e489ec71b0ce64c0fee345e4bd908cbc387f10bc868bb2d97a8d2898", 0xb8}, {&(0x7f00000037c0)="a0635f", 0x3}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="4a2d35b22d8dade9289a5c4da81b43384ca35feb47cb26ffc068", 0x1a}, {&(0x7f0000004840)="3a8a2da8edd187ee844700c801a97fc55af54bcf9da219ad682aa5f60e32e2bf745a53a3544abf8685dd596d610681ebefd65f2dc91f9fe626a790fdba6bc9c6cd348b063cf97243d9c604c1fc57836190e9271d305405d3b917334c3d1edf3a2d31efc29ea7c7cc8703c8c1c8360fbab56775e48eb2f2ada631396c07c00281279c1e7a39e11ce2c18e928b2510594917cd10fdc58470a29c2b298ae967b271d67c568c462724dbd3859d5c6a5c42dc1b999dae40eec58b050ba0ac29d4ccd57e1ffc", 0xc3}, {&(0x7f0000004940)="ffc598df8618bb4d8c0e8ac118dec6edb9cdd3ae6c0238a8acc2a9bb7b3530fb48ecf0f2bde6135f7fd7c633c47b701fd6878ee7c5007f04211816f9a9", 0x3d}, {&(0x7f0000004980)='VGM', 0x3}, {&(0x7f00000049c0)="3b47f127ecc2505c3e863509cdf1943b49d0a2099d8b491f5308056d83fc71f5d44919f3c1a2e183cab099bab69dec156fb48e99059f7636f04c2a01b077516a1c35de8f2286e80978af8014119102b1eb64718cbe0eb2751e75af38c871063070edc758911d0ea27cbdf181400dff4035fd41e5941f2dce88d775eac97b8fe578e8270a6b793ed723b7054eae2d729a216ee5b680ed823f6b9f0bedb2a0a3b34d29a3d8d6eb58d1c7b452394926fde15c98c1f6d855bac1c8cf30635a1935a68ecbe572fb2fb7d7134c64bf139b4a8c8aceacdaeee8f8de36264f", 0xdb}], 0x9, &(0x7f0000004b80)=[@timestamping={{0x14, 0x1, 0x25, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x85}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c40)="f1f1a2fdc9cbfe9432f93fc98385209b307c983e6996c7a06b493e1145fa99ccf2bcc88a2ddbed0fb97ddd2767a0c58671bc5da9dd3deb1a96db94f628b037b98a81f9191a4f2ed5db009e045b115a035b6b2acc8109dd5017382318626d68156252ad3bb3e5c163ed3c43775e997b6046b7e831bbf34cf7ee28bd9c9159784a5142aef43ef6807ad195fbdf14b2ef6ff1a5d0769fa80bb3947172", 0x9b}, {&(0x7f0000004d00)="ede1d22d64d009c6adf6798f81d93d11e7c6186c53765d4d3a4874bb7dd69593853d67904d0d0f1aa9f1b92f2e254da527709ce417c3a8ffe6be63a7c9ec7f4ad9a3c849dde2bdb5451d198d1bec0cb5ded3a4e66aa385199c6caba098e3719a63ea09a4f7f398e0f75c27eaecc0283a7173e97dff2cbfe1a9c581ecc71278f0875844dd3f42fae5ccf89bb4362f0402e0ad2b71948fbef2575d2e90056c0e2ca1448b93d473a38736fb1eed22e14e728b72017ba8e5dc6aab6d5c100a6bf6ef4da4d4fd74c857cb2831591da5a614d4633c5e7c466ede94688c1486f6fa144baeea15d550", 0xe5}, {&(0x7f0000004e00)="2a3c44192a6e13e3c4947f30d1d07a2600f92a51a90c711763dad463318e84521d292944a93a370b165dcf9a85f6ee18682a", 0x32}, {&(0x7f0000004e40)="c2e73c521cc35a51e7958b1cc21feaa5", 0x10}], 0x4, &(0x7f0000004ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}}], 0x7, 0x20000082) bpf$MAP_CREATE(0x0, &(0x7f00000051c0)=ANY=[@ANYBLOB="7e00000010000000020000000000000000000000ebaf326aff23d06179660008b80000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x8200, &(0x7f0000000240)="dd91248d39fc7036fe809aad368cd4efed36eec6baa6ea815eacfb2f39aa7ded08b58461dfce8ef41c363b2e040a35cde72e5694cd38fdfbc9542c7416bae21cbfc69414556bb3e00387689850053bb928c117818b0aff99f5395d59e0704cc90c3c8d548d7cc386f7d92e0e35ad797a4a3b68cdf8e6973e568a99681be59381e64efe4ebe03b1f0323704356c58a783221a6636bacb25f2cc7219b73a87aa57d037d1a4e12058e51eb8b234af1350cfb6", 0xb1, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r10 = gettid() r11 = bpf$PROG_LOAD(0x5, &(0x7f0000005100)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000640)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}], 0x40, 0x4d5eee2304d68af6}, 0x44) 2m17.549168065s ago: executing program 9 (id=5833): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x55, 0xa7, 0xa9, 0x20, 0x1bc7, 0x1010, 0xb1ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x41, 0x0, 0x1, 0x26, 0x6c, 0x78, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0xfd, 0x0, [@generic={0x2, 0x23}]}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000680)="b5b3f61e183c62128e5ae4ad8d7892df5be9d298a4085866ca8662366b2ccb", 0x1f, 0x20040801, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000800)=""/121, 0x79}, {0x0}, {&(0x7f00000006c0)=""/11, 0xb}], 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'erspan0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000340)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2m17.400386572s ago: executing program 8 (id=5834): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000003d00090000000000000000000100000004000000140001801000108008000b00", @ANYRES32, @ANYBLOB="9462172c080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m13.454555983s ago: executing program 7 (id=5835): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70", 0x43}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eed", 0x25}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d5", 0x65}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707", 0x45}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c50", 0xd}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5b", 0x19}], 0x7, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)="76dbc0d5db133f8d506c91234e", 0xd}, {&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17efd93089f033a33419a6b1f91d65ca0aa91432b0439daeb18de33e6eb04a1465c6f4cdb36ad96507c381411a519918a54b7944ef6e5f5973", 0xfb}, {&(0x7f00000008c0)="0754dc5013d057cd169513cbe6353375cc9c3efbdd65b66665cb22853cb7e3c75ade300e8bd8da3a32d4532822a3d7599164458c14d5306c86b52510a68002ff0230edcfb268a12de4c67cc18598d7b41b0a5103a23800c36727a0340a687bf96bd2467bc1f7ef66d4711f92e2", 0x6d}, {&(0x7f0000001040)="eac15318f152c40b585555f48c5e581a5ea857b96be857f6904e53ee179dccb0c86909e1a6e0f5c6fc745fd3dbb7f275a1838e64dff1dcaa76710f8e6650474f06c3933b1176ddf0c3abc5a72f7e50579f86830f10f32185afb78142111bcff5377a48ec359ff36b4cfcec5e7be25aff12fc51e5", 0x74}], 0x4}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m12.877327706s ago: executing program 9 (id=5836): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x4) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) 2m12.466615064s ago: executing program 7 (id=5837): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x29, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000300)="b13e7f44315115e17eaa4982a2f37f81de00f94cd51afbc2e0dbdb5f3cc47059f2871134cb661af65ef79ff79684c66c9459f6d1fc1b42ddfc2728248d97933320456424c5bc18118b2d834d", &(0x7f0000000540)="fe6fcfaf2bb5b3b55547f597fc6385ff2e6a1916783eb3fd34d2bf41f1c6302f0d861cae12e3434dee01db5ce4d0e07bab25e61492119c53d52daeecaac949c187709f03ea9390f1dd8e68fcfe41f7888f0a6cb41d279e912f257097b269b21ce059407a39753c55b911336d1cd40845d9af06526664743ceeec9b9f6799b7460d6dfeeac1ddb4013633f91a48bf5351f859b65da345001e05715b4d88"}}, &(0x7f0000bbdffc)) sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x0, 0x3, 0x40}) pipe2$watch_queue(&(0x7f00000002c0), 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x9d265f0d1edda3e8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000668000/0x2000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) 2m9.938524463s ago: executing program 8 (id=5838): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000002, 0x3, 0x2) socket(0x10, 0x80003, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000000000", @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m9.609268926s ago: executing program 1 (id=5839): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x133800, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x7, 0x2, 0x0, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e", 0xff756532}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x164) finit_module(r1, 0x0, 0x4) unshare(0x60480) iopl(0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f000000ecc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=""/89, 0x59}], 0x1}, 0xffffffc0}], 0x1, 0x2, 0x0) sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="1ddace3b6cf5355e98736c63404cf24babf7c96c01b7a9bb443512fa7de29212a98bd6bf2c2ce422ca78a9bd166f3798c8fc6ac6d349e89b7a6db912d52eb335c98f417a3daf855cb663dc7c0b3a762602c44e3cf8223547d0", 0x59}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20045830}, 0x20040084) 2m9.403292967s ago: executing program 8 (id=5840): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x44, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080005"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x622000, 0x0) fstat(r3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1000400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_appraise}]}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) close_range(r3, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x20001000}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000000180)=""/238, 0xffffff9a) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r6, {0x1, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}, 0x78) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='bfs\x00', 0x208000, 0x0) 2m8.153193761s ago: executing program 9 (id=5841): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70", 0x43}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eed", 0x25}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d5", 0x65}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707", 0x45}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c50d70d2ea1", 0x11}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b2772151cbdb17e1ddb141ea1e99c28e7482afc2dfc1386d6a8cba0fb55b4997f0e28b04c7642e528fd0b224592d2a7a5cd33d94fb939552713a2547d5ede0d3bbf8037e447ebfb57ec6eb6a74c3e8135158393d4bd15619b37d04c6ffadd5c52928ac7f939112e62145319d353f1f554ada92ab09fe44c8a68e078ace5bdb77b044224359042854adc708438", 0xdd}], 0x7, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)="76dbc0d5db133f8d506c91234e6d", 0xe}, {&(0x7f00000008c0)="0754dc5013d057cd169513cbe6353375cc9c3efbdd65b66665cb22853cb7e3c75ade300e8bd8da3a32d4532822a3d7599164458c14d5306c86b52510a68002ff0230edcfb268a12de4c67cc18598d7b41b0a5103a23800c36727a0340a687bf96bd2467bc1f7ef66d4711f92e2", 0x6d}, {&(0x7f0000001040)}], 0x3}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m5.935386148s ago: executing program 1 (id=5842): prctl$PR_SET_IO_FLUSHER(0x39, 0xfffffff7fffe0001) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x1, @rand_addr, 0xfffd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) 2m5.577202844s ago: executing program 7 (id=5843): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3c65) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000002, 0x3, 0x2) socket(0x10, 0x80003, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000", @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m5.369349641s ago: executing program 1 (id=5844): socket(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r5) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 2m4.934599244s ago: executing program 9 (id=5845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(0x0, 0x5, 0x100000, 0x0, 0x0, 0x0) link(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x0, 0x1}, 0xfe}, {0x0, 0x0, {0x2, 0xff, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000001000904"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0xfc7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0xf68b}, 0x1c) openat$cgroup_ro(r4, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) 2m4.926038719s ago: executing program 7 (id=5846): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x1c, &(0x7f00000003c0)=""/28}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x5}}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2m4.904339969s ago: executing program 8 (id=5847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) fsopen(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3, 0x0, 0x1200}, 0x10) keyctl$read(0xb, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r4, 0x0, 0x40000120) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x04'}]}, 0x18}], 0x1}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000680)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="366003af144e4017546420349a6df9859e5f9630edd6d1d6e9341ea623e826f55c315dfa4619dfbf40f6ba", 0x2b}, {&(0x7f0000000100)}, {&(0x7f0000000700)="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", 0x1ab}, {&(0x7f0000000a80)="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", 0x17e}, {&(0x7f00000002c0)="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", 0xfe}, {0x0}, {&(0x7f0000000140)="6d496ea654758ab7d2270d27765107c927f19a5ccb0f33cb35a075418e175d6bc0815d27dbdb51b18cc01b0eaeed850adaf05eed69d32bf469e7e445666a04ea750160a0db8f0a05fdcf150f8db2651cf74fd9f9078432b9d9a5a0d6f724ed5ce0fed9960ecc985ffa045b9adb1877b45415e6ff05d0517c6fcb9bfa9db21fd30f5997348167c70f592969fad20fc29f1c4b5c8e593d062b867eff31f8fba19c2a6f674cee6a308ab90615fef6b264a7ec8bb07f31c90179709995f21f6804b7d0c6209dfeab2d3ae1c0c7b81ff2d15e067c8e7c9fc7110a06acf352104d505cf3", 0xe1}, {&(0x7f00000008c0)="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", 0x1b4}], 0x8}, 0x44044894) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r6, 0x2}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x0, 0x7}}}, 0x24}}, 0x40044) sendto$unix(r1, &(0x7f0000000600)="ccc9e2132a6809981e641bb3d951e22cd21eb73f588bed05cdc407d808c2bc624cdfeac53d9616744658b4c38563c2e7208d51b61b206ada081b12946282b06d35087b6eb60b9709b0cfae6318f7e54f3a7292ba2ed45885080c6bec3109e7412a6ffaf92a49568c423e615000f6e1120e93f7fa202603a407cb796218af4a40e3965b3412001068a921ebb6d76072501ce5a7c370059b2617927de4eca7eeaae18c6e42741d8385663e98066872965ce674eaee173d3036", 0xb8, 0x20004005, 0x0, 0x0) 2m3.590297893s ago: executing program 7 (id=5848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xe7, 0x5f, 0xcc, 0x8, 0x7c0, 0x1505, 0xb8c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x3, 0x8e, 0x4e, 0xe2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x1a, 0x6, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x10, 0x7, 0xc1}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0x3, 0xf, [@generic={0x7, 0x5, "9acbf5326c"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4008c001, 0x0) 759.274397ms ago: executing program 1 (id=5849): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x9, [0xd2, 0x7, 0x0, 0xe, 0x3, 0x28, 0x1, 0x1000, 0x9, 0x2, 0xfff5, 0x4, 0x1000, 0xb, 0xd, 0x4, 0x8186, 0x3, 0x403, 0x0, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x6, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x2, 0x5, 0x6, 0x401, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0, 0x56, 0xffffffffffffff3d, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000ed5ebfda31b91902a5ca0b8f21df3dbb2a2598f97f26523474a5167198cd5dbfb755a9122c377b349f5ea1c21b52e62f3a3307b911b2ddba2da82899d6a21848072edfabd2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/25], 0x48) r3 = socket(0x2b, 0x1, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getegid() fsopen(&(0x7f0000000080)='hpfs\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, r4, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) 0s ago: executing program 38 (id=5848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xe7, 0x5f, 0xcc, 0x8, 0x7c0, 0x1505, 0xb8c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x3, 0x8e, 0x4e, 0xe2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x1a, 0x6, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x10, 0x7, 0xc1}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0x3, 0xf, [@generic={0x7, 0x5, "9acbf5326c"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4008c001, 0x0) kernel console output (not intermixed with test programs): to 0x8A [ 2008.807425][T26768] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2008.832639][T26768] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2008.851817][T26768] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2008.900167][T26768] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2008.909370][T26768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.922117][T26768] usb 9-1: Product: syz [ 2009.349240][T26768] usb 9-1: Manufacturer: syz [ 2009.353988][T26768] usb 9-1: SerialNumber: syz [ 2009.888728][T18687] usb 2-1: USB disconnect, device number 87 [ 2009.960945][T26768] usb 9-1: config 0 descriptor?? [ 2010.244240][T26768] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2010.431819][T26768] usb 9-1: USB disconnect, device number 28 [ 2014.438684][ T47] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2015.442816][T18429] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2015.457667][ T47] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2015.969292][ T47] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2016.174451][ T47] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2016.183927][ T47] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2016.195707][ T47] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 2016.208736][ T47] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2016.218036][ T47] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2016.226184][ T47] usb 10-1: Product: syz [ 2016.230997][ T47] usb 10-1: Manufacturer: syz [ 2016.239275][ T47] cdc_wdm 10-1:1.0: skipping garbage [ 2016.244732][ T47] cdc_wdm 10-1:1.0: skipping garbage [ 2016.822681][ T47] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2017.322754][ T47] usb 10-1: USB disconnect, device number 37 [ 2017.777423][ T29] audit: type=1800 audit(2000000404.849:633): pid=27655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4809" name="bus" dev="overlay" ino=2172 res=0 errno=0 [ 2018.565828][T27669] hub 2-0:1.0: USB hub found [ 2018.572660][T27669] hub 2-0:1.0: 1 port detected [ 2022.442550][ T25] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2022.655687][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2022.673551][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2022.684151][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2022.693590][ T25] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2022.705444][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 2023.654999][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2023.664278][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2023.672826][ T25] usb 8-1: Product: syz [ 2023.677012][ T25] usb 8-1: Manufacturer: syz [ 2023.703926][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 2023.709780][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 2023.723523][ T25] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2023.931863][ T25] usb 8-1: USB disconnect, device number 25 [ 2024.691505][T27714] overlayfs: failed to resolve './file0': -2 [ 2033.502783][T27644] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2033.693269][T27644] usb 9-1: Using ep0 maxpacket: 8 [ 2033.754638][T27644] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 2033.769583][T27644] usb 9-1: config 0 has no interface number 0 [ 2033.776069][T27644] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2033.862585][T27644] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2033.945512][T27644] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2034.012597][T27644] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2034.062546][T27644] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.158689][T27644] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2034.167940][T27644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.176037][T27644] usb 9-1: Product: syz [ 2034.180228][T27644] usb 9-1: Manufacturer: syz [ 2034.185038][T27644] usb 9-1: SerialNumber: syz [ 2034.193031][T27644] usb 9-1: config 0 descriptor?? [ 2034.419392][T27644] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2034.652953][ T2154] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2034.672324][T27798] iowarrior 9-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 2034.707083][T18687] usb 9-1: USB disconnect, device number 29 [ 2034.805244][ T2154] usb 7-1: Using ep0 maxpacket: 16 [ 2034.835080][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.852491][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2034.876221][ T2154] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2034.905471][ T2154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.934245][ T2154] usb 7-1: config 0 descriptor?? [ 2035.354144][ T2154] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 2035.382544][ T2154] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 2035.412497][ T2154] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 2035.587252][ T2154] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 2035.594504][ T2154] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 2035.615823][ T2154] corsair 0003:1B1C:1B02.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 2036.455313][ T25] usb 7-1: USB disconnect, device number 29 [ 2036.765665][T27825] netlink: 'syz.8.4859': attribute type 1 has an invalid length. [ 2036.773791][T27825] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4859'. [ 2037.464415][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.477774][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.814447][T27839] overlayfs: failed to resolve './file1': -2 [ 2042.929613][T27909] overlayfs: failed to resolve './file1': -2 [ 2043.582733][ T47] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2043.742682][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 2043.787328][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2044.515479][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2044.525742][ T47] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2044.534947][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.677231][ T47] usb 7-1: config 0 descriptor?? [ 2045.372717][ T47] usbhid 7-1:0.0: can't add hid device: -71 [ 2045.378729][ T47] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2045.560938][ T47] usb 7-1: USB disconnect, device number 30 [ 2047.463036][T27969] hub 2-0:1.0: USB hub found [ 2047.572551][T27969] hub 2-0:1.0: 1 port detected [ 2047.923335][T17215] Bluetooth: hci4: command 0x0406 tx timeout [ 2053.184045][T17215] Bluetooth: hci4: command 0x0406 tx timeout [ 2053.672664][T28030] hub 2-0:1.0: USB hub found [ 2053.682719][T28030] hub 2-0:1.0: 1 port detected [ 2066.001855][ T29] audit: type=1800 audit(2000000453.189:634): pid=28157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4943" name="bus" dev="overlay" ino=2276 res=0 errno=0 [ 2066.492846][T28163] hub 2-0:1.0: USB hub found [ 2066.501967][T28163] hub 2-0:1.0: 1 port detected [ 2067.462746][ T47] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2067.752516][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 2067.759187][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.772070][ T47] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2067.782074][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.913821][T28181] hub 2-0:1.0: USB hub found [ 2067.919647][T28181] hub 2-0:1.0: 1 port detected [ 2068.381363][ T47] usb 7-1: config 0 descriptor?? [ 2068.390011][ T47] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2070.935240][ T47] usb 7-1: USB disconnect, device number 31 [ 2079.282905][ T29] audit: type=1800 audit(2000000465.659:635): pid=28279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4979" name="bus" dev="overlay" ino=2306 res=0 errno=0 [ 2082.163255][T28328] overlayfs: missing 'lowerdir' [ 2082.227271][T28329] hub 2-0:1.0: USB hub found [ 2082.358184][T28329] hub 2-0:1.0: 1 port detected [ 2084.682555][ T47] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2085.100950][ T47] usb 10-1: Using ep0 maxpacket: 8 [ 2085.137244][T28365] hub 2-0:1.0: USB hub found [ 2085.142678][T28365] hub 2-0:1.0: 1 port detected [ 2085.514300][ T47] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 2085.522902][ T47] usb 10-1: config 0 has no interface number 0 [ 2085.529175][ T47] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2085.684707][ T47] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2085.693962][ T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.715334][ T47] usb 10-1: Product: syz [ 2085.719622][ T47] usb 10-1: Manufacturer: syz [ 2085.724520][ T47] usb 10-1: SerialNumber: syz [ 2085.774606][ T47] usb 10-1: config 0 descriptor?? [ 2085.821771][ T47] iowarrior 10-1:0.186: no interrupt-in endpoint found [ 2087.921832][T17782] usb 10-1: USB disconnect, device number 38 [ 2088.537276][T28396] pim6reg1: entered promiscuous mode [ 2088.542694][T28396] pim6reg1: entered allmulticast mode [ 2089.975028][T28403] hub 2-0:1.0: USB hub found [ 2089.991377][T28403] hub 2-0:1.0: 1 port detected [ 2092.603104][T17215] Bluetooth: hci4: command 0x0406 tx timeout [ 2092.909865][T28435] netlink: 'syz.6.5025': attribute type 1 has an invalid length. [ 2092.917710][T28435] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5025'. [ 2094.372543][T18637] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2094.568494][T28456] hub 2-0:1.0: USB hub found [ 2094.574252][T28456] hub 2-0:1.0: 1 port detected [ 2095.166665][T18637] usb 7-1: Using ep0 maxpacket: 8 [ 2095.182972][T18637] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 2095.191178][T18637] usb 7-1: config 0 has no interface number 0 [ 2095.308458][T18637] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2095.955332][T18637] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2095.967102][T18637] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2095.978548][T18637] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2095.989847][T18637] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2096.194109][T18637] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2096.204719][T18637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.228893][T18637] usb 7-1: Product: syz [ 2096.242473][T18637] usb 7-1: Manufacturer: syz [ 2096.247135][T18637] usb 7-1: SerialNumber: syz [ 2096.281097][T18637] usb 7-1: config 0 descriptor?? [ 2097.158466][T18637] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 2097.172547][T18637] usb 7-1: USB disconnect, device number 32 [ 2098.587774][ T29] audit: type=1800 audit(2000000485.779:636): pid=28500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5042" name="bus" dev="overlay" ino=2460 res=0 errno=0 [ 2098.868060][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.875275][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.972622][ T47] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2099.162667][ T47] usb 10-1: Using ep0 maxpacket: 16 [ 2099.176889][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.215642][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.712801][ T47] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2099.779549][T28510] hub 2-0:1.0: USB hub found [ 2099.784492][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.792994][T28510] hub 2-0:1.0: 1 port detected [ 2099.806925][ T47] usb 10-1: config 0 descriptor?? [ 2100.368661][ T47] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 2100.375995][ T47] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 2100.388390][ T47] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 2101.015749][T28518] hub 2-0:1.0: USB hub found [ 2101.021163][T28518] hub 2-0:1.0: 1 port detected [ 2101.042526][ T47] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 2101.049611][ T47] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 2101.064897][ T47] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.9-1/input0 [ 2101.095057][ T47] corsair 0003:1B1C:1B02.0015: Failed to get K90 initial state (error 0). [ 2102.393144][ T47] usb 10-1: USB disconnect, device number 39 [ 2105.114780][ T29] audit: type=1800 audit(2000000491.979:637): pid=28554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5060" name="bus" dev="overlay" ino=2496 res=0 errno=0 [ 2105.456153][T28564] hub 2-0:1.0: USB hub found [ 2105.462655][T28564] hub 2-0:1.0: 1 port detected [ 2106.192032][T28581] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2106.201152][T28581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2106.529694][ T47] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2107.658723][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 2107.688790][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2107.699937][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2107.709802][ T47] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2107.718965][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.751344][ T47] usb 7-1: config 0 descriptor?? [ 2108.192541][T28618] netlink: 'syz.1.5073': attribute type 1 has an invalid length. [ 2108.200372][T28618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5073'. [ 2108.750903][ T47] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 2108.758089][ T47] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 2108.765355][ T47] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 2108.772478][ T47] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 2108.779533][ T47] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 2108.819910][ T47] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 2109.024618][ T47] corsair 0003:1B1C:1B02.0016: Failed to get K90 initial state (error 0). [ 2109.119291][T18637] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2109.307095][ T25] usb 7-1: USB disconnect, device number 33 [ 2109.791038][T18637] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2109.812732][T18637] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2109.832190][T18637] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2109.861569][T18637] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2110.220364][ T29] audit: type=1800 audit(2000000497.129:638): pid=28641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5079" name="bus" dev="overlay" ino=2396 res=0 errno=0 [ 2110.242595][T18637] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 2111.041384][T18637] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2111.050664][T18637] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2111.059374][T18637] usb 8-1: Product: syz [ 2111.064174][T18637] usb 8-1: Manufacturer: syz [ 2111.088798][T18637] cdc_wdm 8-1:1.0: skipping garbage [ 2111.094397][T18637] cdc_wdm 8-1:1.0: skipping garbage [ 2111.099808][T18637] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2111.474086][ T47] usb 8-1: USB disconnect, device number 26 [ 2115.463915][ T29] audit: type=1800 audit(2000000502.189:639): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5092" name="bus" dev="overlay" ino=2426 res=0 errno=0 [ 2115.878537][T28690] hub 2-0:1.0: USB hub found [ 2115.892639][T28690] hub 2-0:1.0: 1 port detected [ 2116.722881][T28697] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5097'. [ 2116.970050][T28704] hub 2-0:1.0: USB hub found [ 2116.982682][T28704] hub 2-0:1.0: 1 port detected [ 2119.206801][T18429] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2119.892886][T28723] hub 2-0:1.0: USB hub found [ 2119.902996][T28723] hub 2-0:1.0: 1 port detected [ 2121.782810][T18429] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2124.627039][T18429] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2124.874308][T28760] hub 2-0:1.0: USB hub found [ 2124.880369][T28760] hub 2-0:1.0: 1 port detected [ 2125.052222][T28765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5111'. [ 2125.297811][T28771] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5117'. [ 2125.362650][ T2154] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2126.462647][ T2154] usb 8-1: Using ep0 maxpacket: 16 [ 2126.478223][ T2154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.502575][T18687] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2126.570160][ T2154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.610727][ T2154] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2126.815955][ T2154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.832484][T18687] usb 2-1: Using ep0 maxpacket: 8 [ 2126.839553][ T2154] usb 8-1: config 0 descriptor?? [ 2126.852778][T18687] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2126.872042][T18687] usb 2-1: config 0 has no interface number 0 [ 2126.880785][T18687] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2126.892205][T18687] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2126.904094][T18687] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2126.915630][T18687] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2126.927610][T18687] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2127.327993][T18687] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2127.349444][T18687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.388009][T18687] usb 2-1: Product: syz [ 2127.402220][T18687] usb 2-1: Manufacturer: syz [ 2127.409211][T18687] usb 2-1: SerialNumber: syz [ 2127.733243][ T2154] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 2127.740605][ T2154] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 2127.749618][ T2154] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 2127.756769][ T2154] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 2127.763926][T18687] usb 2-1: config 0 descriptor?? [ 2127.773109][ T2154] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 2127.808764][ T2154] corsair 0003:1B1C:1B02.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 2127.835285][ T2154] corsair 0003:1B1C:1B02.0017: Failed to get K90 initial state (error 0). [ 2127.985100][T18687] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2128.184782][ T5866] usb 8-1: USB disconnect, device number 27 [ 2128.219496][T28767] iowarrior 2-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 2128.240616][ T2154] usb 2-1: USB disconnect, device number 88 [ 2129.027137][T28805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5127'. [ 2129.052699][T18687] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2129.625624][T18687] usb 10-1: Using ep0 maxpacket: 16 [ 2129.655973][T18687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.761765][T18687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.787742][T18687] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2129.805330][T18687] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.023838][T18687] usb 10-1: config 0 descriptor?? [ 2131.487351][T18687] usbhid 10-1:0.0: can't add hid device: -71 [ 2131.493520][T18687] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2131.510884][T18687] usb 10-1: USB disconnect, device number 40 [ 2131.752641][ T25] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2132.092470][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 2132.099030][ T25] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2132.107592][ T25] usb 2-1: config 0 has no interface number 0 [ 2132.113825][ T25] usb 2-1: config 0 interface 186 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2133.086787][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2133.095905][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.538550][ T5866] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2133.546338][ T25] usb 2-1: Product: syz [ 2133.550578][ T25] usb 2-1: Manufacturer: syz [ 2133.555371][ T25] usb 2-1: SerialNumber: syz [ 2133.585779][ T25] usb 2-1: config 0 descriptor?? [ 2133.609379][ T25] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 2133.883213][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 2133.953254][ T5866] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 2133.961463][ T5866] usb 7-1: config 0 has no interface number 0 [ 2133.969967][ T5866] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2133.981040][ T5866] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2133.993041][ T5866] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2134.004879][ T5866] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2134.040437][ T5866] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2134.803383][ T5866] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2134.832390][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.864798][ T5866] usb 7-1: Product: syz [ 2134.869004][ T5866] usb 7-1: Manufacturer: syz [ 2134.891913][ T5866] usb 7-1: SerialNumber: syz [ 2135.662583][T17215] Bluetooth: hci4: command 0x0406 tx timeout [ 2135.742136][ T5866] usb 7-1: config 0 descriptor?? [ 2135.902261][T18687] usb 2-1: USB disconnect, device number 89 [ 2136.440325][ T5866] usb 7-1: can't set config #0, error -71 [ 2136.809600][ T5866] usb 7-1: USB disconnect, device number 34 [ 2142.334238][T28938] hub 2-0:1.0: USB hub found [ 2142.341935][T28938] hub 2-0:1.0: 1 port detected [ 2143.992491][ T25] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2144.312954][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 2144.422365][ T25] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2144.519523][ T25] usb 2-1: config 0 has no interface number 0 [ 2144.555350][ T25] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2144.638105][ T25] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2144.650153][ T25] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2144.661976][ T25] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2144.673303][ T25] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2144.757194][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2144.766770][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.774979][ T25] usb 2-1: Product: syz [ 2144.779221][ T25] usb 2-1: Manufacturer: syz [ 2144.784030][ T25] usb 2-1: SerialNumber: syz [ 2144.801772][ T25] usb 2-1: config 0 descriptor?? [ 2145.651596][ T25] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2145.835139][T28956] iowarrior 2-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 2145.894732][T18687] usb 2-1: USB disconnect, device number 90 [ 2149.796654][T17215] Bluetooth: hci4: command 0x0406 tx timeout [ 2151.512155][T29038] hub 2-0:1.0: USB hub found [ 2151.522737][T29038] hub 2-0:1.0: 1 port detected [ 2153.941366][ T29] audit: type=1800 audit(2000000541.129:640): pid=29060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5202" name="bus" dev="overlay" ino=2609 res=0 errno=0 [ 2154.459384][ T29] audit: type=1800 audit(2000000541.549:641): pid=29072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5201" name="bus" dev="overlay" ino=2544 res=0 errno=0 [ 2158.659302][ T29] audit: type=1800 audit(2000000545.809:642): pid=29108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5215" name="bus" dev="overlay" ino=2643 res=0 errno=0 [ 2159.564437][ T29] audit: type=1800 audit(2000000546.759:643): pid=29123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5219" name="bus" dev="overlay" ino=2574 res=0 errno=0 [ 2160.334458][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.340843][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.836798][T29163] hub 2-0:1.0: USB hub found [ 2163.842586][T29163] hub 2-0:1.0: 1 port detected [ 2165.288562][T29175] hub 2-0:1.0: USB hub found [ 2165.295519][T29175] hub 2-0:1.0: 1 port detected [ 2167.297985][T29198] netlink: 'syz.6.5239': attribute type 1 has an invalid length. [ 2167.305902][T29198] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5239'. [ 2168.610115][ T29] audit: type=1800 audit(2000000555.409:644): pid=29200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.5240" name="bus" dev="overlay" ino=2665 res=0 errno=0 [ 2179.252007][ T29] audit: type=1800 audit(2000000566.439:645): pid=29314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5266" name="bus" dev="overlay" ino=2668 res=0 errno=0 [ 2185.322257][ T29] audit: type=1800 audit(2000000572.509:646): pid=29355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5277" name="bus" dev="overlay" ino=2634 res=0 errno=0 [ 2188.663685][ T29] audit: type=1800 audit(2000000575.859:647): pid=29387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5291" name="bus" dev="overlay" ino=2724 res=0 errno=0 [ 2189.435723][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2190.140051][T29405] FAULT_INJECTION: forcing a failure. [ 2190.140051][T29405] name failslab, interval 1, probability 0, space 0, times 1 [ 2190.153138][T29405] CPU: 1 UID: 0 PID: 29405 Comm: syz.1.5297 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2190.163920][T29405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2190.173995][T29405] Call Trace: [ 2190.177281][T29405] [ 2190.180216][T29405] dump_stack_lvl+0x16c/0x1f0 [ 2190.184929][T29405] should_fail_ex+0x497/0x5b0 [ 2190.189623][T29405] ? fs_reclaim_acquire+0xae/0x150 [ 2190.194758][T29405] should_failslab+0xc2/0x120 [ 2190.199543][T29405] __kmalloc_noprof+0xcb/0x510 [ 2190.204319][T29405] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2190.209970][T29405] tomoyo_realpath_from_path+0xb9/0x720 [ 2190.215542][T29405] ? tomoyo_path_number_perm+0x235/0x590 [ 2190.221187][T29405] ? tomoyo_path_number_perm+0x235/0x590 [ 2190.226841][T29405] tomoyo_path_number_perm+0x248/0x590 [ 2190.232308][T29405] ? tomoyo_path_number_perm+0x235/0x590 [ 2190.237947][T29405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2190.243958][T29405] ? __pfx_lock_release+0x10/0x10 [ 2190.248988][T29405] ? trace_lock_acquire+0x14e/0x1f0 [ 2190.254198][T29405] ? lock_acquire+0x2f/0xb0 [ 2190.258700][T29405] ? __fget_files+0x40/0x3a0 [ 2190.263293][T29405] ? __fget_files+0x206/0x3a0 [ 2190.267975][T29405] security_file_ioctl+0x9b/0x240 [ 2190.273014][T29405] __x64_sys_ioctl+0xb7/0x200 [ 2190.277695][T29405] do_syscall_64+0xcd/0x250 [ 2190.282209][T29405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.288102][T29405] RIP: 0033:0x7f6662d85d29 [ 2190.292536][T29405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.312142][T29405] RSP: 002b:00007f6663ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.320566][T29405] RAX: ffffffffffffffda RBX: 00007f6662f75fa0 RCX: 00007f6662d85d29 [ 2190.328532][T29405] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 2190.336494][T29405] RBP: 00007f6663ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.344466][T29405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2190.352432][T29405] R13: 0000000000000000 R14: 00007f6662f75fa0 R15: 00007ffe621a5628 [ 2190.360418][T29405] [ 2190.365633][T29405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2190.373633][T18637] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2190.395932][ T29] audit: type=1400 audit(2000000577.589:648): avc: denied { accept } for pid=29407 comm="syz.7.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2190.544534][T18637] usb 7-1: Using ep0 maxpacket: 8 [ 2190.551509][T18637] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2190.566335][T18637] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2190.575845][T18637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.588422][T18637] usb 7-1: Product: syz [ 2190.595869][T18637] usb 7-1: Manufacturer: syz [ 2190.600480][T18637] usb 7-1: SerialNumber: syz [ 2190.634035][T18637] usb 7-1: config 0 descriptor?? [ 2190.663581][T29415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.336559][ T29] audit: type=1400 audit(2000000578.369:649): avc: denied { map } for pid=29399 comm="syz.6.5295" path="socket:[89845]" dev="sockfs" ino=89845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2192.227603][ T29] audit: type=1400 audit(2000000579.369:650): avc: denied { read } for pid=29399 comm="syz.6.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2192.311211][T29422] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2192.324903][T29422] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2192.873721][T29434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2192.902595][ T29] audit: type=1400 audit(2000000580.049:651): avc: denied { read } for pid=29431 comm="syz.7.5304" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2192.952888][ T29] audit: type=1400 audit(2000000580.049:652): avc: denied { open } for pid=29431 comm="syz.7.5304" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2193.050217][ T29] audit: type=1400 audit(2000000580.059:653): avc: denied { ioctl } for pid=29431 comm="syz.7.5304" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2193.711379][ T29] audit: type=1800 audit(2000000580.409:654): pid=29438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5306" name="bus" dev="overlay" ino=2773 res=0 errno=0 [ 2194.821235][ T29] audit: type=1400 audit(2000000581.999:655): avc: denied { setattr } for pid=29440 comm="syz.9.5309" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 2194.983478][ T25] usb 7-1: USB disconnect, device number 35 [ 2194.992591][ T29] audit: type=1400 audit(2000000582.169:656): avc: denied { sqpoll } for pid=29448 comm="syz.7.5310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2194.997757][T29451] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.5310'. [ 2195.257584][T17215] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 2196.285247][T29458] 9pnet_fd: Insufficient options for proto=fd [ 2196.741875][T29478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2196.806610][ T2154] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2197.092645][ T2154] usb 8-1: Using ep0 maxpacket: 16 [ 2197.110088][ T2154] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.194976][ T2154] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2197.220006][ T2154] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2197.224437][T29474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2197.229365][ T2154] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.258516][ T2154] usb 8-1: Product: syz [ 2197.277746][ T2154] usb 8-1: Manufacturer: syz [ 2197.302948][ T2154] usb 8-1: SerialNumber: syz [ 2197.834193][ T2154] usb 8-1: 0:2 : does not exist [ 2197.844089][ T2154] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 2197.867826][ T2154] usb 8-1: USB disconnect, device number 28 [ 2198.597625][ T29] audit: type=1400 audit(2000000585.789:657): avc: denied { read append } for pid=29495 comm="syz.6.5324" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2198.609807][T18857] udevd[18857]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2198.633318][ T29] audit: type=1400 audit(2000000585.819:658): avc: denied { ioctl open } for pid=29495 comm="syz.6.5324" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2198.775783][T29501] FAULT_INJECTION: forcing a failure. [ 2198.775783][T29501] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.788612][T29501] CPU: 0 UID: 0 PID: 29501 Comm: syz.8.5322 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2198.799385][T29501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2198.809449][T29501] Call Trace: [ 2198.812733][T29501] [ 2198.815668][T29501] dump_stack_lvl+0x16c/0x1f0 [ 2198.820357][T29501] should_fail_ex+0x497/0x5b0 [ 2198.825044][T29501] ? fs_reclaim_acquire+0xae/0x150 [ 2198.830166][T29501] should_failslab+0xc2/0x120 [ 2198.834844][T29501] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 2198.840212][T29501] ? lockdep_hardirqs_on+0x7c/0x110 [ 2198.845408][T29501] ? create_new_namespaces+0x30/0xad0 [ 2198.850781][T29501] create_new_namespaces+0x30/0xad0 [ 2198.855974][T29501] ? __do_sys_setns+0xa4/0x1920 [ 2198.860819][T29501] ? __do_sys_setns+0xb2/0x1920 [ 2198.865666][T29501] __do_sys_setns+0x22a/0x1920 [ 2198.870428][T29501] ? __pfx___do_sys_setns+0x10/0x10 [ 2198.875629][T29501] do_syscall_64+0xcd/0x250 [ 2198.880132][T29501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.886022][T29501] RIP: 0033:0x7fee4d185d29 [ 2198.890428][T29501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.910027][T29501] RSP: 002b:00007fee4dff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 2198.918437][T29501] RAX: ffffffffffffffda RBX: 00007fee4d376080 RCX: 00007fee4d185d29 [ 2198.926403][T29501] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000007 [ 2198.934365][T29501] RBP: 00007fee4dff8090 R08: 0000000000000000 R09: 0000000000000000 [ 2198.942323][T29501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2198.950287][T29501] R13: 0000000000000000 R14: 00007fee4d376080 R15: 00007ffcdda882f8 [ 2198.958261][T29501] [ 2199.106857][ T29] audit: type=1400 audit(2000000586.269:659): avc: denied { map } for pid=29497 comm="syz.8.5322" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2199.842478][ T2154] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2200.012631][ T2154] usb 8-1: Using ep0 maxpacket: 16 [ 2200.265053][ T2154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.276417][ T2154] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2200.286939][ T2154] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2200.296111][ T2154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.298196][ T2154] usb 8-1: config 0 descriptor?? [ 2201.894262][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2202.152874][T18803] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2202.325189][T18803] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2202.954931][T18803] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2202.964078][T18803] usb 10-1: config 1 has no interface number 0 [ 2202.970366][T18803] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.981466][T18803] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2203.116941][ T2154] usbhid 8-1:0.0: can't add hid device: -71 [ 2203.123172][ T2154] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2203.372038][ T2154] usb 8-1: USB disconnect, device number 29 [ 2203.386855][T18803] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2203.396096][T18803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.404249][T18803] usb 10-1: Product: syz [ 2203.408521][T18803] usb 10-1: Manufacturer: syz [ 2203.413318][T18803] usb 10-1: SerialNumber: syz [ 2203.856332][ T29] audit: type=1400 audit(2000000591.039:660): avc: denied { setopt } for pid=29548 comm="syz.1.5337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2203.982535][T27644] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2204.105977][T29554] FAULT_INJECTION: forcing a failure. [ 2204.105977][T29554] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2204.119140][T29554] CPU: 1 UID: 0 PID: 29554 Comm: syz.9.5331 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2204.129922][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2204.139994][T29554] Call Trace: [ 2204.143285][T29554] [ 2204.146254][T29554] dump_stack_lvl+0x16c/0x1f0 [ 2204.150952][T29554] should_fail_ex+0x497/0x5b0 [ 2204.155657][T29554] _copy_from_user+0x2e/0xd0 [ 2204.160268][T29554] move_addr_to_kernel+0x68/0x160 [ 2204.165312][T29554] __sys_sendto+0x1ba/0x4f0 [ 2204.169834][T29554] ? __pfx___sys_sendto+0x10/0x10 [ 2204.174897][T29554] ? ksys_write+0x1ba/0x250 [ 2204.179410][T29554] ? __pfx_ksys_write+0x10/0x10 [ 2204.184275][T29554] __x64_sys_sendto+0xe0/0x1c0 [ 2204.189056][T29554] ? do_syscall_64+0x91/0x250 [ 2204.193748][T29554] ? lockdep_hardirqs_on+0x7c/0x110 [ 2204.198960][T29554] do_syscall_64+0xcd/0x250 [ 2204.203481][T29554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.209392][T29554] RIP: 0033:0x7f7183585d29 [ 2204.213818][T29554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2204.233440][T29554] RSP: 002b:00007f71843ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2204.241879][T29554] RAX: ffffffffffffffda RBX: 00007f7183776160 RCX: 00007f7183585d29 [ 2204.249875][T29554] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000006 [ 2204.257864][T29554] RBP: 00007f71843ea090 R08: 000000002005ffe4 R09: 000000000000001c [ 2204.265849][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.273833][T29554] R13: 0000000000000000 R14: 00007f7183776160 R15: 00007fff7e1270d8 [ 2204.281827][T29554] [ 2205.023072][T27644] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.033913][T27644] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2205.077572][T27644] usb 7-1: config 1 has no interface number 0 [ 2205.083839][T27644] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.094823][T27644] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2206.089618][T27644] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2206.098797][T27644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.123238][T27644] usb 7-1: Product: syz [ 2206.136370][T27644] usb 7-1: Manufacturer: syz [ 2206.277234][T18803] cdc_ncm 10-1:1.1: bind() failure [ 2206.395381][T27644] usb 7-1: SerialNumber: syz [ 2206.549909][T18803] usb 10-1: USB disconnect, device number 41 [ 2208.653264][T29582] FAULT_INJECTION: forcing a failure. [ 2208.653264][T29582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2208.673175][T29582] CPU: 0 UID: 0 PID: 29582 Comm: syz.9.5347 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2208.683984][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2208.694067][T29582] Call Trace: [ 2208.697361][T29582] [ 2208.700311][T29582] dump_stack_lvl+0x16c/0x1f0 [ 2208.705028][T29582] should_fail_ex+0x497/0x5b0 [ 2208.709731][T29582] _copy_from_user+0x2e/0xd0 [ 2208.714345][T29582] do_fcntl+0x115/0x15b0 [ 2208.718612][T29582] ? __pfx_do_fcntl+0x10/0x10 [ 2208.723319][T29582] ? selinux_file_fcntl+0x93/0x170 [ 2208.728453][T29582] __x64_sys_fcntl+0x170/0x200 [ 2208.733252][T29582] do_syscall_64+0xcd/0x250 [ 2208.737794][T29582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.743716][T29582] RIP: 0033:0x7f7183585d29 [ 2208.748158][T29582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2208.767774][T29582] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 2208.776189][T29582] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2208.784158][T29582] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 0000000000000003 [ 2208.792122][T29582] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2208.800110][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2208.808079][T29582] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2208.816063][T29582] [ 2209.132554][T27644] cdc_ncm 7-1:1.1: bind() failure [ 2209.149017][T27644] usb 7-1: USB disconnect, device number 36 [ 2210.391824][ T29] audit: type=1400 audit(2000000597.579:661): avc: denied { setopt } for pid=29594 comm="syz.1.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2211.341684][ T29] audit: type=1400 audit(2000000598.529:662): avc: denied { create } for pid=29608 comm="syz.1.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2211.685941][ T29] audit: type=1400 audit(2000000598.859:663): avc: denied { write } for pid=29608 comm="syz.1.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2212.132557][ T29] audit: type=1400 audit(2000000598.859:664): avc: denied { nlmsg_read } for pid=29608 comm="syz.1.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2212.644399][ T29] audit: type=1326 audit(2000000599.479:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2212.882115][ T29] audit: type=1326 audit(2000000599.479:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2213.132532][ T29] audit: type=1326 audit(2000000599.509:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2213.163744][T29623] overlayfs: failed to clone upperpath [ 2213.212508][ T29] audit: type=1326 audit(2000000599.509:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2213.243140][ T29] audit: type=1326 audit(2000000599.509:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2213.522879][ T29] audit: type=1326 audit(2000000599.539:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.9.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7183585d29 code=0x7ffc0000 [ 2214.189164][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2214.198138][ T25] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2214.537977][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 2214.545364][ T25] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 2214.572427][ T25] usb 10-1: config 0 has no interface number 0 [ 2214.579151][ T25] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2214.608798][ T25] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2214.626813][ T25] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2214.639760][ T25] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2214.656009][ T25] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2214.733371][T27644] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2214.819491][ T25] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2214.869410][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.930034][T27644] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.982554][ T25] usb 10-1: Product: syz [ 2214.994988][T27644] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2215.018348][ T25] usb 10-1: Manufacturer: syz [ 2215.037407][ T25] usb 10-1: SerialNumber: syz [ 2215.794190][T27644] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2215.801847][ T25] usb 10-1: config 0 descriptor?? [ 2215.807045][T27644] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 2215.816796][T27644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.830261][T27644] usb 7-1: config 0 descriptor?? [ 2215.857247][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 2215.857264][ T29] audit: type=1400 audit(2000000603.049:683): avc: denied { setopt } for pid=29664 comm="syz.1.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2216.105234][ T25] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2216.361019][T27644] saitek 0003:06A3:0621.0018: unbalanced collection at end of report description [ 2216.380844][T27644] saitek 0003:06A3:0621.0018: parse failed [ 2216.386840][T27644] saitek 0003:06A3:0621.0018: probe with driver saitek failed with error -22 [ 2216.403955][T29646] iowarrior 10-1:0.186: ioctl 'IOW_WRITE' is not supported for product=0x1505. [ 2216.435658][ T2154] usb 10-1: USB disconnect, device number 42 [ 2216.519548][T29679] FAULT_INJECTION: forcing a failure. [ 2216.519548][T29679] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.546471][T29679] CPU: 1 UID: 0 PID: 29679 Comm: syz.7.5375 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2216.557310][T29679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2216.567370][T29679] Call Trace: [ 2216.570676][T29679] [ 2216.573642][T29679] dump_stack_lvl+0x16c/0x1f0 [ 2216.578344][T29679] should_fail_ex+0x497/0x5b0 [ 2216.583047][T29679] ? fs_reclaim_acquire+0xae/0x150 [ 2216.588185][T29679] should_failslab+0xc2/0x120 [ 2216.592882][T29679] __kmalloc_noprof+0xcb/0x510 [ 2216.597669][T29679] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2216.603327][T29679] tomoyo_realpath_from_path+0xb9/0x720 [ 2216.608892][T29679] ? tomoyo_path_number_perm+0x235/0x590 [ 2216.614543][T29679] ? tomoyo_path_number_perm+0x235/0x590 [ 2216.620198][T29679] tomoyo_path_number_perm+0x248/0x590 [ 2216.625672][T29679] ? tomoyo_path_number_perm+0x235/0x590 [ 2216.631331][T29679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2216.637356][T29679] ? __pfx_lock_release+0x10/0x10 [ 2216.642401][T29679] ? trace_lock_acquire+0x14e/0x1f0 [ 2216.647631][T29679] ? lock_acquire+0x2f/0xb0 [ 2216.652148][T29679] ? __fget_files+0x40/0x3a0 [ 2216.656763][T29679] ? __fget_files+0x206/0x3a0 [ 2216.661465][T29679] security_file_ioctl+0x9b/0x240 [ 2216.666514][T29679] __x64_sys_ioctl+0xb7/0x200 [ 2216.671220][T29679] do_syscall_64+0xcd/0x250 [ 2216.675751][T29679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.680239][T29676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=29676 comm=syz.8.5376 [ 2216.681646][T29679] RIP: 0033:0x7ff332385d29 [ 2216.698630][T29679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2216.718341][T29679] RSP: 002b:00007ff3331b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2216.727041][T29679] RAX: ffffffffffffffda RBX: 00007ff332575fa0 RCX: 00007ff332385d29 [ 2216.735033][T29679] RDX: 0000000020000540 RSI: 0000000080845663 RDI: 0000000000000003 [ 2216.743028][T29679] RBP: 00007ff3331b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.751014][T29679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.759011][T29679] R13: 0000000000000000 R14: 00007ff332575fa0 R15: 00007fffbc83e548 [ 2216.767021][T29679] [ 2216.797681][T29679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2216.830765][T27644] usb 7-1: USB disconnect, device number 37 [ 2217.941764][T29690] overlayfs: failed to clone upperpath [ 2218.893001][ T5866] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2219.002554][ T25] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2219.036264][T29719] FAULT_INJECTION: forcing a failure. [ 2219.036264][T29719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2219.049603][T29719] CPU: 1 UID: 0 PID: 29719 Comm: syz.7.5392 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2219.060385][T29719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2219.070449][T29719] Call Trace: [ 2219.073736][T29719] [ 2219.076669][T29719] dump_stack_lvl+0x16c/0x1f0 [ 2219.081367][T29719] should_fail_ex+0x497/0x5b0 [ 2219.086037][T29719] _copy_from_user+0x2e/0xd0 [ 2219.090617][T29719] do_sys_poll+0x1d6/0xde0 [ 2219.095026][T29719] ? __pfx_mark_lock+0x10/0x10 [ 2219.099794][T29719] ? __pfx_do_sys_poll+0x10/0x10 [ 2219.104723][T29719] ? __pfx___lock_acquire+0x10/0x10 [ 2219.109932][T29719] ? register_lock_class+0xb1/0x1240 [ 2219.115308][T29719] ? __pfx_timespec64_add_safe+0x10/0x10 [ 2219.121118][T29719] ? ktime_get_ts64+0x2d4/0x400 [ 2219.125953][T29719] ? read_tsc+0x9/0x20 [ 2219.130009][T29719] ? ktime_get_ts64+0x256/0x400 [ 2219.134868][T29719] __x64_sys_poll+0x1a8/0x450 [ 2219.139558][T29719] ? __pfx___x64_sys_poll+0x10/0x10 [ 2219.144767][T29719] do_syscall_64+0xcd/0x250 [ 2219.149269][T29719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.155161][T29719] RIP: 0033:0x7ff332385d29 [ 2219.159584][T29719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2219.179188][T29719] RSP: 002b:00007ff3331b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 2219.187595][T29719] RAX: ffffffffffffffda RBX: 00007ff332575fa0 RCX: 00007ff332385d29 [ 2219.195575][T29719] RDX: 000000000000000a RSI: 0000000000000001 RDI: 0000000020000100 [ 2219.203539][T29719] RBP: 00007ff3331b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2219.211505][T29719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.219481][T29719] R13: 0000000000000000 R14: 00007ff332575fa0 R15: 00007fffbc83e548 [ 2219.227471][T29719] [ 2219.238856][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 2219.254229][ T5866] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2219.269258][ T5866] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2219.278413][ T5866] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2219.296552][ T5866] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.319062][ T5866] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=c0.63 [ 2219.328390][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 2219.341042][ T25] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2219.356324][ T5866] usb 10-1: New USB device strings: Mfr=50, Product=221, SerialNumber=3 [ 2219.372581][ T25] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2219.389075][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.402344][ T5866] usb 10-1: Product: syz [ 2219.406791][ T25] usb 9-1: Product: syz [ 2219.411815][ T5866] usb 10-1: Manufacturer: syz [ 2219.421961][ T25] usb 9-1: Manufacturer: syz [ 2219.426796][ T5866] usb 10-1: SerialNumber: syz [ 2219.432000][ T25] usb 9-1: SerialNumber: syz [ 2219.451863][T29725] 9pnet_fd: Insufficient options for proto=fd [ 2219.458491][T29725] netlink: 'syz.7.5394': attribute type 25 has an invalid length. [ 2219.466858][T29725] netlink: 'syz.7.5394': attribute type 7 has an invalid length. [ 2219.540496][T17215] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2219.567223][ T25] usb 9-1: config 0 descriptor?? [ 2219.620492][ T25] cdc_ether 9-1:0.0: skipping garbage [ 2219.626172][ T25] usb 9-1: bad CDC descriptors [ 2219.633535][ T25] usb 9-1: unsupported MDLM descriptors [ 2220.023831][T29692] overlayfs: failed to resolve './file0': -2 [ 2220.121956][T29731] capability: warning: `syz.6.5395' uses 32-bit capabilities (legacy support in use) [ 2220.157780][T29733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2220.169000][ T29] audit: type=1400 audit(2000000607.359:684): avc: denied { map } for pid=29730 comm="syz.6.5395" path="socket:[92193]" dev="sockfs" ino=92193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2220.199629][ T29] audit: type=1400 audit(2000000607.359:685): avc: denied { read } for pid=29730 comm="syz.6.5395" path="socket:[92193]" dev="sockfs" ino=92193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2220.251439][ T5866] usb 10-1: 0:2 : does not exist [ 2220.263585][ T5866] usb 10-1: USB disconnect, device number 43 [ 2220.534420][T29742] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5400'. [ 2220.745428][T18857] udevd[18857]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2221.171263][ T2154] usb 9-1: USB disconnect, device number 30 [ 2222.539508][ T29] audit: type=1400 audit(2000000609.539:686): avc: denied { setopt } for pid=29749 comm="syz.8.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2222.560061][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.567008][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.033501][T29769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2225.613770][ T29] audit: type=1400 audit(2000000612.809:687): avc: denied { accept } for pid=29803 comm="syz.8.5418" lport=39582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2225.681202][ T29] audit: type=1400 audit(2000000612.809:688): avc: denied { write } for pid=29803 comm="syz.8.5418" lport=39582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2226.032733][ T29] audit: type=1400 audit(2000000612.809:689): avc: denied { setopt } for pid=29803 comm="syz.8.5418" lport=39582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2227.824369][T29840] FAULT_INJECTION: forcing a failure. [ 2227.824369][T29840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2227.876052][T29840] CPU: 1 UID: 0 PID: 29840 Comm: syz.8.5426 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2227.886854][T29840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2227.896920][T29840] Call Trace: [ 2227.900211][T29840] [ 2227.903151][T29840] dump_stack_lvl+0x16c/0x1f0 [ 2227.907849][T29840] should_fail_ex+0x497/0x5b0 [ 2227.912549][T29840] _copy_from_user+0x2e/0xd0 [ 2227.917158][T29840] copy_msghdr_from_user+0x99/0x160 [ 2227.922371][T29840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2227.928189][T29840] ? __pfx___lock_acquire+0x10/0x10 [ 2227.933408][T29840] ___sys_recvmsg+0xdc/0x1a0 [ 2227.938010][T29840] ? __pfx____sys_recvmsg+0x10/0x10 [ 2227.943220][T29840] ? __pfx_lock_release+0x10/0x10 [ 2227.948255][T29840] ? trace_lock_acquire+0x14e/0x1f0 [ 2227.953489][T29840] do_recvmmsg+0x2f8/0x740 [ 2227.957921][T29840] ? __pfx_do_recvmmsg+0x10/0x10 [ 2227.962867][T29840] ? vfs_write+0x306/0x1150 [ 2227.967387][T29840] ? __mutex_unlock_slowpath+0x164/0x690 [ 2227.973045][T29840] ? __fget_files+0x206/0x3a0 [ 2227.977741][T29840] __x64_sys_recvmmsg+0x239/0x290 [ 2227.982780][T29840] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2227.988342][T29840] do_syscall_64+0xcd/0x250 [ 2227.992859][T29840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.998766][T29840] RIP: 0033:0x7fee4d185d29 [ 2228.003199][T29840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2228.022824][T29840] RSP: 002b:00007fee4e019038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2228.031253][T29840] RAX: ffffffffffffffda RBX: 00007fee4d375fa0 RCX: 00007fee4d185d29 [ 2228.039234][T29840] RDX: 040000000000019e RSI: 0000000020002e40 RDI: 0000000000000004 [ 2228.047216][T29840] RBP: 00007fee4e019090 R08: 0000000000000000 R09: 0000000000000000 [ 2228.055196][T29840] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000001 [ 2228.063172][T29840] R13: 0000000000000000 R14: 00007fee4d375fa0 R15: 00007ffcdda882f8 [ 2228.071162][T29840] [ 2231.539443][T17215] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2232.610952][ T47] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2232.632825][ T29] audit: type=1400 audit(2000000619.819:690): avc: denied { wake_alarm } for pid=29891 comm="syz.1.5441" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2232.836811][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 2232.858762][ T47] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 2232.864934][T29906] FAULT_INJECTION: forcing a failure. [ 2232.864934][T29906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.871083][ T47] usb 8-1: config 0 has no interface number 0 [ 2232.883001][T29906] CPU: 0 UID: 0 PID: 29906 Comm: syz.9.5445 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2232.891007][ T47] usb 8-1: config 0 interface 64 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2232.896738][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2232.896753][T29906] Call Trace: [ 2232.896761][T29906] [ 2232.896770][T29906] dump_stack_lvl+0x16c/0x1f0 [ 2232.910597][ T47] usb 8-1: New USB device found, idVendor=20d6, idProduct=c013, bcdDevice=ac.c3 [ 2232.917530][T29906] should_fail_ex+0x497/0x5b0 [ 2232.917566][T29906] _copy_from_iter+0x2a1/0x1560 [ 2232.920909][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.923742][T29906] ? register_lock_class+0xb1/0x1240 [ 2232.923773][T29906] ? __pfx__copy_from_iter+0x10/0x10 [ 2232.928416][ T47] usb 8-1: Product: syz [ 2232.937483][T29906] ? __lock_acquire+0xcc5/0x3c40 [ 2232.937507][T29906] ? hlock_class+0x4e/0x130 [ 2232.937531][T29906] ? __lock_acquire+0xcc5/0x3c40 [ 2232.937556][T29906] tun_get_user+0x34e/0x3e40 [ 2232.937588][T29906] ? find_held_lock+0x2d/0x110 [ 2232.937616][T29906] ? __pfx_tun_get_user+0x10/0x10 [ 2232.937641][T29906] ? find_held_lock+0x2d/0x110 [ 2232.937676][T29906] ? __pfx_lock_release+0x10/0x10 [ 2232.937709][T29906] tun_chr_write_iter+0xdc/0x210 [ 2232.937738][T29906] vfs_write+0x5ae/0x1150 [ 2232.937761][T29906] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2232.937787][T29906] ? __pfx_vfs_write+0x10/0x10 [ 2232.937806][T29906] ? __fget_files+0x40/0x3a0 [ 2232.950897][ T47] usb 8-1: Manufacturer: syz [ 2232.955246][T29906] ksys_write+0x12b/0x250 [ 2232.955271][T29906] ? __pfx_ksys_write+0x10/0x10 [ 2232.955297][T29906] do_syscall_64+0xcd/0x250 [ 2232.955325][T29906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.955351][T29906] RIP: 0033:0x7f7183585d29 [ 2232.955370][T29906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2232.955390][T29906] RSP: 002b:00007f718442c038 EFLAGS: 00000246 [ 2232.960644][ T47] usb 8-1: SerialNumber: syz [ 2232.965893][T29906] ORIG_RAX: 0000000000000001 [ 2232.965903][T29906] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2232.965917][T29906] RDX: 000000000000ffdd RSI: 0000000020000440 RDI: 0000000000000003 [ 2232.965929][T29906] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.965943][T29906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.965956][T29906] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2233.136349][T29906] [ 2233.185095][T29910] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5444'. [ 2233.428064][ T47] usb 8-1: config 0 descriptor?? [ 2234.373678][T18687] usb 8-1: USB disconnect, device number 30 [ 2234.849046][T29938] FAULT_INJECTION: forcing a failure. [ 2234.849046][T29938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2234.862784][ T29] audit: type=1400 audit(2000000622.029:691): avc: denied { execute } for pid=29936 comm="syz.6.5454" path="/proc/1784/attr" dev="proc" ino=92465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2234.890682][T29938] CPU: 0 UID: 0 PID: 29938 Comm: syz.9.5453 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2234.901456][T29938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2234.911515][T29938] Call Trace: [ 2234.914790][T29938] [ 2234.917731][T29938] dump_stack_lvl+0x16c/0x1f0 [ 2234.922417][T29938] should_fail_ex+0x497/0x5b0 [ 2234.927083][T29938] _copy_from_user+0x2e/0xd0 [ 2234.931681][T29938] copy_msghdr_from_user+0x99/0x160 [ 2234.936871][T29938] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2234.942700][T29938] ___sys_sendmsg+0xff/0x1e0 [ 2234.947302][T29938] ? __pfx____sys_sendmsg+0x10/0x10 [ 2234.952530][T29938] ? __pfx_lock_release+0x10/0x10 [ 2234.957573][T29938] ? trace_lock_acquire+0x14e/0x1f0 [ 2234.962802][T29938] ? __fget_files+0x206/0x3a0 [ 2234.967473][T29938] __sys_sendmsg+0x16e/0x220 [ 2234.972055][T29938] ? __pfx___sys_sendmsg+0x10/0x10 [ 2234.977157][T29938] do_syscall_64+0xcd/0x250 [ 2234.981649][T29938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.987536][T29938] RIP: 0033:0x7f7183585d29 [ 2234.991220][T29941] overlayfs: failed to clone upperpath [ 2234.991943][T29938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2234.991965][T29938] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2235.025411][T29938] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2235.033373][T29938] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 2235.041333][T29938] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.049297][T29938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.057258][T29938] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2235.065237][T29938] [ 2235.361787][T29953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5457'. [ 2235.482167][ T29] audit: type=1400 audit(2000000622.559:692): avc: denied { bind } for pid=29949 comm="syz.8.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2235.811837][T29963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2236.331925][T29978] FAULT_INJECTION: forcing a failure. [ 2236.331925][T29978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2236.345409][T29978] CPU: 1 UID: 0 PID: 29978 Comm: syz.6.5466 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2236.356186][T29978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2236.366232][T29978] Call Trace: [ 2236.369491][T29978] [ 2236.372419][T29978] dump_stack_lvl+0x16c/0x1f0 [ 2236.377104][T29978] should_fail_ex+0x497/0x5b0 [ 2236.381779][T29978] _copy_from_user+0x2e/0xd0 [ 2236.386361][T29978] copy_msghdr_from_user+0x99/0x160 [ 2236.391543][T29978] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2236.397339][T29978] ___sys_sendmsg+0xff/0x1e0 [ 2236.401918][T29978] ? __pfx____sys_sendmsg+0x10/0x10 [ 2236.407107][T29978] ? __pfx_lock_release+0x10/0x10 [ 2236.412133][T29978] ? trace_lock_acquire+0x14e/0x1f0 [ 2236.417326][T29978] ? __fget_files+0x206/0x3a0 [ 2236.421983][T29978] __sys_sendmsg+0x16e/0x220 [ 2236.426566][T29978] ? __pfx___sys_sendmsg+0x10/0x10 [ 2236.431687][T29978] do_syscall_64+0xcd/0x250 [ 2236.436180][T29978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2236.442081][T29978] RIP: 0033:0x7ff343585d29 [ 2236.446475][T29978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2236.466087][T29978] RSP: 002b:00007ff34444d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2236.474480][T29978] RAX: ffffffffffffffda RBX: 00007ff343775fa0 RCX: 00007ff343585d29 [ 2236.482432][T29978] RDX: 0000000004000080 RSI: 0000000020000480 RDI: 0000000000000003 [ 2236.490378][T29978] RBP: 00007ff34444d090 R08: 0000000000000000 R09: 0000000000000000 [ 2236.498329][T29978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2236.506285][T29978] R13: 0000000000000000 R14: 00007ff343775fa0 R15: 00007ffc687cced8 [ 2236.514253][T29978] [ 2237.100899][ T29] audit: type=1400 audit(2000000624.289:693): avc: denied { create } for pid=29999 comm="syz.6.5473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2238.306560][T30033] hub 2-0:1.0: USB hub found [ 2238.311984][T30033] hub 2-0:1.0: 1 port detected [ 2240.541224][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5491'. [ 2242.339472][T30082] netlink: 'syz.8.5496': attribute type 2 has an invalid length. [ 2243.343563][T30091] FAULT_INJECTION: forcing a failure. [ 2243.343563][T30091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2243.387603][T30091] CPU: 0 UID: 0 PID: 30091 Comm: syz.9.5501 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2243.398404][T30091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2243.408476][T30091] Call Trace: [ 2243.411763][T30091] [ 2243.414697][T30091] dump_stack_lvl+0x16c/0x1f0 [ 2243.419392][T30091] should_fail_ex+0x497/0x5b0 [ 2243.424091][T30091] _copy_from_user+0x2e/0xd0 [ 2243.428708][T30091] copy_msghdr_from_user+0x99/0x160 [ 2243.433925][T30091] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2243.439756][T30091] ___sys_sendmsg+0xff/0x1e0 [ 2243.444361][T30091] ? __pfx____sys_sendmsg+0x10/0x10 [ 2243.449582][T30091] ? __pfx_lock_release+0x10/0x10 [ 2243.454618][T30091] ? trace_lock_acquire+0x14e/0x1f0 [ 2243.459849][T30091] ? __fget_files+0x206/0x3a0 [ 2243.464545][T30091] __sys_sendmsg+0x16e/0x220 [ 2243.469148][T30091] ? __pfx___sys_sendmsg+0x10/0x10 [ 2243.474290][T30091] do_syscall_64+0xcd/0x250 [ 2243.478807][T30091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.484721][T30091] RIP: 0033:0x7f7183585d29 [ 2243.489156][T30091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2243.508784][T30091] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2243.517224][T30091] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2243.525206][T30091] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2243.533177][T30091] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.541140][T30091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.549108][T30091] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2243.557087][T30091] [ 2249.230379][T30151] overlayfs: failed to clone upperpath [ 2250.150974][ T29] audit: type=1400 audit(2000000637.339:694): avc: denied { connect } for pid=30155 comm="syz.1.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2250.345579][ T29] audit: type=1400 audit(2000000637.539:695): avc: denied { read } for pid=30155 comm="syz.1.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2250.632590][ T47] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2250.782572][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 2250.802036][ T47] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2250.811510][ T47] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2250.857917][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2250.878949][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2250.893000][ T47] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2250.911745][ T47] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2250.922293][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.166032][ T47] usb 8-1: usb_control_msg returned -32 [ 2251.179187][ T47] usbtmc 8-1:16.0: can't read capabilities [ 2251.981108][T18637] usb 8-1: USB disconnect, device number 31 [ 2251.989574][T30177] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 2252.187008][T30183] FAULT_INJECTION: forcing a failure. [ 2252.187008][T30183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2252.200418][T30183] CPU: 1 UID: 0 PID: 30183 Comm: syz.9.5527 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2252.211210][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2252.221282][T30183] Call Trace: [ 2252.224581][T30183] [ 2252.227529][T30183] dump_stack_lvl+0x16c/0x1f0 [ 2252.232232][T30183] should_fail_ex+0x497/0x5b0 [ 2252.236941][T30183] _copy_from_user+0x2e/0xd0 [ 2252.241563][T30183] __sys_bpf+0x21c/0x49c0 [ 2252.245929][T30183] ? __pfx_lock_release+0x10/0x10 [ 2252.250982][T30183] ? __pfx___sys_bpf+0x10/0x10 [ 2252.255753][T30183] ? vfs_write+0x306/0x1150 [ 2252.260260][T30183] ? __mutex_unlock_slowpath+0x164/0x690 [ 2252.265916][T30183] ? fput+0x67/0x440 [ 2252.269815][T30183] ? ksys_write+0x1ba/0x250 [ 2252.274322][T30183] ? __pfx_ksys_write+0x10/0x10 [ 2252.279171][T30183] __x64_sys_bpf+0x78/0xc0 [ 2252.283595][T30183] ? lockdep_hardirqs_on+0x7c/0x110 [ 2252.288790][T30183] do_syscall_64+0xcd/0x250 [ 2252.293295][T30183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2252.299187][T30183] RIP: 0033:0x7f7183585d29 [ 2252.303600][T30183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2252.323206][T30183] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2252.331614][T30183] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2252.339582][T30183] RDX: 0000000000000020 RSI: 00000000200003c0 RDI: 0000000000000002 [ 2252.347545][T30183] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2252.355533][T30183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2252.363502][T30183] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2252.371502][T30183] [ 2252.489529][T30191] FAULT_INJECTION: forcing a failure. [ 2252.489529][T30191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2252.552417][T30191] CPU: 0 UID: 0 PID: 30191 Comm: syz.6.5530 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2252.563224][T30191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2252.573302][T30191] Call Trace: [ 2252.576592][T30191] [ 2252.579539][T30191] dump_stack_lvl+0x16c/0x1f0 [ 2252.584237][T30191] should_fail_ex+0x497/0x5b0 [ 2252.588939][T30191] _copy_from_user+0x2e/0xd0 [ 2252.593550][T30191] core_sys_select+0x2cf/0xb80 [ 2252.598329][T30191] ? __pfx_core_sys_select+0x10/0x10 [ 2252.603624][T30191] ? get_pid_task+0xfc/0x250 [ 2252.608244][T30191] ? set_user_sigmask+0x217/0x2a0 [ 2252.613279][T30191] ? __pfx_set_user_sigmask+0x10/0x10 [ 2252.618667][T30191] do_pselect.constprop.0+0x1a0/0x1f0 [ 2252.624052][T30191] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 2252.629963][T30191] __x64_sys_pselect6+0x183/0x240 [ 2252.635000][T30191] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 2252.640562][T30191] do_syscall_64+0xcd/0x250 [ 2252.645078][T30191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2252.650988][T30191] RIP: 0033:0x7ff343585d29 [ 2252.655405][T30191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2252.675029][T30191] RSP: 002b:00007ff34444d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2252.683459][T30191] RAX: ffffffffffffffda RBX: 00007ff343775fa0 RCX: 00007ff343585d29 [ 2252.691538][T30191] RDX: 0000000000000000 RSI: 00000000200045c0 RDI: 0000000000000040 [ 2252.699520][T30191] RBP: 00007ff34444d090 R08: 0000000000000000 R09: 0000000000000000 [ 2252.707496][T30191] R10: 0000000020004640 R11: 0000000000000246 R12: 0000000000000001 [ 2252.715474][T30191] R13: 0000000000000000 R14: 00007ff343775fa0 R15: 00007ffc687cced8 [ 2252.723442][T30191] [ 2252.940627][T17215] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2253.744738][ T29] audit: type=1400 audit(2000000640.879:696): avc: denied { write } for pid=30200 comm="syz.6.5532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2254.122804][ T29] audit: type=1400 audit(2000000640.879:697): avc: denied { ioctl } for pid=30200 comm="syz.6.5532" path="socket:[92142]" dev="sockfs" ino=92142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2255.255807][T30219] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5531'. [ 2255.348361][T30223] FAULT_INJECTION: forcing a failure. [ 2255.348361][T30223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2255.361568][T30223] CPU: 0 UID: 0 PID: 30223 Comm: syz.6.5538 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2255.372437][T30223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2255.382511][T30223] Call Trace: [ 2255.385792][T30223] [ 2255.388728][T30223] dump_stack_lvl+0x16c/0x1f0 [ 2255.393423][T30223] should_fail_ex+0x497/0x5b0 [ 2255.398151][T30223] _copy_from_user+0x2e/0xd0 [ 2255.402786][T30223] copy_msghdr_from_user+0x99/0x160 [ 2255.407996][T30223] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2255.413831][T30223] ___sys_sendmsg+0xff/0x1e0 [ 2255.418444][T30223] ? __pfx____sys_sendmsg+0x10/0x10 [ 2255.423697][T30223] ? __pfx_lock_release+0x10/0x10 [ 2255.428734][T30223] ? trace_lock_acquire+0x14e/0x1f0 [ 2255.433963][T30223] ? __fget_files+0x206/0x3a0 [ 2255.438672][T30223] __sys_sendmsg+0x16e/0x220 [ 2255.443282][T30223] ? __pfx___sys_sendmsg+0x10/0x10 [ 2255.448426][T30223] do_syscall_64+0xcd/0x250 [ 2255.452951][T30223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2255.458895][T30223] RIP: 0033:0x7ff343585d29 [ 2255.463322][T30223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2255.482962][T30223] RSP: 002b:00007ff34444d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2255.491395][T30223] RAX: ffffffffffffffda RBX: 00007ff343775fa0 RCX: 00007ff343585d29 [ 2255.499382][T30223] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 2255.507375][T30223] RBP: 00007ff34444d090 R08: 0000000000000000 R09: 0000000000000000 [ 2255.515373][T30223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2255.523360][T30223] R13: 0000000000000000 R14: 00007ff343775fa0 R15: 00007ffc687cced8 [ 2255.531363][T30223] [ 2255.798049][T18803] libceph: connect (1)[c::]:6789 error -101 [ 2255.804883][T18803] libceph: mon0 (1)[c::]:6789 connect error [ 2255.823927][T18803] libceph: connect (1)[c::]:6789 error -101 [ 2256.029618][T30219] ceph: No mds server is up or the cluster is laggy [ 2256.036724][T18803] libceph: mon0 (1)[c::]:6789 connect error [ 2258.611032][T17215] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2259.383796][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5551'. [ 2259.500761][ T29] audit: type=1400 audit(2000000646.589:698): avc: denied { connect } for pid=30283 comm="syz.8.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2260.273043][T30290] FAULT_INJECTION: forcing a failure. [ 2260.273043][T30290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2260.315442][T30290] CPU: 1 UID: 0 PID: 30290 Comm: syz.8.5554 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2260.326244][T30290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2260.336315][T30290] Call Trace: [ 2260.339600][T30290] [ 2260.342539][T30290] dump_stack_lvl+0x16c/0x1f0 [ 2260.347236][T30290] should_fail_ex+0x497/0x5b0 [ 2260.351926][T30290] _copy_from_user+0x2e/0xd0 [ 2260.356522][T30290] copy_msghdr_from_user+0x99/0x160 [ 2260.361717][T30290] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2260.367512][T30290] ? __lock_acquire+0xcc5/0x3c40 [ 2260.372461][T30290] ___sys_sendmsg+0xff/0x1e0 [ 2260.377042][T30290] ? __pfx____sys_sendmsg+0x10/0x10 [ 2260.382240][T30290] ? trace_lock_acquire+0x14e/0x1f0 [ 2260.387457][T30290] __sys_sendmmsg+0x201/0x420 [ 2260.392132][T30290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2260.397335][T30290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2260.403328][T30290] ? fput+0x67/0x440 [ 2260.407219][T30290] ? ksys_write+0x1ba/0x250 [ 2260.411711][T30290] ? __pfx_ksys_write+0x10/0x10 [ 2260.416557][T30290] __x64_sys_sendmmsg+0x9c/0x100 [ 2260.421488][T30290] ? lockdep_hardirqs_on+0x7c/0x110 [ 2260.426755][T30290] do_syscall_64+0xcd/0x250 [ 2260.431255][T30290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.437153][T30290] RIP: 0033:0x7fee4d185d29 [ 2260.441560][T30290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2260.461164][T30290] RSP: 002b:00007fee4e019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2260.469591][T30290] RAX: ffffffffffffffda RBX: 00007fee4d375fa0 RCX: 00007fee4d185d29 [ 2260.477555][T30290] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 2260.485516][T30290] RBP: 00007fee4e019090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.493495][T30290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2260.501473][T30290] R13: 0000000000000000 R14: 00007fee4d375fa0 R15: 00007ffcdda882f8 [ 2260.509461][T30290] [ 2260.515211][T30292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.206637][T30321] FAULT_INJECTION: forcing a failure. [ 2262.206637][T30321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2262.259118][T30321] CPU: 0 UID: 0 PID: 30321 Comm: syz.8.5564 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2262.269935][T30321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2262.280005][T30321] Call Trace: [ 2262.283300][T30321] [ 2262.286238][T30321] dump_stack_lvl+0x16c/0x1f0 [ 2262.290937][T30321] should_fail_ex+0x497/0x5b0 [ 2262.295639][T30321] _copy_from_user+0x2e/0xd0 [ 2262.300258][T30321] copy_msghdr_from_user+0x99/0x160 [ 2262.305472][T30321] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2262.311300][T30321] ___sys_sendmsg+0xff/0x1e0 [ 2262.315902][T30321] ? __pfx____sys_sendmsg+0x10/0x10 [ 2262.321122][T30321] ? __pfx_lock_release+0x10/0x10 [ 2262.326156][T30321] ? trace_lock_acquire+0x14e/0x1f0 [ 2262.331383][T30321] ? __fget_files+0x206/0x3a0 [ 2262.336074][T30321] __sys_sendmsg+0x16e/0x220 [ 2262.340681][T30321] ? __pfx___sys_sendmsg+0x10/0x10 [ 2262.345817][T30321] do_syscall_64+0xcd/0x250 [ 2262.350336][T30321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.356243][T30321] RIP: 0033:0x7fee4d185d29 [ 2262.360665][T30321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2262.380291][T30321] RSP: 002b:00007fee4e019038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2262.388725][T30321] RAX: ffffffffffffffda RBX: 00007fee4d375fa0 RCX: 00007fee4d185d29 [ 2262.396712][T30321] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 2262.404705][T30321] RBP: 00007fee4e019090 R08: 0000000000000000 R09: 0000000000000000 [ 2262.412688][T30321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2262.420669][T30321] R13: 0000000000000000 R14: 00007fee4d375fa0 R15: 00007ffcdda882f8 [ 2262.428663][T30321] [ 2263.362533][T18429] Bluetooth: hci4: command 0x0406 tx timeout [ 2263.421437][T18687] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2264.222771][T18687] usb 7-1: Using ep0 maxpacket: 16 [ 2264.244144][T18687] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2264.254483][T18687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.294303][T18687] usb 7-1: Product: syz [ 2264.298508][T18687] usb 7-1: Manufacturer: syz [ 2264.403198][T18687] usb 7-1: SerialNumber: syz [ 2264.409693][T18687] usb 7-1: config 0 descriptor?? [ 2264.429653][T18687] appledisplay 7-1:0.0: Could not find int-in endpoint [ 2264.465603][T18687] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2264.487315][ T29] audit: type=1400 audit(2000000651.679:699): avc: denied { setopt } for pid=30341 comm="syz.8.5569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2264.558958][T30343] netlink: zone id is out of range [ 2264.567031][T30343] netlink: zone id is out of range [ 2264.572285][T30343] netlink: zone id is out of range [ 2264.581134][T30343] netlink: zone id is out of range [ 2264.601723][T30343] netlink: zone id is out of range [ 2264.636765][T18687] usb 7-1: USB disconnect, device number 38 [ 2264.684647][T30343] netlink: set zone limit has 4 unknown bytes [ 2265.113414][T30353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5572'. [ 2267.792543][ T29] audit: type=1400 audit(2000000654.809:700): avc: denied { write } for pid=30373 comm="syz.6.5578" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2268.369609][T30396] vxcan1: tx address claim with dest, not broadcast [ 2268.513961][T30397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.561453][T30397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.693170][T18803] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2269.418500][T30408] netlink: 'syz.1.5586': attribute type 2 has an invalid length. [ 2270.151526][T30413] netlink: 'syz.7.5584': attribute type 2 has an invalid length. [ 2270.522460][T18803] usb 10-1: Using ep0 maxpacket: 16 [ 2270.529352][T18803] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 2270.537745][T18803] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.750035][T18803] usb 10-1: config 0 has no interface number 0 [ 2270.770744][T18803] usb 10-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2270.798312][T18803] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2270.890679][T18803] usb 10-1: Product: syz [ 2270.910318][T18803] usb 10-1: SerialNumber: syz [ 2270.954432][T18803] usb 10-1: config 0 descriptor?? [ 2270.995435][T18803] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2271.492555][T27644] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2271.667519][T27644] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.709177][T27644] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2271.770329][T27644] usb 9-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 2271.821941][T27644] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.880777][T27644] usb 9-1: config 0 descriptor?? [ 2271.977779][T18803] snd-usb-audio 10-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 2271.988898][T18803] usb 10-1: USB disconnect, device number 44 [ 2272.352038][T18857] udevd[18857]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2273.137957][T27644] wacom 0003:056A:00B5.0019: unknown main item tag 0x0 [ 2273.145668][T27644] wacom 0003:056A:00B5.0019: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 2273.559990][T30432] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.5591'. [ 2273.730257][T27644] wacom 0003:056A:00B5.0019: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.8-1/input0 [ 2273.742931][T27644] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00B5.0019/input/input31 [ 2273.812513][T27644] usb 9-1: USB disconnect, device number 31 [ 2274.110171][T30460] netlink: 'syz.7.5594': attribute type 1 has an invalid length. [ 2274.118102][T30460] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5594'. [ 2275.228549][ T29] audit: type=1400 audit(2000000662.399:701): avc: denied { setattr } for pid=30469 comm="syz.8.5599" name="NFC_LLCP" dev="sockfs" ino=94365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2275.251444][ C1] vkms_vblank_simulate: vblank timer overrun [ 2275.806781][ T29] audit: type=1400 audit(2000000662.999:702): avc: denied { write } for pid=30494 comm="syz.9.5605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2276.856537][T30512] FAULT_INJECTION: forcing a failure. [ 2276.856537][T30512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.892580][ T29] audit: type=1400 audit(2000000664.079:703): avc: denied { setattr } for pid=30509 comm="syz.1.5607" name="UDP-Lite" dev="sockfs" ino=94427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2276.922685][T30512] CPU: 1 UID: 0 PID: 30512 Comm: syz.6.5609 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2276.933483][T30512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2276.943544][T30512] Call Trace: [ 2276.946814][T30512] [ 2276.949736][T30512] dump_stack_lvl+0x16c/0x1f0 [ 2276.954415][T30512] should_fail_ex+0x497/0x5b0 [ 2276.959101][T30512] _copy_from_user+0x2e/0xd0 [ 2276.963743][T30512] copy_msghdr_from_user+0x99/0x160 [ 2276.968957][T30512] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2276.974785][T30512] ? find_held_lock+0x2d/0x110 [ 2276.979561][T30512] ___sys_recvmsg+0xdc/0x1a0 [ 2276.984172][T30512] ? __pfx____sys_recvmsg+0x10/0x10 [ 2276.989368][T30512] ? __fget_files+0x1fc/0x3a0 [ 2276.994049][T30512] ? trace_lock_acquire+0x14e/0x1f0 [ 2276.999255][T30512] ? __fget_files+0x206/0x3a0 [ 2277.003933][T30512] __sys_recvmsg+0x16b/0x220 [ 2277.008521][T30512] ? __pfx___sys_recvmsg+0x10/0x10 [ 2277.013642][T30512] do_syscall_64+0xcd/0x250 [ 2277.018147][T30512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.024042][T30512] RIP: 0033:0x7ff343585d29 [ 2277.028448][T30512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2277.048049][T30512] RSP: 002b:00007ff34444d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2277.056460][T30512] RAX: ffffffffffffffda RBX: 00007ff343775fa0 RCX: 00007ff343585d29 [ 2277.064440][T30512] RDX: 0000000000012022 RSI: 0000000020000980 RDI: 0000000000000004 [ 2277.072412][T30512] RBP: 00007ff34444d090 R08: 0000000000000000 R09: 0000000000000000 [ 2277.080374][T30512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.088335][T30512] R13: 0000000000000000 R14: 00007ff343775fa0 R15: 00007ffc687cced8 [ 2277.096312][T30512] [ 2277.162342][T30516] netlink: 'syz.8.5608': attribute type 1 has an invalid length. [ 2277.170224][T30516] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5608'. [ 2277.333074][T30505] tipc: Enabling of bearer rejected, failed to enable media [ 2278.182342][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2279.986002][T30540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2280.376192][T30549] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 2280.510069][T30552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2281.331482][T30551] pimreg: entered allmulticast mode [ 2282.195355][T18637] IPVS: starting estimator thread 0... [ 2282.492748][T30561] IPVS: using max 25 ests per chain, 60000 per kthread [ 2283.192789][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.549042][T30575] netlink: 'syz.6.5624': attribute type 2 has an invalid length. [ 2286.911650][ T29] audit: type=1400 audit(2000000674.099:704): avc: denied { getopt } for pid=30589 comm="syz.1.5632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2288.731495][T30616] netlink: 'syz.9.5636': attribute type 2 has an invalid length. [ 2290.020456][T30618] netlink: 'syz.1.5639': attribute type 2 has an invalid length. [ 2291.309855][T30630] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2291.972503][T30631] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2292.242542][T30631] usb 9-1: device descriptor read/64, error -71 [ 2292.502961][T30631] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2293.322510][T30650] FAULT_INJECTION: forcing a failure. [ 2293.322510][T30650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2293.352840][T30631] usb 9-1: device descriptor read/64, error -71 [ 2293.361427][T30650] CPU: 1 UID: 0 PID: 30650 Comm: syz.7.5646 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2293.372309][T30650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2293.382375][T30650] Call Trace: [ 2293.385667][T30650] [ 2293.388609][T30650] dump_stack_lvl+0x16c/0x1f0 [ 2293.393308][T30650] should_fail_ex+0x497/0x5b0 [ 2293.398001][T30650] _copy_from_user+0x2e/0xd0 [ 2293.402598][T30650] __sys_bpf+0x21c/0x49c0 [ 2293.406930][T30650] ? __pfx_lock_release+0x10/0x10 [ 2293.411956][T30650] ? __pfx___sys_bpf+0x10/0x10 [ 2293.416722][T30650] ? vfs_write+0x306/0x1150 [ 2293.421245][T30650] ? __mutex_unlock_slowpath+0x164/0x690 [ 2293.426897][T30650] ? fput+0x67/0x440 [ 2293.430800][T30650] ? ksys_write+0x1ba/0x250 [ 2293.435303][T30650] ? __pfx_ksys_write+0x10/0x10 [ 2293.440152][T30650] __x64_sys_bpf+0x78/0xc0 [ 2293.444570][T30650] ? lockdep_hardirqs_on+0x7c/0x110 [ 2293.449766][T30650] do_syscall_64+0xcd/0x250 [ 2293.454280][T30650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.460175][T30650] RIP: 0033:0x7ff332385d29 [ 2293.464585][T30650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2293.484187][T30650] RSP: 002b:00007ff3331b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2293.492595][T30650] RAX: ffffffffffffffda RBX: 00007ff332575fa0 RCX: 00007ff332385d29 [ 2293.500559][T30650] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000009 [ 2293.508530][T30650] RBP: 00007ff3331b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.516494][T30650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.524460][T30650] R13: 0000000000000000 R14: 00007ff332575fa0 R15: 00007fffbc83e548 [ 2293.532450][T30650] [ 2293.565862][T30631] usb usb9-port1: attempt power cycle [ 2294.826553][T30631] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2296.621547][T30669] netlink: 'syz.1.5654': attribute type 2 has an invalid length. [ 2296.700710][T30631] usb 9-1: device descriptor read/8, error -71 [ 2296.953673][T30677] overlayfs: failed to resolve './file1': -2 [ 2297.352517][T30674] netlink: 'syz.7.5651': attribute type 2 has an invalid length. [ 2297.367233][ T29] audit: type=1800 audit(2000000684.279:705): pid=30678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5655" name="bus" dev="overlay" ino=3108 res=0 errno=0 [ 2298.012593][ T29] audit: type=1400 audit(2000000685.149:706): avc: denied { write } for pid=30691 comm="syz.6.5661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2298.013058][T30696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2298.083005][T30694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.097828][T30700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=30700 comm=syz.6.5664 [ 2301.250479][T30750] overlayfs: failed to resolve './file1': -2 [ 2302.132586][ T25] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2302.473160][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 2302.493366][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 2302.635756][ T25] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2302.649648][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.659803][ T25] usb 10-1: Product: syz [ 2302.669314][ T25] usb 10-1: Manufacturer: syz [ 2302.781294][ T29] audit: type=1400 audit(2000000689.969:707): avc: denied { map } for pid=30770 comm="syz.7.5682" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2302.798416][ T25] usb 10-1: SerialNumber: syz [ 2302.824376][ T25] usb 10-1: config 0 descriptor?? [ 2302.922478][T27644] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2303.072538][T27644] usb 9-1: Using ep0 maxpacket: 16 [ 2303.089332][T27644] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 2303.143624][T27644] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2303.155889][T27644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.190723][T27644] usb 9-1: Product: syz [ 2303.212534][T27644] usb 9-1: Manufacturer: syz [ 2303.258032][T27644] usb 9-1: SerialNumber: syz [ 2303.574653][T27644] usb 9-1: config 0 descriptor?? [ 2304.158422][T30735] orangefs_mount: mount request failed with -4 [ 2304.228440][T30631] usb 10-1: USB disconnect, device number 45 [ 2305.468495][T30762] orangefs_mount: mount request failed with -4 [ 2305.500613][T18637] usb 9-1: USB disconnect, device number 36 [ 2306.295616][ T29] audit: type=1400 audit(2000000693.489:708): avc: denied { listen } for pid=30814 comm="syz.1.5694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2308.311597][ T29] audit: type=1400 audit(2000000695.499:709): avc: denied { append } for pid=30836 comm="syz.9.5699" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2308.652663][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2309.726465][T30840] FAULT_INJECTION: forcing a failure. [ 2309.726465][T30840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2309.739557][T30840] CPU: 1 UID: 0 PID: 30840 Comm: syz.9.5699 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2309.750299][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2309.760337][T30840] Call Trace: [ 2309.763622][T30840] [ 2309.766534][T30840] dump_stack_lvl+0x16c/0x1f0 [ 2309.771197][T30840] should_fail_ex+0x497/0x5b0 [ 2309.775861][T30840] _copy_from_user+0x2e/0xd0 [ 2309.780436][T30840] copy_msghdr_from_user+0x99/0x160 [ 2309.785624][T30840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2309.791422][T30840] ___sys_sendmsg+0xff/0x1e0 [ 2309.796002][T30840] ? __pfx____sys_sendmsg+0x10/0x10 [ 2309.801205][T30840] ? __pfx_lock_release+0x10/0x10 [ 2309.806300][T30840] ? trace_lock_acquire+0x14e/0x1f0 [ 2309.811503][T30840] ? __fget_files+0x206/0x3a0 [ 2309.816178][T30840] __sys_sendmsg+0x16e/0x220 [ 2309.820782][T30840] ? __pfx___sys_sendmsg+0x10/0x10 [ 2309.825883][T30840] do_syscall_64+0xcd/0x250 [ 2309.830386][T30840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2309.836294][T30840] RIP: 0033:0x7f7183585d29 [ 2309.840702][T30840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2309.860301][T30840] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2309.868703][T30840] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2309.876664][T30840] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0000000000000007 [ 2309.884619][T30840] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2309.892578][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.900533][T30840] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2309.908491][T30840] [ 2310.054525][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5703'. [ 2310.055480][T30853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5702'. [ 2310.125804][T30858] FAULT_INJECTION: forcing a failure. [ 2310.125804][T30858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.142223][T30858] CPU: 0 UID: 0 PID: 30858 Comm: syz.8.5703 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2310.153014][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2310.163068][T30858] Call Trace: [ 2310.166340][T30858] [ 2310.169262][T30858] dump_stack_lvl+0x16c/0x1f0 [ 2310.173942][T30858] should_fail_ex+0x497/0x5b0 [ 2310.178631][T30858] _copy_from_iter+0x2a1/0x1560 [ 2310.183487][T30858] ? trace_lock_acquire+0x14e/0x1f0 [ 2310.188687][T30858] ? __pfx__copy_from_iter+0x10/0x10 [ 2310.193972][T30858] ? __virt_addr_valid+0x1a4/0x590 [ 2310.199086][T30858] ? __virt_addr_valid+0x5e/0x590 [ 2310.204110][T30858] ? __phys_addr+0xc6/0x150 [ 2310.208616][T30858] ? __phys_addr_symbol+0x30/0x80 [ 2310.213640][T30858] ? __check_object_size+0x488/0x710 [ 2310.218926][T30858] isotp_sendmsg+0x7a4/0x1da0 [ 2310.223616][T30858] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 2310.230384][T30858] ? __pfx_isotp_sendmsg+0x10/0x10 [ 2310.235495][T30858] ? __fget_files+0x206/0x3a0 [ 2310.240170][T30858] __sys_sendto+0x488/0x4f0 [ 2310.244679][T30858] ? __pfx___sys_sendto+0x10/0x10 [ 2310.249721][T30858] ? ksys_write+0x1ba/0x250 [ 2310.254219][T30858] ? __pfx_ksys_write+0x10/0x10 [ 2310.259076][T30858] __x64_sys_sendto+0xe0/0x1c0 [ 2310.263841][T30858] ? do_syscall_64+0x91/0x250 [ 2310.268515][T30858] ? lockdep_hardirqs_on+0x7c/0x110 [ 2310.273710][T30858] do_syscall_64+0xcd/0x250 [ 2310.278213][T30858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.284123][T30858] RIP: 0033:0x7fee4d185d29 [ 2310.288542][T30858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2310.308150][T30858] RSP: 002b:00007fee4dff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2310.316566][T30858] RAX: ffffffffffffffda RBX: 00007fee4d376080 RCX: 00007fee4d185d29 [ 2310.324533][T30858] RDX: 00000000000000b8 RSI: 0000000020000600 RDI: 0000000000000004 [ 2310.332500][T30858] RBP: 00007fee4dff8090 R08: 0000000000000000 R09: 0000000000000000 [ 2310.340468][T30858] R10: 0000000020004005 R11: 0000000000000246 R12: 0000000000000001 [ 2310.348431][T30858] R13: 0000000000000001 R14: 00007fee4d376080 R15: 00007ffcdda882f8 [ 2310.356411][T30858] [ 2310.359557][ C0] vkms_vblank_simulate: vblank timer overrun [ 2314.554273][ T29] audit: type=1400 audit(2000000701.739:710): avc: denied { map } for pid=30900 comm="syz.9.5715" path="socket:[95025]" dev="sockfs" ino=95025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2314.793329][T30910] FAULT_INJECTION: forcing a failure. [ 2314.793329][T30910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2315.397216][T30910] CPU: 0 UID: 0 PID: 30910 Comm: syz.6.5718 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2315.408017][T30910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2315.418081][T30910] Call Trace: [ 2315.421348][T30910] [ 2315.424266][T30910] dump_stack_lvl+0x16c/0x1f0 [ 2315.428935][T30910] should_fail_ex+0x497/0x5b0 [ 2315.433604][T30910] _copy_from_user+0x2e/0xd0 [ 2315.438189][T30910] copy_msghdr_from_user+0x99/0x160 [ 2315.443380][T30910] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2315.449182][T30910] ? find_held_lock+0x2d/0x110 [ 2315.453941][T30910] ___sys_recvmsg+0xdc/0x1a0 [ 2315.458539][T30910] ? __pfx____sys_recvmsg+0x10/0x10 [ 2315.463738][T30910] ? __fget_files+0x1fc/0x3a0 [ 2315.468422][T30910] ? trace_lock_acquire+0x14e/0x1f0 [ 2315.473618][T30910] ? __fget_files+0x206/0x3a0 [ 2315.478282][T30910] __sys_recvmsg+0x16b/0x220 [ 2315.482857][T30910] ? __pfx___sys_recvmsg+0x10/0x10 [ 2315.487964][T30910] do_syscall_64+0xcd/0x250 [ 2315.492458][T30910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2315.498351][T30910] RIP: 0033:0x7ff343585d29 [ 2315.502746][T30910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2315.522346][T30910] RSP: 002b:00007ff34444d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2315.530767][T30910] RAX: ffffffffffffffda RBX: 00007ff343775fa0 RCX: 00007ff343585d29 [ 2315.538731][T30910] RDX: 0000000000010000 RSI: 0000000020000640 RDI: 0000000000000003 [ 2315.546713][T30910] RBP: 00007ff34444d090 R08: 0000000000000000 R09: 0000000000000000 [ 2315.554758][T30910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.562709][T30910] R13: 0000000000000000 R14: 00007ff343775fa0 R15: 00007ffc687cced8 [ 2315.570671][T30910] [ 2317.893200][ T29] audit: type=1400 audit(2000000704.939:711): avc: denied { mount } for pid=30942 comm="syz.1.5728" name="/" dev="autofs" ino=95246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2322.387220][T30962] netlink: 'syz.7.5730': attribute type 2 has an invalid length. [ 2326.034836][ T29] audit: type=1400 audit(2000000713.219:712): avc: denied { execute } for pid=30975 comm="syz.6.5741" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2326.741565][T31005] FAULT_INJECTION: forcing a failure. [ 2326.741565][T31005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2326.882557][T31005] CPU: 0 UID: 0 PID: 31005 Comm: syz.8.5745 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2326.893366][T31005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2326.903429][T31005] Call Trace: [ 2326.906701][T31005] [ 2326.909621][T31005] dump_stack_lvl+0x16c/0x1f0 [ 2326.914309][T31005] should_fail_ex+0x497/0x5b0 [ 2326.918998][T31005] _copy_from_user+0x2e/0xd0 [ 2326.923595][T31005] get_timespec64+0x8c/0x240 [ 2326.928176][T31005] ? __pfx_get_timespec64+0x10/0x10 [ 2326.933367][T31005] ? __pfx___schedule+0x10/0x10 [ 2326.938215][T31005] __x64_sys_ppoll+0x186/0x2d0 [ 2326.942976][T31005] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 2326.948254][T31005] ? rcu_is_watching+0x12/0xc0 [ 2326.953025][T31005] do_syscall_64+0xcd/0x250 [ 2326.957528][T31005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.963433][T31005] RIP: 0033:0x7fee4d185d29 [ 2326.967842][T31005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2326.987444][T31005] RSP: 002b:00007fee4e019038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2326.995850][T31005] RAX: ffffffffffffffda RBX: 00007fee4d375fa0 RCX: 00007fee4d185d29 [ 2327.003815][T31005] RDX: 0000000020000380 RSI: 200000000000006c RDI: 0000000020000340 [ 2327.011778][T31005] RBP: 00007fee4e019090 R08: 0000000000000000 R09: 0000000000000000 [ 2327.019741][T31005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.027704][T31005] R13: 0000000000000000 R14: 00007fee4d375fa0 R15: 00007ffcdda882f8 [ 2327.035677][T31005] [ 2327.402517][ T29] audit: type=1400 audit(2000000714.569:713): avc: denied { write } for pid=31009 comm="syz.8.5749" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2327.473808][ T29] audit: type=1326 audit(2000000714.649:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2327.755576][ T29] audit: type=1326 audit(2000000714.649:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.286890][ T29] audit: type=1326 audit(2000000714.659:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.310753][ T29] audit: type=1326 audit(2000000714.659:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.397537][ T29] audit: type=1326 audit(2000000714.659:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.462915][ T29] audit: type=1326 audit(2000000714.659:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.533363][ T29] audit: type=1326 audit(2000000714.659:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2328.596582][ T29] audit: type=1326 audit(2000000714.659:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31015 comm="syz.7.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff332385d29 code=0x7ffc0000 [ 2329.255648][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2329.639289][T31040] FAULT_INJECTION: forcing a failure. [ 2329.639289][T31040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2329.720451][T31040] CPU: 1 UID: 0 PID: 31040 Comm: syz.9.5756 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2329.731262][T31040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2329.741338][T31040] Call Trace: [ 2329.744623][T31040] [ 2329.747546][T31040] dump_stack_lvl+0x16c/0x1f0 [ 2329.752228][T31040] should_fail_ex+0x497/0x5b0 [ 2329.756913][T31040] _copy_from_user+0x2e/0xd0 [ 2329.761591][T31040] copy_msghdr_from_user+0x99/0x160 [ 2329.766782][T31040] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2329.772592][T31040] ___sys_sendmsg+0xff/0x1e0 [ 2329.777175][T31040] ? __pfx____sys_sendmsg+0x10/0x10 [ 2329.782380][T31040] ? __pfx_lock_release+0x10/0x10 [ 2329.787413][T31040] ? trace_lock_acquire+0x14e/0x1f0 [ 2329.792624][T31040] ? __fget_files+0x206/0x3a0 [ 2329.797306][T31040] __sys_sendmsg+0x16e/0x220 [ 2329.801889][T31040] ? __pfx___sys_sendmsg+0x10/0x10 [ 2329.807006][T31040] do_syscall_64+0xcd/0x250 [ 2329.811508][T31040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2329.817398][T31040] RIP: 0033:0x7f7183585d29 [ 2329.821804][T31040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2329.841432][T31040] RSP: 002b:00007f718442c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2329.849841][T31040] RAX: ffffffffffffffda RBX: 00007f7183775fa0 RCX: 00007f7183585d29 [ 2329.857806][T31040] RDX: 0000000000000000 RSI: 0000000020001500 RDI: 0000000000000004 [ 2329.865768][T31040] RBP: 00007f718442c090 R08: 0000000000000000 R09: 0000000000000000 [ 2329.873730][T31040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2329.881695][T31040] R13: 0000000000000000 R14: 00007f7183775fa0 R15: 00007fff7e1270d8 [ 2329.889676][T31040] [ 2330.040568][T31043] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2330.257777][T31052] binder: 31051:31052 ioctl 4018620d 0 returned -22 [ 2332.902724][T31053] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5760'. [ 2332.933165][T31074] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5760'. [ 2334.073278][T17215] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2334.087901][T17215] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2334.117576][T31098] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2334.126659][T31098] overlayfs: missing 'lowerdir' [ 2334.131585][T17215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2334.156103][T17215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2334.200777][T17215] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2334.209728][T17215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2336.662804][T17215] Bluetooth: hci2: command tx timeout [ 2337.021300][T19058] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.069614][T31094] chnl_net:caif_netlink_parms(): no params data found [ 2337.360413][T19058] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.538159][T19058] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.170408][T19058] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.702814][T17215] Bluetooth: hci2: command tx timeout [ 2339.789063][T31094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.814875][T31094] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.541491][T31094] bridge_slave_0: entered allmulticast mode [ 2340.550173][T31094] bridge_slave_0: entered promiscuous mode [ 2340.577780][T31094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2340.991843][T17215] Bluetooth: hci2: command tx timeout [ 2341.063779][T31094] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.071075][T31094] bridge_slave_1: entered allmulticast mode [ 2341.215724][T31181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2341.220930][T31094] bridge_slave_1: entered promiscuous mode [ 2341.894149][T31094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2342.004446][T31094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2342.331176][T31094] team0: Port device team_slave_0 added [ 2342.407756][T31094] team0: Port device team_slave_1 added [ 2343.581709][T18429] Bluetooth: hci2: command tx timeout [ 2343.581729][T17215] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2344.015017][T19058] bridge_slave_1: left allmulticast mode [ 2344.020795][T19058] bridge_slave_1: left promiscuous mode [ 2344.030184][T19058] bridge0: port 2(bridge_slave_1) entered disabled state [ 2344.044957][T19058] bridge_slave_0: left allmulticast mode [ 2344.050641][T19058] bridge_slave_0: left promiscuous mode [ 2344.080428][T19058] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.643882][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.070730][T19058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.081512][T19058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.093864][T19058] bond0 (unregistering): Released all slaves [ 2345.143050][T31094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2345.164399][T31094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2345.271258][T31223] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5807'. [ 2345.293011][T31094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2345.324036][T31210] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5803'. [ 2345.998919][T31094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2346.023693][T31094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.144775][T31094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2346.996459][T31094] hsr_slave_0: entered promiscuous mode [ 2347.021391][T31094] hsr_slave_1: entered promiscuous mode [ 2347.231822][T31094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2347.240245][T31094] Cannot create hsr debugfs directory [ 2347.361724][T19058] hsr_slave_0: left promiscuous mode [ 2347.384566][T19058] hsr_slave_1: left promiscuous mode [ 2347.398434][T19058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2347.406513][T19058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2347.568107][T19058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2347.609251][T19058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2347.687929][T19058] veth1_macvtap: left promiscuous mode [ 2347.724911][T19058] veth0_macvtap: left promiscuous mode [ 2347.744808][T19058] veth1_vlan: left promiscuous mode [ 2347.769703][T19058] veth0_vlan: left promiscuous mode [ 2348.450973][T31276] orangefs_mount: mount request failed with -4 [ 2349.059399][T31285] fuse: Bad value for 'fd' [ 2349.544470][T31293] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5824'. [ 2349.692291][T31296] FAULT_INJECTION: forcing a failure. [ 2349.692291][T31296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2349.705685][T31296] CPU: 0 UID: 0 PID: 31296 Comm: syz.7.5824 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2349.716497][T31296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2349.726564][T31296] Call Trace: [ 2349.729844][T31296] [ 2349.732789][T31296] dump_stack_lvl+0x16c/0x1f0 [ 2349.737479][T31296] should_fail_ex+0x497/0x5b0 [ 2349.742179][T31296] _copy_from_user+0x2e/0xd0 [ 2349.746785][T31296] copy_msghdr_from_user+0x99/0x160 [ 2349.751997][T31296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2349.757827][T31296] ? __lock_acquire+0xcc5/0x3c40 [ 2349.762788][T31296] ___sys_sendmsg+0xff/0x1e0 [ 2349.767390][T31296] ? __pfx____sys_sendmsg+0x10/0x10 [ 2349.772624][T31296] ? trace_lock_acquire+0x14e/0x1f0 [ 2349.777852][T31296] __sys_sendmmsg+0x201/0x420 [ 2349.782538][T31296] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2349.787752][T31296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2349.793755][T31296] ? fput+0x67/0x440 [ 2349.797663][T31296] ? ksys_write+0x1ba/0x250 [ 2349.802168][T31296] ? __pfx_ksys_write+0x10/0x10 [ 2349.807032][T31296] __x64_sys_sendmmsg+0x9c/0x100 [ 2349.811978][T31296] ? lockdep_hardirqs_on+0x7c/0x110 [ 2349.817190][T31296] do_syscall_64+0xcd/0x250 [ 2349.821704][T31296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2349.827607][T31296] RIP: 0033:0x7ff332385d29 [ 2349.832024][T31296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2349.851649][T31296] RSP: 002b:00007ff333174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2349.860076][T31296] RAX: ffffffffffffffda RBX: 00007ff332576160 RCX: 00007ff332385d29 [ 2349.868048][T31296] RDX: 04000000000001ce RSI: 0000000020005f80 RDI: 000000000000000a [ 2349.876010][T31296] RBP: 00007ff333174090 R08: 0000000000000000 R09: 0000000000000000 [ 2349.883993][T31296] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 2349.891974][T31296] R13: 0000000000000000 R14: 00007ff332576160 R15: 00007fffbc83e548 [ 2349.899971][T31296] [ 2349.903073][ C0] vkms_vblank_simulate: vblank timer overrun [ 2350.837470][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 2350.837488][ T29] audit: type=1400 audit(2000000738.029:742): avc: denied { ioctl } for pid=31300 comm="syz.9.5822" path="socket:[96948]" dev="sockfs" ino=96948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2352.358149][T19058] team0 (unregistering): Port device team_slave_1 removed [ 2352.480106][T19058] team0 (unregistering): Port device team_slave_0 removed [ 2354.814499][T31312] netlink: 'syz.1.5828': attribute type 2 has an invalid length. [ 2363.302658][T17782] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2370.692905][T31373] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5840'. [ 2370.821165][T31373] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2371.086509][ T29] audit: type=1400 audit(2000000758.279:743): avc: denied { mounton } for pid=31368 comm="syz.8.5840" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2372.080931][T31409] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2372.101625][T31409] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2372.612439][T18803] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 2372.774102][T18803] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2372.822545][T18803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.852547][T17782] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 2372.871089][T18803] usb 9-1: config 0 descriptor?? [ 2372.983557][T18803] usb 9-1: selecting invalid altsetting 3 [ 2372.989331][T18803] comedi comedi0: could not set alternate setting 3 in high speed [ 2373.067079][T17782] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2373.092462][T18803] usbduxsigma 9-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2374.067008][T18637] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2379.559918][T18803] usbduxsigma 9-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2411.346894][ T47] usb 9-1: USB disconnect, device number 37 [ 2418.678238][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2422.534660][T17782] usb 10-1: string descriptor 0 read error: -71 [ 2422.634945][T17782] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2422.674557][T17782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.566526][T18637] usb 8-1: Using ep0 maxpacket: 8 [ 2453.546360][T18637] usb 8-1: device descriptor read/all, error -110 [ 2486.442908][T18637] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2486.503683][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2487.322452][T18637] usb 8-1: device descriptor read/64, error -32 [ 2487.376805][T17782] usb 10-1: config 0 descriptor?? [ 2487.867837][T17782] usb 10-1: can't set config #0, error -71 [ 2489.262513][T18637] usb usb8-port1: attempt power cycle [ 2489.801521][T17782] usb 10-1: USB disconnect, device number 47 [ 2489.838664][T31426] Bluetooth: hci2: command 0x0406 tx timeout [ 2496.292499][T18637] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2496.428486][T18637] usb 8-1: device descriptor read/8, error -32 [ 2504.315079][T18637] raw-gadget.2 gadget.7: failed to queue resume event [ 2504.452528][T18637] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2506.556546][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 2517.192427][T18637] usb 8-1: device descriptor read/8, error -32 [ 2517.278700][ T30] INFO: task kworker/u8:6:2890 blocked for more than 143 seconds. [ 2517.292446][ T30] Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2517.300222][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2517.575609][T18637] raw-gadget.2 gadget.7: failed to queue suspend event [ 2517.598302][ T30] task:kworker/u8:6 state:D stack:23056 pid:2890 tgid:2890 ppid:2 flags:0x00004000 [ 2517.713355][T18637] usb usb8-port1: unable to enumerate USB device [ 2517.732448][ T30] Workqueue: events_unbound linkwatch_event [ 2517.738413][ T30] Call Trace: [ 2517.741705][ T30] [ 2517.852505][ T30] __schedule+0xe58/0x5ad0 [ 2517.857001][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2517.862230][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2518.003472][ T30] ? __pfx___schedule+0x10/0x10 [ 2518.008385][ T30] ? schedule+0x298/0x350 [ 2518.115927][ T30] ? __pfx_lock_release+0x10/0x10 [ 2518.121011][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2518.202707][ T30] ? lock_acquire+0x2f/0xb0 [ 2518.207267][ T30] ? schedule+0x1fd/0x350 [ 2518.211635][ T30] schedule+0xe7/0x350 [ 2518.318579][ T30] schedule_preempt_disabled+0x13/0x30 [ 2518.386037][ T30] __mutex_lock+0x62b/0xa60 [ 2518.390778][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2518.491473][ T30] ? linkwatch_event+0x51/0xc0 [ 2518.534731][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2518.539827][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2518.702527][ T30] ? linkwatch_event+0x51/0xc0 [ 2518.708295][ T30] ? rtnl_lock+0x9/0x20 [ 2518.792433][ T30] linkwatch_event+0x51/0xc0 [ 2518.797092][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 2518.902406][ T30] ? rcu_is_watching+0x12/0xc0 [ 2518.907233][ T30] process_one_work+0x9c5/0x1ba0 [ 2519.012451][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2519.018838][ T30] ? __pfx_process_one_work+0x10/0x10 [ 2519.112385][ T30] ? rcu_is_watching+0x12/0xc0 [ 2519.152591][ T30] ? assign_work+0x1a0/0x250 [ 2519.157240][ T30] worker_thread+0x6c8/0xf00 [ 2519.161860][ T30] ? __kthread_parkme+0x148/0x220 [ 2519.307068][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2519.312246][ T30] kthread+0x2c1/0x3a0 [ 2519.366655][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2519.371880][ T30] ? __pfx_kthread+0x10/0x10 [ 2519.512456][ T30] ret_from_fork+0x45/0x80 [ 2519.516940][ T30] ? __pfx_kthread+0x10/0x10 [ 2519.521562][ T30] ret_from_fork_asm+0x1a/0x30 [ 2519.622494][ T30] [ 2519.642560][ T30] INFO: task kworker/u8:9:19058 blocked for more than 145 seconds. [ 2519.731442][ T30] Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2519.788233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2519.856332][ T30] task:kworker/u8:9 state:D stack:23296 pid:19058 tgid:19058 ppid:2 flags:0x00004000 [ 2519.932610][ T30] Workqueue: netns cleanup_net [ 2519.938372][ T30] Call Trace: [ 2519.941670][ T30] [ 2520.022355][ T30] __schedule+0xe58/0x5ad0 [ 2520.026830][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2520.032063][ T30] ? __pfx___lock_acquire+0x10/0x10 SYZFAIL: failed to send rpc fd=3 want=64568 sent=0 n=-1 (errno 32: Broken pipe) [ 2520.158352][ T30] ? __pfx___schedule+0x10/0x10 [ 2520.213823][ T30] ? schedule+0x298/0x350 [ 2520.218213][ T30] ? __pfx_lock_release+0x10/0x10 [ 2520.272576][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2520.278097][ T30] ? lock_acquire+0x2f/0xb0 [ 2520.422428][ T30] ? schedule+0x1fd/0x350 [ 2520.426830][ T30] schedule+0xe7/0x350 [ 2520.430930][ T30] schedule_preempt_disabled+0x13/0x30 [ 2520.562744][ T30] __mutex_lock+0x62b/0xa60 [ 2520.567319][ T30] ? cangw_pernet_exit_batch+0x15/0xa0 [ 2520.652598][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2520.657697][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 2520.752605][ T30] ? cangw_pernet_exit_batch+0x15/0xa0 [ 2520.759042][ T30] cangw_pernet_exit_batch+0x15/0xa0 [ 2520.842480][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 2520.848523][ T30] ops_exit_list+0x128/0x180 [ 2520.942441][ T30] cleanup_net+0x5b7/0xbd0 [ 2520.946922][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 2520.951890][ T30] ? lock_acquire+0x2f/0xb0 [ 2521.072504][ T30] ? process_one_work+0x921/0x1ba0 [ 2521.077688][ T30] process_one_work+0x9c5/0x1ba0 [ 2521.137855][ T30] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2521.182427][ T30] ? __pfx_process_one_work+0x10/0x10 [ 2521.192519][ T30] ? rcu_is_watching+0x12/0xc0 [ 2521.197351][ T30] ? assign_work+0x1a0/0x250 [ 2521.201979][ T30] worker_thread+0x6c8/0xf00 [ 2521.292421][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2521.297599][ T30] kthread+0x2c1/0x3a0 [ 2521.301694][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2521.370276][ T30] ? __pfx_kthread+0x10/0x10 [ 2521.408052][ T30] ret_from_fork+0x45/0x80 [ 2521.451554][ T30] ? __pfx_kthread+0x10/0x10 [ 2521.468189][ T30] ret_from_fork_asm+0x1a/0x30 [ 2521.532528][ T30] [ 2521.539035][ T30] INFO: task syz.7.5848:31419 blocked for more than 147 seconds. [ 2521.606635][ T30] Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2521.677508][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2521.742776][ T30] task:syz.7.5848 state:D stack:28048 pid:31419 tgid:31417 ppid:18577 flags:0x00000004 [ 2521.810815][ T30] Call Trace: [ 2521.835889][ T30] [ 2521.838874][ T30] __schedule+0xe58/0x5ad0 [ 2521.881773][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2521.919620][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2521.958164][ T30] ? __pfx___schedule+0x10/0x10 [ 2521.992409][ T30] ? schedule+0x298/0x350 [ 2521.996799][ T30] ? __pfx_lock_release+0x10/0x10 [ 2522.001865][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2522.082445][ T30] ? lock_acquire+0x2f/0xb0 [ 2522.087956][ T30] ? schedule+0x1fd/0x350 [ 2522.142578][ T30] schedule+0xe7/0x350 [ 2522.146718][ T30] schedule_preempt_disabled+0x13/0x30 [ 2522.152209][ T30] __mutex_lock+0x62b/0xa60 [ 2522.228449][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 2522.260886][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2522.292416][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2522.297520][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 2522.327773][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 2522.359070][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 2522.378626][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2522.384432][ T30] netlink_rcv_skb+0x16b/0x440 [ 2522.389237][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2522.412461][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2522.422551][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 2522.427895][ T30] netlink_unicast+0x53c/0x7f0 [ 2522.451370][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 2522.480162][ T30] netlink_sendmsg+0x8b8/0xd70 [ 2522.502485][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2522.507845][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 2522.532513][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 2522.538031][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2522.582872][ T30] ___sys_sendmsg+0x135/0x1e0 [ 2522.587608][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 2522.603150][ T30] ? __pfx_lock_release+0x10/0x10 [ 2522.637988][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 2522.644345][ T30] ? __fget_files+0x206/0x3a0 [ 2522.649062][ T30] __sys_sendmsg+0x16e/0x220 [ 2522.672416][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 2522.677579][ T30] ? __pfx_lock_release+0x10/0x10 [ 2522.700893][ T30] ? __might_fault+0xe3/0x190 [ 2522.717978][ T30] ? rcu_is_watching+0x12/0xc0 [ 2522.732511][ T30] do_syscall_64+0xcd/0x250 [ 2522.737075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.768077][ T30] RIP: 0033:0x7ff332385d29 [ 2522.777687][ T30] RSP: 002b:00007ff3331b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2522.804060][ T30] RAX: ffffffffffffffda RBX: 00007ff332575fa0 RCX: 00007ff332385d29 [ 2522.812076][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 2522.852394][ T30] RBP: 00007ff332401a20 R08: 0000000000000000 R09: 0000000000000000 [ 2522.860419][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2522.903111][ T30] R13: 0000000000000000 R14: 00007ff332575fa0 R15: 00007fffbc83e548 [ 2522.918881][ T30] [ 2522.988267][ T30] [ 2522.988267][ T30] Showing all locks held in the system: [ 2523.046549][ T30] 3 locks held by kworker/u8:1/12: [ 2523.051700][ T30] #0: ffff88814d15f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2523.132441][ T30] #1: ffffc90000117d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2523.179055][ T30] #2: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 2523.223238][ T30] 2 locks held by ksoftirqd/1/24: [ 2523.231755][ T30] 1 lock held by khungtaskd/30: [ 2523.258730][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 2523.282411][ T30] 4 locks held by kworker/1:1/47: [ 2523.287480][ T30] 3 locks held by kworker/u8:4/63: [ 2523.346324][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2523.388112][ T30] #1: ffffc9000214fd80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2523.418240][ T30] #2: ffffffff8e1c7100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 2523.452688][ T30] 3 locks held by kworker/u8:6/2890: [ 2523.458020][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2523.497111][ T30] #1: ffffc9000b9d7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2523.523336][ T30] #2: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 2523.548093][ T30] 1 lock held by dhcpcd/5485: [ 2523.569573][ T30] #0: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26e/0x1f50 [ 2523.608027][ T30] 2 locks held by getty/5572: [ 2523.622849][ T30] #0: ffff8880360c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2523.642181][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 2523.670967][ T30] 3 locks held by syz-executor/18585: [ 2523.676506][ T30] #0: ffff88805da44d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 2523.696588][ T30] #1: ffff88805da44078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 2523.706542][ T30] #2: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 2523.722574][ T30] 4 locks held by kworker/u8:9/19058: [ 2523.729458][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2523.747505][ T30] #1: ffffc9000420fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2523.759568][ T30] #2: ffffffff8fec67d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 2523.775123][ T30] #3: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 2523.787897][ T30] 1 lock held by syz-executor/19653: [ 2523.797876][ T30] #0: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2523.815718][ T30] 3 locks held by kworker/1:8/27644: [ 2523.821212][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 2523.839162][ T30] #1: ffffc9000f697d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2523.850312][ T30] #2: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2523.867244][ T30] 7 locks held by syz-executor/31094: [ 2523.873845][ T30] #0: ffff88803194e420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 2523.887992][ T30] #1: ffff88807d86ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 2523.899153][ T30] #2: ffff8880263ab008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 2523.922939][ T30] #3: ffffffff8f4859c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 2523.939709][ T30] #4: ffff8880369f50e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610 [ 2523.951551][ T30] #5: ffff8880369f6250 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 2523.967951][ T30] #6: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x6f/0x6b0 [ 2523.977763][ T30] 1 lock held by syz.9.5832/31328: [ 2523.988634][ T30] #0: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2523.998176][ T30] 4 locks held by udevd/31343: [ 2524.008644][ T30] #0: ffff8880804538b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 2524.019685][ T30] #1: ffff8880794e4088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 2524.039800][ T30] #2: ffff888144b695a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 2524.050333][ T30] #3: ffff88814577a190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0 [ 2524.066302][ T30] 1 lock held by syz.9.5845/31405: [ 2524.071435][ T30] #0: ffffffff8e1c7100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 2524.088035][ T30] 1 lock held by syz.7.5848/31419: [ 2524.093286][ T30] #0: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2524.178423][ T30] [ 2524.180795][ T30] ============================================= [ 2524.180795][ T30] [ 2524.212144][ T30] NMI backtrace for cpu 0 [ 2524.216515][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2524.227038][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2524.237111][ T30] Call Trace: [ 2524.240402][ T30] [ 2524.243342][ T30] dump_stack_lvl+0x116/0x1f0 [ 2524.248050][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2524.253006][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2524.259007][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2524.265011][ T30] watchdog+0xf14/0x1240 [ 2524.269281][ T30] ? __pfx_watchdog+0x10/0x10 [ 2524.273977][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2524.279199][ T30] ? __kthread_parkme+0x148/0x220 [ 2524.284248][ T30] ? __pfx_watchdog+0x10/0x10 [ 2524.288945][ T30] kthread+0x2c1/0x3a0 [ 2524.293027][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2524.298238][ T30] ? __pfx_kthread+0x10/0x10 [ 2524.302937][ T30] ret_from_fork+0x45/0x80 [ 2524.307360][ T30] ? __pfx_kthread+0x10/0x10 [ 2524.311966][ T30] ret_from_fork_asm+0x1a/0x30 [ 2524.316762][ T30] [ 2524.320896][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2524.326597][ C1] NMI backtrace for cpu 1 [ 2524.326609][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2524.326632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2524.326643][ C1] RIP: 0010:debug_object_deactivate+0x16f/0x370 [ 2524.326669][ C1] Code: 42 80 3c 28 00 0f 85 ca 01 00 00 48 8b 9b 00 e1 9c 9a 45 31 e4 48 85 db 0f 84 36 01 00 00 49 bd 00 00 00 00 00 fc ff df eb 1e <48> 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 7f 01 00 00 48 8b 1b 48 [ 2524.326686][ C1] RSP: 0018:ffffc900001e7be0 EFLAGS: 00000087 [ 2524.326702][ C1] RAX: 1ffff1102c8bc730 RBX: ffff8881645e3968 RCX: 0000000000000202 [ 2524.326715][ C1] RDX: 1ffffffff354bb30 RSI: 0000000000000004 RDI: ffff8881645e3980 [ 2524.326727][ C1] RBP: ffffc900001e7cb8 R08: 0000000000000001 R09: fffff5200003cf6a [ 2524.326740][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000008 [ 2524.326751][ C1] R13: dffffc0000000000 R14: ffff8881645e7150 R15: 1ffff9200003cf7e [ 2524.326764][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2524.326783][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2524.326797][ C1] CR2: 00007f68d3772060 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 2524.326809][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2524.326821][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2524.326833][ C1] Call Trace: [ 2524.326839][ C1] [ 2524.326846][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2524.326868][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2524.326894][ C1] ? nmi_handle+0x1ac/0x5d0 [ 2524.326915][ C1] ? debug_object_deactivate+0x16f/0x370 [ 2524.326935][ C1] ? default_do_nmi+0x6a/0x160 [ 2524.326953][ C1] ? exc_nmi+0x170/0x1e0 [ 2524.326970][ C1] ? end_repeat_nmi+0xf/0x53 [ 2524.326999][ C1] ? debug_object_deactivate+0x16f/0x370 [ 2524.327019][ C1] ? debug_object_deactivate+0x16f/0x370 [ 2524.327039][ C1] ? debug_object_deactivate+0x16f/0x370 [ 2524.327059][ C1] [ 2524.327065][ C1] [ 2524.327072][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2524.327091][ C1] ? rcu_core+0x79b/0x14d0 [ 2524.327120][ C1] rcu_core+0x732/0x14d0 [ 2524.327144][ C1] ? __pfx_rcu_core+0x10/0x10 [ 2524.327167][ C1] ? run_timer_base+0x121/0x190 [ 2524.327187][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2524.327208][ C1] handle_softirqs+0x213/0x8f0 [ 2524.327232][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2524.327254][ C1] ? rcu_is_watching+0x12/0xc0 [ 2524.327279][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 2524.327299][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 2524.327322][ C1] run_ksoftirqd+0x3a/0x60 [ 2524.327342][ C1] smpboot_thread_fn+0x661/0xa30 [ 2524.327365][ C1] ? __kthread_parkme+0x148/0x220 [ 2524.327389][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2524.327412][ C1] kthread+0x2c1/0x3a0 [ 2524.327434][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2524.327454][ C1] ? __pfx_kthread+0x10/0x10 [ 2524.327477][ C1] ret_from_fork+0x45/0x80 [ 2524.327495][ C1] ? __pfx_kthread+0x10/0x10 [ 2524.327518][ C1] ret_from_fork_asm+0x1a/0x30 [ 2524.327548][ C1] [ 2524.744775][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2524.744794][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 2524.744819][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2524.744832][ T30] Call Trace: [ 2524.744839][ T30] [ 2524.744848][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2524.744877][ T30] panic+0x71d/0x800 [ 2524.744906][ T30] ? __pfx_panic+0x10/0x10 [ 2524.744933][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2524.744959][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2524.744980][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2524.745001][ T30] ? watchdog+0xd7e/0x1240 [ 2524.745025][ T30] ? watchdog+0xd71/0x1240 [ 2524.745052][ T30] watchdog+0xd8f/0x1240 [ 2524.745081][ T30] ? __pfx_watchdog+0x10/0x10 [ 2524.745113][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2524.745140][ T30] ? __kthread_parkme+0x148/0x220 [ 2524.745169][ T30] ? __pfx_watchdog+0x10/0x10 [ 2524.745193][ T30] kthread+0x2c1/0x3a0 [ 2524.745214][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2524.745247][ T30] ? __pfx_kthread+0x10/0x10 [ 2524.745273][ T30] ret_from_fork+0x45/0x80 [ 2524.745293][ T30] ? __pfx_kthread+0x10/0x10 [ 2524.745325][ T30] ret_from_fork_asm+0x1a/0x30 [ 2524.745364][ T30] [ 2524.745583][ T30] Kernel Offset: disabled