last executing test programs: 4m50.83613976s ago: executing program 1 (id=237): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(0x0, 0x29, 0x600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, r8}) sendmsg$inet6(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}, 0x20000080) 4m49.668205658s ago: executing program 1 (id=243): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0xdd, 0x1e, 0x20, 0x5ef, 0x20a, 0x9136, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x19, 0x98}}]}}]}}, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet(0x2, 0x2000000000003, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r10, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffb, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 4m48.421634862s ago: executing program 3 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x31c9}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./bus/file0\x00', &(0x7f00000005c0)={[&(0x7f0000000280)='-+\x00', &(0x7f0000000380)='overlay\x00', &(0x7f0000000400)=')[[*^*&]\x00', &(0x7f0000000440)='overlay\x00']}, &(0x7f00000006c0)={[&(0x7f0000000640)='overlay\x00', &(0x7f0000000680)='overlay\x00']}, 0x400) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100039042cbd", @ANYRES32=r9, @ANYBLOB="83000400c31507002000128008000100736974000400028008000300ac1e010106000d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) 4m45.517861338s ago: executing program 3 (id=251): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0xfffffffd, 0x0, 0x1000, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) 4m44.477697635s ago: executing program 3 (id=253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_subtree(r2, 0x0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x5, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f00000009c0)=0x1234, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e066350000108e010122e066f30fa7c00f9c97003d0f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x55}], 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0xffffff95, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x7, 0xc0000081, &(0x7f00000000c0)="643f798d06144c14c048b25e8a2d3153c2a4e7203abe79b6", &(0x7f0000000140)="ffc14374eefb4a9f20765d228613b48e3ecb6e46765d2d3fe86c4f4cf650f139554fb48241d4add4813c64b4f8ef9bcc3e3c357f68a2474124931262b90aad0ab61edff29d58fa51d551b58c68f3c1e673a0a7e8de51c2fbab4d5df15e11de1a57026ad85dc909c43491f659aac162e4fcd73a6e4b7345d93d8c69be78c0284056fbe436ddc2307790ad66504e115bbfb0a3f1ab6dfe620615db780ccf611eca2613c205d6e38dfa66121b438fc8210aa861b6ec89d59f52cafe5656b2a8f67cb46f15b6", 0x18, 0xc4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4m44.406971419s ago: executing program 1 (id=255): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e2b, 0x6, @empty, 0x9}}, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4eece80b}}}, 0x108) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x18000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x1ff, 0x4, 0x1, 0xe}, 'syz0\x00', 0x22}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4) 4m38.568738678s ago: executing program 1 (id=259): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe08) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x81, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="01000000491b67eec73f7c1a00003c000380140002007663610800000000000000000000000014000600ff05000000000000000000000000000108000100010000eb070003"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m38.356137757s ago: executing program 1 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0xaca0a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 4m36.072204893s ago: executing program 3 (id=265): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) 4m31.627985295s ago: executing program 1 (id=269): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}], 0x1}}], 0x4, 0x140408c5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(r2, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a", 0x35, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0x0, 0x3}, 0x80) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000380)}) syz_open_dev$video(&(0x7f0000000000), 0x8003, 0x0) 4m30.866804448s ago: executing program 3 (id=273): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f00000024c0)=@v2={0x5, 0x3, 0x0, 0x8, 0x98, "4736530b1a6af4c4793a83df9a74eac39bfcb060f8e85a5d10566e308cabe16b0a343d6c59c1717e44e556201775f2caf80568b9d502114215ca20d45d3d2c4d6217bbb12870ffb4009bf997ad0a56c8186d0834f0a0ab15c4fa8b0319468da4d2bcf69f0d6cb1495a3f750c861f910f2fbfd12bfb70d8c6ecc447bf330e66d30b4f18f434852d15625d7e1fbc51d616681295d072ff9366"}, 0xa1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r7, 0xfe12482fe0801d67, 0x1, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffc}, {0xc, 0x90, 0x17c0000}}]}, 0x54}}, 0x4000) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) 4m27.522810842s ago: executing program 3 (id=275): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000130df400ffec850000006d000000670000000500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000130df400ffec850000006d000000670000000500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) (async) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) r7 = dup(r4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x313, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) (async) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x313, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x54}}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 4m23.806873303s ago: executing program 4 (id=276): ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000009c0)={0x0, "a6a09d5eb0fa9c119c6dfa7bbc4f1c7d"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000019c0)={r0, 0x2, 0x101, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = memfd_create(&(0x7f0000000140)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb\x00\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6gmH\xbf\x9c\xd3\x94\x9a\x96\xe1n\x98\xb2\xdcq\xab\xd40\x86\xf5\xea\"\x9f\xd7\x01:\x1f\xfa\x04\xc6J\xe1|\xad\xef\xc2\xdf\x96\xe9|\xa4.\xa2\xdb?', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x2012, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f000030f000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x180000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2}, 0x50) r6 = accept4(r1, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) 4m22.016923292s ago: executing program 4 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x60142, 0x0) r3 = open(0x0, 0x42042, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x20) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) write$tcp_congestion(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="29fe0000", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000806}, 0x40001) r6 = dup(r5) write$tcp_congestion(r3, &(0x7f00000001c0)='htcp\x00', 0x5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0xfffffffffffffe03}}, 0x60) 4m21.965852163s ago: executing program 0 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, 0x0, 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x1}, 0xff}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, 0x0, 0x0) getpeername$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4008054) 4m19.447484193s ago: executing program 4 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x4, 0x680042) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x8c, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r6, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendto$inet(r6, &(0x7f0000002640)="01", 0x1, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xe4d4, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, 0x0, 0x100) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, r8, 0x24, 0xb7}, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}) 4m16.363259713s ago: executing program 0 (id=282): setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000240)={0x0, 0x2, 0x5, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000640)={r5, "c4fe00153747d07e7fb08c0e4b6f6201"}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[], 0x270}}, 0x0) socket(0x10, 0x80000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000661000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4104) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="dc7d12f1", 0x4}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 4m16.2545839s ago: executing program 32 (id=269): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}], 0x1}}], 0x4, 0x140408c5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(r2, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a", 0x35, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0x0, 0x3}, 0x80) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000380)}) syz_open_dev$video(&(0x7f0000000000), 0x8003, 0x0) 4m15.752231637s ago: executing program 4 (id=284): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000ec0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) lseek(r3, 0x0, 0x4) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x5453, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002c00010000000000000000020400008004000d"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m13.30002836s ago: executing program 4 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) r7 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x3b8}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e) 4m11.5121087s ago: executing program 33 (id=275): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000130df400ffec850000006d000000670000000500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000130df400ffec850000006d000000670000000500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) (async) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) r7 = dup(r4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x313, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) (async) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x313, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x54}}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 4m11.413018229s ago: executing program 0 (id=289): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000840)="cb958cd3", 0x4, 0x40000100, 0x1}) io_uring_enter(r5, 0x13c2, 0x0, 0x0, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000100)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) 4m11.405174139s ago: executing program 4 (id=290): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x2, 0xa}}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r5) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001030000000000004661ed81de61781e8f0021e318ea0400000000000000000500160004000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x3, 0x8) 4m0.042852694s ago: executing program 0 (id=294): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x4004) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x5) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0xf1f8, 0xe}, 'syz1\x00', 0x22}) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x800, 0xfffffffffffffffa}, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r6}]}, 0x24}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x23894) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup(r7) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) 3m57.104041699s ago: executing program 0 (id=296): r0 = syz_io_uring_setup(0x2, &(0x7f00000005c0)={0x0, 0x26d9, 0x40, 0xfffffffa, 0x2df}, &(0x7f0000002500), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 3m56.862876167s ago: executing program 0 (id=297): socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xd5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x2) (fail_nth: 1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 3m55.656814652s ago: executing program 34 (id=290): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x2, 0xa}}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r5) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001030000000000004661ed81de61781e8f0021e318ea0400000000000000000500160004000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x3, 0x8) 3m40.009493887s ago: executing program 35 (id=297): socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xd5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mlockall(0x2) (fail_nth: 1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 13.500109045s ago: executing program 6 (id=795): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe1100090500000000000000070593"], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r3, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r7, 0x1, 0x0, @val=@iter={0x0}}, 0x40) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) 11.585065025s ago: executing program 5 (id=799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) syz_io_uring_setup(0x1b75, 0x0, &(0x7f0000000100), &(0x7f0000007700)) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x20000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x48}, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x8010, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=ANY=[@ANYBLOB="00a964e939b510a050", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000080)=@raw=[@generic={0x6, 0x6, 0x1, 0x10, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x9a1, 0x94, &(0x7f0000000380)=""/148, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r3, r2, r3, r2, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x5, 0x3, 0xf, 0x9}, {0x0, 0x1, 0x4, 0xc}, {0x0, 0x5, 0xd, 0x1}, {0x0, 0x3, 0xc, 0x8}, {0x1, 0x3, 0x0, 0x5}, {0x4, 0x3, 0x2, 0x8}, {0x5, 0x2, 0x4, 0x4}, {0x1, 0x1, 0xc, 0x8}], 0x10, 0x1, @void, @value}, 0x94) 9.884062019s ago: executing program 8 (id=803): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$xdp(&(0x7f000083d000/0x3000)=nil, 0x3000, 0xcf72427647ba2179, 0x4000010, 0xffffffffffffffff, 0x80000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x9e, &(0x7f0000000400)=""/158, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[{0x2, 0x3, 0xa, 0xc}, {0x0, 0x2, 0x9, 0xd}, {0x4, 0x5, 0x10, 0x3}, {0x0, 0x3, 0xb, 0x8}, {0x3, 0x4, 0x9, 0x8}], 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r4, 0x25, 0x6, @void}, 0x10) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) inotify_init1(0x0) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x10012, 0xffffffffffffffff, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f000000c2c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="b09cb2f087cf128cf5fe4c07c7c42be814fda9c2dfb36a76f80557645b862f2a8548bb", 0x23}], 0x1}}], 0x1, 0x401eb94) 8.310550171s ago: executing program 8 (id=806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000200000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) 8.310054206s ago: executing program 6 (id=807): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000ec0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) 7.914188689s ago: executing program 5 (id=809): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x196}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x854) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_clone3(&(0x7f00000005c0)={0x2200800, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3f}, &(0x7f0000000440)=""/55, 0x37, &(0x7f0000000500)=""/140, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8}, 0x58) syz_pidfd_open(r11, 0x0) (async) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32=r12, @ANYBLOB='\b\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) 7.306716149s ago: executing program 2 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) 6.98774535s ago: executing program 8 (id=811): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000)={{0x0, 0x0, 0x80}}) eventfd2(0x0, 0x80800) connect$unix(0xffffffffffffffff, &(0x7f0000002080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002100), 0x185000, 0x0) r2 = accept4$x25(r1, 0x0, &(0x7f0000002140), 0x80000) close(r2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x88, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff8000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1c, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa, 0x4, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0xe, 0x5}}]}}}]}}]}}, &(0x7f0000002600)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x300, 0x0, 0xe6, 0x3, 0x8, 0x8}, 0x100, &(0x7f0000002380)={0x5, 0xf, 0x100, 0x1, [@generic={0xfb, 0x10, 0xb, "990d3e6cb1f54fb8bf5aca940983caa42f5a30192afc54f5f291f000527c1bf9dcd2630f733221439f430decd145b5d81273d05fdf8b071361a69d5fce2b2c23696b0100ee9475fea643609e8589261047091555e07af17c35025036c1d57532eddb19e5e3202dbf6cb1deaeff1eff8e8931dd98a8b06a8e5de68ad6b93e0e110dcfb2069e015c04d34ea8ae9d572d969c5d74a53f472354a980ae00193076d19ef3c74b82af70a993f4a5214ac89f78fe30bc60a8a50624343444e65b8fea80b77619a4759416cebc672ffd5432669f623a1f635122e11593b9a2792d0c2a29643fa52c29d4f80991136641631e7bfa955b7adb4672dcb1"}]}, 0x4, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x804}}, {0x9c, &(0x7f00000024c0)=@string={0x9c, 0x3, "e85c1742823aa8bf6d2761f58ca8625fb85088befab75f38257cb66cb83a8613137c26a1b9b40fa45e0943df2e88a8375ecb852693e66dee9f995c21c8d97de1321012604e4cfda20aeab52fe3cd2e9585178ab28eb0394cc2e01015f31d9dad94ed0ffdf2db0ff0d61295c9ae2b937fdfc5b0e049a37f8519dbb6dea0b2a903a05c22b371cf3e722677ae669a1d62e08828ace6c92be98dffac"}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$printer(r3, &(0x7f0000002800)={0x14, &(0x7f0000002680)={0x40, 0x23, 0x100, {0x100, 0x2, "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"}}, &(0x7f00000027c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000002b00)={0x34, &(0x7f0000002840)={0x40, 0xd, 0xa4, "22e11b17360b5f06620c00576fbc77a800ba4ee28a06cbcb8cfe55c580e9b32146fbad924038aabf9efc389a1bb17b8efdaa68fcbbd4b4846300a2b4cade0b93c64c78b5e076c5fb4128bff60ff1ffecb29499978b2af39e5fe5719a5aecc641bf13570ed3d0b0b9664eb5aece1ff9c88d5bdf5835b0da0cd226f1cf94e1e936cfb86f9a17a84ec60b0abbd9b0fe77719b02faa3b58eb946df8e5bdb93bd8bf50691ca87"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x16}, &(0x7f0000002980)={0x20, 0x0, 0xf7, {0xf5, "3407bd396bc25cc214798ab891d78626cf0ce9453395588b76e03676c47580c7872585a8b99a0e7b6b284bd21ebc322a3c9a2acec1eeaa3869c6635fe974b5e585de94fbe17607d6eb9d4149584474ffb752de25acd91ab1e9e4f9f1208d3eadbac6a17f6fe1df98685d722ca3dce23690dfc4983459ad767b1070237d67e65093c6c8ebf48d72f32a95e0a7f0bb71da4728d0ad77d03da2965e51f7f8ae5ca8c9c0efc8e475cfb595b5684577f0c5ff895a57c6f1b50e350f6d44d2a58f9f62f9dc520da21ba7adacf99d957192c2f17362af57356f3282a1127a5053fe0584fef6ce8c000963089a3e4fcb5e28422187fe553fc9"}}, &(0x7f0000002a80)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000002ac0)={0x20, 0x0, 0x1, 0x3}}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000002b40)={[0x5000, 0x100000, 0x2000, 0xf000], 0x6, 0x20, 0x401}) getpeername$packet(r1, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002d80)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003100)={r1, 0xe0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000002e80)=[0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000002f00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002f40), &(0x7f0000002f80), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000002fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x14, 0x19, &(0x7f0000002bc0)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3, 0x5, 0xe, 0x10, 0x4}, @jmp={0x5, 0x0, 0x3, 0x9, 0x4, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002cc0)='syzkaller\x00', 0xd, 0x28, &(0x7f0000002d00)=""/40, 0x41100, 0x10, '\x00', r4, @fallback=0x8, r1, 0x8, &(0x7f0000002dc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002e00)={0x4, 0x4, 0x30eab8ec}, 0x10, r5, r1, 0x8, &(0x7f0000003140)=[r1, r1, r0, r1, r1, r1, r1], &(0x7f0000003180)=[{0x0, 0x3, 0xf, 0x2}, {0x4, 0x4, 0xe, 0xc}, {0x4, 0x5, 0x9}, {0x0, 0x1, 0x8, 0xb}, {0x3, 0x1, 0x7, 0x1}, {0x4, 0x3, 0xf, 0x2}, {0x4, 0x4, 0x10, 0x8}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x8, @void, @value}, 0x94) syz_usb_control_io(r3, &(0x7f0000003480)={0x2c, &(0x7f00000032c0)={0x0, 0xa, 0x40, {0x40, 0x8, "b8e476aecf2ed25154fb4963c27f47775036bb8bb51168ff9657c7a878131c2d57f1aeeb489a0ebadd5477d8c02fdb5bd774123a3b833ccba65c54e55553"}}, &(0x7f0000003340)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "932cbdce94ab137ce959cf3b77aa6f8d584bad9cd7349842882cffbbdd1793fff0135c59802b09d3f6b31094544125e7b25fff9b72a5c874955e0cbbafcf1bbcbb7d37b1466cbe27aa98d2df499cc727bd54a97de91e68cbebaba6b8b8cc9eddd46f855b1e8b6b59"}}, &(0x7f00000033c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x22, 0x10, 0x70, 0x3, "67541a83", "6b2606f7"}}, &(0x7f0000003440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x5, 0x10, 0x4, 0x100, 0x7}}}, &(0x7f0000003940)={0x84, &(0x7f00000034c0)={0x20, 0x30, 0xa8, "46bdd94c06542f72e88480fcff7378148a98267f05efed50ac1687839f64aad197ced40a115a0c791d0e2b32de1f36e88a279733daaabc5594d1d84ff1b5d7120397654a715c4a2571025289e769272c4d89a1d3b365c4b16879dd828bcbaf6a564b03e5df5a02ba22433e027fafd1b26d59e71d6e31fc2040d90145dd36ca5fc3d3e28248512d17e0743dd73888b6c4d8ec1a7a9024356e8e20361d1ee0b4ae9215cae1eea2ccbc"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000003600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000003640)={0x20, 0x0, 0x8, {0xe0, 0x0, [0x1ef]}}, &(0x7f0000003680)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000036c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000003700)={0x40, 0xb, 0x2, "9574"}, &(0x7f0000003740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000003780)={0x40, 0x13, 0x6, @remote}, &(0x7f00000037c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000003800)={0x40, 0x19, 0x2, 'ZV'}, &(0x7f0000003840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000003880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000038c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000003900)={0x40, 0x21, 0x1, 0x9}}) poll(&(0x7f0000003a00)=[{r2, 0x4}], 0x1, 0x8) r6 = fcntl$dupfd(r0, 0x0, r2) sendmsg$inet(r6, &(0x7f0000003f00)={&(0x7f0000003a40)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000003a80)="f0c20250790be77a92ccfe095f07d3650940b6fe9550d9060d12263737e61cbecc8df9bd3cc9222d8c32789fc4e2ada74df3ca19a19d2077ed1c2b5802a3222c9c3ea3f089649c74a326cc3bcc0be05c99283c8dd974d2caa6c67c85f425a74a9a463829209edb01828823fd523834300c3523c9818daf9f0f6d3abae4e7d24fdc28815e9ee6b79b1fa0972d97ecbe2b9dc15bc373832cd825a3", 0x9a}, {&(0x7f0000003b40)="dc320a14db4e2a77b0350f84cca4f449b82298b50eb341e1f0e58516805c2abb2266bdc5ad6e82518851a7fe7a0b9721ba63848d30cc45879357f2f81936bb15b4a10f5ed6e2aabe837124fe802a5f6a0092a4126370bb035fc3fd6dbf7e110bb1053e9032e32c8ce762a5efdcaaf58f9717e9a769e0117babe906b17b5625a092e27e225ed587d6e5418fde2015bd9d82577808f2fffc0fc6b08b54b98002409795126cfe5b43f72328ec265772765be7827c2f5660e72f8be34c4555932523e97a1258ba69168e1f520895068a5067776ef8", 0xd3}, {&(0x7f0000003c40)="ac67f7d763b747600f18cdc858657ac343009fab9053be004f84c6d5741b9819a473e78a2289", 0x26}, {&(0x7f0000003c80)="1ee1298ce7ff92fd9f8a195e006972d0c8be76dcd0983378701a260283b203206dfb8da77513d01947e82e7376339e1c40b556125605e2894e410239865f741b80ded2c9c1c539f7113761c5eaa8c58bd7647daca4d35ba91a95c1221f4291f556718e380339c1f02ab3091e53a1d2038e353d2b318d17cdb69d27c83e04a2a49438c97e16904aa9fdc8b9e8ffafd48d954266122a75f5efc6e7f991737fb1c949ed6548", 0xa4}, {&(0x7f0000003d40)="62bf99bb5b7fcd9fb102903a774a8204c006376832ff4d12fe7cea82723f31a7daf216057618445ef32df64e84530fb8fe6668255f1abb3dc23684353b86706f63758924639630e725f1c574164b2f9465e0211699ac7f1703f2a6f272b2bf89a308105c2d48567fa6b0ff3ec3b5248c6b727155c024", 0x76}, {&(0x7f0000003dc0)="f66f08102209c253174b1ba98ba6af5558a12b99dc98dd52a7f6873de1b0ed82031205323ad864816f05dc22d91d8d0c073e09708b1d88ac7b3d0f86687c7c9867096e9188f2fed25a4fa545eec337daae78094446b67ba2e110391f9eb0cc8d26f4f303d8a010", 0x67}], 0x6, &(0x7f0000003ec0)}, 0x40805) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000003f40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0xc, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xea0f, 0x8}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x6, 0x1, "b7f26f69"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x1, 0x0, "3d2d856c7e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x80, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x2, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x7, 0x0, "fa286666"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x33d8, 0xe, 0xd, "bc"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xfff8, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x4, 0x0, '~'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa, 0x8, 0x3, {0x7, 0x25, 0x1, 0x82, 0x1, 0x8}}}}}}}]}}, &(0x7f00000040c0)={0xa, &(0x7f0000004000)={0xa, 0x6, 0x200, 0x0, 0xff, 0x1d, 0x20, 0xd0}, 0x3b, &(0x7f0000004040)={0x5, 0xf, 0x3b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0xba, 0x7, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x1, 0x92}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x6, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c0a905bcff07ed335a13e5f3183b4b3a"}]}, 0x1, [{0x2e, &(0x7f0000004080)=@string={0x2e, 0x3, "2770bce55972aa2bf58015fb888c998d55c08ce04243b55fed0848eb0f82b90929decfa7473d4702d5fc1734"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004200)={0x24, &(0x7f0000004100)={0x0, 0x21, 0x1b, {0x1b, 0xe, "2318248221d75f284cbd506ce99617118aee7948ef727d42ad"}}, &(0x7f0000004140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000004180)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "a40ca168"}, @local=@item_4={0x3, 0x2, 0x4, "adcf97b6"}]}}, &(0x7f00000041c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x7b1}}}}, &(0x7f00000044c0)={0x2c, &(0x7f0000004240)={0x0, 0x17, 0x89, "5a228471771daab0af0e9c9226672b3d87c1a85011aa0fe3a0494ab7cea5b3063297c48197937475eceb54e54fe154ba0e4f928d3dc500497ab4a3c51edfb692d951cd745cafd551c7e86f5c36ffce2f66784bee34348ec50d45de515086d0683a5d144e860e26704566aa4d3887e89dbdc2739e5016135014771c6f5a3720a81ddfaf50fe145a7168"}, &(0x7f0000004300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000004340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000004380)={0x20, 0x1, 0xd3, "494660b107a9a6697a969d45a5928ceee1ceabbeb09f269d1069b6cdccedbe28145d6e1cb70532fc792855050491dd17713ad318537ecd16f4731bf09c54b8163e7d66a3bea5691cadc8cac6d5aaae3e7b2bcd1518de9016d3a8aa7502a3af4a4b8d1415fffd198a49506340d5beefae11ef9e96db1bb2f0d4f2d49d4a765199d989959347cc728819694b77d8de14bda5fc06a58012181d50eb4ad87eb43a09521be24d2340ddad356aa59b3cde84e538d5bee0a7616ad9ce705c88c8bad35b302c246bb7c62e88dc6556adf87f001ad0e26f"}, &(0x7f0000004480)={0x20, 0x3, 0x1, 0x8}}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000004500)={0x0, r6}) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000004540), 0x20001, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000004580)={0x4, 0x5c, 0x3, 0x6, 0x1, "95a7b30cf1426759427fb5f59fb2d217f33a44", 0x8, 0x100}) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000045c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x4c, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x8eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x31, 0x7, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x240, 0x15, 0x7, 0x84}}]}}}]}}]}}, &(0x7f0000004700)={0xa, &(0x7f0000004600)={0xa, 0x6, 0x110, 0x9, 0x7, 0x1, 0x20, 0x8}, 0x40, &(0x7f0000004640)={0x5, 0xf, 0x40, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x2, 0x7, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x11f07, 0x7, [0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x2, 0xff00, 0x0, [0xcf]}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7ff64e3, 0xf0f, 0x3, [0x0]}]}, 0x1, [{0x42, &(0x7f0000004680)=@string={0x42, 0x3, "703acb1d9c423b39bd7cccef206dc6bf8d30fe9c31f258e01ee3d87c8a10a2f883eadb1d1bc7a1402565e843a5566e47d8440834e234250068219665d0d49942"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000004880)={0x24, &(0x7f0000004740)={0x0, 0x24, 0x65, {0x65, 0x23, "c65486dcb5588d4fe9e35f2f82a8718beb5846cd36bfb0753b7879345bc9390ca1538e6cf0bc0f65301ef166c670d7064907b302f5bbca0725ee7fd06d40f4a3fcc783876c415c0dd6ccc6629985f004293dd009d24e9c155de5488e2cfb88d44bb99f"}}, &(0x7f00000047c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000004800)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xa, "aa"}]}}, &(0x7f0000004840)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffd, 0x8, 0x1, {0x22, 0x1f8}}}}, &(0x7f0000004b80)={0x2c, &(0x7f00000048c0)={0x20, 0x30, 0xd4, "4e0fa83f204dd0d6c9b70976384c5773c56e5cb3dfa42c235012e0e016bf99ed03bc4edb147cad9c876b22b61ba132479027590b4a2b6e7471543f2e5ae437b58ade1d4413fc41e0f68e9af123d5c24a34172f7a0cb98cb820fdbb2005e5b88fbb0bd130bf0ea36d49a46438873f85726c508fe84b10ae9baa7d4a109a15e2eecf57bed839f27f2be8f962c5465532c75979c00d17025624e10e20c09ca71e8686568cd1ba60d764a0eee5f9ad24bf30ce442094297f695f2d7ab97cf3135ae8cf0f40e1e3b70cf6e86ce5a0c5983a476f44ac22"}, &(0x7f00000049c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004a00)={0x0, 0x8, 0x1, 0x46}, &(0x7f0000004a40)={0x20, 0x1, 0xe4, "d91dcfabdf1b78841abf3d3e2b3390c508feeee801b3d95840a778eacb6695e92d4be3f09cfef241db12964886ebfa0b175192b04039864b5198f74d2a1075f4862d4407bab3a326485ec888454899ddb55321ef304033d080000d38ef6cd1cd7ce7ebcf85fb01bf854d84a441527f2ede27bfa43f2eace1e56c3e0bddc068e46cbf441fbd4f9a3eb75acdacac29fd60a1f9d9c1098cdf9ef5040b7592da174f757c0f4bcc9dd62b2f7ded5f79e0fab65c24ce9c46af9aa2eaac3d766dafe707e65b0b8b0615342028be3e84565bf0cf54a4f28adf7e3a2d4eefd15af0c6f50ec1462663"}, &(0x7f0000004b40)={0x20, 0x3, 0x1, 0x4e}}) timer_create(0x3, &(0x7f0000004bc0)={0x0, 0x3a, 0x4}, &(0x7f0000004c00)=0x0) timer_settime(r9, 0x1, &(0x7f0000004c40)={{0x0, 0x3938700}}, &(0x7f0000004c80)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000004cc0)={r6, r6, 0x0, r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) semget(0x0, 0x2, 0x120) 6.696621561s ago: executing program 2 (id=812): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201000000000010f304550700000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="2022ca00000084d00873e7c536d2723e3488d343c702c9f6022d14de0a55d1506e935c1f41931fde34af1a9dcad2c14d248263d0e6e9e7003bd57400e01d84682249c63716273373cee75ca129acba31aa7ae6a16ea61d2417d66eef85f2d8d5a7c255122ce614841321e8402f6c8279957bf801292b5b7a2a198e1df0cad4ed2a8d4083531c5778f96773754a937cb15455015f99636c081c5f6744ecc88e564f4a0a63d4e9b8eedde9e19248f5cb3a389d0c99454aa50beaeef556bf62b3d79aaad8051a93edb03244397f29f30104"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000280)=""/182, 0xb6, 0x0, &(0x7f0000000340)=""/91, 0x5b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 6.47490739s ago: executing program 5 (id=813): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0xa02, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x200, 0xfffffffc}}) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x6000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6.430876752s ago: executing program 6 (id=814): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x2, "3ad38eff230c00000000202900000004100000410000000000000300", 0x32314752}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000600)={0x3, 0x0, @pic={0xa, 0xff, 0x8, 0x9, 0x1, 0x1, 0x4, 0x77, 0x4, 0x4, 0x6, 0x8, 0xff, 0x5, 0x9, 0x81}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000060000000000", @ANYRES32, @ANYBLOB="7f9e08ec00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900004000000000ceed096f317d7f68de0a4a213cc2dc0414feb98feb69ce97ad0649d7c02c14c338dabc719f6c6019b9c2c92b29f1b2e6e0016dc4f6b9943df2f8643e2d361de787cbf3ad91173326e0c76caa7316557a4df147e92f67cf24ceea7db64c9d406b0d9ad895c3cde250441ff62f20d509da56906e68cda4dace86dd2684ed6263aab1abb516b55336ce", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYBLOB="59a1ecba28ace06a281b79bc19ae907de0", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xf0ff1f00000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa5a, 0x2, 0x7, 0xffffffff}]}) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @private2, 0x5}, 0x1c) connect$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x7f, @any, 0x8}, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) name_to_handle_at(r6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="2000000008000000000000dc0ca0d25bc1992a1f43010cb9e1cfec050000000200000ce280000001"], &(0x7f0000000340), 0x200) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "627c351d40c8ccc822c6447ea102f9c5"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') 5.757984155s ago: executing program 7 (id=815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0xe, 0x7, 0x101, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x3}}, 0xffffff70}, 0x1, 0x0, 0x0, 0x20005080}, 0x80) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x8, 0x0, 0x41000000}], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000180)={0x80002000}) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000008d549c5851b4d1eb67", @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000440), &(0x7f00000004c0)=@udp6, 0x2}, 0x20) getsockopt$MRT(r2, 0x0, 0xcf, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f00000000c0)=0x1) readv(r8, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38) ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) 5.47611019s ago: executing program 6 (id=816): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev2(r0, &(0x7f0000000240), 0x5, 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x400000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, r4, 0x3, 0x1, 0x3, 0x800, {0x4, 0x1, 0x4, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe154, 0x1000, 0xc, 0xe4, 0xf9, "fe1d00003413000000000000000caa00000009000000000000a726b427180010"}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a2", 0x52}], 0x1}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'team0\x00', @link_local}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000f50200"], 0xfdef) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000300)=""/93, 0x5d}], 0x3}, 0xffff}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/181, 0xb5}], 0x4, &(0x7f0000000900)=""/112, 0x70}, 0x401}, {{&(0x7f0000000980)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/176, 0xb0}, {&(0x7f0000000c40)=""/52, 0x34}], 0x4}, 0x9}, {{&(0x7f0000000cc0)=@vsock, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/50, 0x32}, 0x1b1f}, {{&(0x7f0000000dc0)=@alg, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/66, 0x42}], 0x2}, 0x6}, {{&(0x7f0000000f40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000fc0)=""/92, 0x5c}, {&(0x7f0000001040)=""/169, 0xa9}, {&(0x7f0000001100)=""/50, 0x32}, {&(0x7f0000001140)=""/157, 0x9d}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x5}, 0xffffffff}, {{&(0x7f0000002280)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002300)=""/184, 0xb8}, {&(0x7f00000023c0)=""/249, 0xf9}], 0x2, &(0x7f0000002500)=""/124, 0x7c}, 0x23369d6}, {{&(0x7f0000002580)=@ethernet, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)=""/240, 0xf0}], 0x1}, 0xff}], 0x8, 0x40000022, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448dd, 0x0) 5.050323872s ago: executing program 5 (id=817): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_connect$uac1(0x5, 0xd2, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0xc, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc, 0x8d6, 0x0, "c209b1b07bad1e"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x9, 0x3, "a1021a"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x0, 0xfd, "c9f9d2ec3b"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0x10, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf, 0x6, 0xcf, {0x7, 0x25, 0x1, 0x1, 0x10, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0x9, "3815", "52b30e"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x4, 0x3, 0x6e, "0b00a3d428"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7f, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0xc, 0x4}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x6, 0x0, 0x40, 0x2}, 0xa9, &(0x7f0000000180)={0x5, 0xf, 0xa9, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x7, 0x9, 0x7, 0xb3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0x2, 0x5, 0x3, 0x43}, @generic={0x87, 0x10, 0x1, "3b435b671cc26f06d68985f692b896c53751eafd7f1d3fd74d231337c7dceac8137a4692bd4473f83794660de16327ffa9d84577d8c78d4cdef1bac0e2e1d9aead71e79b7ff772c459dcd502a2c47d65431f0df64af3ff44ef200ba81ddf7267c8e67e5711fbc1029180ce80e879cc658716bff421f64d991bf5eff030815c1b1575f2aa"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x297}]}, 0x9, [{0xfd, &(0x7f0000000240)=@string={0xfd, 0x3, "381f3dd35ad71cc0203dce607ab046086ec6a0282c7f61b6382c3235116be21ea53f94f029b4f9dcbda3c3c54f439de5346407aaa3a8423793b187a1f4c00ff18a873d7f1f033ad458908aa73711440e8a37f1c9bad1cd18113c408e2a4a1330360ebdf1f0f68fab9aedc2e81946fda7f626f3fb839d22e95a20d588939d66998f3024d6382404ddd2fbc0dc44f23f0c78bc096428b66198c8b5cf2d02d83e11ee9b45ea5fc1e5d7e53d3216dfb863e3fcc41e17881319cab360ef7001bf810e0a3373059169727247526cc1d8ffe09d0f7e42f0d89667e55f9749df380b5dc31f6198f28aec400749db9e57d8cd45a0a4fb73ccefb4ce56724cfb"}}, {0xc9, &(0x7f0000000340)=@string={0xc9, 0x3, "5ab190212171de90ea95122d660e6e26a8ee5d6c03fb1d83647b790d52258ca57dd2cbab28cf538a928afb0ef01e7393dac619f83b98626319d5541b2298eba2a30fe2bcbe25493a5ba67fcfe56c9766fbc7fca9fdf04fc0009d91733edb6d00d6b3ea32e7b4bbd438eae28dac4e0c01fd660d14e25ba6de04606cdf85004ca76ad4db5ac905d80d3ba017354bc57852d7913a66085bcc19ba5aaec229b1e0f7f542c6b941f248ca213c8f1858ba6106e6f8681b57f3f1f7e42d535e10a7ed9e27582b3bdaf819"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x810}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "354b8e9f7ac6a52b435f0a069c65d871b917391ff8039b8139b27cf2128b96f2c361782832474e9d2f4f478d7a68a8da1520b5ceb1f63d300dd875370d27456e68c5fdae0333fb61871e8a13bc3cc6eda176686e7f817b2b8f4d398909cd7070455f4130072a6e1fdc8d2f4a7fb6e1986408175e881bf70edfd7bacf86389b568019b070fdcffe0b2385e4dbc776db16b2486bf3006b1ff4f88f6cb240915636c9dc386381c825bc2323e6800b727f7e030b3d6cbec2420cf65ab602da15115a69423024aa4401e6d46ec06a2fe60b818b0f0a5a0662caba636cea9715a4e95811e79e8ce5a7156ca50e4ee4"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x445}}, {0xb3, &(0x7f0000000680)=@string={0xb3, 0x3, "3014e985cc691626ae13bb5637cf26ddd040b021b938b796e4575549f3a7048170f9a2e15038339fee1e5c2b1a7b399c9679b731a31f05dd2c2c8822b8505db05d51c0ed6d39448792fc201db71630ee7685b550181d05cfaa5d454d13336de4e1aa74542e50d9e27eb24a1ed953f9d5eedd847c99602414b5b47c0294400126e889fc10d7030a439801f49b495e1c4efd63bee3a59e529e9c15eb77dd5031b02a61ad922204e505d2fd7efb7910136c23"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.774855803s ago: executing program 7 (id=818): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/139, 0x27, 0x8b, 0x1, 0x8d4c, 0x0, @void, @value}, 0x28) 4.640012988s ago: executing program 7 (id=819): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) process_mrelease(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='3\x00', 0x2) r3 = socket(0x29, 0x2, 0x7ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x24048080) getsockopt(r3, 0x4, 0x3, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=0x92) shutdown(r3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000d040400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x26010, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 4.058224088s ago: executing program 6 (id=820): r0 = io_uring_setup(0x5bec, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f00000004c0)=[0xffffffffffffffff]}, 0x1) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000840)={0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="003101004ec1cd"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000e13d756fce700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.677570564s ago: executing program 8 (id=821): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001240)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05000000009c47e07f20836bcf9097f16dce10353a5fb4bcb0a276ce59ef5e5cc6e035f09100fa6f6cfda20000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) sendfile(r9, r5, &(0x7f0000000100)=0x8, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x4, 0x0) 2.762343115s ago: executing program 2 (id=822): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}], 0x20}}], 0x1, 0x4) write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)={0x470, 0x0, 0x0, [{{0x2, 0x1, 0x820, 0x5f8, 0x0, 0x0, {0x2, 0x2, 0x4f9, 0x6, 0x0, 0x7e6, 0x3, 0x2, 0x3, 0xa000, 0xe6f, r2, 0x0, 0x16, 0x4}}, {0x4, 0xfffffffffffffffb, 0xe, 0x40, 'memory.events\x00'}}, {{0x5, 0x3, 0x9, 0x10, 0x5, 0x1, {0x0, 0x2, 0x4, 0x8, 0x9, 0x0, 0x1ff, 0x3, 0x6, 0x8000, 0x200, r2, 0x0, 0x7, 0x8}}, {0x5, 0x200, 0x7, 0x200, 'user_id'}}, {{0x3, 0x0, 0x9, 0xffffffff, 0x80000000, 0x7, {0x0, 0x40, 0xfffffffffffffffb, 0x2, 0x2, 0x7e, 0x7fff, 0x81, 0x41f7, 0x4000, 0x4, r2, r3, 0xc155, 0x83}}, {0x4, 0x6, 0x5, 0x6, 'fuse\x00'}}, {{0x6, 0x3, 0x0, 0xfc, 0x5, 0x5, {0x0, 0x7fffffff, 0x4, 0x101, 0x1, 0x2, 0x6, 0x7fff, 0x5, 0x1000, 0x3, r2, r3, 0x4, 0x1}}, {0x1, 0xfffffffffffffffb, 0x4, 0x52f, '}\'$('}}, {{0x1, 0x3, 0x8, 0x800, 0x0, 0x3, {0x4, 0x3, 0x80, 0xb74, 0x100000000, 0x80, 0x53, 0x2, 0x8, 0x2000, 0x4, 0x0, r3, 0x6, 0x719}}, {0x1, 0x8, 0x7, 0x4, 'user_id'}}, {{0x4, 0x1, 0x6, 0xfffffffffffffffe, 0x7, 0xff, {0x2, 0x8, 0x2, 0x7f, 0x8, 0xc5000000000000, 0x81, 0xb, 0x7, 0x1000, 0x8, 0x0, r3, 0x4, 0x80000000}}, {0x6, 0x2, 0x0, 0x586}}, {{0x2, 0x1, 0xffffffff, 0xffffffffffffff00, 0x0, 0x1, {0x6, 0x8000, 0xffffffff, 0xbf, 0x5, 0x1, 0xfffffffc, 0x22, 0x0, 0x4000, 0x5, r4, r3, 0xd, 0xfb4}}, {0x2, 0x2f0ed13, 0x2, 0x4, 'fd'}}]}, 0x470) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3, 0x0, 0x0, r5}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000000)=0x1f) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x380000e, 0x12, r9, 0xe6f29000) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r10, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r12 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, 0x0, 0x2001}, 0x18) 2.633488391s ago: executing program 8 (id=823): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1b75, 0x0, &(0x7f0000000100), &(0x7f0000007700)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20802, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x20000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x48}, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x8010, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=ANY=[@ANYBLOB="00a964e939b510a050", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000080)=@raw=[@generic={0x6, 0x6, 0x1, 0x10, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x9a1, 0x94, &(0x7f0000000380)=""/148, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r3, r2, r3, r2, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x5, 0x3, 0xf, 0x9}, {0x0, 0x1, 0x4, 0xc}, {0x0, 0x5, 0xd, 0x1}, {0x0, 0x3, 0xc, 0x8}, {0x1, 0x3, 0x0, 0x5}, {0x4, 0x3, 0x2, 0x8}, {0x5, 0x2, 0x4, 0x4}, {0x1, 0x1, 0xc, 0x8}], 0x10, 0x1, @void, @value}, 0x94) 2.632425322s ago: executing program 7 (id=824): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0xcdf, r0, 0x1}) bind$tipc(r1, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffffd}}}}]}, 0x78}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0x24, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x21, 0x8, "bd48a6b4551f7d39cd7a27db584c1c2adfa3456ce4cc26c5cb5065b5f4"}]}, @NFT_MSG_NEWCHAIN={0x10c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa60}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x80, 0xc, "c8d3398e98cd684c8347395ae87516615df1dc461be8fe6ae9d78f2fa1095d8b69d2b5aaa91c394a723ca99b32159b23033cce176841f8091ec694cbbef72661098d86c5eed158f7d1b7625eb29d7032894816d72c89eeb3b2020a9b85470bd627216f50653f7570e81136bf7d966605cc541970ea750ee2ed6e9c57"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x15}}}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x26}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}}, 0x28}}, 0x0) splice(r7, 0x0, r8, &(0x7f0000000280)=0x3, 0x513a, 0xc) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000008c030000000c00000000000009030000000e0000000000000700000000003030302e61305f3000"], &(0x7f0000000340)=""/241, 0x46, 0xf1, 0x1, 0x7, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5d, 0x9, 0x6, 0x6, 0xa448, 0xffffffffffffffff, 0x6, '\x00', 0x0, r13, 0x1, 0x1, 0x2, 0x0, @value=r7, @void, @void, @value}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="345c82064e000000", @ANYRES16=r14, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x854) 2.06807023s ago: executing program 5 (id=825): socket(0x15, 0x5, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{}, {0x503b}, {0x1}, {0x2}, {0x0, 0xffff0001}, {0x0, 0xfffffffc}, {0x1, 0x40000000}, {0x0, 0x7}], 0x4, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x80, 0x1, 0x7ff, 0x6, {{0x5, 0x4, 0x2, 0x36, 0x14, 0x66, 0x0, 0xfc, 0x4, 0x0, @loopback, @broadcast}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4a, 0x1, 0x8) r2 = syz_io_uring_setup(0x327a, &(0x7f0000000400)={0x0, 0x3, 0x2c, 0x3, 0x87}, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8=r2], 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.693683762s ago: executing program 5 (id=826): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x150f, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) r3 = fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x840) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x200, 0x9, 0x80, 0x2}, 0x33, [0x4, 0x1, 0x5, 0x9, 0x0, 0x4570, 0x7, 0x10001, 0xfffffff9, 0x0, 0x9, 0x1, 0x5, 0x7, 0x0, 0x81, 0xcb6, 0xffff28a8, 0x7fff, 0x3, 0x5, 0x3, 0xc6, 0xfffffbff, 0xfff, 0x7, 0x1, 0xffff, 0x4000081, 0xa, 0x9b2, 0x1, 0xa2d5, 0x93, 0x4b, 0x1, 0x8, 0x24c8, 0x9, 0x3, 0xc, 0x4, 0xe, 0x0, 0xffffffff, 0x1000, 0x3, 0x2, 0x1ff, 0xa9cc, 0x2, 0x4, 0x8b6, 0xbec9, 0xfffffffd, 0x21, 0xfffffffa, 0xfffffdd1, 0x400, 0x1, 0x8, 0xfffffffc, 0x6fc, 0x7], [0x1, 0x0, 0x401, 0x6, 0x7, 0x800, 0x6, 0x6, 0x6, 0x2543, 0x0, 0xffff8001, 0xeb36, 0x7, 0xf, 0x6, 0xfffffffb, 0x7, 0x101, 0x400, 0x4, 0xe0, 0x5, 0x0, 0x80100000, 0x1ff, 0x9, 0x1, 0x4, 0x3, 0x0, 0xb, 0x2, 0x400, 0x2f41, 0x1ff, 0x8, 0x6, 0x2, 0x8, 0x5b10, 0x4, 0x6, 0x8, 0x8, 0x9, 0xd06, 0xa, 0x9, 0x10000, 0x1, 0x5, 0x3ff, 0x0, 0x1000, 0x5da, 0x6, 0x9, 0x10000, 0xcd, 0x8, 0x100, 0x10000, 0x200], [0xc3, 0xfffffffc, 0x7e63, 0x9, 0xb6, 0x80000000, 0x10001, 0xd9bc, 0x4, 0x9875, 0x0, 0x7, 0x820a, 0xfcc7, 0x6, 0x0, 0x1, 0x6, 0xfffffffd, 0x86d, 0x80, 0x2, 0x40, 0xc6b4, 0x200, 0x85, 0x77, 0x0, 0x3, 0xf, 0x6, 0x7, 0x4, 0x2, 0x14000, 0x4, 0x4, 0x0, 0x3, 0x80000001, 0x4fb, 0xb4, 0x7, 0x2, 0x1000, 0x4, 0x67, 0x1, 0x1, 0x4, 0x10000, 0xb, 0x6, 0x1, 0x401, 0x200, 0x400, 0xfffffff6, 0x3, 0xffff, 0x0, 0x80000000, 0x9, 0x2], [0x2, 0x7, 0x5, 0x3, 0x11d26a7b, 0x152f, 0xfffffff8, 0x7ff, 0xe, 0xcc3, 0x9, 0xfffffffb, 0x0, 0x1, 0x81, 0x7fff, 0x6de, 0x101, 0x4, 0x2, 0x3ff, 0x8, 0x4, 0x8, 0x7, 0x8, 0x367, 0x8, 0x3, 0xffff37a6, 0xf, 0x2, 0x1, 0x10000, 0x4, 0x1, 0x78a2353d, 0x0, 0x3ff, 0x1000, 0xffffffff, 0x8, 0xe, 0x9, 0x3, 0x8, 0x1, 0x7fffffff, 0x56c1, 0x6, 0xf, 0xe, 0x41, 0x10, 0x8c, 0x1, 0x80, 0x1349, 0x2, 0x4, 0x39, 0x2, 0x8, 0x7d]}, 0x45c) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='ceph\x00', 0x0) tkill(r4, 0xb) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000380)=0x14) getsockopt$packet_int(r7, 0x107, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000007ef010000000000000000000000000900010073797a31000000000600000000050000"], 0x28}}, 0x0) 1.33512665s ago: executing program 2 (id=827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x80000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff8}, {0x0, 0x6}, {0xffff, 0xb}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 1.206588351s ago: executing program 7 (id=828): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 907.80751ms ago: executing program 2 (id=829): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7972, 0x401, 0x5, 0xc00, 0xffffffffffff6375, 0x4000000, r3}) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_init1(0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) recvfrom$unix(r4, &(0x7f0000000000)=""/17, 0x11, 0x40010143, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) ftruncate(0xffffffffffffffff, 0xfbff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x58bc5d8a8bf0d7fc) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 607.898281ms ago: executing program 8 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r12, 0xc0045516, &(0x7f0000000100)=0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x4, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x8000, 0x80, 0x8}}) r13 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r13, 0x114, 0x3, &(0x7f0000000040)={{0xffffffff, 0x4}, 0x1}, 0x10) 157.416807ms ago: executing program 7 (id=831): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) process_mrelease(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='3\x00', 0x2) r3 = socket(0x29, 0x2, 0x7ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x24048080) getsockopt(r3, 0x4, 0x3, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=0x92) shutdown(r3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000d040400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x26010, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 52.540561ms ago: executing program 6 (id=832): fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r0 = eventfd(0x0) r1 = eventfd(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2, r1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x1, 0x2}, 0xfffffffffffffeb4, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0) 0s ago: executing program 2 (id=833): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) syz_clone3(&(0x7f0000000280)={0x200126000, 0x0, 0x0, 0x0, {0x8010006}, 0x0, 0xffffffffffffffa8, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000221000/0x4000)=nil, 0x4000, 0xb635773f05ebbee5, 0x10, r0, 0xabe0b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x48141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="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", 0x1a1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[], 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x3}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): 33][ T29] audit: type=1400 audit(1734151235.041:412): avc: denied { ioctl } for pid=7885 comm="syz.6.402" path="socket:[18476]" dev="sockfs" ino=18476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.386392][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.971880][ T25] usb 3-1: USB disconnect, device number 18 [ 298.283017][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 298.443070][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 298.452512][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.464779][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.481720][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 298.500992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.524679][ T9] usb 3-1: config 0 descriptor?? [ 298.947756][ T9] logitech-djreceiver 0003:046D:C517.0005: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input0 [ 299.229481][ T29] audit: type=1400 audit(1734151238.921:413): avc: denied { write } for pid=7943 comm="syz.7.410" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.252886][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.291740][ T9] usb 3-1: USB disconnect, device number 19 [ 299.340860][ T29] audit: type=1400 audit(1734151238.921:414): avc: denied { ioctl } for pid=7943 comm="syz.7.410" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.386494][ T29] audit: type=1400 audit(1734151239.081:415): avc: denied { setopt } for pid=7943 comm="syz.7.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.471089][ T29] audit: type=1400 audit(1734151239.101:416): avc: denied { connect } for pid=7943 comm="syz.7.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.674639][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.412'. [ 299.684245][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.7.412'. [ 299.705010][ T29] audit: type=1400 audit(1734151239.401:417): avc: denied { bind } for pid=7954 comm="syz.8.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.744990][ T29] audit: type=1400 audit(1734151239.441:418): avc: denied { getattr } for pid=7954 comm="syz.8.411" path="cgroup:[4026532948]" dev="nsfs" ino=4026532948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 299.794541][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.412'. [ 299.808128][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.412'. [ 299.822171][ T29] audit: type=1400 audit(1734151239.461:419): avc: denied { getopt } for pid=7954 comm="syz.8.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.848783][ T7959] netlink: 32 bytes leftover after parsing attributes in process `syz.7.412'. [ 300.173079][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 300.352827][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 300.369312][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.391101][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.452024][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.485076][ T9] usb 3-1: config 0 descriptor?? [ 300.598057][ T7986] netlink: 124 bytes leftover after parsing attributes in process `syz.5.416'. [ 301.441753][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 301.535528][ T7990] netlink: 72 bytes leftover after parsing attributes in process `syz.5.416'. [ 301.554645][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.417'. [ 301.568817][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.590717][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.464464][ T29] audit: type=1400 audit(1734151243.151:420): avc: denied { setattr } for pid=8006 comm="syz.6.420" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 303.971546][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.7.422'. [ 304.003217][ T29] audit: type=1400 audit(1734151243.661:421): avc: denied { create } for pid=8013 comm="syz.7.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 304.049925][ T29] audit: type=1400 audit(1734151243.661:422): avc: denied { write } for pid=8013 comm="syz.7.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 304.731911][ T5909] usb 3-1: USB disconnect, device number 20 [ 304.962887][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 305.054966][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'. [ 305.147378][ T8000] hub 2-0:1.0: USB hub found [ 305.152433][ T8000] hub 2-0:1.0: 1 port detected [ 305.160801][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 305.167392][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.203849][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.251407][ T25] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 305.283332][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.377731][ T25] usb 7-1: config 0 descriptor?? [ 305.803032][ T8023] netlink: 140 bytes leftover after parsing attributes in process `syz.6.423'. [ 305.859666][ T8023] netlink: 140 bytes leftover after parsing attributes in process `syz.6.423'. [ 305.951089][ T25] kone 0003:1E7D:2CED.0006: collection stack underflow [ 306.143049][ T25] kone 0003:1E7D:2CED.0006: item 0 1 0 12 parsing failed [ 306.217394][ T25] kone 0003:1E7D:2CED.0006: parse failed [ 306.243675][ T25] kone 0003:1E7D:2CED.0006: probe with driver kone failed with error -22 [ 306.349304][ T25] usb 7-1: USB disconnect, device number 2 [ 306.396142][ T8068] hub 2-0:1.0: USB hub found [ 306.420956][ T8068] hub 2-0:1.0: 1 port detected [ 307.211160][ T8078] syzkaller0: entered promiscuous mode [ 307.261630][ T8078] syzkaller0: entered allmulticast mode [ 307.898266][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.429'. [ 307.925149][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.7.429'. [ 307.966151][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.429'. [ 308.012999][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.429'. [ 308.046530][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.7.429'. [ 308.428675][ T29] audit: type=1400 audit(1734151248.121:423): avc: denied { read } for pid=8096 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 308.802822][ T8102] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.433' sets config #2147483647 [ 311.962066][ T29] audit: type=1400 audit(1734151251.591:424): avc: denied { append } for pid=8118 comm="syz.5.436" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 312.081317][ T29] audit: type=1400 audit(1734151251.681:425): avc: denied { write } for pid=8117 comm="syz.7.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.324809][ T8134] sp0: Synchronizing with TNC [ 312.772757][ T8136] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 312.822252][ T29] audit: type=1400 audit(1734151252.141:426): avc: denied { mounton } for pid=8118 comm="syz.5.436" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 313.419708][ T8147] FAULT_INJECTION: forcing a failure. [ 313.419708][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.475597][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.5.441 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 313.486221][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 313.496280][ T8147] Call Trace: [ 313.499565][ T8147] [ 313.502480][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 313.507166][ T8147] should_fail_ex+0x497/0x5b0 [ 313.511840][ T8147] _copy_to_user+0x32/0xd0 [ 313.516247][ T8147] bpf_prog_array_copy_to_user+0x18f/0x270 [ 313.522095][ T8147] cgroup_bpf_prog_query+0x8f3/0x12b0 [ 313.527457][ T8147] ? __pfx_cgroup_bpf_prog_query+0x10/0x10 [ 313.533247][ T8147] ? __might_fault+0xe3/0x190 [ 313.537909][ T8147] ? cap_capable+0x1cf/0x240 [ 313.542484][ T8147] ? bpf_lsm_capable+0x9/0x10 [ 313.547152][ T8147] ? security_capable+0x7e/0x260 [ 313.552084][ T8147] __sys_bpf+0x1498/0x49c0 [ 313.556500][ T8147] ? __pfx_lock_release+0x10/0x10 [ 313.561511][ T8147] ? __pfx___sys_bpf+0x10/0x10 [ 313.566264][ T8147] ? vfs_write+0x306/0x1150 [ 313.570767][ T8147] ? __mutex_unlock_slowpath+0x164/0x690 [ 313.576413][ T8147] ? fput+0x67/0x440 [ 313.580295][ T8147] ? ksys_write+0x1ba/0x250 [ 313.584781][ T8147] ? __pfx_ksys_write+0x10/0x10 [ 313.589615][ T8147] __x64_sys_bpf+0x78/0xc0 [ 313.594034][ T8147] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.599242][ T8147] do_syscall_64+0xcd/0x250 [ 313.603746][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.609647][ T8147] RIP: 0033:0x7fcca0985d19 [ 313.614053][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.633935][ T8147] RSP: 002b:00007fcca07f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.642337][ T8147] RAX: ffffffffffffffda RBX: 00007fcca0b75fa0 RCX: 00007fcca0985d19 [ 313.650323][ T8147] RDX: 0000000000000040 RSI: 00000000200002c0 RDI: 0000000000000010 [ 313.658456][ T8147] RBP: 00007fcca07f9090 R08: 0000000000000000 R09: 0000000000000000 [ 313.666422][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.674401][ T8147] R13: 0000000000000000 R14: 00007fcca0b75fa0 R15: 00007fff51c64588 [ 313.682390][ T8147] [ 313.713614][ T29] audit: type=1400 audit(1734151253.411:427): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.806663][ T29] audit: type=1400 audit(1734151253.411:428): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.921022][ T29] audit: type=1400 audit(1734151253.411:429): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.973515][ T29] audit: type=1400 audit(1734151253.611:430): avc: denied { accept } for pid=8122 comm="syz.8.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 314.028885][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 314.045383][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 314.619248][ T8166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32107 sclass=netlink_route_socket pid=8166 comm=syz.8.445 [ 314.776507][ T8169] syz.8.445: attempt to access beyond end of device [ 314.776507][ T8169] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 314.790396][ T8169] hpfs: hpfs_map_sector(): read error [ 314.993431][ T8158] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.443' sets config #2147483647 [ 315.118149][ T8175] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.327214][ T8166] kernel profiling enabled (shift: 9) [ 315.824568][ T8196] FAULT_INJECTION: forcing a failure. [ 315.824568][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.912327][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.7.449 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 315.922961][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 315.933039][ T8196] Call Trace: [ 315.936335][ T8196] [ 315.939282][ T8196] dump_stack_lvl+0x16c/0x1f0 [ 315.943997][ T8196] should_fail_ex+0x497/0x5b0 [ 315.948702][ T8196] _copy_to_user+0x32/0xd0 [ 315.953147][ T8196] simple_read_from_buffer+0xd0/0x160 [ 315.958556][ T8196] proc_fail_nth_read+0x198/0x270 [ 315.963604][ T8196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.969181][ T8196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.974756][ T8196] vfs_read+0x1df/0xbe0 [ 315.978976][ T8196] ? __fget_files+0x1fc/0x3a0 [ 315.983681][ T8196] ? __pfx___mutex_lock+0x10/0x10 [ 315.988718][ T8196] ? __pfx_vfs_read+0x10/0x10 [ 315.993403][ T8196] ? __fget_files+0x206/0x3a0 [ 315.998082][ T8196] ksys_read+0x12b/0x250 [ 316.002316][ T8196] ? __pfx_ksys_read+0x10/0x10 [ 316.007081][ T8196] do_syscall_64+0xcd/0x250 [ 316.011615][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.017686][ T8196] RIP: 0033:0x7f924fb8472c [ 316.022097][ T8196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.041795][ T8196] RSP: 002b:00007f925097a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.050208][ T8196] RAX: ffffffffffffffda RBX: 00007f924fd75fa0 RCX: 00007f924fb8472c [ 316.058189][ T8196] RDX: 000000000000000f RSI: 00007f925097a0a0 RDI: 0000000000000007 [ 316.066157][ T8196] RBP: 00007f925097a090 R08: 0000000000000000 R09: 0000000000000000 [ 316.074124][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.082105][ T8196] R13: 0000000000000000 R14: 00007f924fd75fa0 R15: 00007ffc4e7d1558 [ 316.090098][ T8196] [ 317.179683][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.186539][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.851858][ T29] audit: type=1400 audit(1734151257.541:431): avc: denied { listen } for pid=8218 comm="syz.8.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 318.157277][ T29] audit: type=1400 audit(1734151257.541:432): avc: denied { accept } for pid=8218 comm="syz.8.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 318.203248][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 318.473789][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 318.483178][ T8] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.497442][ T8] usb 7-1: config 0 has no interface number 0 [ 318.506931][ T8] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.587705][ T8242] syz.7.457 uses obsolete (PF_INET,SOCK_PACKET) [ 318.603229][ T29] audit: type=1326 audit(1734151258.271:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 318.962106][ T29] audit: type=1326 audit(1734151258.271:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.027937][ T8] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.039944][ T29] audit: type=1326 audit(1734151258.271:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.082668][ T8] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.091744][ T8] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.149320][ T29] audit: type=1326 audit(1734151258.271:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.166633][ T8] usb 7-1: Product: syz [ 319.191950][ T29] audit: type=1326 audit(1734151258.271:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.223329][ T29] audit: type=1326 audit(1734151258.271:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.302841][ T2146] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 319.330371][ T8] usb 7-1: SerialNumber: syz [ 319.492749][ T2146] usb 9-1: Using ep0 maxpacket: 32 [ 319.493703][ T8] usb 7-1: config 0 descriptor?? [ 319.513305][ T2146] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 319.522333][ T2146] usb 9-1: config 0 has no interface number 0 [ 319.555369][ T2146] usb 9-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 319.633617][ T29] audit: type=1326 audit(1734151258.271:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.782168][ T29] audit: type=1326 audit(1734151258.271:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.7.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924fb85d19 code=0x7ffc0000 [ 319.794215][ T8] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 319.823851][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input31 [ 319.845385][ T8254] loop6: detected capacity change from 0 to 524287999 [ 319.867625][ C0] blk_print_req_error: 24 callbacks suppressed [ 319.867640][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.882975][ C0] buffer_io_error: 23 callbacks suppressed [ 319.882985][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.943785][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.952994][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.971604][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.980801][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.992769][ T2146] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 320.011143][ T2146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.019396][ T2146] usb 9-1: Product: syz [ 320.023732][ T2146] usb 9-1: Manufacturer: syz [ 320.028347][ T2146] usb 9-1: SerialNumber: syz [ 320.035743][ T2146] usb 9-1: config 0 descriptor?? [ 320.043354][ T8247] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 320.053839][ T2146] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 320.064214][ T2146] em28xx 9-1:0.132: Video interface 132 found: bulk [ 320.077706][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.086939][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.099718][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.109032][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.121678][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.130907][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.140084][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.149304][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.220624][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.233635][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.242836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.250710][ T8254] ldm_validate_partition_table(): Disk read failed. [ 320.272502][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.281796][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.310098][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.323241][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.332384][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.345936][ T8254] Dev loop6: unable to read RDB block 0 [ 320.357636][ T8254] loop6: unable to read partition table [ 320.365292][ T8254] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 320.435672][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 320.435966][ T25] usb 7-1: USB disconnect, device number 3 [ 320.442676][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 320.500603][ T8255] ldm_validate_partition_table(): Disk read failed. [ 320.508432][ T8255] Dev loop6: unable to read RDB block 0 [ 320.517029][ T8255] loop6: unable to read partition table [ 320.522910][ T8255] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 320.570628][ T25] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 320.608722][ T2146] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 320.636189][ T5189] ldm_validate_partition_table(): Disk read failed. [ 320.818181][ T5189] Dev loop6: unable to read RDB block 0 [ 320.837479][ T5189] loop6: unable to read partition table [ 321.048099][ T2146] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 321.062668][ T2146] em28xx 9-1:0.132: board has no eeprom [ 321.122889][ T2146] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 321.131045][ T2146] em28xx 9-1:0.132: analog set to bulk mode. [ 321.139510][ T5917] em28xx 9-1:0.132: Registering V4L2 extension [ 321.204318][ T2146] usb 9-1: USB disconnect, device number 3 [ 321.294951][ T2146] em28xx 9-1:0.132: Disconnecting em28xx [ 321.652824][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 321.861757][ T5917] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 321.873189][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 321.882465][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 321.882717][ T5917] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 321.899486][ T5917] em28xx 9-1:0.132: No AC97 audio processor [ 321.903094][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.162756][ T8289] Bluetooth: MGMT ver 1.23 [ 322.479440][ T8] usb 3-1: Product: syz [ 322.482048][ T5917] usb 9-1: Decoder not found [ 322.488590][ T5917] em28xx 9-1:0.132: failed to create media graph [ 322.500593][ T5917] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 322.632867][ T8] usb 3-1: Manufacturer: syz [ 322.680374][ T8] usb 3-1: SerialNumber: syz [ 322.718392][ T8] usb 3-1: config 0 descriptor?? [ 322.980973][ T5917] em28xx 9-1:0.132: Remote control support is not available for this card. [ 323.529353][ T2146] em28xx 9-1:0.132: Closing input extension [ 323.658953][ T2146] em28xx 9-1:0.132: Freeing device [ 323.687133][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 324.253879][ T8300] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.467' sets config #2147483647 [ 324.972243][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 324.981058][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 325.008147][ T8] usb 3-1: USB disconnect, device number 21 [ 325.412783][ T2146] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 325.573108][ T2146] usb 9-1: Using ep0 maxpacket: 8 [ 325.594942][ T2146] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 325.630454][ T2146] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.640931][ T2146] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.651409][ T2146] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 325.665049][ T2146] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.684683][ T2146] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 325.694452][ T2146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.746884][ T2146] usb 9-1: config 0 descriptor?? [ 325.754144][ T8302] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 326.032302][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.055032][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.315409][ T8308] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 326.549521][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.558150][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.782065][ T8287] bridge0: port 3(erspan0) entered blocking state [ 326.788712][ T8287] bridge0: port 3(erspan0) entered disabled state [ 326.795389][ T8287] erspan0: entered allmulticast mode [ 326.801365][ T8287] erspan0: entered promiscuous mode [ 326.807961][ T8287] bridge0: port 3(erspan0) entered blocking state [ 326.814731][ T8287] bridge0: port 3(erspan0) entered forwarding state [ 327.914170][ T5817] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 327.950229][ T8324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8324 comm=syz.2.472 [ 327.974973][ T8324] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 328.089708][ T8324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.317242][ T975] usb 9-1: USB disconnect, device number 4 [ 328.773241][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.804536][ T8330] bond1: (slave batadv1): making interface the new active one [ 328.823965][ T8330] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 328.933931][ T8333] vlan2: entered promiscuous mode [ 328.967363][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 329.007597][ T8333] vlan2: entered allmulticast mode [ 329.055739][ T8333] bond1: entered allmulticast mode [ 329.062022][ T8347] xt_CT: No such helper "syz0" [ 329.075731][ T8333] batadv1: entered allmulticast mode [ 329.206266][ T8333] bond1: entered promiscuous mode [ 329.211337][ T8333] batadv1: entered promiscuous mode [ 329.229208][ T8333] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 329.259999][ T8333] bond1: left allmulticast mode [ 329.848262][ T8333] batadv1: left allmulticast mode [ 329.864233][ T8333] bond1: left promiscuous mode [ 329.877762][ T8333] batadv1: left promiscuous mode [ 330.448768][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 330.448789][ T29] audit: type=1400 audit(1734151270.141:453): avc: denied { name_connect } for pid=8368 comm="syz.7.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 330.475292][ T5870] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 330.562350][ T29] audit: type=1400 audit(1734151270.191:454): avc: denied { accept } for pid=8368 comm="syz.7.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.613043][ T5870] usb 9-1: device descriptor read/64, error -71 [ 330.878883][ T5870] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 331.032767][ T5870] usb 9-1: device descriptor read/64, error -71 [ 331.150169][ T5870] usb usb9-port1: attempt power cycle [ 331.512978][ T5870] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 331.942906][ T5870] usb 9-1: device descriptor read/8, error -71 [ 331.975093][ T29] audit: type=1400 audit(1734151271.471:455): avc: denied { accept } for pid=8394 comm="syz.7.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 332.612723][ T5870] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 332.643414][ T5870] usb 9-1: device descriptor read/8, error -71 [ 332.712049][ T8415] input: syz0 as /devices/virtual/input/input34 [ 332.783329][ T29] audit: type=1400 audit(1734151272.471:456): avc: denied { create } for pid=8409 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.833254][ T5870] usb usb9-port1: unable to enumerate USB device [ 332.910417][ T29] audit: type=1400 audit(1734151272.501:457): avc: denied { getopt } for pid=8409 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 334.364123][ T29] audit: type=1400 audit(1734151274.051:458): avc: denied { bind } for pid=8431 comm="syz.8.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 334.514401][ T29] audit: type=1400 audit(1734151274.191:459): avc: denied { ioctl } for pid=8445 comm="syz.7.494" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 334.750513][ T8453] SELinux: syz.7.494 (8453) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 336.998155][ T8431] delete_channel: no stack [ 340.314923][ T29] audit: type=1400 audit(1734151279.911:460): avc: denied { getopt } for pid=8517 comm="syz.7.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.595043][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 340.601601][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 340.734311][ T8524] ceph: No mds server is up or the cluster is laggy [ 340.882508][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 340.888943][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 341.274716][ T29] audit: type=1400 audit(1734151280.961:461): avc: denied { execute } for pid=8542 comm="syz.8.509" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.719755][ T8561] hub 2-0:1.0: USB hub found [ 341.787666][ T8561] hub 2-0:1.0: 1 port detected [ 341.944643][ T29] audit: type=1400 audit(1734151281.641:462): avc: denied { bind } for pid=8566 comm="syz.8.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.091718][ T29] audit: type=1400 audit(1734151281.781:463): avc: denied { ioctl } for pid=8566 comm="syz.8.512" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 342.358965][ T29] audit: type=1400 audit(1734151282.051:464): avc: denied { sys_chroot } for pid=8573 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 342.476006][ T29] audit: type=1400 audit(1734151282.051:465): avc: denied { setgid } for pid=8573 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 343.232233][ T8593] hub 2-0:1.0: USB hub found [ 343.241009][ T8593] hub 2-0:1.0: 1 port detected [ 343.717963][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 344.593588][ T8600] xt_CT: No such helper "syz0" [ 344.762689][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 344.833223][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 344.926703][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 345.006531][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.870583][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.878717][ T8] usb 3-1: Product: syz [ 345.883776][ T8] usb 3-1: Manufacturer: syz [ 345.888380][ T8] usb 3-1: SerialNumber: syz [ 345.960695][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.523'. [ 345.970177][ T29] audit: type=1400 audit(1734151285.651:466): avc: denied { connect } for pid=8619 comm="syz.6.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.085472][ T8630] netlink: 176 bytes leftover after parsing attributes in process `syz.5.524'. [ 346.098680][ T8630] FAULT_INJECTION: forcing a failure. [ 346.098680][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 346.111819][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.5.524 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 346.122418][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 346.132471][ T8630] Call Trace: [ 346.135783][ T8630] [ 346.138727][ T8630] dump_stack_lvl+0x16c/0x1f0 [ 346.143417][ T8630] should_fail_ex+0x497/0x5b0 [ 346.148119][ T8630] should_failslab+0xc2/0x120 [ 346.152791][ T8630] __kmalloc_cache_noprof+0x68/0x410 [ 346.158100][ T8630] __hw_addr_add_ex+0x3c8/0x7c0 [ 346.162953][ T8630] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 346.168351][ T8630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.173724][ T8630] ? dev_uc_add_excl+0x6f/0x110 [ 346.178589][ T8630] dev_uc_add_excl+0xb9/0x110 [ 346.183280][ T8630] ndo_dflt_fdb_add+0x181/0x260 [ 346.188139][ T8630] rtnl_fdb_add+0x6f6/0xac0 [ 346.192650][ T8630] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 346.198894][ T8630] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 346.203917][ T8630] ? rtnetlink_rcv_msg+0x372/0xea0 [ 346.209027][ T8630] ? trace_lock_acquire+0x14e/0x1f0 [ 346.214231][ T8630] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 346.219271][ T8630] rtnetlink_rcv_msg+0x3c7/0xea0 [ 346.224234][ T8630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.229723][ T8630] netlink_rcv_skb+0x16b/0x440 [ 346.234497][ T8630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.239991][ T8630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.245304][ T8630] ? netlink_deliver_tap+0x1ae/0xd30 [ 346.250613][ T8630] netlink_unicast+0x53c/0x7f0 [ 346.255390][ T8630] ? __pfx_netlink_unicast+0x10/0x10 [ 346.260789][ T8630] netlink_sendmsg+0x8b8/0xd70 [ 346.265561][ T8630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.270860][ T8630] ____sys_sendmsg+0xaaf/0xc90 [ 346.275631][ T8630] ? copy_msghdr_from_user+0x10b/0x160 [ 346.281090][ T8630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.286364][ T8630] ? __lock_acquire+0xcc5/0x3c40 [ 346.291322][ T8630] ___sys_sendmsg+0x135/0x1e0 [ 346.296010][ T8630] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.301283][ T8630] ? trace_lock_acquire+0x14e/0x1f0 [ 346.306534][ T8630] __sys_sendmmsg+0x201/0x420 [ 346.311227][ T8630] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.316459][ T8630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.322457][ T8630] ? fput+0x67/0x440 [ 346.326348][ T8630] ? ksys_write+0x1ba/0x250 [ 346.330860][ T8630] ? __pfx_ksys_write+0x10/0x10 [ 346.335719][ T8630] __x64_sys_sendmmsg+0x9c/0x100 [ 346.340667][ T8630] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.345871][ T8630] do_syscall_64+0xcd/0x250 [ 346.350374][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.356282][ T8630] RIP: 0033:0x7fcca0985d19 [ 346.360705][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.380319][ T8630] RSP: 002b:00007fcca07f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.388733][ T8630] RAX: ffffffffffffffda RBX: 00007fcca0b75fa0 RCX: 00007fcca0985d19 [ 346.396712][ T8630] RDX: 0492492492492856 RSI: 0000000020000140 RDI: 0000000000000003 [ 346.404682][ T8630] RBP: 00007fcca07f9090 R08: 0000000000000000 R09: 0000000000000000 [ 346.412655][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.420622][ T8630] R13: 0000000000000000 R14: 00007fcca0b75fa0 R15: 00007fff51c64588 [ 346.428617][ T8630] [ 346.468458][ T8630] netlink: 176 bytes leftover after parsing attributes in process `syz.5.524'. [ 346.484797][ T8630] ip6gretap0: entered promiscuous mode [ 346.922225][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.933056][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.996128][ T8] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 347.003256][ T8] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 347.010853][ T8] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 347.062822][ T5870] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 347.154662][ T8647] 9pnet_fd: Insufficient options for proto=fd [ 347.214268][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 347.219016][ T8] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 347.227341][ T5870] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 347.237240][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.263237][ T5870] usb 9-1: config 0 descriptor?? [ 347.272013][ T5870] gspca_main: sunplus-2.14.0 probing 041e:400b [ 347.302299][ T8] cdc_ncm 3-1:1.0 eth17: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 347.396588][ T8] usb 3-1: USB disconnect, device number 22 [ 347.423807][ T29] audit: type=1400 audit(1734151287.121:467): avc: denied { accept } for pid=8656 comm="syz.6.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.427889][ T8] cdc_ncm 3-1:1.0 eth17: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 347.623750][ T8660] overlayfs: failed to resolve './bus': -2 [ 347.892248][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.953459][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.225100][ T8682] fuse: Unknown parameter 'use00000000000000000000' [ 348.476182][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.612880][ T5870] gspca_sunplus: reg_r err -110 [ 348.618792][ T5870] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 348.674580][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.176931][ T8693] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.532' sets config #2147483647 [ 350.067639][ T8700] netlink: 'syz.5.536': attribute type 1 has an invalid length. [ 350.945877][ T8713] binfmt_misc: Unknown parameter 'gid' [ 350.954887][ T8713] SELinux: policydb string length -1804058936 does not match expected length 8 [ 350.964241][ T8713] SELinux: failed to load policy [ 352.111881][ T8] usb 9-1: USB disconnect, device number 9 [ 352.193197][ T5867] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 352.356074][ T5867] usb 7-1: not running at top speed; connect to a high speed hub [ 352.365784][ T5867] usb 7-1: config 1 has an invalid interface number: 63 but max is 1 [ 352.377801][ T5867] usb 7-1: config 1 has an invalid interface number: 65 but max is 1 [ 352.432393][ T5867] usb 7-1: config 1 has no interface number 0 [ 352.486587][ T5867] usb 7-1: config 1 has no interface number 1 [ 352.522412][ T5867] usb 7-1: config 1 interface 65 altsetting 4 endpoint 0xC has invalid maxpacket 1040, setting to 64 [ 352.577044][ T5867] usb 7-1: config 1 interface 65 has no altsetting 0 [ 352.616046][ T5867] usb 7-1: New USB device found, idVendor=0af0, idProduct=6811, bcdDevice=2f.e1 [ 352.648589][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.669175][ T5867] usb 7-1: Product: syz [ 352.679427][ T5867] usb 7-1: Manufacturer: syz [ 352.696099][ T5867] usb 7-1: SerialNumber: syz [ 353.133503][ T8] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 353.184178][ T8763] mmap: syz.5.549 (8763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 353.264414][ T5867] hso 7-1:1.63: Not our interface [ 353.288630][ T8] usb 9-1: device descriptor read/64, error -71 [ 353.317608][ T5867] hso 7-1:1.65: Not our interface [ 353.341349][ T5867] usb 7-1: USB disconnect, device number 4 [ 353.543396][ T8] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 353.684160][ T8] usb 9-1: device descriptor read/64, error -71 [ 353.793376][ T8] usb usb9-port1: attempt power cycle [ 354.183188][ T8] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 354.309060][ T8] usb 9-1: device descriptor read/8, error -71 [ 354.477733][ T8792] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.550' sets config #2147483647 [ 354.628650][ T8] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 354.663779][ T8] usb 9-1: device descriptor read/8, error -71 [ 354.772871][ T8] usb usb9-port1: unable to enumerate USB device [ 355.467680][ T8808] xt_CT: No such helper "syz0" [ 355.486719][ T29] audit: type=1400 audit(1734151295.181:468): avc: denied { map } for pid=8821 comm="syz.6.556" path="socket:[21525]" dev="sockfs" ino=21525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 355.624892][ T29] audit: type=1400 audit(1734151295.181:469): avc: denied { read } for pid=8821 comm="syz.6.556" path="socket:[21525]" dev="sockfs" ino=21525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.500899][ T5917] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 358.673511][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 358.688690][ T5917] usb 3-1: config 4 has an invalid interface number: 201 but max is 0 [ 358.712687][ T5917] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 358.748903][ T5917] usb 3-1: config 4 has no interface number 0 [ 358.759010][ T5917] usb 3-1: config 4 interface 201 has no altsetting 0 [ 358.790143][ T5917] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 358.813023][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.821052][ T5917] usb 3-1: Product: syz [ 358.835596][ T5917] usb 3-1: Manufacturer: syz [ 358.840232][ T5917] usb 3-1: SerialNumber: syz [ 360.270459][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 362.001833][ T5917] usb 3-1: bad CDC descriptors [ 362.009847][ T5917] cdc_acm 3-1:4.201: Zero length descriptor references [ 362.017073][ T5917] cdc_acm 3-1:4.201: probe with driver cdc_acm failed with error -22 [ 362.034254][ T5917] usb 3-1: USB disconnect, device number 23 [ 363.862749][ T8915] xt_CT: No such helper "syz0" [ 364.569412][ T8935] No source specified [ 365.304263][ T8953] hub 2-0:1.0: USB hub found [ 365.310377][ T8953] hub 2-0:1.0: 1 port detected [ 367.645885][ T8993] FAULT_INJECTION: forcing a failure. [ 367.645885][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 367.658891][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.7.583 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 367.669485][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 367.679534][ T8993] Call Trace: [ 367.682811][ T8993] [ 367.685766][ T8993] dump_stack_lvl+0x16c/0x1f0 [ 367.690475][ T8993] should_fail_ex+0x497/0x5b0 [ 367.695203][ T8993] ? fs_reclaim_acquire+0xae/0x150 [ 367.700346][ T8993] should_failslab+0xc2/0x120 [ 367.705034][ T8993] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 367.711678][ T8993] ? kstrdup_const+0x63/0x80 [ 367.716283][ T8993] kstrdup+0x53/0x100 [ 367.720884][ T8993] kstrdup_const+0x63/0x80 [ 367.725472][ T8993] __kernfs_new_node+0x9c/0x890 [ 367.730342][ T8993] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.735802][ T8993] ? __pfx_lock_release+0x10/0x10 [ 367.740824][ T8993] ? kernfs_add_one+0x39d/0x520 [ 367.745675][ T8993] ? lock_acquire.part.0+0x11b/0x380 [ 367.750958][ T8993] ? find_held_lock+0x2d/0x110 [ 367.755730][ T8993] kernfs_new_node+0x186/0x240 [ 367.760494][ T8993] kernfs_create_link+0xcc/0x240 [ 367.765436][ T8993] sysfs_do_create_link_sd+0x90/0x140 [ 367.770812][ T8993] sysfs_create_link+0x61/0xc0 [ 367.775585][ T8993] device_add+0x62e/0x1a70 [ 367.780010][ T8993] ? __pfx_device_add+0x10/0x10 [ 367.785142][ T8993] ? __init_waitqueue_head+0xca/0x150 [ 367.790565][ T8993] netdev_register_kobject+0x183/0x3a0 [ 367.796048][ T8993] register_netdevice+0x1473/0x1e90 [ 367.801248][ T8993] ? __pfx_register_netdevice+0x10/0x10 [ 367.806804][ T8993] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.812002][ T8993] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 367.817841][ T8993] register_netdev+0x2f/0x50 [ 367.822427][ T8993] register_candev+0x343/0x7c0 [ 367.827190][ T8993] ? __pfx_register_candev+0x10/0x10 [ 367.832471][ T8993] ? lockdep_init_map_type+0x16d/0x7d0 [ 367.837935][ T8993] slcan_open+0x3ea/0x530 [ 367.842270][ T8993] ? __pfx_slcan_open+0x10/0x10 [ 367.847131][ T8993] tty_ldisc_open+0x9c/0x120 [ 367.851722][ T8993] tty_set_ldisc+0x318/0x720 [ 367.856317][ T8993] tty_ioctl+0xbd0/0x15d0 [ 367.860675][ T8993] ? __pfx_tty_ioctl+0x10/0x10 [ 367.865444][ T8993] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 367.872303][ T8993] ? __pfx_lock_release+0x10/0x10 [ 367.877350][ T8993] ? selinux_file_ioctl+0x180/0x270 [ 367.882552][ T8993] ? selinux_file_ioctl+0xb4/0x270 [ 367.887676][ T8993] ? __pfx_tty_ioctl+0x10/0x10 [ 367.892447][ T8993] __x64_sys_ioctl+0x190/0x200 [ 367.897240][ T8993] do_syscall_64+0xcd/0x250 [ 367.901745][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.907638][ T8993] RIP: 0033:0x7f924fb85d19 [ 367.912048][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.931748][ T8993] RSP: 002b:00007f925097a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.940159][ T8993] RAX: ffffffffffffffda RBX: 00007f924fd75fa0 RCX: 00007f924fb85d19 [ 367.948137][ T8993] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 367.956101][ T8993] RBP: 00007f925097a090 R08: 0000000000000000 R09: 0000000000000000 [ 367.964066][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.972032][ T8993] R13: 0000000000000000 R14: 00007f924fd75fa0 R15: 00007ffc4e7d1558 [ 367.980106][ T8993] [ 367.989088][ T8993] slcan: can't register candev [ 368.402764][ T29] audit: type=1326 audit(1734151308.071:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0985d19 code=0x7ffc0000 [ 368.575898][ T29] audit: type=1326 audit(1734151308.071:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.5.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0985d19 code=0x7ffc0000 [ 371.792760][ T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 371.942709][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 372.210481][ T25] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 372.219549][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.230042][ T25] usb 9-1: config 0 has no interface number 0 [ 372.236362][ T25] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.255704][ T25] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 372.313523][ T25] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 372.363786][ T25] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.458166][ T25] usb 9-1: config 0 interface 52 has no altsetting 0 [ 372.492338][ T25] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 372.560935][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.600604][ T25] usb 9-1: config 0 descriptor?? [ 372.872210][ T25] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input37 [ 373.520049][ T29] audit: type=1400 audit(1734151313.211:472): avc: denied { read } for pid=9030 comm="syz.8.591" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 373.601842][ T5867] usb 9-1: USB disconnect, device number 14 [ 373.610747][ T5174] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 374.440860][ T9083] hub 2-0:1.0: USB hub found [ 374.446374][ T9083] hub 2-0:1.0: 1 port detected [ 374.695570][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.599'. [ 374.735992][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.599'. [ 374.879034][ T9084] netlink: 52 bytes leftover after parsing attributes in process `syz.7.599'. [ 375.937753][ T9107] hub 2-0:1.0: USB hub found [ 375.962354][ T9107] hub 2-0:1.0: 1 port detected [ 376.250430][ T29] audit: type=1400 audit(1734151315.941:473): avc: denied { create } for pid=9110 comm="syz.6.603" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.297113][ T29] audit: type=1400 audit(1734151315.981:474): avc: denied { write } for pid=9110 comm="syz.6.603" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.391548][ T29] audit: type=1400 audit(1734151315.981:475): avc: denied { open } for pid=9110 comm="syz.6.603" path="/48/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.475632][ T29] audit: type=1400 audit(1734151315.981:476): avc: denied { ioctl } for pid=9110 comm="syz.6.603" path="/48/file0" dev="tmpfs" ino=268 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.561245][ T29] audit: type=1400 audit(1734151316.211:477): avc: denied { unlink } for pid=7424 comm="syz-executor" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.526822][ T29] audit: type=1326 audit(1734151318.201:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.550723][ T29] audit: type=1326 audit(1734151318.221:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.582067][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.589471][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.610568][ T349] sl0: compressed packet ignored [ 378.630865][ T29] audit: type=1326 audit(1734151318.271:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.663030][ T29] audit: type=1326 audit(1734151318.321:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.757555][ T29] audit: type=1326 audit(1734151318.321:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.795353][ T9147] block device autoloading is deprecated and will be removed. [ 378.834557][ T29] audit: type=1326 audit(1734151318.321:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f908a18472c code=0x7ffc0000 [ 378.857853][ T29] audit: type=1326 audit(1734151318.361:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f908a1847cf code=0x7ffc0000 [ 378.881344][ T29] audit: type=1326 audit(1734151318.361:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.904692][ T29] audit: type=1326 audit(1734151318.361:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908a185d19 code=0x7ffc0000 [ 378.928305][ T29] audit: type=1400 audit(1734151318.361:487): avc: denied { read } for pid=9142 comm="syz.6.609" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 379.113686][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.612'. [ 379.127883][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.612'. [ 379.146726][ T9163] netlink: 52 bytes leftover after parsing attributes in process `syz.6.612'. [ 379.224669][ T9168] binfmt_misc: Unknown parameter 'gid' [ 379.233294][ T9168] SELinux: policydb string length -1804058936 does not match expected length 8 [ 379.242655][ T9168] SELinux: failed to load policy [ 380.139282][ T9173] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 380.154190][ T9173] netlink: 'syz.2.615': attribute type 2 has an invalid length. [ 380.241936][ T9173] netlink: 'syz.2.615': attribute type 39 has an invalid length. [ 380.343359][ T975] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 380.493631][ T975] usb 7-1: Using ep0 maxpacket: 16 [ 380.517622][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.529383][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.556356][ T975] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 380.591969][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.644799][ T975] usb 7-1: config 0 descriptor?? [ 381.354206][ T975] elan 0003:04F3:0755.0007: report_id 0 is invalid [ 381.365860][ T975] elan 0003:04F3:0755.0007: item 0 0 1 8 parsing failed [ 381.388159][ T975] elan 0003:04F3:0755.0007: Hid Parse failed [ 381.408530][ T975] elan 0003:04F3:0755.0007: probe with driver elan failed with error -22 [ 381.535453][ T8] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 381.768875][ T8] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.241588][ T8] usb 9-1: config 0 has no interface number 0 [ 382.249496][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.275548][ T8] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.284952][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.295427][ T8] usb 9-1: config 0 descriptor?? [ 382.315725][ T8] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 382.518483][ T8] usb 9-1: USB disconnect, device number 15 [ 382.631284][ T9217] netlink: 'syz.2.621': attribute type 13 has an invalid length. [ 382.856947][ T8] usb 7-1: USB disconnect, device number 5 [ 383.592744][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 383.592764][ T29] audit: type=1800 audit(1734151323.021:499): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.622" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 384.151305][ T9226] syz.5.622: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 384.169518][ T9226] CPU: 1 UID: 0 PID: 9226 Comm: syz.5.622 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 384.180087][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 384.190124][ T9226] Call Trace: [ 384.193387][ T9226] [ 384.196298][ T9226] dump_stack_lvl+0x16c/0x1f0 [ 384.200965][ T9226] warn_alloc+0x24d/0x3a0 [ 384.205280][ T9226] ? __pfx_warn_alloc+0x10/0x10 [ 384.210125][ T9226] ? __get_vm_area_node+0x1b0/0x2f0 [ 384.215304][ T9226] ? __get_vm_area_node+0x1dc/0x2f0 [ 384.220500][ T9226] __vmalloc_node_range_noprof+0x1105/0x1530 [ 384.226464][ T9226] ? xt_alloc_entry_offsets+0x3a/0x60 [ 384.231826][ T9226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.238132][ T9226] ? rcu_is_watching+0x12/0xc0 [ 384.242892][ T9226] ? trace_kmalloc+0x2d/0xd0 [ 384.247484][ T9226] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 384.253207][ T9226] ? xt_alloc_entry_offsets+0x3a/0x60 [ 384.258569][ T9226] __kvmalloc_node_noprof+0x14f/0x1a0 [ 384.263923][ T9226] ? xt_alloc_entry_offsets+0x3a/0x60 [ 384.269631][ T9226] xt_alloc_entry_offsets+0x3a/0x60 [ 384.274812][ T9226] translate_table+0x22e/0x1710 [ 384.279645][ T9226] ? __might_fault+0x13b/0x190 [ 384.284394][ T9226] ? __pfx_lock_release+0x10/0x10 [ 384.289399][ T9226] ? preempt_schedule_thunk+0x1a/0x30 [ 384.294753][ T9226] ? __pfx_translate_table+0x10/0x10 [ 384.300018][ T9226] ? __might_fault+0xe3/0x190 [ 384.304697][ T9226] do_ipt_set_ctl+0x605/0xc30 [ 384.309356][ T9226] ? __mutex_lock+0x1cc/0xa60 [ 384.314014][ T9226] ? preempt_schedule_thunk+0x1a/0x30 [ 384.319365][ T9226] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 384.324568][ T9226] ? __mutex_unlock_slowpath+0x164/0x690 [ 384.330186][ T9226] ? sockopt_release_sock+0x52/0x60 [ 384.335369][ T9226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.341338][ T9226] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 384.347320][ T9226] nf_setsockopt+0x8a/0xf0 [ 384.351810][ T9226] ip_setsockopt+0xcb/0xf0 [ 384.356248][ T9226] udp_setsockopt+0x7d/0xd0 [ 384.360743][ T9226] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.366892][ T9226] do_sock_setsockopt+0x222/0x480 [ 384.371931][ T9226] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 384.377468][ T9226] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.382680][ T9226] __sys_setsockopt+0x1a0/0x230 [ 384.387541][ T9226] __x64_sys_setsockopt+0xbd/0x160 [ 384.392649][ T9226] ? do_syscall_64+0x91/0x250 [ 384.397330][ T9226] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.402520][ T9226] do_syscall_64+0xcd/0x250 [ 384.407012][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.412976][ T9226] RIP: 0033:0x7fcca0985d19 [ 384.417391][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.437332][ T9226] RSP: 002b:00007fcca07b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.445738][ T9226] RAX: ffffffffffffffda RBX: 00007fcca0b76160 RCX: 00007fcca0985d19 [ 384.453698][ T9226] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 384.461661][ T9226] RBP: 00007fcca0a01a20 R08: 0000000000000478 R09: 0000000000000000 [ 384.469641][ T9226] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000 [ 384.477608][ T9226] R13: 0000000000000000 R14: 00007fcca0b76160 R15: 00007fff51c64588 [ 384.485580][ T9226] [ 384.489478][ T9226] Mem-Info: [ 384.492669][ T9226] active_anon:16948 inactive_anon:0 isolated_anon:0 [ 384.492669][ T9226] active_file:17764 inactive_file:38653 isolated_file:0 [ 384.492669][ T9226] unevictable:768 dirty:160 writeback:16 [ 384.492669][ T9226] slab_reclaimable:11657 slab_unreclaimable:107273 [ 384.492669][ T9226] mapped:34666 shmem:10067 pagetables:1218 [ 384.492669][ T9226] sec_pagetables:0 bounce:0 [ 384.492669][ T9226] kernel_misc_reclaimable:0 [ 384.492669][ T9226] free:1252947 free_pcp:14854 free_cma:0 [ 384.538293][ T9226] Node 0 active_anon:67792kB inactive_anon:0kB active_file:71056kB inactive_file:154540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138664kB dirty:636kB writeback:64kB shmem:38732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12092kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no [ 384.571178][ T9226] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 384.601797][ T9226] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.628883][ T9226] lowmem_reserve[]: 0 2459 2459 0 0 [ 384.634107][ T9226] Node 0 DMA32 free:1090296kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:67792kB inactive_anon:0kB active_file:71056kB inactive_file:154444kB unevictable:1536kB writepending:700kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:59400kB local_pcp:59268kB free_cma:0kB [ 384.665000][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 384.669707][ T9226] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 384.696339][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 384.701029][ T9226] Node 1 Normal free:3906132kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 384.729754][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 384.734475][ T9226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.747107][ T9226] Node 0 DMA32: 588*4kB (UME) 142*8kB (UM) 33*16kB (UE) 111*32kB (UM) 108*64kB (UM) 8*128kB (UME) 29*256kB (UME) 97*512kB (UME) 86*1024kB (UM) 24*2048kB (UME) 215*4096kB (UM) = 1090448kB [ 384.765968][ T9226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 384.777449][ T9226] Node 1 Normal: 199*4kB (UME) 43*8kB (UME) 42*16kB (UME) 196*32kB (UME) 87*64kB (UME) 36*128kB (UME) 15*256kB (UME) 8*512kB (UME) 1*1024kB (M) 6*2048kB (UE) 944*4096kB (M) = 3906132kB [ 384.795851][ T9226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.805400][ T9226] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 384.814721][ T9226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.824294][ T9226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 384.833593][ T9226] 66484 total pagecache pages [ 384.838249][ T9226] 0 pages in swap cache [ 384.892653][ T9226] Free swap = 124520kB [ 384.896871][ T9226] Total swap = 124996kB [ 384.901037][ T9226] 2097051 pages RAM [ 384.905006][ T9226] 0 pages HighMem/MovableOnly [ 384.909675][ T9226] 428606 pages reserved [ 384.913890][ T9226] 0 pages cma reserved [ 385.509558][ T9235] netlink: 44 bytes leftover after parsing attributes in process `syz.6.625'. [ 385.743783][ T9244] netlink: 52 bytes leftover after parsing attributes in process `syz.2.624'. [ 386.839348][ T9246] binfmt_misc: Unknown parameter 'gid' [ 386.845802][ T9246] SELinux: policydb string length -1804058936 does not match expected length 8 [ 386.855448][ T9246] SELinux: failed to load policy [ 387.210108][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 387.813700][ T9261] vivid-007: ================= START STATUS ================= [ 387.921993][ T9261] vivid-007: Enable Output Cropping: true [ 387.952304][ T9261] vivid-007: Enable Output Composing: true [ 388.045629][ T9261] vivid-007: Enable Output Scaler: true [ 388.116770][ T9261] vivid-007: Tx RGB Quantization Range: Automatic [ 388.204443][ T9261] vivid-007: Transmit Mode: HDMI [ 388.302707][ T9261] vivid-007: Hotplug Present: 0x00000000 [ 388.332701][ T9261] vivid-007: RxSense Present: 0x00000000 [ 388.341662][ T9261] vivid-007: EDID Present: 0x00000000 [ 388.390802][ T9261] vivid-007: ================== END STATUS ================== [ 389.205895][ T9288] input: syz1 as /devices/virtual/input/input38 [ 391.034157][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 391.904764][ T975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 392.103647][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 392.118117][ T975] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 392.129051][ T975] usb 6-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 392.160145][ T975] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 392.185544][ T975] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.208865][ T975] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.227365][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.238823][ T975] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 392.251361][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.292546][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 392.362739][ T975] usb 6-1: config 0 descriptor?? [ 392.452779][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 392.481489][ T8] usb 3-1: config 4 has an invalid interface number: 201 but max is 0 [ 392.512763][ T8] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 392.566429][ T8] usb 3-1: config 4 has no interface number 0 [ 392.600549][ T8] usb 3-1: config 4 interface 201 has no altsetting 0 [ 392.661828][ T8] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 392.708325][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.737110][ T8] usb 3-1: Product: syz [ 392.741337][ T8] usb 3-1: Manufacturer: syz [ 392.778451][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 392.795334][ T8] usb 3-1: SerialNumber: syz [ 392.819752][ T9341] Bluetooth: hci5: Frame reassembly failed (-84) [ 392.830603][ T9341] FAULT_INJECTION: forcing a failure. [ 392.830603][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 392.859914][ T975] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 392.872966][ T975] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 392.883986][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.7.642 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 392.894625][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 392.904697][ T9341] Call Trace: [ 392.907980][ T9341] [ 392.910916][ T9341] dump_stack_lvl+0x16c/0x1f0 [ 392.915612][ T9341] should_fail_ex+0x497/0x5b0 [ 392.920304][ T9341] ? fs_reclaim_acquire+0xae/0x150 [ 392.925442][ T9341] should_failslab+0xc2/0x120 [ 392.930133][ T9341] __kmalloc_noprof+0xcb/0x510 [ 392.934911][ T9341] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 392.940564][ T9341] tomoyo_realpath_from_path+0xb9/0x720 [ 392.946137][ T9341] ? tomoyo_path_number_perm+0x235/0x590 [ 392.951785][ T9341] ? tomoyo_path_number_perm+0x235/0x590 [ 392.957439][ T9341] tomoyo_path_number_perm+0x248/0x590 [ 392.962911][ T9341] ? tomoyo_path_number_perm+0x235/0x590 [ 392.968557][ T9341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.974578][ T9341] ? __pfx_lock_release+0x10/0x10 [ 392.979619][ T9341] ? trace_lock_acquire+0x14e/0x1f0 [ 392.984851][ T9341] ? lock_acquire+0x2f/0xb0 [ 392.989365][ T9341] ? __fget_files+0x40/0x3a0 [ 392.994260][ T9341] ? __fget_files+0x206/0x3a0 [ 392.998954][ T9341] security_file_ioctl+0x9b/0x240 [ 393.003997][ T9341] __x64_sys_ioctl+0xb7/0x200 [ 393.008698][ T9341] do_syscall_64+0xcd/0x250 [ 393.013221][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.019129][ T9341] RIP: 0033:0x7f924fb85d19 [ 393.023738][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.043452][ T9341] RSP: 002b:00007f925097a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.051887][ T9341] RAX: ffffffffffffffda RBX: 00007f924fd75fa0 RCX: 00007f924fb85d19 [ 393.059893][ T9341] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000003 [ 393.067875][ T9341] RBP: 00007f925097a090 R08: 0000000000000000 R09: 0000000000000000 [ 393.075838][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.083797][ T9341] R13: 0000000000000000 R14: 00007f924fd75fa0 R15: 00007ffc4e7d1558 [ 393.091773][ T9341] [ 393.105277][ T975] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 393.106164][ T9341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.112018][ T975] kye 0003:0458:0138.0008: report_id 915 is invalid [ 393.125932][ T975] kye 0003:0458:0138.0008: item 0 4 1 8 parsing failed [ 393.134493][ T975] kye 0003:0458:0138.0008: parse failed [ 393.141470][ T975] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 394.701187][ T9355] netlink: 156 bytes leftover after parsing attributes in process `syz.8.639'. [ 394.728518][ T29] audit: type=1400 audit(1734151334.421:500): avc: denied { ioctl } for pid=9353 comm="syz.8.639" path="socket:[21334]" dev="sockfs" ino=21334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 394.813289][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 394.821272][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 394.910451][ T29] audit: type=1400 audit(1734151334.601:501): avc: denied { connect } for pid=9329 comm="syz.6.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 394.957125][ T9334] usb usb8: usbfs: process 9334 (syz.6.640) did not claim interface 0 before use [ 395.188515][ T5870] usb 6-1: USB disconnect, device number 2 [ 395.479070][ T9378] binfmt_misc: Unknown parameter 'gid' [ 395.485790][ T9378] SELinux: policydb string length -1804058936 does not match expected length 8 [ 395.495235][ T9378] SELinux: failed to load policy [ 395.709483][ T8] usb 3-1: bad CDC descriptors [ 396.217942][ T8] cdc_acm 3-1:4.201: Zero length descriptor references [ 396.244680][ T8] cdc_acm 3-1:4.201: probe with driver cdc_acm failed with error -22 [ 396.810145][ T8] usb 3-1: USB disconnect, device number 24 [ 396.899933][ T29] audit: type=1400 audit(1734151336.591:502): avc: denied { module_request } for pid=9384 comm="syz.5.647" kmod="nfct-helper-syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 396.973647][ T9385] xt_CT: No such helper "syz0" [ 397.174826][ T9398] netlink: 296 bytes leftover after parsing attributes in process `syz.2.649'. [ 397.184724][ T29] audit: type=1400 audit(1734151336.871:503): avc: denied { nlmsg_read } for pid=9397 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.034756][ T29] audit: type=1804 audit(1734151337.711:504): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.652" name="/newroot/60/bus/file0" dev="overlay" ino=352 res=1 errno=0 [ 398.812633][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20220 ms [ 398.821480][ C1] sl0: transmit timed out, driver error? [ 398.828207][ T25] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 398.910094][ T5870] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 399.165129][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 399.177379][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 399.476328][ T25] usb 6-1: config 178 has an invalid interface number: 135 but max is 0 [ 399.484880][ T25] usb 6-1: config 178 has no interface number 0 [ 399.491163][ T25] usb 6-1: config 178 interface 135 has no altsetting 0 [ 399.501812][ T25] usb 6-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice= b.4c [ 399.511976][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.520095][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 399.526708][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 399.538893][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.549546][ T5870] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.559414][ T25] usb 6-1: Product: syz [ 399.563729][ T25] usb 6-1: Manufacturer: syz [ 399.568426][ T25] usb 6-1: SerialNumber: syz [ 399.573237][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 399.596703][ T5870] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 399.607418][ T5870] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 399.617345][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.657723][ T5870] usb 9-1: config 0 descriptor?? [ 399.670621][ T9445] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 399.917499][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.935870][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.963601][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.001257][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.543445][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.553723][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.600334][ T25] gspca_main: spca500-2.14.0 probing 04a5:300c [ 401.669879][ T25] usb 6-1: USB disconnect, device number 3 [ 401.773029][ T5822] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 401.950512][ T5870] usb 9-1: USB disconnect, device number 16 [ 402.962850][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 403.047428][ T9514] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.126405][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 403.146802][ T25] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 403.159112][ T25] usb 7-1: config 0 has no interface number 0 [ 403.180330][ T25] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 403.189719][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.209843][ T25] usb 7-1: Product: syz [ 403.220847][ T25] usb 7-1: Manufacturer: syz [ 403.238355][ T25] usb 7-1: SerialNumber: syz [ 403.272345][ T25] usb 7-1: config 0 descriptor?? [ 403.289535][ T25] radio-usb-si4713 7-1:0.128: Si4713 development board discovered: (10C4:8244) [ 403.463200][ T975] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 403.504435][ T9507] netlink: 'syz.6.671': attribute type 13 has an invalid length. [ 403.512294][ T9507] netlink: 152 bytes leftover after parsing attributes in process `syz.6.671'. [ 403.546236][ T9507] syz_tun: refused to change device tx_queue_len [ 403.562836][ T9507] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 403.695385][ T975] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.704617][ T975] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.715135][ T975] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.728485][ T975] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 184 [ 403.834906][ T975] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.844250][ T975] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.852842][ T975] usb 9-1: Product: syz [ 403.857079][ T975] usb 9-1: Manufacturer: syz [ 403.880631][ T9517] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 403.908691][ T975] cdc_wdm 9-1:1.0: skipping garbage [ 403.923214][ T975] cdc_wdm 9-1:1.0: skipping garbage [ 403.928774][ T975] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 404.019845][ T29] audit: type=1400 audit(1734151343.711:505): avc: denied { call } for pid=9528 comm="syz.5.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 404.039278][ T29] audit: type=1400 audit(1734151343.711:506): avc: denied { transfer } for pid=9528 comm="syz.5.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 404.148334][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.188975][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.236909][ T5865] usb 9-1: USB disconnect, device number 17 [ 404.660955][ T25] radio-usb-si4713 7-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 404.690058][ T25] usbhid 7-1:0.128: couldn't find an input interrupt endpoint [ 404.800226][ T25] usb 7-1: USB disconnect, device number 6 [ 405.499186][ T9557] netlink: 172 bytes leftover after parsing attributes in process `syz.5.684'. [ 405.542761][ T5870] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 406.983616][ T975] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 407.163374][ T975] usb 9-1: Using ep0 maxpacket: 16 [ 407.174172][ T975] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.191524][ T975] usb 9-1: config 0 interface 0 has no altsetting 0 [ 407.220474][ T975] usb 9-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 407.243516][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.269477][ T975] usb 9-1: config 0 descriptor?? [ 407.586003][ T5870] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.594752][ T5870] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.606093][ T5870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.621737][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.633256][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 407.651002][ T5870] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.660263][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.668796][ T29] audit: type=1400 audit(1734151347.371:507): avc: denied { append } for pid=9583 comm="syz.5.688" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 407.669234][ T5870] usb 7-1: Product: syz [ 407.696357][ T5870] usb 7-1: Manufacturer: syz [ 407.729891][ T975] logitech-djreceiver 0003:046D:C517.0009: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.8-1/input0 [ 407.747780][ T5870] cdc_wdm 7-1:1.0: skipping garbage [ 407.753883][ T5870] cdc_wdm 7-1:1.0: skipping garbage [ 407.768612][ T5870] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 407.781694][ T5870] cdc_wdm 7-1:1.0: Unknown control protocol [ 407.959702][ T975] usb 9-1: USB disconnect, device number 18 [ 408.021749][ T9336] usb 7-1: USB disconnect, device number 7 [ 408.088574][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.689'. [ 408.524460][ T9336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 408.730854][ T9336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.799225][ T9336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.963492][ T9336] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 409.068025][ T9336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.117953][ T9336] usb 6-1: config 0 descriptor?? [ 409.714235][ T9336] dragonrise 0003:0079:0006.000A: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 409.726028][ T9336] dragonrise 0003:0079:0006.000A: no inputs found [ 409.732661][ T9336] dragonrise 0003:0079:0006.000A: force feedback init failed [ 409.791146][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.830900][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.915998][ T2146] usb 6-1: USB disconnect, device number 4 [ 410.261689][ T9649] hub 2-0:1.0: USB hub found [ 410.272730][ T9336] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 410.284241][ T9649] hub 2-0:1.0: 1 port detected [ 410.454165][ T9336] usb 3-1: Using ep0 maxpacket: 16 [ 410.468913][ T9336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.495206][ T9336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.508919][ T9336] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 410.545988][ T9336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.580065][ T9336] usb 3-1: config 0 descriptor?? [ 411.012400][ T9336] elan 0003:04F3:0755.000B: report_id 0 is invalid [ 411.034325][ T9336] elan 0003:04F3:0755.000B: item 0 0 1 8 parsing failed [ 411.100153][ T9336] elan 0003:04F3:0755.000B: Hid Parse failed [ 411.160064][ T9336] elan 0003:04F3:0755.000B: probe with driver elan failed with error -22 [ 411.185360][ T29] audit: type=1400 audit(1734151350.871:508): avc: denied { bind } for pid=9676 comm="syz.6.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.252983][ T5917] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 412.492686][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 412.507579][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.531436][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.592786][ T5917] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 412.635289][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.657913][ T5917] usb 7-1: config 0 descriptor?? [ 413.082086][ T5917] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 413.204342][ T5917] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 413.214331][ T5917] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 413.221893][ T5917] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 413.232304][ T5917] hid-retrode 0003:0403:97C1.000C: unknown main item tag 0x0 [ 413.842064][ T9701] FAULT_INJECTION: forcing a failure. [ 413.842064][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 413.863915][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.8.707 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 413.874542][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 413.884592][ T9701] Call Trace: [ 413.887863][ T9701] [ 413.890870][ T9701] dump_stack_lvl+0x16c/0x1f0 [ 413.895564][ T9701] should_fail_ex+0x497/0x5b0 [ 413.900234][ T9701] ? fs_reclaim_acquire+0xae/0x150 [ 413.905364][ T9701] should_failslab+0xc2/0x120 [ 413.910072][ T9701] __kmalloc_noprof+0xcb/0x510 [ 413.914858][ T9701] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 413.920486][ T9701] tomoyo_realpath_from_path+0xb9/0x720 [ 413.926018][ T9701] ? tomoyo_path_number_perm+0x235/0x590 [ 413.931654][ T9701] ? tomoyo_path_number_perm+0x235/0x590 [ 413.937294][ T9701] tomoyo_path_number_perm+0x248/0x590 [ 413.942745][ T9701] ? tomoyo_path_number_perm+0x235/0x590 [ 413.948375][ T9701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 413.954357][ T9701] ? __pfx_lock_release+0x10/0x10 [ 413.959368][ T9701] ? trace_lock_acquire+0x14e/0x1f0 [ 413.964558][ T9701] ? lock_acquire+0x2f/0xb0 [ 413.969041][ T9701] ? __fget_files+0x40/0x3a0 [ 413.973625][ T9701] ? __fget_files+0x206/0x3a0 [ 413.978283][ T9701] security_file_ioctl+0x9b/0x240 [ 413.983294][ T9701] __x64_sys_ioctl+0xb7/0x200 [ 413.987959][ T9701] do_syscall_64+0xcd/0x250 [ 413.992465][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.998349][ T9701] RIP: 0033:0x7fe8c7185d19 [ 414.002751][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.022438][ T9701] RSP: 002b:00007fe8c7f62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.030836][ T9701] RAX: ffffffffffffffda RBX: 00007fe8c7375fa0 RCX: 00007fe8c7185d19 [ 414.038796][ T9701] RDX: 0000000020000080 RSI: 000000004020565a RDI: 0000000000000003 [ 414.046754][ T9701] RBP: 00007fe8c7f62090 R08: 0000000000000000 R09: 0000000000000000 [ 414.054731][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.062728][ T9701] R13: 0000000000000000 R14: 00007fe8c7375fa0 R15: 00007ffc1410a968 [ 414.070707][ T9701] [ 414.093384][ T5917] hid-retrode 0003:0403:97C1.000C: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.6-1/input0 [ 414.110611][ T9701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.192021][ T9686] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 414.754833][ T9336] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 414.966246][ T9336] usb 6-1: Using ep0 maxpacket: 8 [ 415.587915][ T9336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.614490][ T9336] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 415.623969][ T9336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.632554][ T9710] xt_CT: No such helper "syz0" [ 415.654281][ T9336] usb 6-1: config 0 descriptor?? [ 415.666125][ T5917] usb 7-1: USB disconnect, device number 8 [ 415.997367][ T9336] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 416.251816][ T9739] o2cb: This node has not been configured. [ 416.258968][ T29] audit: type=1400 audit(1734151355.941:509): avc: denied { write } for pid=9702 comm="syz.5.710" name="/" dev="ocfs2_dlmfs" ino=23885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.291720][ T9739] o2cb: Cluster check failed. Fix errors before retrying. [ 416.319540][ T9739] (syz.5.710,9739,1):user_dlm_register:674 ERROR: status = -22 [ 416.334984][ T5909] usb 3-1: USB disconnect, device number 25 [ 416.357789][ T9739] (syz.5.710,9739,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 416.369065][ T29] audit: type=1400 audit(1734151355.941:510): avc: denied { add_name } for pid=9702 comm="syz.5.710" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.434602][ T29] audit: type=1400 audit(1734151355.941:511): avc: denied { create } for pid=9702 comm="syz.5.710" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 416.482565][ T29] audit: type=1400 audit(1734151355.941:512): avc: denied { associate } for pid=9702 comm="syz.5.710" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 416.727471][ T9336] usb 6-1: USB disconnect, device number 5 [ 416.827125][ T5865] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 417.291372][ T29] audit: type=1400 audit(1734151356.721:513): avc: denied { connect } for pid=9747 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 417.314609][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 417.323340][ T29] audit: type=1400 audit(1734151356.801:514): avc: denied { read } for pid=9747 comm="syz.2.716" dev="sockfs" ino=23895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 417.362894][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 417.369989][ T5865] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 417.380701][ T5865] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.396489][ T5865] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.406861][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.438148][ T5865] usb 7-1: Product: syz [ 417.486962][ T5865] usb 7-1: Manufacturer: syz [ 417.491636][ T5865] usb 7-1: SerialNumber: syz [ 417.534071][ T9736] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 417.618873][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 417.722705][ T29] audit: type=1400 audit(1734151357.391:515): avc: denied { mount } for pid=9757 comm="syz.2.718" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 417.751311][ T29] audit: type=1400 audit(1734151357.401:516): avc: denied { remount } for pid=9757 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 417.775644][ T5865] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 417.778624][ T9761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.793877][ T9761] IPv6: NLM_F_CREATE should be set when creating new route [ 417.822512][ T5865] usb 7-1: USB disconnect, device number 9 [ 417.873844][ T29] audit: type=1400 audit(1734151357.561:517): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 418.114522][ T9769] netlink: 172 bytes leftover after parsing attributes in process `syz.2.722'. [ 418.338965][ T29] audit: type=1326 audit(1734151358.031:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.5.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0985d19 code=0x7fc00000 [ 419.520394][ T9781] xt_CT: No such helper "syz0" [ 421.997673][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 421.997689][ T29] audit: type=1400 audit(1734151361.691:522): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 422.034795][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 422.276315][ T29] audit: type=1400 audit(1734151361.691:523): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.302820][ T29] audit: type=1400 audit(1734151361.691:524): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 422.499500][ T29] audit: type=1400 audit(1734151361.691:525): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.020473][ T29] audit: type=1400 audit(1734151361.691:526): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.127976][ T29] audit: type=1400 audit(1734151361.731:527): avc: denied { read write } for pid=7122 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 423.153593][ T29] audit: type=1400 audit(1734151361.731:528): avc: denied { open } for pid=7122 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 423.177729][ T29] audit: type=1400 audit(1734151361.731:529): avc: denied { ioctl } for pid=7122 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 423.203768][ T29] audit: type=1400 audit(1734151361.761:530): avc: denied { search } for pid=9835 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.227087][ T29] audit: type=1400 audit(1734151361.791:531): avc: denied { prog_load } for pid=9837 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.602764][ T9891] xt_CT: No such helper "syz0" [ 426.777986][ T9925] FAULT_INJECTION: forcing a failure. [ 426.777986][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 426.791281][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.5.753 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 426.802106][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 426.812366][ T9925] Call Trace: [ 426.815766][ T9925] [ 426.818740][ T9925] dump_stack_lvl+0x16c/0x1f0 [ 426.823459][ T9925] should_fail_ex+0x497/0x5b0 [ 426.828201][ T9925] should_failslab+0xc2/0x120 [ 426.832787][ T5909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 426.832885][ T9925] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 426.845891][ T9925] ? trace_lock_acquire+0x14e/0x1f0 [ 426.851199][ T9925] ? skb_clone+0x190/0x3f0 [ 426.855635][ T9925] skb_clone+0x190/0x3f0 [ 426.859880][ T9925] dev_queue_xmit_nit+0x38f/0xbc0 [ 426.864917][ T9925] ? netif_skb_features+0x3b0/0xd50 [ 426.870235][ T9925] dev_hard_start_xmit+0x283/0x7b0 [ 426.875367][ T9925] __dev_queue_xmit+0x7f0/0x43e0 [ 426.880342][ T9925] ? __pfx___dev_queue_xmit+0x10/0x10 [ 426.885769][ T9925] ? __asan_memcpy+0x3c/0x60 [ 426.890405][ T9925] ? __asan_memcpy+0x3c/0x60 [ 426.895091][ T9925] ? __skb_clone+0x570/0x760 [ 426.899748][ T9925] netlink_deliver_tap+0xa87/0xd30 [ 426.904906][ T9925] netlink_unicast+0x5e1/0x7f0 [ 426.909691][ T9925] ? __pfx_netlink_unicast+0x10/0x10 [ 426.915083][ T9925] netlink_sendmsg+0x8b8/0xd70 [ 426.919858][ T9925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.925328][ T9925] __sys_sendto+0x488/0x4f0 [ 426.929837][ T9925] ? __pfx___sys_sendto+0x10/0x10 [ 426.934946][ T9925] ? reacquire_held_locks+0x20b/0x4c0 [ 426.940335][ T9925] ? do_user_addr_fault+0xdc7/0x13f0 [ 426.945653][ T9925] __x64_sys_sendto+0xe0/0x1c0 [ 426.950426][ T9925] ? do_syscall_64+0x91/0x250 [ 426.955118][ T9925] ? lockdep_hardirqs_on+0x7c/0x110 [ 426.960320][ T9925] do_syscall_64+0xcd/0x250 [ 426.964824][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.970716][ T9925] RIP: 0033:0x7fcca0987bac [ 426.975124][ T9925] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 426.994733][ T9925] RSP: 002b:00007fcca07f7e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 427.003143][ T9925] RAX: ffffffffffffffda RBX: 00007fcca07f7fa0 RCX: 00007fcca0987bac [ 427.011107][ T9925] RDX: 0000000000000028 RSI: 00007fcca07f7ff0 RDI: 0000000000000007 [ 427.019067][ T9925] RBP: 0000000000000000 R08: 00007fcca07f7ee4 R09: 000000000000000c [ 427.027044][ T9925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 427.035013][ T9925] R13: 00007fcca07f7f38 R14: 00007fcca07f7ff0 R15: 0000000000000000 [ 427.043078][ T9925] [ 427.076599][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.192757][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 427.220132][ T5909] usb 7-1: config 2 interface 0 has no altsetting 0 [ 427.232978][ T5909] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 427.247846][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.259523][ T5909] usb 7-1: Product: syz [ 427.269173][ T5909] usb 7-1: Manufacturer: syz [ 427.278606][ T5909] usb 7-1: SerialNumber: syz [ 428.408130][ T5909] usb 7-1: USB disconnect, device number 10 [ 429.076985][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 429.077003][ T29] audit: type=1400 audit(1734151368.771:613): avc: denied { ioctl } for pid=9959 comm="syz.7.757" path="socket:[24259]" dev="sockfs" ino=24259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.296216][ T29] audit: type=1400 audit(1734151368.991:614): avc: denied { create } for pid=9969 comm="syz.7.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 429.428036][ T9977] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 429.440143][ T9977] Cannot find add_set index 0 as target [ 430.652487][ T29] audit: type=1400 audit(1734151369.151:615): avc: denied { ioctl } for pid=9969 comm="syz.7.759" path="socket:[24350]" dev="sockfs" ino=24350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 430.677206][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.695555][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.8.761'. [ 430.804918][ T29] audit: type=1400 audit(1734151370.331:616): avc: denied { read } for pid=9987 comm="syz.8.761" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 430.830958][ T29] audit: type=1400 audit(1734151370.331:617): avc: denied { open } for pid=9987 comm="syz.8.761" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 430.908244][ T29] audit: type=1400 audit(1734151370.571:618): avc: denied { shutdown } for pid=9987 comm="syz.8.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.967606][ T29] audit: type=1400 audit(1734151370.571:619): avc: denied { create } for pid=9987 comm="syz.8.761" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 430.988666][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.061537][ T29] audit: type=1400 audit(1734151370.691:620): avc: denied { read } for pid=9993 comm="syz.7.762" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.143483][ T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 431.230604][ T29] audit: type=1400 audit(1734151370.691:621): avc: denied { open } for pid=9993 comm="syz.7.762" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.850086][ T29] audit: type=1400 audit(1734151370.691:622): avc: denied { create } for pid=9993 comm="syz.7.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 431.953950][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 432.003821][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.764'. [ 432.019141][ T8] usb 9-1: config index 0 descriptor too short (expected 786, got 18) [ 432.048351][ T8] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 432.064687][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.764'. [ 432.092637][ T8] usb 9-1: config 16 has no interfaces? [ 432.108528][ T8] usb 9-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=62.4a [ 432.123059][T10004] netlink: 36 bytes leftover after parsing attributes in process `syz.7.764'. [ 432.158443][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.236388][T10007] xt_CT: No such helper "snmp" [ 433.093292][ T5909] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 433.130530][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.2.768'. [ 433.370409][ T5909] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 433.375787][ T9336] libceph: connect (1)[c::]:6789 error -101 [ 433.388088][ T5909] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 433.398601][ T5909] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 433.413083][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.489429][ T9336] libceph: mon0 (1)[c::]:6789 connect error [ 433.533863][ T5865] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 434.130281][ T975] libceph: connect (1)[c::]:6789 error -101 [ 434.136726][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 434.143861][ T8] usb 9-1: string descriptor 0 read error: -71 [ 434.159781][ T8] usb 9-1: USB disconnect, device number 19 [ 434.169255][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 434.192665][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 434.208962][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 434.208979][ T29] audit: type=1400 audit(1734151373.901:635): avc: denied { create } for pid=10036 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.244088][T10025] ceph: No mds server is up or the cluster is laggy [ 434.280710][ T5865] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 434.364273][T10039] binfmt_misc: Unknown parameter 'gid' [ 434.378549][T10039] SELinux: policydb string length -1804058936 does not match expected length 8 [ 434.388039][T10039] SELinux: failed to load policy [ 434.503125][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.511346][ T5865] usb 6-1: Product: syz [ 434.518963][ T5865] usb 6-1: Manufacturer: syz [ 434.527021][ T5865] usb 6-1: SerialNumber: syz [ 434.593177][ T29] audit: type=1400 audit(1734151373.901:636): avc: denied { setopt } for pid=10036 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.693159][ T29] audit: type=1400 audit(1734151374.041:637): avc: denied { read } for pid=10036 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.766315][ T5865] usb 6-1: config 0 descriptor?? [ 435.021947][ T5865] hub 6-1:0.0: bad descriptor, ignoring hub [ 435.029040][ T5865] hub 6-1:0.0: probe with driver hub failed with error -5 [ 435.102175][ T29] audit: type=1400 audit(1734151374.041:638): avc: denied { write } for pid=10036 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.138950][ T29] audit: type=1400 audit(1734151374.071:639): avc: denied { load_policy } for pid=10036 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 435.169893][ T5865] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.224220][ T29] audit: type=1400 audit(1734151374.791:640): avc: denied { getopt } for pid=10024 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 435.259965][ T5865] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 435.294224][T10046] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 435.306475][ T29] audit: type=1400 audit(1734151374.841:641): avc: denied { setopt } for pid=10040 comm="syz.8.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 435.346263][ T5865] usb 6-1: USB disconnect, device number 6 [ 435.357082][T10047] ucma_write: process 677 (syz.2.772) changed security contexts after opening file descriptor, this is not allowed. [ 435.380361][ T29] audit: type=1400 audit(1734151374.841:642): avc: denied { ioctl } for pid=10040 comm="syz.8.771" path="socket:[24430]" dev="sockfs" ino=24430 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 435.428792][ T5909] usb 7-1: string descriptor 0 read error: -71 [ 435.447408][ T5909] hub 7-1:32.0: USB hub found [ 435.447626][ T29] audit: type=1400 audit(1734151374.851:643): avc: denied { create } for pid=10040 comm="syz.8.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 435.465339][ T5909] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 435.515551][ T29] audit: type=1400 audit(1734151374.921:644): avc: denied { write } for pid=10040 comm="syz.8.771" path="socket:[24430]" dev="sockfs" ino=24430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 435.560309][ T7299] udevd[7299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.584531][ T5909] usb 7-1: USB disconnect, device number 11 [ 435.809717][ T7321] udevd[7321]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.985817][T10066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.304513][T10081] hub 2-0:1.0: USB hub found [ 436.344794][T10081] hub 2-0:1.0: 1 port detected [ 438.276169][T10094] xt_CT: No such helper "syz0" [ 439.493314][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 439.493332][ T29] audit: type=1400 audit(1734151379.191:659): avc: denied { read } for pid=10113 comm="syz.2.785" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.499018][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 439.499489][ T29] audit: type=1400 audit(1734151379.191:660): avc: denied { open } for pid=10113 comm="syz.2.785" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.705278][ T29] audit: type=1400 audit(1734151379.191:661): avc: denied { write } for pid=10113 comm="syz.2.785" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.728346][ T29] audit: type=1400 audit(1734151379.391:662): avc: denied { write } for pid=10120 comm="syz.8.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.748299][ T29] audit: type=1400 audit(1734151379.391:663): avc: denied { sqpoll } for pid=10120 comm="syz.8.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 440.033977][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.041356][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.068189][ T319] sl0: compressed packet ignored [ 440.263368][ T5865] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 440.425216][ T29] audit: type=1400 audit(1734151380.121:664): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 440.447115][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 440.461142][ T5865] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 440.494543][ T29] audit: type=1400 audit(1734151380.171:665): avc: denied { ioctl } for pid=10132 comm="syz.7.790" path="socket:[23504]" dev="sockfs" ino=23504 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.562720][ T5865] usb 6-1: config 0 has no interface number 0 [ 440.568857][ T5865] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 440.632874][ T5865] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 440.635886][ T29] audit: type=1400 audit(1734151380.171:666): avc: denied { create } for pid=10132 comm="syz.7.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 440.662460][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.712741][ T5865] usb 6-1: Product: syz [ 440.715902][ T29] audit: type=1400 audit(1734151380.241:667): avc: denied { write } for pid=10132 comm="syz.7.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 440.716941][ T5865] usb 6-1: Manufacturer: syz [ 440.842238][ T5865] usb 6-1: SerialNumber: syz [ 440.864294][ T5865] usb 6-1: config 0 descriptor?? [ 440.881179][T10116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.895730][ T5865] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 440.906241][ T5865] em28xx 6-1:0.132: Video interface 132 found: bulk [ 440.972864][ T29] audit: type=1400 audit(1734151380.651:668): avc: denied { write } for pid=10152 comm="syz.2.793" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 441.071539][T10153] loop2: detected capacity change from 0 to 7 [ 441.118039][T10153] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 441.138446][T10153] loop2: partition table partially beyond EOD, truncated [ 441.201426][T10153] loop2: p1 size 276741282 extends beyond EOD, truncated [ 441.213588][T10153] loop2: p2 start 579963744 is beyond EOD, truncated [ 441.231557][T10156] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 441.260533][T10156] loop2: partition table partially beyond EOD, truncated [ 441.275511][T10156] loop2: p1 size 276741282 extends beyond EOD, truncated [ 441.290315][T10156] loop2: p2 start 579963744 is beyond EOD, truncated [ 441.317937][ T5865] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 441.573532][ T5909] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 441.735111][ T5909] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 441.748510][ T5865] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 441.756819][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.804357][ T5865] em28xx 6-1:0.132: board has no eeprom [ 441.812887][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.844478][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.904868][ T5865] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 441.949801][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.952682][ T5865] em28xx 6-1:0.132: analog set to bulk mode. [ 441.963101][ T5909] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.980247][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.011859][ T5909] usb 7-1: config 0 descriptor?? [ 442.030273][T10166] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 442.044896][ T5868] em28xx 6-1:0.132: Registering V4L2 extension [ 442.277845][ T5865] usb 6-1: USB disconnect, device number 7 [ 442.417240][ T5865] em28xx 6-1:0.132: Disconnecting em28xx [ 442.455026][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.473191][ T975] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 442.481064][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.561314][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.798'. [ 442.763014][ T5868] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 442.771754][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.785004][ T5868] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 442.794285][ T975] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.802314][ T975] usb 9-1: config 0 has no interface number 0 [ 442.810838][ T5868] em28xx 6-1:0.132: No AC97 audio processor [ 442.818756][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.828218][ T975] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.849361][ T5868] usb 6-1: Decoder not found [ 442.863092][ T975] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.877822][ T5868] em28xx 6-1:0.132: failed to create media graph [ 442.897789][ T5868] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 442.906603][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.944562][ T975] usb 9-1: config 0 descriptor?? [ 442.949626][ T5868] em28xx 6-1:0.132: Remote control support is not available for this card. [ 442.970823][ T975] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 442.989079][ T5865] em28xx 6-1:0.132: Closing input extension [ 443.029219][ T5865] em28xx 6-1:0.132: Freeing device [ 443.177069][ T5917] usb 9-1: USB disconnect, device number 20 [ 444.108252][ T5909] usbhid 7-1:0.0: can't add hid device: -71 [ 444.422909][ T5909] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 444.449422][ T5909] usb 7-1: USB disconnect, device number 12 [ 444.622141][T10233] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 444.634058][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 444.634076][ T29] audit: type=1400 audit(1734151384.301:689): avc: denied { create } for pid=10232 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 444.637136][T10233] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 444.640601][ T29] audit: type=1400 audit(1734151384.301:690): avc: denied { write } for pid=10232 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 444.776894][ T29] audit: type=1400 audit(1734151384.301:691): avc: denied { nlmsg_read } for pid=10232 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 444.798216][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.878237][ T29] audit: type=1400 audit(1734151384.401:692): avc: denied { write } for pid=10232 comm="syz.2.801" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 444.901529][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.886283][T10255] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 446.636227][ T29] audit: type=1400 audit(1734151386.161:693): avc: denied { create } for pid=10262 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 446.698778][T10265] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.808' sets config #2147483647 [ 447.235933][ T29] audit: type=1400 audit(1734151386.171:694): avc: denied { ioctl } for pid=10262 comm="syz.2.808" path="socket:[25651]" dev="sockfs" ino=25651 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 447.272263][ T29] audit: type=1400 audit(1734151386.171:695): avc: denied { bind } for pid=10262 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 447.291688][ T29] audit: type=1400 audit(1734151386.171:696): avc: denied { name_bind } for pid=10262 comm="syz.2.808" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 447.313422][ T29] audit: type=1400 audit(1734151386.171:697): avc: denied { node_bind } for pid=10262 comm="syz.2.808" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 447.334708][ T29] audit: type=1400 audit(1734151386.931:698): avc: denied { write } for pid=10258 comm="syz.8.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.925858][T10273] netlink: 7 bytes leftover after parsing attributes in process `syz.5.809'. [ 448.312864][ T5909] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 448.332988][ T5869] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 448.493025][ T5909] usb 9-1: Using ep0 maxpacket: 8 [ 448.498778][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 448.520354][ T5909] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 448.535046][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.554319][ T5909] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.564590][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.574744][ T5869] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 448.583980][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.842557][ T5869] usb 3-1: config 0 descriptor?? [ 448.882954][ T5909] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.892129][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.963453][ T5909] usb 9-1: Product: syz [ 448.968247][ T5909] usb 9-1: Manufacturer: syz [ 448.972984][ T5909] usb 9-1: SerialNumber: syz [ 449.540276][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.610119][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.643327][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 449.643345][ T29] audit: type=1400 audit(1734151389.331:704): avc: denied { getopt } for pid=10300 comm="syz.7.815" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.693858][ T29] audit: type=1400 audit(1734151389.341:705): avc: denied { read write } for pid=10300 comm="syz.7.815" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.747316][ T5909] usb 9-1: 0:2 : does not exist [ 449.768283][ T29] audit: type=1400 audit(1734151389.341:706): avc: denied { open } for pid=10300 comm="syz.7.815" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.774225][ T5909] usb 9-1: USB disconnect, device number 21 [ 449.802439][ T5869] elan 0003:04F3:0755.000D: report_id 0 is invalid [ 449.809372][ T5869] elan 0003:04F3:0755.000D: item 0 0 1 8 parsing failed [ 449.818596][ T5869] elan 0003:04F3:0755.000D: Hid Parse failed [ 449.825187][ T5869] elan 0003:04F3:0755.000D: probe with driver elan failed with error -22 [ 449.830318][ T29] audit: type=1400 audit(1734151389.341:707): avc: denied { ioctl } for pid=10300 comm="syz.7.815" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.992943][ T5868] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 450.056660][ T7321] udevd[7321]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.411765][ T29] audit: type=1400 audit(1734151390.051:708): avc: denied { create } for pid=10284 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.869021][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.007081][ T5869] usb 3-1: USB disconnect, device number 26 [ 451.011467][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 451.028973][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.066339][ T5868] usb 6-1: config 0 descriptor?? [ 451.311246][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.322265][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.533171][ T5865] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 451.542298][ T5868] ath6kl: Unsupported hardware version: 0x0 [ 451.571801][ T5868] ath6kl: Failed to init ath6kl core: -22 [ 451.580531][ T5868] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 451.592697][ T29] audit: type=1400 audit(1734151391.201:709): avc: denied { create } for pid=10332 comm="syz.8.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 451.631060][ T29] audit: type=1400 audit(1734151391.201:710): avc: denied { read } for pid=10332 comm="syz.8.821" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 451.655593][ T29] audit: type=1400 audit(1734151391.201:711): avc: denied { open } for pid=10332 comm="syz.8.821" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 451.694254][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.704791][ T5865] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.716671][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.735242][ T5865] usb 7-1: config 0 descriptor?? [ 451.747255][ T5868] usb 6-1: USB disconnect, device number 8 [ 451.767550][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 452.112522][ T29] audit: type=1400 audit(1734151391.801:712): avc: denied { mount } for pid=10353 comm="syz.2.822" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 452.157614][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.184613][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.367034][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 452.589639][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 452.612657][ T29] audit: type=1400 audit(1734151392.281:713): avc: denied { execute } for pid=10353 comm="syz.2.822" path="/dev/dsp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 452.644291][T10363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.654988][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 452.671936][ T5865] pwc: recv_control_msg error -32 req 04 val 1400 [ 452.691490][ T5865] pwc: recv_control_msg error -32 req 02 val 2000 [ 452.715999][ T5865] pwc: recv_control_msg error -32 req 02 val 2100 [ 452.734303][ T5865] pwc: recv_control_msg error -32 req 04 val 1500 [ 452.804468][ T5865] pwc: recv_control_msg error -32 req 02 val 2500 [ 452.885630][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.824'. [ 452.906473][T10377] xt_CT: No such helper "syz0" [ 453.059706][ T5865] pwc: recv_control_msg error -32 req 02 val 2600 [ 453.075953][ T5865] pwc: recv_control_msg error -32 req 02 val 2900 [ 453.085611][ T5865] pwc: recv_control_msg error -32 req 02 val 2800 [ 453.352389][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 453.401024][ T5865] pwc: Registered as video103. [ 453.425238][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 453.486784][ T5865] usb 7-1: USB disconnect, device number 13 [ 454.858496][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 454.858542][ T29] audit: type=1400 audit(1734151394.551:721): avc: denied { create } for pid=10427 comm="syz.6.832" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 455.182383][ T29] audit: type=1400 audit(1734151394.871:722): avc: denied { setopt } for pid=10417 comm="syz.8.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.302602][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 560.309605][ C0] rcu: 1-...!: (1 GPs behind) idle=f604/1/0x4000000000000000 softirq=42116/42117 fqs=2 [ 560.321280][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10188/1:b..l [ 560.329310][ C0] rcu: (detected by 0, t=10505 jiffies, g=37833, q=152 ncpus=2) [ 560.337040][ C0] Sending NMI from CPU 0 to CPUs 1: [ 560.337068][ C1] NMI backtrace for cpu 1 [ 560.337081][ C1] CPU: 1 UID: 0 PID: 10436 Comm: syz.2.833 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 560.337103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 560.337116][ C1] RIP: 0010:check_preemption_disabled+0x2/0xe0 [ 560.337152][ C1] Code: 0f 65 8b 05 ac 5a d9 74 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 <55> 53 48 83 ec 08 65 8b 1d fd aa da 74 65 8b 05 f2 aa da 74 a9 ff [ 560.337170][ C1] RSP: 0018:ffffc90000a18c10 EFLAGS: 00000046 [ 560.337185][ C1] RAX: 0000000000000002 RBX: 1ffff92000143186 RCX: ffffc90000a18c70 [ 560.337198][ C1] RDX: 1ffff11005da25e2 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1d340 [ 560.337212][ C1] RBP: 35a08aec8a9222e9 R08: 0000000000000000 R09: fffffbfff20be2b2 [ 560.337224][ C1] R10: ffffffff905f1597 R11: 0000000000000002 R12: 0000000000000002 [ 560.337236][ C1] R13: 0000000000000003 R14: ffff88802ed12f18 R15: ffff88802ed12440 [ 560.337248][ C1] FS: 00007f988317d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 560.337267][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.337281][ C1] CR2: 00000000200d7030 CR3: 0000000025e48000 CR4: 00000000003526f0 [ 560.337293][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.337304][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.337316][ C1] Call Trace: [ 560.337323][ C1] [ 560.337331][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 560.337363][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 560.337382][ C1] ? nmi_handle+0x1ac/0x5d0 [ 560.337403][ C1] ? check_preemption_disabled+0x2/0xe0 [ 560.337428][ C1] ? default_do_nmi+0x6a/0x160 [ 560.337455][ C1] ? exc_nmi+0x170/0x1e0 [ 560.337485][ C1] ? end_repeat_nmi+0xf/0x53 [ 560.337514][ C1] ? check_preemption_disabled+0x2/0xe0 [ 560.337538][ C1] ? check_preemption_disabled+0x2/0xe0 [ 560.337562][ C1] ? check_preemption_disabled+0x2/0xe0 [ 560.337587][ C1] [ 560.337592][ C1] [ 560.337598][ C1] lock_release+0x3af/0x6f0 [ 560.337618][ C1] ? debug_object_activate+0x2e6/0x4a0 [ 560.337639][ C1] ? __pfx_lock_release+0x10/0x10 [ 560.337661][ C1] ? lock_acquire+0x2f/0xb0 [ 560.337680][ C1] ? debug_object_activate+0x149/0x4a0 [ 560.337701][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 560.337722][ C1] debug_object_activate+0x2e6/0x4a0 [ 560.337742][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 560.337763][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 560.337785][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 560.337809][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 560.337834][ C1] ? __pfx_advance_sched+0x10/0x10 [ 560.337852][ C1] enqueue_hrtimer+0x25/0x3c0 [ 560.337878][ C1] __hrtimer_run_queues+0x903/0xae0 [ 560.337906][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 560.337931][ C1] ? read_tsc+0x9/0x20 [ 560.337959][ C1] hrtimer_interrupt+0x392/0x8e0 [ 560.337989][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 560.338012][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 560.338034][ C1] [ 560.338040][ C1] [ 560.338046][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.338071][ C1] RIP: 0010:__handle_mm_fault+0x4ae/0x2a40 [ 560.338095][ C1] Code: 00 00 48 8d bc 24 d8 00 00 00 ff d5 0f 1f 00 31 ff 41 89 c4 89 c5 41 81 e4 00 08 00 00 44 89 e6 e8 a7 4e b4 ff 45 85 e4 75 5c 5d 4c b4 ff 48 8b 4c 24 30 48 b8 00 00 00 00 00 fc ff df 48 01 [ 560.338112][ C1] RSP: 0018:ffffc9000cef7698 EFLAGS: 00000286 [ 560.338127][ C1] RAX: 0000000000000000 RBX: 000000001378f225 RCX: fffff520019deeb8 [ 560.338140][ C1] RDX: 0000000000080000 RSI: ffffffff81e3e761 RDI: ffff88802960dfe0 [ 560.338152][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 560.338164][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000a15 [ 560.338176][ C1] R13: 0000000000000000 R14: ffff88802883cc98 R15: fff0000000000fff [ 560.338192][ C1] ? do_wp_page+0xd41/0x47c0 [ 560.338211][ C1] ? __handle_mm_fault+0x1ade/0x2a40 [ 560.338236][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 560.338258][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 560.338286][ C1] ? find_vma+0xc0/0x140 [ 560.338313][ C1] ? __pfx_find_vma+0x10/0x10 [ 560.338341][ C1] handle_mm_fault+0x3fa/0xaa0 [ 560.338365][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 560.338387][ C1] exc_page_fault+0x5c/0xc0 [ 560.338407][ C1] asm_exc_page_fault+0x26/0x30 [ 560.338429][ C1] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 560.338452][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 [ 560.338474][ C1] RSP: 0018:ffffc9000cef79f8 EFLAGS: 00050246 [ 560.338489][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000200d7030 [ 560.338501][ C1] RDX: 0000000000080000 RSI: ffffffff88fecc44 RDI: 0000000000000005 [ 560.338513][ C1] RBP: ffffc9000cef7d98 R08: 0000000000000005 R09: 0000000000000000 [ 560.338525][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 560.338535][ C1] R13: 00000000200d7000 R14: ffffc9000cef7ddc R15: 0000000000000002 [ 560.338552][ C1] ? ____sys_recvmsg+0x2e4/0x6b0 [ 560.338576][ C1] ____sys_recvmsg+0x2ef/0x6b0 [ 560.338599][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 560.338625][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 560.338647][ C1] ___sys_recvmsg+0x115/0x1a0 [ 560.338675][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 560.338702][ C1] ? find_held_lock+0x2d/0x110 [ 560.338733][ C1] ? __pfx___might_resched+0x10/0x10 [ 560.338756][ C1] ? __might_fault+0xe3/0x190 [ 560.338782][ C1] do_recvmmsg+0x2f8/0x740 [ 560.338810][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 560.338840][ C1] ? do_futex+0x123/0x350 [ 560.338862][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 560.338882][ C1] __x64_sys_recvmmsg+0x239/0x290 [ 560.338900][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 560.338922][ C1] do_syscall_64+0xcd/0x250 [ 560.338945][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.338969][ C1] RIP: 0033:0x7f9882385d19 [ 560.338984][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.339001][ C1] RSP: 002b:00007f988317d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 560.339018][ C1] RAX: ffffffffffffffda RBX: 00007f9882575fa0 RCX: 00007f9882385d19 [ 560.339032][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 560.339043][ C1] RBP: 00007f9882401a20 R08: 0000000000000000 R09: 0000000000000000 [ 560.339055][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 560.339067][ C1] R13: 0000000000000000 R14: 00007f9882575fa0 R15: 00007ffd0d93bdd8 [ 560.339085][ C1] [ 560.340060][ C0] task:kworker/u8:12 state:R running task stack:25936 pid:10188 tgid:10188 ppid:2 flags:0x00004000 [ 561.017869][ C0] Workqueue: bat_events batadv_nc_worker [ 561.023526][ C0] Call Trace: [ 561.026822][ C0] [ 561.029759][ C0] __schedule+0xe58/0x5ad0 [ 561.034187][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 561.039223][ C0] ? __pfx_mark_lock+0x10/0x10 [ 561.044000][ C0] ? __pfx___schedule+0x10/0x10 [ 561.048868][ C0] ? mark_held_locks+0x9f/0xe0 [ 561.053645][ C0] preempt_schedule_irq+0x51/0x90 [ 561.058676][ C0] irqentry_exit+0x36/0x90 [ 561.063101][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 561.068568][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 561.074469][ C0] Code: b8 ff ff ff ff 65 0f c1 05 d0 d1 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 561.094100][ C0] RSP: 0018:ffffc9000c09faa8 EFLAGS: 00000206 [ 561.100181][ C0] RAX: 0000000000000046 RBX: 1ffff92001813f56 RCX: 000000005b74dafa [ 561.108168][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1d340 [ 561.116838][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc9998 [ 561.124812][ C0] R10: ffffffff96e4ccc7 R11: 0000000000000002 R12: 0000000000000000 [ 561.132798][ C0] R13: ffffffff8e1bb500 R14: 0000000000000000 R15: 0000000000000000 [ 561.140808][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 561.146470][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.151258][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 561.156473][ C0] ? batadv_nc_worker+0x164/0x1060 [ 561.161603][ C0] ? lock_acquire+0x2f/0xb0 [ 561.166112][ C0] ? batadv_nc_worker+0x164/0x1060 [ 561.171252][ C0] batadv_nc_worker+0x16a/0x1060 [ 561.176206][ C0] ? batadv_nc_worker+0x164/0x1060 [ 561.181340][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 561.186753][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.191546][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 561.196764][ C0] ? process_one_work+0x921/0x1ba0 [ 561.201909][ C0] ? lock_acquire+0x2f/0xb0 [ 561.206450][ C0] ? process_one_work+0x921/0x1ba0 [ 561.211586][ C0] process_one_work+0x9c5/0x1ba0 [ 561.216564][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 561.222211][ C0] ? __pfx_process_one_work+0x10/0x10 [ 561.227613][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.232416][ C0] ? assign_work+0x1a0/0x250 [ 561.237036][ C0] worker_thread+0x6c8/0xf00 [ 561.241655][ C0] ? __kthread_parkme+0x148/0x220 [ 561.246701][ C0] ? __pfx_worker_thread+0x10/0x10 [ 561.251819][ C0] kthread+0x2c1/0x3a0 [ 561.255900][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.261108][ C0] ? __pfx_kthread+0x10/0x10 [ 561.265713][ C0] ret_from_fork+0x45/0x80 [ 561.270145][ C0] ? __pfx_kthread+0x10/0x10 [ 561.274758][ C0] ret_from_fork_asm+0x1a/0x30 [ 561.279550][ C0] [ 561.282571][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g37833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 561.293768][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 561.303737][ C0] rcu: RCU grace-period kthread stack dump: [ 561.309627][ C0] task:rcu_preempt state:R running task stack:25856 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 561.321402][ C0] Call Trace: [ 561.324679][ C0] [ 561.327616][ C0] __schedule+0xe58/0x5ad0 [ 561.332050][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 561.337278][ C0] ? __pfx___schedule+0x10/0x10 [ 561.342150][ C0] ? schedule+0x298/0x350 [ 561.346503][ C0] ? __pfx_lock_release+0x10/0x10 [ 561.351547][ C0] ? lock_acquire+0x2f/0xb0 [ 561.356141][ C0] ? schedule+0x1fd/0x350 [ 561.360479][ C0] schedule+0xe7/0x350 [ 561.364574][ C0] schedule_timeout+0x124/0x280 [ 561.369439][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 561.374824][ C0] ? __pfx_process_timeout+0x10/0x10 [ 561.380129][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 561.385963][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 561.391437][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 561.396215][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 561.401505][ C0] ? rcu_gp_init+0xc82/0x1630 [ 561.406275][ C0] ? lock_acquire+0x2f/0xb0 [ 561.410786][ C0] ? finish_swait+0xc5/0x280 [ 561.415390][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.421218][ C0] rcu_gp_kthread+0x271/0x380 [ 561.425910][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 561.431125][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.436338][ C0] ? __kthread_parkme+0x148/0x220 [ 561.441389][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 561.446597][ C0] kthread+0x2c1/0x3a0 [ 561.450675][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.455878][ C0] ? __pfx_kthread+0x10/0x10 [ 561.460484][ C0] ret_from_fork+0x45/0x80 [ 561.464905][ C0] ? __pfx_kthread+0x10/0x10 [ 561.469508][ C0] ret_from_fork_asm+0x1a/0x30 [ 561.474298][ C0] [ 561.477323][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 561.483639][ C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 561.494346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 561.504402][ C0] Workqueue: events_unbound toggle_allocation_gate [ 561.510925][ C0] RIP: 0010:smp_call_function_many_cond+0x462/0x1300 [ 561.517612][ C0] Code: 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0d 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 <84> c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 89 c6 e8 [ 561.537223][ C0] RSP: 0018:ffffc9000216f998 EFLAGS: 00000206 [ 561.543294][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc [ 561.551279][ C0] RDX: ffff88801d3fa440 RSI: ffffffff818df5d6 RDI: 0000000000000005 [ 561.559281][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 561.567264][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949 [ 561.575248][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 561.583226][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 561.592176][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.598784][ C0] CR2: 000000110c3dce9d CR3: 000000000df7e000 CR4: 00000000003526f0 [ 561.606769][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 561.614758][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 561.622732][ C0] Call Trace: [ 561.626275][ C0] [ 561.629122][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 561.635472][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 561.640684][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 561.646166][ C0] ? timekeeping_advance+0x72e/0xa90 [ 561.651461][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 561.657114][ C0] ? __asan_memcpy+0x3c/0x60 [ 561.661718][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.666500][ C0] ? update_process_times+0x178/0x2d0 [ 561.671884][ C0] ? __pfx_update_process_times+0x10/0x10 [ 561.677612][ C0] ? update_wall_time+0x1c/0x40 [ 561.682471][ C0] ? tick_nohz_handler+0x376/0x530 [ 561.687699][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 561.693184][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 561.698593][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 561.704329][ C0] ? read_tsc+0x9/0x20 [ 561.708428][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 561.713589][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 561.719798][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 561.725621][ C0] [ 561.728552][ C0] [ 561.731487][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.737673][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 561.743753][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 561.749838][ C0] ? smp_call_function_many_cond+0x462/0x1300 [ 561.755947][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 561.762030][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 561.767072][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 561.772110][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 561.777250][ C0] text_poke_bp_batch+0x22b/0x760 [ 561.782293][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 561.787849][ C0] ? __jump_label_patch+0x1db/0x400 [ 561.793067][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 561.799332][ C0] text_poke_finish+0x30/0x40 [ 561.804109][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 561.810101][ C0] jump_label_update+0x1d7/0x400 [ 561.815078][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 561.820999][ C0] static_key_enable+0x1a/0x20 [ 561.825788][ C0] toggle_allocation_gate+0xfc/0x260 [ 561.831110][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 561.837015][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 561.842230][ C0] ? process_one_work+0x921/0x1ba0 [ 561.847352][ C0] ? lock_acquire+0x2f/0xb0 [ 561.851868][ C0] ? process_one_work+0x921/0x1ba0 [ 561.856987][ C0] process_one_work+0x9c5/0x1ba0 [ 561.861946][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 561.867586][ C0] ? __pfx_process_one_work+0x10/0x10 [ 561.872961][ C0] ? rcu_is_watching+0x12/0xc0 [ 561.877744][ C0] ? assign_work+0x1a0/0x250 [ 561.882356][ C0] worker_thread+0x6c8/0xf00 [ 561.886976][ C0] ? __pfx_worker_thread+0x10/0x10 [ 561.892112][ C0] kthread+0x2c1/0x3a0 [ 561.896205][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.901427][ C0] ? __pfx_kthread+0x10/0x10 [ 561.906036][ C0] ret_from_fork+0x45/0x80 [ 561.910456][ C0] ? __pfx_kthread+0x10/0x10 [ 561.915060][ C0] ret_from_fork_asm+0x1a/0x30 [ 561.919853][ C0]