last executing test programs: 17m14.24280093s ago: executing program 32 (id=126): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000013c0)={0x2c, &(0x7f0000000200)={0x40, 0x10, 0xb, {0xb, 0xf, "2b7bbc828e7d92b98b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x806, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0xc) 15m29.414102603s ago: executing program 33 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000200)=""/213, 0xd5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r7 = getpid() migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x24, r6, 0x1, 0x0, 0x80000000, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 15m27.023554707s ago: executing program 34 (id=495): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0xf00, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 2m55.861865931s ago: executing program 6 (id=3564): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x4004550d, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x1ad72f7) accept(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = getpid() prlimit64(r7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0xf3}]}, 0x24}}, 0x0) socket(0x29, 0x80802, 0x0) socket$inet(0x2, 0x3, 0x6) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @private0, @empty, @mcast1}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, 0x0, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) 2m55.705428011s ago: executing program 1 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) 2m55.38433564s ago: executing program 1 (id=3567): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async, rerun: 64) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x7f) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m54.797512429s ago: executing program 1 (id=3568): syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000540)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2a4}, @random="710dc01dafa5", @device_b, @device_b, {0x2, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0xa1, "381318d6b2bb5665b83771919e8b42542b153f04a7813fad1d69470d6ca8401da0830989b66b67784bb5f3a0d29fea97f3d8c94e970aea00825fffff9bef79f8037a3727a66fb501809c012deb988effeb2ef4c31c04000bf7441b50226b1452414c516a8470393c30a8196b2caca9f04c4cef6a98352c723b2a51416dbc398637ba1215c564410f4dbcefaf5629009e29ca8bd1ff4f035e4229075a797f733562"}, {@broadcast, @device_b, 0xe8, "310155cf7878eaff318033bf91387cf3d87c3fb3f69f4d3055bab45c2105bbf0bd7d7fab60a5ac7688cdf6b219d11df62da414941c57d084e9df2a4bd2db17f201ab211a7bd158eacf940454886c906f7666d38731b7a3facc93482b63e2d1a1d421b8d1612a5a716b45630f96a4dca8e520bb8a959dd61b9884fb437cfa1d84b4f881baa04f400ae0ebf31d90c036bd1b6ef1689f55292111b57131aac3860ad0f82f0249c6a3ced17fad93f99e3f0e5e6c1b867fc2e34d4eb17388219d534aad46ed7b57716f33afb3707a43a688bf2847eb79150d1c8c89d57c16b137c1ac575c002cfcc4bd9e"}, {@device_b, @device_a, 0x79, "633c18ff83d48fef2752cfa24a0b090763a0928d1fe527a9246cbcabeaaeb0546d6c4a211999b125f4fa82b57e712c1438e991d36f2cabf8a139080733683e664b0c6222876cb913d9730e2d2d1837d87f92b88a9cf55c591b9d98e2f623627b51223bc7007450cc31099d4ddc5deabd2200d9c4f33a41b817"}]}, 0x24c) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_io_uring_setup(0x65a2, &(0x7f00000001c0)={0x0, 0x2, 0x10100, 0x2, 0x175}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r10, 0x5) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r11, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[], 0x10}}], 0x2, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x38, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x28000000) r13 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x8000, 0x1a3c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r13, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r13, 0x4141, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0xfffffff7, &(0x7f0000000040)}) 2m52.401085381s ago: executing program 1 (id=3576): r0 = syz_open_dev$sndctrl(0x0, 0x9, 0xe000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m51.831516039s ago: executing program 6 (id=3578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0xffffffdb, 0x80801) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0xffff8000) 2m50.534186444s ago: executing program 1 (id=3580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = signalfd(r1, &(0x7f0000000180)={[0x1]}, 0x8) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x146, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r9 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440)=r8, 0x1) 2m50.379441929s ago: executing program 6 (id=3581): socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x2, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140c, 0xb71decfdf6a93ea7}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 2m49.164410983s ago: executing program 1 (id=3583): gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xfffffffffffffff7, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) ptrace(0x8, r1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x100, @local}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0xe22, @broadcast}, 0x10) r6 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x2, 0x3}) ioctl$SIOCPNDELRESOURCE(r8, 0x89e0, 0x0) dup(0xffffffffffffffff) 2m48.378877522s ago: executing program 35 (id=3583): gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xfffffffffffffff7, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) ptrace(0x8, r1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x100, @local}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0xe22, @broadcast}, 0x10) r6 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x2, 0x3}) ioctl$SIOCPNDELRESOURCE(r8, 0x89e0, 0x0) dup(0xffffffffffffffff) 2m46.713842812s ago: executing program 6 (id=3589): r0 = syz_open_dev$sndctrl(0x0, 0x9, 0xe000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m45.227265423s ago: executing program 6 (id=3592): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x40000000, 0x5, 0x0, 0x0, 0x5a1}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cae130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2dca696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) sched_setaffinity(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000001c0)={0x1, 0x3}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffd69, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRESDEC=r7, @ANYRES8=r2], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000040)={0x0, 0x5}, 0x2) socket$netlink(0x10, 0x3, 0x1f) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$nvram(0xffffffffffffff9c, 0x0, 0x246042, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x7fffffd}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1}) syz_clone(0x12c0800, &(0x7f00000002c0)="fd196e1a6ad2673d249f3973b36801cc4e047e2ab33151eaca6e7abb64a16364dbfcae552e6f00c77aba710cfca454bbad967a387ff9afbdf84a12cbafe61ac9d7a3b939934ee3079b3b262d29588937173b91a1d844b31f120e314c2c7b02c1665b32d3de4cb6975ad3eeb093d08238d1b1e1fa95e5fdd584c4992d3dc2b43740735fc8a676d08a79394421f8f9923b150dbc46e1abc81d7dd56d40a505fc4feecb3aec6b1c", 0xa6, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000380)="e6217277c29618be02a99cda38882597f91bdcf217fa9e42561ac42144d116ca3a3a80d6eb6f34616720341689bf4b26d7b8a8af167a585ea1119347f96a658bf66b9a55d782cae01ab10379eadc77d1c870d5b647b8a6ef10aac20f90f3247c0a74c1bfc943ae7991f6294322d3d4785bae8d475b412773395db7e65f37c22e9de184b314df0a00c0d29820a07f177c86d39036b871") 2m43.921945743s ago: executing program 5 (id=3596): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m43.784242876s ago: executing program 5 (id=3598): syz_open_pts(0xffffffffffffffff, 0x40c0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="cc2b805d10229741d5556a18bb6ffbf34218efc190755221f87c14870574b1ffab01", 0xfffffffffffffdd6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='i2c_reply\x00', r4}, 0xfffffffffffffc17) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xd, 0x6, 0x0, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xd, 0x6, 0x0, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m43.620491537s ago: executing program 5 (id=3599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd8}}, 0x0) 2m43.554310109s ago: executing program 5 (id=3600): r0 = syz_open_dev$sndctrl(0x0, 0x9, 0xe000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 2m42.570742607s ago: executing program 5 (id=3601): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r8, 0x11, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44812}, 0x2000c008) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) eventfd(0x7) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 2m42.559211392s ago: executing program 2 (id=3602): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x2, 0x40000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3}, 0x8) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x40, 0x0, 0x2, "ba48"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000d80)={0x0, 0xa, 0x37, "8dcfd517392d88e26c9e96c36046449ea5552d1fe76d65b30bd9f65fa45fa795555a02cab42bb05d3b641c0d00347381bd33f695a22c2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000001000)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000003c0)={0x0, 0x7, 0x2, 'g;'}, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd00000006000500010000000600050001000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r8], 0x2c}}, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) 2m42.282788646s ago: executing program 6 (id=3603): r0 = socket(0x10, 0x803, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000040)=[{0x2, 0x4, {0x2, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x2, 0x1}, {0x1, 0x1, {0x1, 0xff, 0x2}, {0x2, 0x0, 0x2}, 0x1, 0xff}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff7441, 0xfff]}, 0x45c) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r7, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000180)={0x14, 0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000480), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x6, 0x100) 2m42.282446675s ago: executing program 5 (id=3604): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x7fffffff, 0xfffffffffffffff7}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x10000000) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000100)) 2m41.978968626s ago: executing program 36 (id=3604): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x0, 0x7fffffff, 0xfffffffffffffff7}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000000c0)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x10000000) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000100)) 2m41.936351314s ago: executing program 37 (id=3603): r0 = socket(0x10, 0x803, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000040)=[{0x2, 0x4, {0x2, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x2, 0x1}, {0x1, 0x1, {0x1, 0xff, 0x2}, {0x2, 0x0, 0x2}, 0x1, 0xff}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff7441, 0xfff]}, 0x45c) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r7, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000180)={0x14, 0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000480), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x6, 0x100) 2m39.298945294s ago: executing program 2 (id=3607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24058000}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000d0216ed5d699d1d79ed1d941000000009500"/36], &(0x7f0000000140)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = gettid() syz_pidfd_open(r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000c40)="9d", 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x49}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) 2m37.596681628s ago: executing program 2 (id=3608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd8}}, 0x0) 2m37.534563171s ago: executing program 2 (id=3609): r0 = syz_open_dev$sndctrl(0x0, 0x9, 0xe000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 2m36.549887171s ago: executing program 2 (id=3610): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @private}, &(0x7f0000000100)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@loopback, @local, 0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, 0x0, 0x6, 0x800) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@delneigh={0x4c, 0x1d, 0x20, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, r1, 0x0, 0x1, 0x4}, [@NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_MASTER={0x8, 0x9, 0x10}, @NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_IFINDEX={0x8, 0x8, r2}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x3, 0x323002) ioctl$RTC_UIE_ON(r4, 0x7003) 2m35.769508592s ago: executing program 2 (id=3611): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) 2m35.578333304s ago: executing program 38 (id=3611): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) 2m11.024729208s ago: executing program 7 (id=3647): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8000, @any, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x19) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90d5943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) prctl$PR_SET_SECUREBITS(0x1c, 0x32) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmmsg$sock(r4, &(0x7f0000000500)=[{{&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="7b3f1dc0782f37c687e384897e1f601e27776bc2f7d2f03530ef9684f9243e4bcd1c965cbd87c9c43ea94233c2032b153ce210c0ec", 0x35}], 0x1, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1f75}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xd36}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)="294a538b5069b3963962d8030b08518c8884e72a1df93f4ce4e1f28092429e47096b8fdf79564a47e95e6b37ef45488112009d9478471236e897c91d382c9c643080101916ce9b3a82d3114c7deb94857dd12fb7c5ff06d96d041ef48b2365cd8fbac36a0f2594cd2b519b8aa1f977f40bfc4a48abcaa7d5afd9bc59d2e3e6e54601c5b3928a3cb7ca502120d22cec19dd174b3ce381ae9bd2aea62edc392f3ed9fd60f835fc", 0xa6}, {&(0x7f00000005c0)="f42a6b45e40d2f3b8f72bd9e0f97f3677ab1fc80626692383a0dd16afafbbca56875a3470ba0fd9513754bb1bfdf0256058c1c240534db3f9eff274f3f0c3abe52ed8c8fcc0b9cd35213066902744824403ac34ff4ea93b2c37a6fe0ee5894d2fa605f56e498d6f6fd10b4008fbf7fb0ab9a4276509387a21ab4b31630f607539458631610a9e1181c724a50fc630f982bc702ebc12fb72c88cd6f5219f121766cfde14935390815195a5124585cd5", 0xaf}, {&(0x7f0000000680)="b827ad2e925558090fdadc287d3d7f084e2b5407c320cfe56c03003a27c7a68653db165e8590fdaff54f2ed034052e65bc21805b336bb96f9eae43775027d107b93d8517bc3ee2855e969fc1de879ca0553cab45df8c23dc32309c524ae84a7faf6bd4c6d02ef93c094775ceb5c0022e8bce6eede95a38a9df663b452602c016ff883e36041537cde6c776e9c7a06c6cce6d555c0d75d8a732e385bb4c587fcb1dc45553ee215cd03367882aeb", 0xad}], 0x3, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xafb8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x20f0}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xd}}], 0x90}}], 0x2, 0x80) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000080), 0x5f, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x8, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x18}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000400), 0x0, 0x9200000000000000) r9 = socket(0x1e, 0x4, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x2017, 0x4) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0x40, 0x6, 0x3ff}, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, 0x7, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x37, 0x7, 0x1, 0x0, "248632dd7699249770862d91273d6265b8ccce4c9de8bee48cb47cd2866d4a7df924381d85a5d10b958d6d9a4a5d9c792fe2a6"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20040004) poll(&(0x7f00000000c0)=[{r9, 0x20}], 0x1, 0x80000001) sendmmsg(r9, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m10.402253743s ago: executing program 7 (id=3649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2a8001, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = getpgid(0x0) unshare(0x26020280) accept$alg(r1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3], 0x1}, 0x58) openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000000140)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getdents(r1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x100076, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000000)={0x20, 0x15, 0x2, 0x6, 0x6}, 0x8, 0x0, 0x5, 0x0, 0x11f6, 0x6, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000140001f4ca3fac4782980e001d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r7, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 2m9.971280797s ago: executing program 7 (id=3650): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r10, 0x0) 2m8.010653588s ago: executing program 7 (id=3652): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0x6c, 0x0, '\x00', [@ra={0x5, 0x2, 0x14b}]}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @p_u16=0x0}}) 2m7.809335581s ago: executing program 7 (id=3654): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x80a80) r2 = inotify_init1(0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x4) r3 = dup(r2) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="d6f8"]) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000600)={{0x7, 0x6, 0x5, 0xc, 'syz0\x00', 0x9}, 0x1, [0x6, 0x7fff, 0xfffffffffffffffc, 0x7ff, 0xbad, 0xfc, 0x3, 0x1, 0x8, 0x80000001, 0x2, 0x6, 0x1, 0x8, 0x0, 0xbc, 0x7, 0x9, 0x101, 0x4, 0xc, 0x0, 0x101, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1, 0x3, 0x6, 0x9, 0x8, 0x5, 0x152, 0x0, 0x6, 0x200, 0x6, 0xa440, 0xffffffffffffff78, 0x8, 0x362edef8, 0x14a1, 0x5, 0x1000, 0x7, 0x1, 0x4, 0xfff, 0x1, 0x1, 0x3, 0x7, 0x2, 0x8, 0x45, 0x7, 0x9, 0x7ff, 0xfffffffffffffffd, 0xa, 0x0, 0x192, 0x8000, 0x6, 0x3aaf, 0xf, 0x7, 0x9, 0x0, 0xf, 0x0, 0x53, 0x4, 0x5, 0x10, 0x0, 0x7e1, 0xfffffffffffffeff, 0x8000, 0x658, 0x2, 0xfffffffffffffffb, 0x4, 0x200, 0xfffffffffffffff7, 0x3ff, 0x4, 0x4, 0x3, 0x5, 0x1, 0x40, 0x7, 0xdf, 0x2, 0x53a0, 0xffffffff00000001, 0x9, 0xfffffffffffeffff, 0x4, 0x4, 0x2, 0x6, 0x9, 0x8001, 0xc, 0x8001, 0x307, 0x8, 0x2, 0x10, 0x3, 0x1, 0x8, 0x2, 0xffffffffffff7fff, 0x0, 0x81000000000, 0x0, 0x3, 0x3, 0x6, 0x7f, 0x200, 0x7, 0xe7e]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) 2m6.671770884s ago: executing program 7 (id=3659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080) syz_clone(0x0, &(0x7f00000004c0)="59c32e2c3df1aa713be14b31abc0cbbc7af5674ad78f546f8fa14546ce4eb80228bf4c54e94cf207b53ad3d07561f5988ba83e1001fce8f863001b47eb7cad5e9637c8e6ba", 0x45, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="5bc67046594bb7ce7cd547367cba6cb14c50841f5d553d4cbfbfa0c051682c85defd0e29553f41d3ad1396615eb9fe1075c97fb73038e8b4eb26701fdf7be7a93f205f82f4d9c4553ddd3ee8343bbc3e0511dc8a3698d336658dc3206dd4f38ac9a13d531232af800b19801baf52ac18e215f7d79dcf3fd7ecd960") r4 = gettid() r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f00000000c0), &(0x7f0000000080)=@tcp6=r5, 0x4}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x181502) read(r7, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x335, @tick, 0x0, {}, 0xfc}) write(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000300)={{0x4, 0x4}, {0x5, 0xf4}, 0x7, 0x5, 0x2}) tkill(r4, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b000000000000000000000000000000000000005fd5033f74c46a6c4977609ec4329a9668f7837039889b6f69d599748ee4ac485324f24c95a5363b2cfa6ae7ebd390e33610fce1b5185dadd8a417644af5483ed85113a3b4067465a304a457e07f02308d2654ff3ef351f6f28fd62a8eff1ffa7310a040b3e0090ab0e3889974b7bbd9605dc13e6e07556b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffffffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800000f}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x2, 0x6, 0x9, 0xb, 0x2d3e9a666031558e, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 2m6.500222782s ago: executing program 39 (id=3659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080) syz_clone(0x0, &(0x7f00000004c0)="59c32e2c3df1aa713be14b31abc0cbbc7af5674ad78f546f8fa14546ce4eb80228bf4c54e94cf207b53ad3d07561f5988ba83e1001fce8f863001b47eb7cad5e9637c8e6ba", 0x45, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="5bc67046594bb7ce7cd547367cba6cb14c50841f5d553d4cbfbfa0c051682c85defd0e29553f41d3ad1396615eb9fe1075c97fb73038e8b4eb26701fdf7be7a93f205f82f4d9c4553ddd3ee8343bbc3e0511dc8a3698d336658dc3206dd4f38ac9a13d531232af800b19801baf52ac18e215f7d79dcf3fd7ecd960") r4 = gettid() r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f00000000c0), &(0x7f0000000080)=@tcp6=r5, 0x4}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x181502) read(r7, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x335, @tick, 0x0, {}, 0xfc}) write(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000300)={{0x4, 0x4}, {0x5, 0xf4}, 0x7, 0x5, 0x2}) tkill(r4, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b000000000000000000000000000000000000005fd5033f74c46a6c4977609ec4329a9668f7837039889b6f69d599748ee4ac485324f24c95a5363b2cfa6ae7ebd390e33610fce1b5185dadd8a417644af5483ed85113a3b4067465a304a457e07f02308d2654ff3ef351f6f28fd62a8eff1ffa7310a040b3e0090ab0e3889974b7bbd9605dc13e6e07556b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffffffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800000f}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x2, 0x6, 0x9, 0xb, 0x2d3e9a666031558e, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 12.728692063s ago: executing program 9 (id=4005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x92) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xd000, 0x100000, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xa647, @dev={0xfe, 0x80, '\x00', 0x24}, 0x4}, 0x1c) ftruncate(r0, 0x80000000) syz_usb_connect(0x2, 0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100002fedab2008161202c8780102030109029000010010100009046f0009050c0f00020002097523e81478f2968499de4c787201bd48687f39248d190dbd0ed852a40cebee58495b508a9bf566be6cd92383660fe32fddb84fc934491e5fca2fcc27809028e9b326af94cba28480482ff09f6daad89134feef0469c3839ac9b7fc5f18b504f7e6d62123fb1bf7ea977459365f81e2762885f9a920331fe86966e7a5bb3f6a02d9ff250000000000"], 0x0) 11.443726788s ago: executing program 3 (id=4008): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$packet(0x11, 0x3, 0x300) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x80, 0x1}, 0x0, &(0x7f0000000240)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') getuid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_io_uring_submit(0x0, r1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="490910bc996c301c81", 0x9) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 11.163696571s ago: executing program 9 (id=4010): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) read$alg(r0, &(0x7f0000000200)=""/40, 0x28) write$P9_RLINK(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 10.975545466s ago: executing program 9 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/30, 0x1e}], 0x1) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES8=r1], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaa8aa01ecd7817de9beffb000cd0400383a00fc01000000000000000000000000000000000000000000000000ffffac1e00010300907881000000600bae2b00030800fc000000000000000000000000000000fe8800000100000000000000000000018700020000000000a3c552b0856f9956c5c902d6585c79e54ec4beffc58f6dd39580e02cd2c91b6c686647d3e8ac62e1771d714cc422d793f56e32e46a23ac746fe4227a28d7ba47bef39fe4bb450a2394003c2de239ef761e848214b7510ea3fa57fc"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x400c008) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6a) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES8=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket(0xa, 0x4, 0x3) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd0, &(0x7f0000000240), 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) 9.231828914s ago: executing program 8 (id=4016): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@loopback, @loopback, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x2, 0xffffffff}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) listen(0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/75, 0x8e, 0x0) 9.109329231s ago: executing program 4 (id=4017): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00006000002f90781e0001e0000001000065"], 0xfdef) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6, 0x3, 0x2, 0x3}, {0x2, 0x81, 0x1, 0xc}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6c, 0xd, 0x1}, {0x8, 0x4, 0x10, 0x5}, {0x6, 0x2, 0x5, 0x10}, {0x0, 0x0, 0x3, 0x7f}, {0x50, 0x0, 0x7, 0xe3b}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000300)="b9000407680409000000", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2800, 0x10}, &(0x7f00000003c0)=0xc) getrusage(0xfffffffffffffffe, 0x0) iopl(0x1) 8.906491201s ago: executing program 3 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000f40)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x80, 0x40, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x1000080000}, {0x8a, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x3505, 0xa, 0x0, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'pcbc-aes-aesni\x00'}}}]}, 0x180}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a38d", 0xffffff4b) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100d3401e8af2e1b2e202818bcff24c"], 0x20}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0xd76b6000) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r7, 0x101, 0x19, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) 8.513806596s ago: executing program 8 (id=4020): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x5, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x4ee040, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r5}, 0x18) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES64, @ANYRES32=r8, @ANYBLOB='\b\x00]\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 8.468371959s ago: executing program 9 (id=4021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x40000002}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x4c}, 0x1, 0xd}, 0x0) 8.004530351s ago: executing program 9 (id=4023): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) io_uring_setup(0x104b, &(0x7f0000000600)={0x0, 0xfffffffe, 0x400, 0x1}) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x10010) flistxattr(r2, &(0x7f0000000500)=""/174, 0xae) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x10000000}, 0x4001}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x12c9bc095037d560}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040084) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 7.98478946s ago: executing program 4 (id=4024): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x2449}) 7.360244563s ago: executing program 8 (id=4025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0xffffffff) mmap(&(0x7f00003a5000/0x3000)=nil, 0x3000, 0xc, 0x12, 0xffffffffffffffff, 0x54e2e000) capset(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r7, r7, r6}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 6.473450673s ago: executing program 0 (id=4026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000bd7c784c3fbd4aa39d3344943dcb9e"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000578000/0x5000)=nil, 0x5000, 0xb635773f07ebbee6, 0x100010, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000193c0)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 5.245522559s ago: executing program 3 (id=4027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000003240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setstatus(r2, 0x4, 0x42000) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socket$kcm(0x29, 0x5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYBLOB="08c6dc080262026f566e9a45dc11a98067b7e16e0f275e2d9dfafee29bccf1d096cc419155", @ANYBLOB="0000000000000004", @ANYRES32, @ANYBLOB="08001f00050000000500110001"], 0x70}}, 0x40810) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) 5.077523624s ago: executing program 0 (id=4028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000000000850000008800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x3, 0x0, 0x0) 4.24240509s ago: executing program 4 (id=4029): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = geteuid() quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r1, &(0x7f0000000040)={0xb, 0x1}) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x1, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x240008a0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r2}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0x6, 0x5}, {0xe, 0x5}, {0x0, 0x4}, {0x4, 0x3}]}, @func={0xe, 0x0, 0x0, 0xc, 0x1}, @enum64={0xf, 0x7, 0x0, 0x13, 0x0, 0x8, [{0x1, 0x7, 0x8}, {0x6, 0x2, 0x80000001}, {0x7, 0x4, 0x765}, {0xa, 0xfffffff8, 0xf1}, {0x7, 0x0, 0x5}, {0x6, 0x6b4, 0x8}, {0xf, 0xf42, 0x27}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x5, [{0xa, 0x7, 0x359cc496}, {0xf, 0x8000, 0x5}, {0x6, 0x20d, 0xb}]}, @const={0x6}, @fwd={0xb}]}, {0x0, [0x0, 0x0, 0x0, 0x30]}}, &(0x7f00000003c0)=""/4096, 0x116, 0x1000, 0x1, 0x2, 0x0, @void, @value}, 0x28) r6 = open(&(0x7f0000001480)='./file0\x00', 0x5b1902, 0x4c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x7fffffff, 0x0, 0x3, 0x4a000, r4, 0x10000, '\x00', 0x0, r5, 0x5, 0x3, 0x0, 0x0, @value=r6, @void, @void, @value}, 0x50) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$selinux_access(r3, &(0x7f00000014c0)={'system_u:object_r:watchdog_device_t:s0', 0x20, '/usr/sbin/cupsd'}, 0x4c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001540)={0x0, 0x7a, "2a0ff3d5c5294ac7a98a123447f9bb8dc0a55c73c199517ba84aa04f8df531f0d9d5f92088ffec083a4c9c1c3a598b9afd301fe307b85c70189d0fbd564d79083c905682c2c3589a698319306212a13b2863c463d14fcc6970455ca40823c0b48e288623ec3a15306471581652189be958c063e3632b1122c2b9"}, &(0x7f0000001600)=0x82) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80010}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x20000000) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000501, r1, &(0x7f0000001780)) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001800)=0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000001840)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001880)=0x0) sendmsg$nl_netfilter(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001cc0)={&(0x7f00000018c0)={0x3e4, 0x5, 0x6, 0x101, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}, @nested={0x289, 0x148, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="6c47e02b5e40c695944b404d1a6156823993acca7c35b90dc45047ee3ada6411e4a7f99d454331099ba0b7580bc9e5ac2442a2aa019ee4803c4f451420e0184b2daa02e9427191b8414a8d7fadda0fc9d6c4f2921557a94d7719e5a869fcbd846e3cd350f5dd43807a02f7936a3eaedcf69273125401cceb8bb6b035fb1c27f2f7fddd9bef0fc3550593b038c9556adc3a99d4f629eecca3e9c6274f8d2111f1e8fd502282d66c4a35302c", @generic="48eb4d2579fe495836df4b72007a10fb8b18082bea3843f2c63e37637410ce1c51a64dfc0c3c245429ab73c5698be10fe453e513d5e537a6ff430c863d0cc01f6bb8c04c4ba354733e4ce9d3f93fb74bc13ef93184b4682024d1ec3518010bf7f432c8a7a16bc65c70e5789b039dbd32ff65408fe026d2b8c5108f86139f89a35d7d4146ba9bd86da7f66c6df084c17b0f42512c65625f90c76ba429895b448552706280c39ed39b32f49ca5759fa170944f497db75ad38a5c91f018839098963e764b247ab1aad248fd6001d8b783836bdf64547bf0efd757a96b32666da6532769e7a88dbf64f941f5529f37", @nested={0x4, 0x30}, @typed={0x8, 0x141, 0x0, 0x0, @pid=r10}, @generic="9ef9d9f9d28365c929f39f0147b1b2d8efcea6caece2eecc8220ea14b1ab4dee12d2b27207e247f445b4a4d2e60de13b37d3cc63d9d5eaab521cad89a3a9fcb8303e302b8ad99b5308397c9181b92cf3050f4d7abf4ad9bdce725df2ce12b37e154c5c1522ef8624527f89802f2f63d0290d6d33c7e3b9575ba994fb5f25b2d1d4a4acb1375c7484b82c4604da31beb842ac22de9930c63fddf28f01f7f2cde3f647338f8d9820e23706be6afda7221e45c2bff5dcdce39e185ae38069308f2106", @nested={0x4, 0x13}, @generic="ea91d030f5b2823fe01ee4fab7d319712d6f1c9a", @nested={0x4, 0x1e}]}, @nested={0x13a, 0x130, 0x0, 0x1, [@generic="2e863695ef3d08b78d50f40bcd5db226c17989319e39e8e9bc2788f87a61bcf56b24eb4cace5f894978fccb5f3d1ad0b26a3944a3f3455", @generic="1878205de8921ad15a06b5351d2499b8205caccc2ca814bbb228a2688123f1c910ffc7190798e3280628004134a1a36bbe9f2659546cd622f8c653fb84021565fc0c615e40a8ebe8efb01ccd61e07213cc", @generic="61dfbc9d1ee356890dccd50848aa9db9373ef90df96659ad737e4f7fa961437ab0c2005d325dc31c19ec559d28a7f5d79061c87be869d8e09a2d9cd249518e9d1c5f8fab81bc87695e0d563ffcbe830d8b0ca02f00d6d788656b62e94f28b57fc0548f061d97298743a7f781913cf15905806da51657f0f9670a4f8481e50be0484ea20dea8a10df2ce00f37bb26713a04064e2a6131be5d9ee2", @nested={0x4, 0x92}, @typed={0x8, 0x4c, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x62, 0x0, 0x0, @pid=r12}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000001d40)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000001d80)={r13, 0x0, 0x2, 0x7f, 0xe}) sendto$packet(r0, &(0x7f0000001dc0)="5629a4fb22997c84417d5661331a956a", 0x10, 0x80, &(0x7f0000001e00)={0x11, 0x15, 0x0, 0x1, 0x5}, 0x14) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000001e80)={0x7, &(0x7f0000001e40)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000001ec0)={r14, 0x1}) sched_setaffinity(r10, 0x8, &(0x7f0000001f00)) r15 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r7, &(0x7f0000001f40)={0xc0000000}) close(r2) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000001f80)) 4.20019184s ago: executing program 8 (id=4030): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x503, @empty, 0x1}}, 0x0, 0x0, 0xb, 0x0, "6fcd42ec0222f5b3eed9ee0600000014a6ec4d6ce4bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698baed67e551523c709ac4ae79c9cab1c4d1879cd9e00"}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0x9}, {0xd97e}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x200000}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000004f000010000000000022fee139c0a1228e167ac3bc3400049535cde5698ee28cf49e417163aaccb4f928", @ANYRES32, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.940016888s ago: executing program 3 (id=4031): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x700, 0x7, 0xfffffff7, 0x5a42, {{0x29, 0x4, 0x0, 0x2, 0xa4, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x7, 0x28, [@empty]}, @generic={0x88, 0x12, "66890124614f4368b3ed219623ba7be4"}, @ssrr={0x89, 0x1f, 0x78, [@broadcast, @multicast2, @broadcast, @local, @rand_addr=0x64010100, @multicast1, @multicast2]}, @rr={0x7, 0xb, 0x83, [@broadcast, @loopback]}, @end, @timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x3, [{@broadcast, 0x4d}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@loopback, 0x4}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2ad}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0xb, "db6fecd7b1c807f4dc"}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x9, [0x3]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004010) socket(0x10, 0x3, 0x0) 3.93878606s ago: executing program 4 (id=4032): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 3.332451456s ago: executing program 8 (id=4033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000c80)=0xf4e) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000440)=[{r4, 0x966c}], 0x1, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000001c0)={0x0, 0x70, 0x0, {r9}}, 0x20) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.202663824s ago: executing program 3 (id=4034): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x2449}) 2.88805866s ago: executing program 3 (id=4035): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x4, &(0x7f00000005c0)={0x7ff, 0x101}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"]) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xc}}}, 0x24}}, 0x0) (async) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4e, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0xf, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 2.887702819s ago: executing program 0 (id=4036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x803e0000) 2.315743651s ago: executing program 4 (id=4037): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) r1 = dup(0xffffffffffffffff) read$FUSE(r1, &(0x7f0000003e80)={0x2020}, 0x2020) 2.159366346s ago: executing program 8 (id=4038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 1.416208176s ago: executing program 4 (id=4039): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000400)=""/250) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c"], 0x34}}, 0xc000) openat$dir(0xffffff9c, 0x0, 0x2002, 0x1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x7f, @none, 0x3}}}, 0xb) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x8}}}, 0xa) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, 0x0, 0xcdeaa7cf2b53d327, 0x4, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 1.280585943s ago: executing program 0 (id=4040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x8, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x723, "4f010000008b42be000000100000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r8}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'batadv0\x00', @broadcast}) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRES8, @ANYBLOB="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"], 0xfdc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="10005c8004000100ee00050000000000"], 0x2c}}, 0x0) 391.464521ms ago: executing program 9 (id=4041): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@uuid_auto}, {@nfs_export_on}, {@redirect_dir_follow}], [{@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@permit_directio}, {@dont_hash}]}) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) syz_clone3(0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@uuid_auto}, {@nfs_export_on}, {@redirect_dir_follow}], [{@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@permit_directio}, {@dont_hash}]}) (async) 214.776742ms ago: executing program 0 (id=4042): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) io_setup(0x7, &(0x7f0000000200)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) close_range(r0, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44000) 0s ago: executing program 0 (id=4043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24058000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000d0216ed5d699d1d79ed1d941000000009500"/36], &(0x7f0000000140)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) kernel console output (not intermixed with test programs): s" ino=56410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1016.509187][T19456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.597054][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3653'. [ 1016.702024][ T29] audit: type=1400 audit(2000000668.733:3047): avc: denied { create } for pid=19455 comm="syz.3.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1016.743198][ T29] audit: type=1400 audit(2000000668.742:3048): avc: denied { setopt } for pid=19455 comm="syz.3.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1016.813433][ T29] audit: type=1400 audit(2000000668.901:3049): avc: denied { read } for pid=19453 comm="syz.0.3653" path="socket:[55568]" dev="sockfs" ino=55568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1017.036909][ T29] audit: type=1400 audit(2000000669.125:3050): avc: denied { create } for pid=19470 comm="syz.0.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1018.123365][ T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.158714][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1018.177439][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1018.198160][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1018.236990][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1018.244597][ T5821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1018.252540][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.404237][T16348] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1018.596336][ T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.659766][T16348] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1018.673333][T16348] usb 1-1: config 0 has no interface number 0 [ 1018.711844][T16348] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1019.112423][T16348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.151699][T16348] usb 1-1: config 0 descriptor?? [ 1019.158755][T16348] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 1019.213893][ T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.235900][T19490] lo speed is unknown, defaulting to 1000 [ 1019.446789][T16348] usb 1-1: USB disconnect, device number 17 [ 1019.535618][ T52] team0: Port device netdevsim0 removed [ 1019.554213][ T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.611337][T19490] »»»»»» speed is unknown, defaulting to 1000 [ 1019.623881][T19490] xfrm0 speed is unknown, defaulting to 1000 [ 1019.630738][T19490] lo speed is unknown, defaulting to 1000 [ 1019.822487][ T52] bridge_slave_1: left allmulticast mode [ 1019.846418][ T52] bridge_slave_1: left promiscuous mode [ 1019.866946][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.888116][ T52] bridge_slave_0: left allmulticast mode [ 1019.893783][ T52] bridge_slave_0: left promiscuous mode [ 1019.899858][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.952272][ T46] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1020.016975][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1020.122917][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 1020.139377][ T46] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1020.190188][ T46] usb 10-1: config 179 has no interface number 0 [ 1020.211826][ T46] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1020.235782][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1020.297099][ T46] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1020.328928][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1020.398809][ T46] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1020.425800][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1020.453752][ T46] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1020.453847][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.533118][ T5821] Bluetooth: hci4: command tx timeout [ 1020.547081][ T25] usb 4-1: config 0 descriptor?? [ 1020.552543][ T46] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1020.566602][ T46] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1020.595668][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.633520][T19523] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1020.889286][ T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input36 [ 1020.953438][ T29] audit: type=1400 audit(2000000672.792:3051): avc: denied { read } for pid=5174 comm="acpid" name="js0" dev="devtmpfs" ino=4761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1020.998670][ T29] audit: type=1400 audit(2000000672.820:3052): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1021.026014][ T29] audit: type=1400 audit(2000000672.820:3053): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4761 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1021.052390][ T25] appletouch 4-1:0.0: Geyser mode initialized. [ 1021.062692][ T25] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 1021.350485][ T25] usb 10-1: USB disconnect, device number 2 [ 1021.350548][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1021.350595][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1021.400437][ T25] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1021.426139][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1021.454531][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1021.476000][T19526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1021.517162][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.624080][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.641654][ T5872] usb 4-1: USB disconnect, device number 8 [ 1021.653236][ T5872] appletouch 4-1:0.0: input: appletouch disconnected [ 1021.679347][ T52] bond0 (unregistering): Released all slaves [ 1021.723133][T19490] chnl_net:caif_netlink_parms(): no params data found [ 1022.575627][T19547] binder: 19546:19547 ioctl 4018620d 0 returned -22 [ 1022.659297][T19555] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3676'. [ 1022.755610][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1022.765034][ T5816] Bluetooth: hci4: command tx timeout [ 1022.806131][ T29] audit: type=1400 audit(2000000674.523:3054): avc: denied { create } for pid=19557 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1022.826260][ T29] audit: type=1400 audit(2000000674.532:3055): avc: denied { bind } for pid=19557 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1022.847364][ T29] audit: type=1400 audit(2000000674.532:3056): avc: denied { listen } for pid=19557 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1022.887071][ T29] audit: type=1400 audit(2000000674.532:3057): avc: denied { connect } for pid=19557 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1022.922904][ T29] audit: type=1400 audit(2000000674.635:3058): avc: denied { name_bind } for pid=19564 comm="syz.3.3678" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1022.954760][ T29] audit: type=1400 audit(2000000674.635:3059): avc: denied { create } for pid=19564 comm="syz.3.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1022.980346][ T29] audit: type=1400 audit(2000000674.635:3060): avc: denied { bind } for pid=19564 comm="syz.3.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1023.180783][T19490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.187955][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.204974][T19490] bridge_slave_0: entered allmulticast mode [ 1023.223045][T19490] bridge_slave_0: entered promiscuous mode [ 1023.233826][ T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1023.267588][T19490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.274703][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.296997][T19490] bridge_slave_1: entered allmulticast mode [ 1023.308801][T19490] bridge_slave_1: entered promiscuous mode [ 1023.403486][T19584] FAULT_INJECTION: forcing a failure. [ 1023.403486][T19584] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.416387][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 1023.429646][T19490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.439105][ T46] usb 10-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 1023.439138][ T46] usb 10-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 16 [ 1023.439165][ T46] usb 10-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.439193][ T46] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1023.446275][ T46] usb 10-1: string descriptor 0 read error: -22 [ 1023.515644][ T52] hsr_slave_0: left promiscuous mode [ 1023.524446][T19584] CPU: 0 UID: 0 PID: 19584 Comm: syz.8.3683 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1023.535236][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1023.545300][T19584] Call Trace: [ 1023.548583][T19584] [ 1023.551515][T19584] dump_stack_lvl+0x16c/0x1f0 [ 1023.556204][T19584] should_fail_ex+0x497/0x5b0 [ 1023.560905][T19584] ? fs_reclaim_acquire+0xae/0x150 [ 1023.566036][T19584] should_failslab+0xc2/0x120 [ 1023.570723][T19584] __kmalloc_noprof+0xcb/0x510 [ 1023.575501][T19584] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1023.575961][ T46] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1023.581134][T19584] tomoyo_realpath_from_path+0xb9/0x720 [ 1023.590301][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.595744][T19584] ? tomoyo_path_number_perm+0x235/0x590 [ 1023.609444][T19584] ? tomoyo_path_number_perm+0x235/0x590 [ 1023.615095][T19584] tomoyo_path_number_perm+0x248/0x590 [ 1023.620541][T19584] ? tomoyo_path_number_perm+0x235/0x590 [ 1023.626158][T19584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1023.632159][T19584] ? __pfx_lock_release+0x10/0x10 [ 1023.637195][T19584] ? trace_lock_acquire+0x14e/0x1f0 [ 1023.642415][T19584] ? lock_acquire+0x2f/0xb0 [ 1023.646928][T19584] ? __fget_files+0x40/0x3a0 [ 1023.651532][T19584] ? __fget_files+0x206/0x3a0 [ 1023.656220][T19584] security_file_ioctl+0x9b/0x240 [ 1023.661260][T19584] __x64_sys_ioctl+0xb7/0x200 [ 1023.665954][T19584] do_syscall_64+0xcd/0x250 [ 1023.670545][T19584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.676423][T19584] RIP: 0033:0x7fa142785d29 [ 1023.680826][T19584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.691932][T19568] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1023.700427][T19584] RSP: 002b:00007fa1434d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.715947][T19584] RAX: ffffffffffffffda RBX: 00007fa142976080 RCX: 00007fa142785d29 [ 1023.722495][T19568] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1023.723909][T19584] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000005 [ 1023.738966][T19584] RBP: 00007fa1434d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.746954][T19584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.754937][T19584] R13: 0000000000000000 R14: 00007fa142976080 R15: 00007ffe2cc12e98 [ 1023.762932][T19584] [ 1023.767854][ T52] hsr_slave_1: left promiscuous mode [ 1023.774515][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.785103][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.795312][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.796545][T19584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1023.814845][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.886040][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1024.010314][ T52] veth1_macvtap: left promiscuous mode [ 1024.183028][ T52] veth0_macvtap: left promiscuous mode [ 1024.196518][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1024.790002][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1024.794502][ T52] veth1_vlan: left promiscuous mode [ 1024.822221][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 1024.839590][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 1797, setting to 1024 [ 1024.855045][ T52] veth0_vlan: left promiscuous mode [ 1024.911553][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1024.958019][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.980325][ T5816] Bluetooth: hci4: command tx timeout [ 1024.994207][ T25] usb 4-1: Product: syz [ 1025.033287][ T25] usb 4-1: Manufacturer: syz [ 1025.087207][ T25] usb 4-1: SerialNumber: syz [ 1025.112544][ T25] usb 4-1: config 0 descriptor?? [ 1025.130352][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1025.141373][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1025.781555][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1025.822365][ T25] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1025.937120][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1026.008695][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1026.052057][ T25] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1026.063946][ T25] em28xx 4-1:0.0: No AC97 audio processor [ 1026.264278][ T46] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1026.277149][ T46] usb 10-1: USB disconnect, device number 3 [ 1026.417686][T19599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=19599 comm=syz.9.3687 [ 1026.450566][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1026.450584][ T29] audit: type=1400 audit(2000000677.937:3065): avc: denied { setopt } for pid=19597 comm="syz.9.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1026.958492][T19490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.112657][T19490] team0: Port device team_slave_0 added [ 1027.149610][T19490] team0: Port device team_slave_1 added [ 1027.195307][T19591] usb 4-1: USB disconnect, device number 9 [ 1027.200160][ T5816] Bluetooth: hci4: command tx timeout [ 1027.202489][T19591] em28xx 4-1:0.0: Disconnecting em28xx [ 1027.273218][T19591] em28xx 4-1:0.0: Freeing device [ 1027.293190][T19607] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 1027.307100][T19607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.322847][T19612] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3690'. [ 1027.346690][T19490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.360867][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.416692][T19490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.433430][T19614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19614 comm=syz.9.3691 [ 1027.451347][T19490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.467739][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.472136][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1027.496143][T19490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.563949][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3690'. [ 1027.646368][T19490] hsr_slave_0: entered promiscuous mode [ 1027.658250][T19490] hsr_slave_1: entered promiscuous mode [ 1027.681287][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1027.696941][ T25] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1027.732997][ T25] usb 1-1: config 0 has no interface number 0 [ 1027.775220][T19624] IPVS: set_ctl: invalid protocol: 47 172.30.0.10:0 [ 1027.821023][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1027.854293][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.960283][ T25] usb 1-1: Product: syz [ 1028.010918][ T25] usb 1-1: Manufacturer: syz [ 1028.093601][ T25] usb 1-1: SerialNumber: syz [ 1028.206586][ T25] usb 1-1: config 0 descriptor?? [ 1028.297226][ T29] audit: type=1400 audit(2000000679.658:3066): avc: denied { create } for pid=19625 comm="syz.8.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1028.322291][ T29] audit: type=1400 audit(2000000679.686:3067): avc: denied { setopt } for pid=19625 comm="syz.8.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1028.455933][ T25] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1028.473062][ T25] usb 1-1: No streaming interface found for terminal 6. [ 1028.477036][ T29] audit: type=1400 audit(2000000679.836:3068): avc: denied { name_bind } for pid=19631 comm="syz.3.3696" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1028.493935][ T25] usb 1-1: USB disconnect, device number 18 [ 1028.666898][T19634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.221890][ T46] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1029.402910][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 1029.694833][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.717055][ T46] usb 9-1: config 0 has no interfaces? [ 1029.728889][ T46] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1029.743593][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.754087][ T46] usb 9-1: Product: syz [ 1029.758762][ T46] usb 9-1: Manufacturer: syz [ 1029.763505][ T46] usb 9-1: SerialNumber: syz [ 1029.771169][ T46] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1029.783111][ T46] r8152-cfgselector 9-1: config 0 descriptor?? [ 1029.915719][ T29] audit: type=1400 audit(2000000681.155:3069): avc: denied { ioctl } for pid=19661 comm="syz.3.3702" path="socket:[56821]" dev="sockfs" ino=56821 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1029.940490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.293843][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.757558][T16295] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 1031.155638][T19591] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1031.326622][T19591] usb 10-1: Using ep0 maxpacket: 8 [ 1031.340444][T19591] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1031.446309][T19591] usb 10-1: config 0 has no interface number 0 [ 1031.669391][T19591] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1031.727279][T19591] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.778841][T19490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1031.792638][T19591] usb 10-1: Product: syz [ 1031.797827][T19490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1031.827932][T19591] usb 10-1: Manufacturer: syz [ 1031.831226][T19490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1031.845302][T19591] usb 10-1: SerialNumber: syz [ 1031.934944][T19591] usb 10-1: config 0 descriptor?? [ 1031.963528][T19490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1032.074891][ T29] audit: type=1400 audit(2000000683.184:3070): avc: denied { ioctl } for pid=19692 comm="syz.3.3708" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1032.209681][T19591] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1032.216360][T19591] usb 10-1: No streaming interface found for terminal 6. [ 1032.226157][T19591] usb 10-1: USB disconnect, device number 4 [ 1032.338774][T19703] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3709'. [ 1032.355070][T19703] rdma_op ffff88807d4919f0 conn xmit_rdma 0000000000000000 [ 1032.419300][ T29] audit: type=1400 audit(2000000683.446:3071): avc: denied { getopt } for pid=19693 comm="syz.0.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.775945][ T29] audit: type=1400 audit(2000000683.849:3072): avc: denied { create } for pid=19704 comm="syz.8.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1032.780710][T19490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.823406][ T29] audit: type=1400 audit(2000000683.849:3073): avc: denied { bind } for pid=19704 comm="syz.8.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1032.834423][T19490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.870614][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.877815][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.986197][T16254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.993374][T16254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.980223][T19715] Process accounting resumed [ 1034.104415][ T29] audit: type=1400 audit(2000000685.093:3074): avc: denied { listen } for pid=19735 comm="syz.9.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1034.126604][T19736] netlink: 'syz.9.3715': attribute type 10 has an invalid length. [ 1034.288685][ T29] audit: type=1400 audit(2000000685.093:3075): avc: denied { connect } for pid=19735 comm="syz.9.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1034.310056][ T29] audit: type=1400 audit(2000000685.177:3076): avc: denied { unmount } for pid=18969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1034.546097][T19744] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1034.569429][ T29] audit: type=1400 audit(2000000685.532:3077): avc: denied { read } for pid=19735 comm="syz.9.3715" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1034.593264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.618216][ T29] audit: type=1400 audit(2000000685.532:3078): avc: denied { open } for pid=19735 comm="syz.9.3715" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1034.974458][T19736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.000835][T19736] bond0: (slave team0): Enslaving as an active interface with an up link [ 1035.088389][T19490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.101506][ T29] audit: type=1400 audit(2000000686.009:3079): avc: denied { create } for pid=19751 comm="syz.3.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1035.545364][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.619215][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.765119][ T5867] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1035.797326][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.981193][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.988644][ T25] rtc rtc0: __rtc_set_alarm: err=-22 [ 1036.476928][ T5867] usb 10-1: Using ep0 maxpacket: 8 [ 1036.485725][ T5867] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.572948][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3720'. [ 1036.633335][ T5867] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.838184][ T5867] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1037.079373][ T5867] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1037.092153][T19490] veth0_vlan: entered promiscuous mode [ 1037.114930][ T5867] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1037.119059][T19490] veth1_vlan: entered promiscuous mode [ 1037.136130][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.185084][ T5867] usb 10-1: Product: 憜౺ì”ïµáŠ˜ì“ºé„Ÿì«¦åæŸëƒ’ﻧ怬酳ㆃ阊å©Û·ê€±ë¨®Ëƒà´¯î¼‰é‡±ä¯°ë½½èª„ꘆₓꢲæµè…²Ü¬î”´â«ƒè£¢í²ã¿Ÿî“냶鱚틿ѕ쌯⮤ꋅ磻ࠔ캞躚ͦ蚴샊亗瑈趨㾂衬煩ﺉ㜈 [ 1037.287694][ T5867] usb 10-1: Manufacturer: 㠙骪ç…ヲ瀰엪刳⋷鳱⪒䉯뗈疘ҽ屵퓱Ѡæ†é¨Žíœ€è‡´îŸ–誋㖉县㰼™ⵎ넜ⴭ箨ì˜ç’¹îˆæ¶ê¦·æ²—ã–ï„霄薅㷇㟹 [ 1037.318958][T19490] veth0_macvtap: entered promiscuous mode [ 1037.336066][T19490] veth1_macvtap: entered promiscuous mode [ 1037.341472][ T5867] usb 10-1: SerialNumber: 棙셎웠쪣亽熿倛ãŠï¢¡à©¼â³é‚ᖿʯ﫥 [ 1037.349652][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.361713][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.371808][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.382575][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.392548][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.403281][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.408984][T19793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=19793 comm=syz.8.3726 [ 1037.415037][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.438444][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.449002][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.460129][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.470392][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.481058][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.491146][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.501777][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.513653][T19490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.657784][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.708875][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.774458][T19765] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1037.787673][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.806060][T19765] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1037.809561][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.823241][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.051070][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.061811][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.161705][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.292409][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.303249][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.313189][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.357914][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.379748][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.390244][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.411587][T19490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.423048][T19490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.435532][T19490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.447152][T19490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.455884][T19490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.467237][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1038.467247][ T29] audit: type=1400 audit(2000000689.171:3081): avc: denied { map } for pid=19805 comm="syz.8.3727" path="/proc/121/smaps" dev="proc" ino=57602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1038.644247][T19810] Mount JFS Failure: -22 [ 1038.648582][T19810] jfs_mount failed w/return code = -22 [ 1038.936103][T19806] geneve1: entered allmulticast mode [ 1039.091870][ T5867] cdc_ncm 10-1:1.0: bind() failure [ 1039.118594][ T5867] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1039.127689][ T5867] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1039.141874][ T5867] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1039.207418][ T5867] usb 10-1: USB disconnect, device number 5 [ 1039.278450][T19490] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 1039.383849][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.345350][T19829] overlayfs: overlapping lowerdir path [ 1040.364282][T19157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.372378][T19157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.438229][T19829] overlayfs: conflicting options: metacopy=off,verity=require [ 1040.449241][T10449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.478012][T10449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.044629][ T29] audit: type=1400 audit(2000000691.584:3082): avc: denied { write } for pid=19834 comm="syz.9.3734" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1041.315939][ T5865] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1041.842230][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 1042.135739][ T5865] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1042.199062][ T5865] usb 1-1: config 0 has no interface number 0 [ 1042.205436][ T5865] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1042.238523][ T5865] usb 1-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1042.300398][ T5865] usb 1-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 1042.327302][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.357151][ T5865] usb 1-1: Product: syz [ 1042.383405][ T5865] usb 1-1: Manufacturer: syz [ 1042.388059][ T5865] usb 1-1: SerialNumber: syz [ 1042.409329][ T29] audit: type=1400 audit(2000000692.866:3083): avc: denied { write } for pid=19856 comm="syz.9.3737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1042.417612][T19859] FAULT_INJECTION: forcing a failure. [ 1042.417612][T19859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.448511][T19859] CPU: 1 UID: 0 PID: 19859 Comm: syz.8.3730 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1042.459308][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1042.469354][T19859] Call Trace: [ 1042.472622][T19859] [ 1042.475543][T19859] dump_stack_lvl+0x16c/0x1f0 [ 1042.480210][T19859] should_fail_ex+0x497/0x5b0 [ 1042.484890][T19859] _copy_from_user+0x2e/0xd0 [ 1042.489480][T19859] copy_msghdr_from_user+0x99/0x160 [ 1042.494672][T19859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1042.500474][T19859] ___sys_sendmsg+0xff/0x1e0 [ 1042.505051][T19859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.510259][T19859] ? __pfx_lock_release+0x10/0x10 [ 1042.515282][T19859] ? trace_lock_acquire+0x14e/0x1f0 [ 1042.520487][T19859] ? __fget_files+0x206/0x3a0 [ 1042.525161][T19859] __sys_sendmsg+0x16e/0x220 [ 1042.529743][T19859] ? __pfx___sys_sendmsg+0x10/0x10 [ 1042.534859][T19859] do_syscall_64+0xcd/0x250 [ 1042.539360][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.545268][T19859] RIP: 0033:0x7fa142785d29 [ 1042.549690][T19859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.569300][T19859] RSP: 002b:00007fa1434d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.577703][T19859] RAX: ffffffffffffffda RBX: 00007fa142976080 RCX: 00007fa142785d29 [ 1042.585666][T19859] RDX: 0000000020004000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1042.593651][T19859] RBP: 00007fa1434d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.601616][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.609577][T19859] R13: 0000000000000000 R14: 00007fa142976080 R15: 00007ffe2cc12e98 [ 1042.617562][T19859] [ 1042.620609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.628059][ T5865] usb 1-1: config 0 descriptor?? [ 1042.649017][T19845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1042.716026][ T5865] ftdi_sio 1-1:0.39: FTDI USB Serial Device converter detected [ 1042.724313][ T5865] usb 1-1: Detected SIO [ 1042.782313][ T5865] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1042.893365][ T29] audit: type=1400 audit(2000000693.315:3084): avc: denied { bind } for pid=19867 comm="syz.3.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1042.934990][T19845] evm: overlay not supported [ 1043.030571][ T5865] usb 1-1: USB disconnect, device number 19 [ 1043.044824][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1043.075958][ T5865] ftdi_sio 1-1:0.39: device disconnected [ 1043.203827][T17260] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1043.227253][T16295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1043.717759][T16295] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1043.727134][T16295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.768623][T16295] usb 4-1: config 0 descriptor?? [ 1043.778836][T16295] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1043.858231][T17260] usb 10-1: Using ep0 maxpacket: 8 [ 1043.865419][T17260] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1043.879386][T17260] usb 10-1: config 0 has no interface number 0 [ 1043.887710][T17260] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1043.897289][T17260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.909332][T17260] usb 10-1: Product: syz [ 1043.913636][T17260] usb 10-1: Manufacturer: syz [ 1043.918363][T17260] usb 10-1: SerialNumber: syz [ 1043.941083][T17260] usb 10-1: config 0 descriptor?? [ 1043.986000][T19878] tmpfs: Bad value for 'mpol' [ 1044.013735][T19868] tipc: Failed to remove unknown binding: 66,1,1/0:3438137279/3438137281 [ 1044.027191][T19868] tipc: Failed to remove unknown binding: 66,1,1/0:3438137279/3438137281 [ 1044.074567][T16295] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1044.082905][T16295] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71 [ 1044.094117][T16295] usb 4-1: USB disconnect, device number 10 [ 1044.101899][ T5867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1044.124053][ T5865] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1044.180367][T17260] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1044.197319][T17260] usb 10-1: No streaming interface found for terminal 6. [ 1044.207886][T17260] usb 10-1: USB disconnect, device number 6 [ 1044.274489][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1044.304259][ T5867] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1044.325357][ T5865] usb 9-1: Using ep0 maxpacket: 8 [ 1044.332756][ T5867] usb 1-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 1044.338474][ T5865] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1044.351405][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.351435][ T5867] usb 1-1: Product: syz [ 1044.351452][ T5867] usb 1-1: Manufacturer: syz [ 1044.390998][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.391518][ T5867] usb 1-1: SerialNumber: syz [ 1044.399314][ T5865] usb 9-1: Product: syz [ 1044.418204][ T5865] usb 9-1: Manufacturer: syz [ 1044.430323][ T5865] usb 9-1: SerialNumber: syz [ 1044.437443][ T5865] usb 9-1: config 0 descriptor?? [ 1044.445761][ T5865] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1044.652421][ T25] usb 1-1: USB disconnect, device number 20 [ 1044.688040][ T29] audit: type=1400 audit(2000000694.989:3085): avc: denied { read } for pid=19909 comm="syz.4.3745" path="socket:[57302]" dev="sockfs" ino=57302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1044.742390][ T29] audit: type=1400 audit(2000000695.045:3086): avc: denied { write } for pid=19909 comm="syz.4.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.982197][ T29] audit: type=1400 audit(2000000695.270:3087): avc: denied { getopt } for pid=19923 comm="syz.3.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1046.007761][ T5865] gspca_sonixj: reg_w1 err -110 [ 1046.013093][ T5865] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 1046.013130][ T29] audit: type=1326 audit(2000000695.270:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.080360][ T29] audit: type=1326 audit(2000000695.270:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.724532][ T29] audit: type=1326 audit(2000000695.270:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.774675][ T29] audit: type=1326 audit(2000000695.270:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.808532][ T29] audit: type=1326 audit(2000000695.270:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.843187][ T29] audit: type=1326 audit(2000000695.270:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1046.867117][ T29] audit: type=1326 audit(2000000695.289:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19923 comm="syz.3.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x7ffc0000 [ 1047.939393][T19954] tipc: Failed to obtain node identity [ 1047.950846][T19954] tipc: Enabling of bearer rejected, failed to enable media [ 1047.993241][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1048.184088][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.577917][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.588043][ T5867] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1048.597394][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.842033][ T5867] usb 1-1: config 0 descriptor?? [ 1049.033574][ T25] usb 9-1: USB disconnect, device number 3 [ 1049.473693][ T5867] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 1049.481637][ T5867] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1049.776628][T19591] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1049.784360][ T5867] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 1049.796174][ T5867] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 1049.809978][ T5867] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1049.842974][ T5867] usb 1-1: USB disconnect, device number 21 [ 1049.916612][ T5867] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 1049.946307][T19990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1050.184797][T19591] usb 4-1: Using ep0 maxpacket: 16 [ 1050.191984][T19591] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1050.201916][T19591] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1050.211040][T19591] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1050.293865][T19591] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1050.302092][T19591] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1050.311087][T19591] usb 4-1: config 0 has no interface number 0 [ 1050.317312][T19591] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1050.328492][T19591] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1050.334567][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1050.338615][T19591] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1050.363518][T19591] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1050.388111][T19591] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1050.452103][T19591] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1050.461192][T19591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.473908][T19591] usb 4-1: Product: syz [ 1050.478115][T19591] usb 4-1: Manufacturer: syz [ 1050.482727][T19591] usb 4-1: SerialNumber: syz [ 1050.538014][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1050.611183][T19591] usb 4-1: config 0 descriptor?? [ 1050.618637][T19591] usb 4-1: selecting invalid altsetting 2 [ 1050.819488][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1050.997551][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1051.105989][T20006] binder: 20005:20006 ioctl c0306201 20000680 returned -14 [ 1051.230780][ T5872] usb usb5-port1: attempt power cycle [ 1051.356202][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1051.356220][ T29] audit: type=1326 audit(2000000701.228:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.3.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49b9785d29 code=0x0 [ 1051.642667][T20018] kvm: emulating exchange as write [ 1051.682358][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1051.725608][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1051.991658][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1052.037788][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1052.178581][ T5872] usb usb5-port1: unable to enumerate USB device [ 1052.662120][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3765'. [ 1053.288781][T20051] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1053.337956][ T46] usb 4-1: USB disconnect, device number 11 [ 1054.205663][ T46] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1054.365225][ T46] usb 9-1: Invalid ep0 maxpacket: 32 [ 1054.517626][ T46] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 1054.759474][ T29] audit: type=1400 audit(2000000704.409:3140): avc: denied { write } for pid=20069 comm="syz.9.3771" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1054.803275][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1054.825240][ T46] usb 9-1: Invalid ep0 maxpacket: 32 [ 1054.847953][ T46] usb usb9-port1: attempt power cycle [ 1055.369745][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1055.381852][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1055.390744][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1055.397230][ T25] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1055.406110][ T25] usb 4-1: config 0 has no interface number 0 [ 1055.419934][ T25] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=a4.46 [ 1055.429326][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.437701][ T25] usb 4-1: Product: syz [ 1055.441983][ T25] usb 4-1: Manufacturer: syz [ 1055.476804][T20101] ceph: No mds server is up or the cluster is laggy [ 1055.573916][ T25] usb 4-1: SerialNumber: syz [ 1055.584716][ T25] usb 4-1: config 0 descriptor?? [ 1055.592687][ T25] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 1055.607051][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1055.618232][ T25] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 1055.627414][ T25] usb 4-1: media controller created [ 1055.645018][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.654469][ T46] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 1055.681003][ T46] usb 9-1: Invalid ep0 maxpacket: 32 [ 1055.712536][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1055.718444][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1055.829659][ T29] audit: type=1400 audit(2000000705.382:3141): avc: denied { write } for pid=20109 comm="syz.9.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1055.925483][ T25] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 1055.954450][ T29] audit: type=1400 audit(2000000705.382:3142): avc: denied { sqpoll } for pid=20109 comm="syz.9.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1055.983205][T20115] mkiss: ax0: crc mode is auto. [ 1056.001529][ T46] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1056.609867][ T29] audit: type=1400 audit(2000000705.438:3143): avc: denied { getopt } for pid=20109 comm="syz.9.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1056.703374][ T46] usb 9-1: device descriptor read/8, error -71 [ 1056.826089][ T46] usb usb9-port1: unable to enumerate USB device [ 1057.443692][ T25] rc_core: IR keymap rc-avermedia-m135a not found [ 1057.450184][ T25] Registered IR keymap rc-empty [ 1057.476618][ T25] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1057.503262][ T25] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input39 [ 1057.767553][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 1057.960533][ T25] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 1057.963214][ T29] audit: type=1400 audit(2000000707.411:3144): avc: denied { read append } for pid=20130 comm="syz.0.3779" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1057.990419][ T25] usb 4-1: USB disconnect, device number 12 [ 1057.994181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1058.106501][ T29] audit: type=1400 audit(2000000707.411:3145): avc: denied { open } for pid=20130 comm="syz.0.3779" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1058.271268][ T25] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 1058.293298][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1058.314883][T20146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1058.607662][ T29] audit: type=1400 audit(2000000708.010:3146): avc: denied { mount } for pid=20156 comm="syz.9.3782" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1058.863573][ T29] audit: type=1400 audit(2000000708.038:3147): avc: denied { watch } for pid=20156 comm="syz.9.3782" path="/32/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1059.082972][T20166] FAULT_INJECTION: forcing a failure. [ 1059.082972][T20166] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.083953][T20157] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.263433][T20166] CPU: 1 UID: 0 PID: 20166 Comm: syz.4.3785 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1059.274242][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1059.284314][T20166] Call Trace: [ 1059.287599][T20166] [ 1059.290533][T20166] dump_stack_lvl+0x16c/0x1f0 [ 1059.295226][T20166] should_fail_ex+0x497/0x5b0 [ 1059.299919][T20166] ? fs_reclaim_acquire+0xae/0x150 [ 1059.305050][T20166] should_failslab+0xc2/0x120 [ 1059.309826][T20166] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1059.315655][T20166] ? __alloc_skb+0x2b1/0x380 [ 1059.320272][T20166] __alloc_skb+0x2b1/0x380 [ 1059.324712][T20166] ? __pfx___alloc_skb+0x10/0x10 [ 1059.329679][T20166] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1059.335692][T20166] netlink_alloc_large_skb+0x69/0x130 [ 1059.341109][T20166] netlink_sendmsg+0x689/0xd70 [ 1059.345895][T20166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1059.351202][T20166] ____sys_sendmsg+0xaaf/0xc90 [ 1059.355979][T20166] ? copy_msghdr_from_user+0x10b/0x160 [ 1059.361449][T20166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1059.366765][T20166] ___sys_sendmsg+0x135/0x1e0 [ 1059.371459][T20166] ? __pfx____sys_sendmsg+0x10/0x10 [ 1059.376674][T20166] ? __pfx_lock_release+0x10/0x10 [ 1059.381708][T20166] ? trace_lock_acquire+0x14e/0x1f0 [ 1059.386939][T20166] ? __fget_files+0x206/0x3a0 [ 1059.391635][T20166] __sys_sendmsg+0x16e/0x220 [ 1059.396233][T20166] ? __pfx___sys_sendmsg+0x10/0x10 [ 1059.401372][T20166] do_syscall_64+0xcd/0x250 [ 1059.405891][T20166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.411795][T20166] RIP: 0033:0x7fbaf7985d29 [ 1059.416210][T20166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.435833][T20166] RSP: 002b:00007fbaf872b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.444259][T20166] RAX: ffffffffffffffda RBX: 00007fbaf7b75fa0 RCX: 00007fbaf7985d29 [ 1059.452245][T20166] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1059.460224][T20166] RBP: 00007fbaf872b090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.468209][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.476187][T20166] R13: 0000000000000000 R14: 00007fbaf7b75fa0 R15: 00007ffd072fd658 [ 1059.484184][T20166] [ 1060.058766][T20157] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.408373][T20157] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.620345][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1060.790085][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1061.657082][T20157] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.860336][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1061.886516][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.902129][ T25] usb 9-1: Product: syz [ 1061.910137][ T25] usb 9-1: Manufacturer: syz [ 1061.920984][ T25] usb 9-1: SerialNumber: syz [ 1062.009767][ T25] usb 9-1: config 0 descriptor?? [ 1062.086571][ T29] audit: type=1400 audit(2000000711.228:3148): avc: denied { connect } for pid=20185 comm="syz.4.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1062.313224][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1063.666427][T20157] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.686329][T20157] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.702200][T20157] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.722618][T20157] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.852648][ T29] audit: type=1400 audit(2000000712.921:3149): avc: denied { unmount } for pid=18889 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1064.233031][ T29] audit: type=1400 audit(2000000713.276:3150): avc: denied { append } for pid=20208 comm="syz.3.3791" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1064.309984][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1064.325848][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1064.505809][ T29] audit: type=1400 audit(2000000713.529:3151): avc: denied { ioctl } for pid=20218 comm="syz.0.3794" path="socket:[59574]" dev="sockfs" ino=59574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1064.554393][T20223] binder: Unknown parameter 'smackfstransmute' [ 1064.582401][ T29] audit: type=1400 audit(2000000713.585:3152): avc: denied { getopt } for pid=20218 comm="syz.0.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1064.617607][T16295] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1064.777921][T16295] usb 4-1: device descriptor read/64, error -71 [ 1065.077383][T16295] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1065.118163][ T29] audit: type=1400 audit(2000000713.585:3153): avc: denied { mounton } for pid=20218 comm="syz.0.3794" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1065.285017][ T29] audit: type=1400 audit(2000000714.258:3154): avc: denied { setopt } for pid=20229 comm="syz.9.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1065.321092][T16295] usb 4-1: device descriptor read/64, error -71 [ 1065.342583][ T29] audit: type=1400 audit(2000000714.315:3155): avc: denied { write } for pid=20231 comm="syz.4.3796" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1065.402372][ T29] audit: type=1400 audit(2000000714.371:3156): avc: denied { ioctl } for pid=20229 comm="syz.9.3795" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x64a5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1065.451701][T16295] usb usb4-port1: attempt power cycle [ 1065.490251][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1065.502009][ T25] usb 9-1: USB disconnect, device number 8 [ 1065.654172][ T5872] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1065.890154][ T29] audit: type=1400 audit(2000000714.792:3157): avc: denied { read } for pid=20241 comm="syz.0.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1066.307723][ T5872] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1066.330351][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1066.348995][T16295] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1066.359980][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 1066.383948][T16295] usb 4-1: device descriptor read/8, error -71 [ 1066.430456][ T5872] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1066.445989][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.628500][ T5872] usb 10-1: Product: syz [ 1066.633238][ T5872] usb 10-1: Manufacturer: syz [ 1066.638005][ T5872] usb 10-1: SerialNumber: syz [ 1066.651068][ T5872] usb 10-1: config 0 descriptor?? [ 1066.669941][T20237] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1066.948123][ T5872] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input42 [ 1066.973336][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3800'. [ 1067.033260][T16295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1067.193410][T16295] usb 4-1: device descriptor read/8, error -71 [ 1067.988712][T16295] usb usb4-port1: unable to enumerate USB device [ 1068.192441][T20280] No control pipe specified [ 1068.904963][ T46] usb 10-1: USB disconnect, device number 7 [ 1068.905025][ C0] kbtab 10-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1069.378592][T20302] tipc: Started in network mode [ 1069.434796][T20302] tipc: Node identity 1, cluster identity 4711 [ 1069.580299][T20302] tipc: Node number set to 1 [ 1070.685783][ T29] audit: type=1400 audit(2000000718.683:3158): avc: denied { bind } for pid=20307 comm="syz.9.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1071.184285][ T29] audit: type=1326 audit(2000000719.759:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1071.905326][ T29] audit: type=1400 audit(2000000719.918:3160): avc: denied { read } for pid=20316 comm="syz.8.3809" path="socket:[59787]" dev="sockfs" ino=59787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1072.154053][ T29] audit: type=1326 audit(2000000720.395:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.258231][ T29] audit: type=1326 audit(2000000720.610:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.300914][ T29] audit: type=1326 audit(2000000720.610:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.324717][ T29] audit: type=1326 audit(2000000720.610:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.348527][ T29] audit: type=1326 audit(2000000720.610:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.372645][ T29] audit: type=1326 audit(2000000720.610:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.396113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.402506][ T29] audit: type=1326 audit(2000000720.610:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.8.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa142785d29 code=0x7fc00000 [ 1072.647934][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1072.683106][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1072.697342][T20315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.703675][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1072.707280][T20335] lo speed is unknown, defaulting to 1000 [ 1072.753241][T20343] loop6: detected capacity change from 0 to 524287999 [ 1072.780428][T20315] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1072.823515][ C1] blk_print_req_error: 7 callbacks suppressed [ 1072.823566][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.839026][ C1] buffer_io_error: 7 callbacks suppressed [ 1072.839042][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.858247][T20315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1072.870386][T20315] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1072.878447][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.887724][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.888215][T20335] »»»»»» speed is unknown, defaulting to 1000 [ 1072.902145][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.911342][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.926007][T20335] xfrm0 speed is unknown, defaulting to 1000 [ 1072.928859][T20315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1072.933008][T20335] lo speed is unknown, defaulting to 1000 [ 1072.962484][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.971739][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.001519][T20315] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1073.011564][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.020722][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.031003][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.040171][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.052705][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.061926][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.102257][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.111481][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.130127][T20343] ldm_validate_partition_table(): Disk read failed. [ 1073.137293][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.146586][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.168022][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1073.168804][T20315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.177254][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1073.191798][T20315] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1073.203593][T20343] Dev loop6: unable to read RDB block 0 [ 1073.254653][T20343] loop6: unable to read partition table [ 1073.261356][T20343] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1073.288622][T20366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1073.297749][T20368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1073.834893][T20369] lo speed is unknown, defaulting to 1000 [ 1073.913457][T20315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1073.979987][T20315] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1074.824618][T20369] »»»»»» speed is unknown, defaulting to 1000 [ 1074.839959][T20369] xfrm0 speed is unknown, defaulting to 1000 [ 1074.848407][T20369] lo speed is unknown, defaulting to 1000 [ 1076.296467][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1076.296485][ T29] audit: type=1800 audit(2000000724.567:3183): pid=20410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3823" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1076.384819][ T29] audit: type=1400 audit(2000000724.585:3184): avc: denied { read } for pid=20413 comm="syz.9.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.671915][T20425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.197131][ T46] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1077.300883][ T29] audit: type=1400 audit(2000000725.493:3185): avc: denied { name_bind } for pid=20439 comm="syz.0.3831" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1077.383506][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1077.422541][ T46] usb 9-1: config 0 has an invalid interface number: 46 but max is 0 [ 1077.754317][ T5872] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1077.769862][T20440] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1077.792470][T20442] bridge_slave_0: left allmulticast mode [ 1077.798184][T20442] bridge_slave_0: left promiscuous mode [ 1077.803907][T20442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.811733][ T46] usb 9-1: config 0 has no interface number 0 [ 1077.818234][ T46] usb 9-1: config 0 interface 46 has no altsetting 0 [ 1077.839910][ T46] usb 9-1: New USB device found, idVendor=04e8, idProduct=6619, bcdDevice=3b.c2 [ 1077.860263][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.872091][T20442] bridge_slave_1: left allmulticast mode [ 1077.879892][T20442] bridge_slave_1: left promiscuous mode [ 1077.886074][T20442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.893718][ T29] audit: type=1400 audit(2000000726.035:3186): avc: denied { bind } for pid=20430 comm="syz.3.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1077.919228][T20442] bond0: (slave bond_slave_0): Releasing backup interface [ 1077.927608][ T46] usb 9-1: Product: syz [ 1077.936778][ T46] usb 9-1: Manufacturer: syz [ 1077.946491][ T46] usb 9-1: SerialNumber: syz [ 1077.960057][T20442] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.988785][T20442] team0: Port device team_slave_0 removed [ 1078.001500][T20442] team0: Port device team_slave_1 removed [ 1078.007951][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.015473][T20442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.027519][ T46] usb 9-1: config 0 descriptor?? [ 1078.036781][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.044263][T20442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.060027][ T5872] usb 10-1: Using ep0 maxpacket: 8 [ 1078.070618][T20449] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 1078.084068][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1078.104863][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.135147][ T5872] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.201615][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1078.223705][T20449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1078.260966][ T5872] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1078.298415][ T5872] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1078.325565][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.399822][ T5872] usb 10-1: config 0 descriptor?? [ 1078.424335][T20451] bond1: (slave gretap1): making interface the new active one [ 1078.485766][T20438] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1078.508531][T20451] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1078.544644][T20455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1079.628132][ T29] audit: type=1400 audit(2000000727.681:3187): avc: denied { shutdown } for pid=20448 comm="syz.4.3832" laddr=fe80::12 lport=40128 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1079.752113][ T29] audit: type=1400 audit(2000000727.794:3188): avc: denied { remount } for pid=20456 comm="syz.3.3834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1079.858394][T20475] netlink: 'syz.0.3835': attribute type 2 has an invalid length. [ 1079.868277][T20475] tmpfs: Unknown parameter 'mpoxÉUÁÚ½Ï-7}&»ml' [ 1079.874168][ T29] audit: type=1400 audit(2000000727.906:3189): avc: denied { write } for pid=20456 comm="syz.3.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1079.894546][ T29] audit: type=1400 audit(2000000727.906:3190): avc: denied { mounton } for pid=20474 comm="syz.0.3835" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1080.928164][T16876] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1081.011804][ T46] ipaq 9-1:0.46: PocketPC PDA converter detected [ 1081.018511][ T46] usb 9-1: active config #0 != 1 ?? [ 1081.047902][ T46] usb 9-1: USB disconnect, device number 9 [ 1081.851713][T20513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1081.860957][T20513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1082.363614][T16295] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1082.593077][T16295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.639572][T16295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.685522][T16295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.760838][T16295] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1082.807382][T16295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.828101][T16295] usb 4-1: config 0 descriptor?? [ 1083.075112][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1083.263531][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.304773][ T5872] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1083.388175][ T5872] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1083.441434][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.480109][T20535] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1083.505924][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1083.549898][T16295] usbhid 4-1:0.0: can't add hid device: -71 [ 1083.556078][T16295] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1083.600691][T16295] usb 4-1: USB disconnect, device number 17 [ 1083.819516][ T46] usb 10-1: USB disconnect, device number 8 [ 1084.121480][T16295] usb 5-1: USB disconnect, device number 16 [ 1085.733190][T20554] can0: slcan on ttyS3. [ 1085.785599][T20554] can0 (unregistered): slcan off ttyS3. [ 1085.858224][T20557] No control pipe specified [ 1086.470812][T20566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.482256][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1086.527630][T20568] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1086.691274][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1086.843570][T20569] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1087.385525][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1089.910882][T20607] overlay: ./file0 is not a directory [ 1089.970021][ T29] audit: type=1400 audit(2000000737.354:3191): avc: denied { setopt } for pid=20605 comm="syz.0.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.082213][T17260] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1090.722156][ T46] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1090.806220][T17260] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.817435][T17260] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1090.827536][T17260] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.836891][T17260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.862742][T19591] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1090.873660][T20599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1090.885892][ T46] usb 10-1: config 9 has an invalid interface number: 6 but max is 1 [ 1090.886319][T17260] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1090.894204][ T46] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.933744][ T46] usb 10-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1090.969560][ T46] usb 10-1: config 9 has no interface number 0 [ 1090.994434][ T46] usb 10-1: config 9 interface 6 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.023153][T19591] usb 9-1: Using ep0 maxpacket: 16 [ 1091.031523][T19591] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1091.044314][T19591] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.056387][ T46] usb 10-1: config 9 interface 6 has no altsetting 0 [ 1091.074098][T19591] usb 9-1: Product: syz [ 1091.078671][T19591] usb 9-1: Manufacturer: syz [ 1091.085284][ T46] usb 10-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=9f.b4 [ 1091.097845][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.108656][T19591] usb 9-1: SerialNumber: syz [ 1091.117393][ T46] usb 10-1: Product: syz [ 1091.128436][T19591] usb 9-1: config 0 descriptor?? [ 1091.133566][ T46] usb 10-1: Manufacturer: syz [ 1091.136774][T17260] usb 5-1: USB disconnect, device number 17 [ 1091.138248][ T46] usb 10-1: SerialNumber: syz [ 1091.173076][T19591] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1091.418697][ T29] audit: type=1400 audit(2000000738.700:3192): avc: denied { execute } for pid=20596 comm="syz.9.3863" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1091.494215][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1091.521335][T20603] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1091.546301][ T46] usb 10-1: USB disconnect, device number 9 [ 1092.081406][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1092.349814][T17260] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1092.368043][T20642] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3879'. [ 1092.402263][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 1092.835448][ T46] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1092.844220][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1092.854341][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1092.864443][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1092.874850][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1092.888855][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1092.898142][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.924802][T20642] overlayfs: failed to resolve './file0': -2 [ 1092.931549][T19591] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110 [ 1093.012584][T17260] usb 1-1: config 144 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.023188][T17260] usb 1-1: config 144 has 0 interfaces, different from the descriptor's value: 1 [ 1093.043708][T17260] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1093.052973][T17260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.100327][T17260] usb 1-1: Product: syz [ 1093.104528][T17260] usb 1-1: Manufacturer: syz [ 1093.136132][T17260] usb 1-1: SerialNumber: syz [ 1093.251069][ T46] usb 5-1: GET_CAPABILITIES returned 0 [ 1093.256626][ T46] usbtmc 5-1:16.0: can't read capabilities [ 1093.494875][T20629] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1093.514098][T20629] netlink: '+}[@': attribute type 4 has an invalid length. [ 1093.544767][ T46] usb 5-1: USB disconnect, device number 18 [ 1093.677929][T19591] usb 1-1: USB disconnect, device number 22 [ 1094.426582][ T46] usb 9-1: USB disconnect, device number 10 [ 1095.352635][T17260] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1095.416875][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1095.490684][T20673] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1095.577149][T17260] usb 9-1: Using ep0 maxpacket: 8 [ 1095.577209][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 1095.583662][T17260] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1095.596912][ T5867] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1095.605331][ T5867] usb 4-1: config 0 has no interface number 0 [ 1095.611632][T17260] usb 9-1: config 0 has no interface number 0 [ 1095.628393][T17260] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1095.641484][T17260] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.641665][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1095.649582][T17260] usb 9-1: Product: syz [ 1095.663215][T17260] usb 9-1: Manufacturer: syz [ 1095.667928][T17260] usb 9-1: SerialNumber: syz [ 1095.681814][T17260] usb 9-1: config 0 descriptor?? [ 1095.686943][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.695609][ T5867] usb 4-1: Product: syz [ 1095.699957][ T5867] usb 4-1: Manufacturer: syz [ 1095.704623][ T5867] usb 4-1: SerialNumber: syz [ 1095.720261][ T5867] usb 4-1: config 0 descriptor?? [ 1095.769686][ T46] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1095.931220][T17260] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 1095.937660][T17260] usb 9-1: No streaming interface found for terminal 6. [ 1095.959222][ T5867] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1095.967338][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.985968][ T46] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1095.998520][T17260] usb 9-1: USB disconnect, device number 11 [ 1096.007521][ T5867] usb 4-1: No streaming interface found for terminal 6. [ 1096.014742][ T46] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1096.032553][ T46] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 1096.045145][ T5867] usb 4-1: USB disconnect, device number 18 [ 1096.051949][ T46] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1096.065923][ T46] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1096.076043][ T25] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1096.083912][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.110514][T20674] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1096.252582][ T25] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 1096.272173][ T25] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 1096.282412][ T25] usb 1-1: config 0 has no interface number 0 [ 1096.288868][ T25] usb 1-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1096.307870][ T25] usb 1-1: New USB device found, idVendor=1608, idProduct=0212, bcdDevice=78.c8 [ 1096.317305][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.325442][ T25] usb 1-1: Product: syz [ 1096.329770][ T25] usb 1-1: Manufacturer: syz [ 1096.334411][ T25] usb 1-1: SerialNumber: syz [ 1096.344885][ T46] ath6kl: Failed to submit usb control message: -71 [ 1096.352172][ T46] ath6kl: unable to send the bmi data to the device: -71 [ 1096.362206][ T46] ath6kl: Unable to send get target info: -71 [ 1096.363104][ T25] usb 1-1: config 0 descriptor?? [ 1096.378251][ T46] ath6kl: Failed to init ath6kl core: -71 [ 1096.397826][ T46] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1096.434462][ T46] usb 10-1: USB disconnect, device number 10 [ 1096.787716][ T25] io_ti 1-1:0.111: required endpoints missing [ 1096.796739][ T25] usb 1-1: USB disconnect, device number 23 [ 1097.031147][ T5865] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1097.415705][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 1097.529017][ T5865] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1097.537474][ T5865] usb 4-1: config 0 has no interface number 0 [ 1097.559089][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1097.576474][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.681982][ T5865] usb 4-1: Product: syz [ 1097.692795][ T5865] usb 4-1: Manufacturer: syz [ 1097.711796][ T5865] usb 4-1: SerialNumber: syz [ 1097.730220][ T5865] usb 4-1: config 0 descriptor?? [ 1097.962733][ T5865] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1097.978022][ T5865] usb 4-1: No streaming interface found for terminal 6. [ 1098.000696][ T5865] usb 4-1: USB disconnect, device number 19 [ 1098.003925][ T5896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1098.197050][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1098.272261][ T5896] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1098.294007][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1098.307838][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.323470][T20697] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.344903][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1098.579081][ T5865] usb 1-1: USB disconnect, device number 24 [ 1099.287123][ T5872] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1099.436441][ T29] audit: type=1400 audit(2000000746.193:3193): avc: denied { ioctl } for pid=20725 comm="syz.0.3902" path="socket:[61576]" dev="sockfs" ino=61576 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1099.461344][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1099.475551][T20726] netdevsim netdevsim0: Direct firmware load for . [ 1099.475551][T20726] failed with error -2 [ 1099.495283][T20726] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1099.495283][T20726] [ 1099.654455][ T29] audit: type=1400 audit(2000000746.352:3194): avc: denied { setopt } for pid=20727 comm="syz.8.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1099.873998][ T5872] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1100.101001][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1100.238445][ T5872] usb usb5-port1: attempt power cycle [ 1100.470352][T20738] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1100.480087][ T29] audit: type=1400 audit(2000000747.185:3195): avc: denied { mounton } for pid=20736 comm="syz.8.3905" path="/68/bus/bus" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1100.524287][T20740] overlayfs: failed to resolve './file0': -2 [ 1100.603351][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3906'. [ 1100.667676][ T29] audit: type=1400 audit(2000000747.269:3196): avc: denied { setopt } for pid=20733 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1100.688188][ T29] audit: type=1400 audit(2000000747.297:3197): avc: denied { shutdown } for pid=20733 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1100.753304][T20747] lo speed is unknown, defaulting to 1000 [ 1100.772949][ T5872] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 1100.826665][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1100.854035][T20747] »»»»»» speed is unknown, defaulting to 1000 [ 1100.861290][T20747] xfrm0 speed is unknown, defaulting to 1000 [ 1100.868234][T20747] lo speed is unknown, defaulting to 1000 [ 1101.082865][ T5872] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1101.104921][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1101.222192][ T5872] usb usb5-port1: unable to enumerate USB device [ 1101.392977][ T5896] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1101.585600][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1101.607404][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.628135][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.655006][ T5896] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1101.681490][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.757914][ T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1101.774355][ T5896] usb 10-1: config 0 descriptor?? [ 1101.780104][ T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1101.809817][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1101.830274][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.856044][T20760] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1101.871401][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.100519][ T5872] usb 9-1: USB disconnect, device number 12 [ 1102.250458][ T5896] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 1102.269082][ T5896] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1102.355217][ T5896] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 1102.371161][ T5896] hid-steam 0003:28DE:1142.0018: unknown main item tag 0x0 [ 1102.390598][ T5896] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1102.533291][ T5896] usb 10-1: USB disconnect, device number 11 [ 1102.548214][ T5896] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 1102.844842][T20771] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 1104.214883][T20793] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1104.397159][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1104.644788][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 1104.705427][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1104.736874][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1104.769066][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.802839][ T46] usb 5-1: config 0 descriptor?? [ 1104.815660][ T46] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1104.838232][ T46] em28xx 5-1:0.0: Video interface 0 found: [ 1105.028739][T20791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.068065][T20791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.189595][ T46] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1105.283870][ T46] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1105.325629][ T46] em28xx 5-1:0.0: board has no eeprom [ 1105.989455][T20796] syz.9.3922 (20796): drop_caches: 2 [ 1105.996044][T20796] syz.9.3922 (20796): drop_caches: 2 [ 1106.050461][ T46] em28xx 5-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 1106.059146][ T46] em28xx 5-1:0.0: Currently, V4L2 is not supported on this model [ 1106.080527][T19591] em28xx 5-1:0.0: Binding DVB extension [ 1106.087533][T19591] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 1106.095149][T19591] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 1106.103715][T19591] em28xx 5-1:0.0: Registering input extension [ 1106.182236][ T46] usb 5-1: USB disconnect, device number 23 [ 1106.188834][ T46] em28xx 5-1:0.0: Disconnecting em28xx [ 1106.194449][ T46] em28xx 5-1:0.0: Closing input extension [ 1106.240064][ T46] em28xx 5-1:0.0: Freeing device [ 1106.282111][ T29] audit: type=1400 audit(2000000752.610:3198): avc: denied { ioctl } for pid=20802 comm="syz.0.3925" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1106.547433][T20812] FAULT_INJECTION: forcing a failure. [ 1106.547433][T20812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.566200][T20812] CPU: 0 UID: 0 PID: 20812 Comm: syz.0.3928 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1106.576997][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1106.587045][T20812] Call Trace: [ 1106.590322][T20812] [ 1106.593254][T20812] dump_stack_lvl+0x16c/0x1f0 [ 1106.597928][T20812] should_fail_ex+0x497/0x5b0 [ 1106.602619][T20812] _copy_to_user+0x32/0xd0 [ 1106.607027][T20812] simple_read_from_buffer+0xd0/0x160 [ 1106.612391][T20812] proc_fail_nth_read+0x198/0x270 [ 1106.617407][T20812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.622946][T20812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.628482][T20812] vfs_read+0x1df/0xbe0 [ 1106.632630][T20812] ? __fget_files+0x1fc/0x3a0 [ 1106.637298][T20812] ? __pfx___mutex_lock+0x10/0x10 [ 1106.642310][T20812] ? __pfx_vfs_read+0x10/0x10 [ 1106.646972][T20812] ? __fget_files+0x206/0x3a0 [ 1106.651640][T20812] ksys_read+0x12b/0x250 [ 1106.655884][T20812] ? __pfx_ksys_read+0x10/0x10 [ 1106.660634][T20812] do_syscall_64+0xcd/0x250 [ 1106.665130][T20812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.671017][T20812] RIP: 0033:0x7f0cc2b8473c [ 1106.675417][T20812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1106.695027][T20812] RSP: 002b:00007f0cc39f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1106.703424][T20812] RAX: ffffffffffffffda RBX: 00007f0cc2d75fa0 RCX: 00007f0cc2b8473c [ 1106.711382][T20812] RDX: 000000000000000f RSI: 00007f0cc39f50a0 RDI: 0000000000000004 [ 1106.719334][T20812] RBP: 00007f0cc39f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.727286][T20812] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1106.735331][T20812] R13: 0000000000000000 R14: 00007f0cc2d75fa0 R15: 00007fffa5c393a8 [ 1106.743327][T20812] [ 1106.813355][ T5865] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1106.887953][ T5872] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1106.908821][T20818] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 1106.973730][ T5865] usb 10-1: Using ep0 maxpacket: 8 [ 1106.980564][ T5865] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1106.999002][ T5865] usb 10-1: config 0 has no interface number 0 [ 1107.013844][ T5865] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1107.034397][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.047497][ T5865] usb 10-1: Product: syz [ 1107.052024][ T5872] usb 9-1: Using ep0 maxpacket: 32 [ 1107.059106][ T5872] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1107.087709][ T5872] usb 9-1: config 0 has no interface number 0 [ 1107.109091][ T5865] usb 10-1: Manufacturer: syz [ 1107.124360][ T5872] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1107.131316][ T5865] usb 10-1: SerialNumber: syz [ 1107.269631][ T5865] usb 10-1: config 0 descriptor?? [ 1107.276019][ T5872] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1107.285255][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.293339][ T5872] usb 9-1: Product: syz [ 1107.298176][ T5872] usb 9-1: Manufacturer: syz [ 1107.302866][ T5872] usb 9-1: SerialNumber: syz [ 1107.317211][ T5872] usb 9-1: config 0 descriptor?? [ 1108.448854][ T29] audit: type=1400 audit(2000000753.938:3199): avc: denied { mount } for pid=20823 comm="syz.0.3933" name="/" dev="hugetlbfs" ino=60947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1108.480027][ T5865] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1108.562341][ T29] audit: type=1400 audit(2000000754.743:3200): avc: denied { unmount } for pid=18969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1108.607956][ T5865] usb 10-1: No streaming interface found for terminal 6. [ 1108.620856][ T5865] usb 10-1: USB disconnect, device number 12 [ 1108.659151][ T29] audit: type=1400 audit(2000000754.836:3201): avc: denied { append } for pid=20838 comm="syz.0.3935" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1108.755638][ T29] audit: type=1400 audit(2000000754.911:3202): avc: denied { ioctl } for pid=20838 comm="syz.0.3935" path="socket:[61083]" dev="sockfs" ino=61083 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1110.724221][T20809] syz.8.3927 (20809): drop_caches: 1 [ 1110.831690][ T5872] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1110.840265][T16295] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1111.050706][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1111.619622][ T5872] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1111.635664][ T5872] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1111.654385][ T5872] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1111.677531][ T5872] usb 9-1: USB disconnect, device number 13 [ 1111.699410][T16295] usb 10-1: Using ep0 maxpacket: 8 [ 1111.705993][T16295] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1111.715368][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1111.727784][T16295] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.739748][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1111.751290][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1111.849210][T16295] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1111.857849][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1111.909116][T16295] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1112.026557][T20884] No control pipe specified [ 1112.033315][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1112.083455][T17260] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1112.399936][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1113.094107][T20883] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1113.094826][T16295] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.127699][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1113.139208][T16295] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.151729][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1113.163454][T16295] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1113.366366][T17260] usb 1-1: Using ep0 maxpacket: 8 [ 1113.372464][T16295] usb 10-1: string descriptor 0 read error: -22 [ 1113.378964][T16295] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1113.388606][T16295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.403993][T17260] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1113.412255][T17260] usb 1-1: config 0 has no interface number 0 [ 1113.426699][T17260] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1113.435905][T17260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.837754][T17260] usb 1-1: Product: syz [ 1113.842033][T17260] usb 1-1: Manufacturer: syz [ 1113.847036][T17260] usb 1-1: SerialNumber: syz [ 1113.855421][T16295] usb 10-1: can't set config #168, error -71 [ 1113.864241][T17260] usb 1-1: config 0 descriptor?? [ 1113.871665][T16295] usb 10-1: USB disconnect, device number 13 [ 1114.076784][ T29] audit: type=1400 audit(2000000759.906:3203): avc: denied { listen } for pid=20895 comm="syz.3.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1114.112340][T17260] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1114.119180][T17260] usb 1-1: No streaming interface found for terminal 6. [ 1114.132822][T17260] usb 1-1: USB disconnect, device number 25 [ 1116.424294][T20909] overlayfs: missing 'workdir' [ 1116.662345][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1117.268412][ T46] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1117.428697][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 1117.439950][ T46] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1117.448654][ T46] usb 10-1: config 0 has no interface number 0 [ 1117.459890][ T46] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1117.471501][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.479607][ T46] usb 10-1: Product: syz [ 1117.484293][ T46] usb 10-1: Manufacturer: syz [ 1117.493068][ T46] usb 10-1: SerialNumber: syz [ 1117.503610][T19591] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1117.517485][ T46] usb 10-1: config 0 descriptor?? [ 1117.633306][T20927] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1117.673872][T20927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1117.685550][T19591] usb 5-1: Using ep0 maxpacket: 16 [ 1117.697591][T19591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.720151][T19591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.730909][T19591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1117.754854][ T46] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1117.770449][T19591] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1117.779764][ T46] usb 10-1: No streaming interface found for terminal 6. [ 1117.787191][T19591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.798483][ T46] usb 10-1: USB disconnect, device number 14 [ 1117.806683][T19591] usb 5-1: config 0 descriptor?? [ 1117.952761][ T5865] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1118.028675][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.040527][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.049457][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.057999][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.066509][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.075065][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.083520][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.092208][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.101292][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.109965][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.134464][ T5865] usb 9-1: Using ep0 maxpacket: 16 [ 1118.142643][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1118.168106][ T5865] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1118.187070][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.192795][T19591] usbhid 5-1:0.0: can't add hid device: -71 [ 1118.195675][ T5865] usb 9-1: Product: syz [ 1118.205388][ T5865] usb 9-1: Manufacturer: syz [ 1118.210282][ T5865] usb 9-1: SerialNumber: syz [ 1118.216646][ T5865] usb 9-1: config 0 descriptor?? [ 1118.223972][ T5865] hub 9-1:0.0: bad descriptor, ignoring hub [ 1118.226456][T19591] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1118.234621][ T5865] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1118.257711][ T5865] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input45 [ 1118.267538][T19591] usb 5-1: USB disconnect, device number 24 [ 1119.755628][T16295] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1119.984016][ T8] usb 9-1: USB disconnect, device number 14 [ 1119.990959][T16295] usb 4-1: Using ep0 maxpacket: 8 [ 1120.011043][T16295] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1120.021784][T16295] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1120.036012][T16295] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1120.045231][T16295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.053388][T16295] usb 4-1: Product: syz [ 1120.057764][T16295] usb 4-1: Manufacturer: syz [ 1120.062483][T16295] usb 4-1: SerialNumber: syz [ 1120.069030][T16295] usb 4-1: config 0 descriptor?? [ 1120.091398][ T5865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1120.144238][T17260] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1120.162859][ T29] audit: type=1400 audit(2000000765.593:3204): avc: denied { bind } for pid=20956 comm="syz.9.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1120.261803][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 1120.268312][ T5865] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1120.277459][ T5865] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1120.294226][ T5865] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1120.303514][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.311718][T17260] usb 1-1: Using ep0 maxpacket: 32 [ 1120.317589][ T5865] usb 5-1: Product: syz [ 1120.321921][ T5865] usb 5-1: Manufacturer: syz [ 1120.327144][ T5865] usb 5-1: SerialNumber: syz [ 1120.332920][T17260] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1120.351435][ T5865] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1120.363957][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 1120.370708][T17260] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1120.380081][T17260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.388189][T17260] usb 1-1: Product: syz [ 1120.393361][ T29] audit: type=1400 audit(2000000765.818:3205): avc: denied { append } for pid=20949 comm="syz.3.3968" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1120.393607][T17260] usb 1-1: Manufacturer: syz [ 1120.424189][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1120.434058][T17260] usb 1-1: SerialNumber: syz [ 1120.439008][ T5865] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1120.452841][ T5865] usb 5-1: media controller created [ 1120.462688][T17260] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input47 [ 1120.488066][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1120.505670][ T5865] dvb-usb: bulk message failed: -22 (6/0) [ 1120.511646][ T5865] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1120.526608][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 1120.559108][T20961] lo speed is unknown, defaulting to 1000 [ 1120.685399][ T5174] bcm5974 1-1:1.0: could not read from device [ 1120.700815][T20961] »»»»»» speed is unknown, defaulting to 1000 [ 1120.710547][ T5174] bcm5974 1-1:1.0: could not read from device [ 1120.715295][T17260] usb 1-1: USB disconnect, device number 26 [ 1120.723702][ T5865] dvb-usb: schedule remote query interval to 150 msecs. [ 1120.730755][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 1120.739403][T20961] xfrm0 speed is unknown, defaulting to 1000 [ 1120.754764][T20961] lo speed is unknown, defaulting to 1000 [ 1120.764326][ T5865] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1120.785069][ T5865] usb 5-1: USB disconnect, device number 25 [ 1121.007075][ T5865] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1122.317497][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1122.774742][ T25] usb 4-1: USB disconnect, device number 20 [ 1123.617608][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.628926][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.638943][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1123.648216][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.801700][ T46] usb 1-1: config 0 descriptor?? [ 1124.240497][ T46] hid-generic 0003:05AC:4262.0019: unbalanced delimiter at end of report description [ 1124.250364][ T46] hid-generic 0003:05AC:4262.0019: probe with driver hid-generic failed with error -22 [ 1124.595093][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1124.836820][ T46] usb 1-1: USB disconnect, device number 27 [ 1124.944469][T16295] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1125.130121][T16295] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1125.779290][T16295] usb 4-1: config 0 has no interface number 0 [ 1125.810527][T16295] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1125.830444][T16295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.838669][T16295] usb 4-1: Product: syz [ 1125.852901][T16295] usb 4-1: Manufacturer: syz [ 1125.857538][T16295] usb 4-1: SerialNumber: syz [ 1125.864033][T16295] usb 4-1: config 0 descriptor?? [ 1125.871482][T16295] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1125.879356][T16295] dvb-usb: bulk message failed: -22 (4/0) [ 1125.885182][T16295] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1125.896674][T16295] dvb-usb: bulk message failed: -22 (5/0) [ 1125.902583][T16295] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1125.914608][T16295] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1126.908573][T16295] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1126.919142][T16295] usb 4-1: USB disconnect, device number 21 [ 1127.166293][T21018] FAULT_INJECTION: forcing a failure. [ 1127.166293][T21018] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.179211][T21018] CPU: 1 UID: 0 PID: 21018 Comm: syz.0.3987 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1127.189996][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1127.200071][T21018] Call Trace: [ 1127.203353][T21018] [ 1127.206292][T21018] dump_stack_lvl+0x16c/0x1f0 [ 1127.210993][T21018] should_fail_ex+0x497/0x5b0 [ 1127.215696][T21018] ? fs_reclaim_acquire+0xae/0x150 [ 1127.220829][T21018] should_failslab+0xc2/0x120 [ 1127.225530][T21018] __kmalloc_noprof+0xcb/0x510 [ 1127.230323][T21018] lsm_blob_alloc+0x68/0x90 [ 1127.234849][T21018] security_sk_alloc+0x30/0x270 [ 1127.239723][T21018] sk_prot_alloc+0x1c7/0x2a0 [ 1127.244332][T21018] sk_alloc+0x36/0xb90 [ 1127.248406][T21018] bpf_prog_test_run_skb+0x32b/0x2270 [ 1127.253774][T21018] ? lock_acquire+0x2f/0xb0 [ 1127.258295][T21018] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1127.264103][T21018] ? fput+0x67/0x440 [ 1127.267991][T21018] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1127.273795][T21018] __sys_bpf+0xfc6/0x49c0 [ 1127.278124][T21018] ? __pfx_lock_release+0x10/0x10 [ 1127.283140][T21018] ? __pfx___sys_bpf+0x10/0x10 [ 1127.287896][T21018] ? vfs_write+0x306/0x1150 [ 1127.292396][T21018] ? __mutex_unlock_slowpath+0x164/0x690 [ 1127.298032][T21018] ? fput+0x67/0x440 [ 1127.301917][T21018] ? ksys_write+0x1ba/0x250 [ 1127.306428][T21018] ? __pfx_ksys_write+0x10/0x10 [ 1127.311274][T21018] __x64_sys_bpf+0x78/0xc0 [ 1127.315683][T21018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1127.320878][T21018] do_syscall_64+0xcd/0x250 [ 1127.325382][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.331270][T21018] RIP: 0033:0x7f0cc2b85d29 [ 1127.335692][T21018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.355311][T21018] RSP: 002b:00007f0cc39f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1127.363723][T21018] RAX: ffffffffffffffda RBX: 00007f0cc2d75fa0 RCX: 00007f0cc2b85d29 [ 1127.371689][T21018] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 1127.379650][T21018] RBP: 00007f0cc39f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.387610][T21018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.395568][T21018] R13: 0000000000000000 R14: 00007f0cc2d75fa0 R15: 00007fffa5c393a8 [ 1127.403538][T21018] [ 1128.576625][T21034] No source specified [ 1130.300450][T19591] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1130.344899][T21049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1130.642523][T19591] usb 9-1: Using ep0 maxpacket: 32 [ 1130.656106][T19591] usb 9-1: config 0 has an invalid interface number: 244 but max is 0 [ 1130.665740][T19591] usb 9-1: config 0 has no interface number 0 [ 1130.672174][T19591] usb 9-1: config 0 interface 244 has no altsetting 0 [ 1130.689399][T19591] usb 9-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1130.726054][T19591] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.766739][T19591] usb 9-1: Product: syz [ 1130.785419][T19591] usb 9-1: Manufacturer: syz [ 1130.805646][T19591] usb 9-1: SerialNumber: syz [ 1130.840306][T19591] usb 9-1: config 0 descriptor?? [ 1130.901692][T19591] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort found [ 1131.045601][T21060] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1131.237621][T19591] snd_usb_toneport 9-1:0.244: set_interface failed [ 1131.245061][T19591] snd_usb_toneport 9-1:0.244: Line 6 GuitarPort now disconnected [ 1131.253254][T19591] snd_usb_toneport 9-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 1131.264895][T19591] usb 9-1: USB disconnect, device number 15 [ 1131.519094][ T5865] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1131.681344][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1131.732843][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 1131.743623][T19591] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1131.752545][ T5865] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 1131.762751][ T5865] usb 4-1: config 0 has no interface number 0 [ 1131.871832][ T5865] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=13.d5 [ 1131.880913][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.882552][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1131.889050][ T5865] usb 4-1: Product: syz [ 1131.898260][ T5865] usb 4-1: Manufacturer: syz [ 1131.902862][ T5865] usb 4-1: SerialNumber: syz [ 1131.909901][ T25] usb 1-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 1131.919907][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.920308][ T5865] usb 4-1: config 0 descriptor?? [ 1131.928614][T19591] usb 10-1: config 0 has an invalid interface number: 111 but max is 0 [ 1131.942025][T19591] usb 10-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 1131.952953][T19591] usb 10-1: config 0 has no interface number 0 [ 1131.959433][T19591] usb 10-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1131.977997][T19591] usb 10-1: New USB device found, idVendor=1608, idProduct=0212, bcdDevice=78.c8 [ 1131.988498][ T25] usb 1-1: config 0 descriptor?? [ 1131.995782][ T5865] usb 4-1: bad CDC descriptors [ 1132.006414][T19591] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.038857][T19591] usb 10-1: Product: syz [ 1132.043603][T19591] usb 10-1: Manufacturer: syz [ 1132.048327][T19591] usb 10-1: SerialNumber: syz [ 1132.063017][T19591] usb 10-1: config 0 descriptor?? [ 1132.168052][ T46] usb 4-1: USB disconnect, device number 22 [ 1132.285656][T19591] io_ti 10-1:0.111: required endpoints missing [ 1132.295541][T19591] usb 10-1: USB disconnect, device number 15 [ 1132.437347][ T25] thrustmaster 0003:044F:B651.001A: unknown main item tag 0x3 [ 1132.445361][ T25] thrustmaster 0003:044F:B651.001A: unknown global tag 0xd [ 1132.453178][ T25] thrustmaster 0003:044F:B651.001A: item 0 4 1 13 parsing failed [ 1132.463794][ T25] thrustmaster 0003:044F:B651.001A: parse failed [ 1132.470316][ T25] thrustmaster 0003:044F:B651.001A: probe with driver thrustmaster failed with error -22 [ 1132.710229][T21071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.731632][T21071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.821954][ T5865] usb 1-1: USB disconnect, device number 28 [ 1135.261955][ T29] audit: type=1326 audit(2000000779.708:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21126 comm="syz.4.4017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaf7985d29 code=0x0 [ 1135.362090][T21129] syzkaller1: entered promiscuous mode [ 1135.383117][T21129] syzkaller1: entered allmulticast mode [ 1135.611934][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4019'. [ 1135.736915][ T29] audit: type=1400 audit(2000000780.167:3207): avc: denied { map } for pid=21130 comm="syz.3.4019" path="socket:[62848]" dev="sockfs" ino=62848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1135.786776][ T29] audit: type=1400 audit(2000000780.214:3208): avc: denied { getopt } for pid=21130 comm="syz.3.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1135.825957][T21140] FAULT_INJECTION: forcing a failure. [ 1135.825957][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.839537][T21140] CPU: 0 UID: 0 PID: 21140 Comm: syz.0.4018 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1135.850313][T21140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1135.860375][T21140] Call Trace: [ 1135.863654][T21140] [ 1135.866585][T21140] dump_stack_lvl+0x16c/0x1f0 [ 1135.871286][T21140] should_fail_ex+0x497/0x5b0 [ 1135.875981][T21140] should_failslab+0xc2/0x120 [ 1135.880667][T21140] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1135.886055][T21140] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1135.892481][T21140] ? __lock_acquire+0x15a9/0x3c40 [ 1135.897515][T21140] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1135.903780][T21140] idr_get_free+0x528/0xa40 [ 1135.908316][T21140] idr_alloc_u32+0x191/0x2f0 [ 1135.912920][T21140] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1135.918051][T21140] ? lock_acquire.part.0+0x11b/0x380 [ 1135.923358][T21140] idr_alloc_cyclic+0x10c/0x230 [ 1135.928222][T21140] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1135.933586][T21140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1135.938957][T21140] ? lock_acquire+0x2f/0xb0 [ 1135.943448][T21140] ? bpf_link_prime+0x5c/0x4d0 [ 1135.948207][T21140] bpf_link_prime+0x7b/0x4d0 [ 1135.952795][T21140] bpf_raw_tp_link_attach+0x28e/0x5f0 [ 1135.958162][T21140] ? __pfx_lock_release+0x10/0x10 [ 1135.963193][T21140] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1135.969085][T21140] ? lock_acquire+0x2f/0xb0 [ 1135.973575][T21140] ? __fget_files+0x40/0x3a0 [ 1135.978164][T21140] ? fput+0x67/0x440 [ 1135.982049][T21140] ? __bpf_prog_get+0xa0/0x290 [ 1135.986801][T21140] __sys_bpf+0x3a4/0x49c0 [ 1135.991122][T21140] ? __pfx_lock_release+0x10/0x10 [ 1135.996134][T21140] ? __pfx___sys_bpf+0x10/0x10 [ 1136.000891][T21140] ? vfs_write+0x306/0x1150 [ 1136.005390][T21140] ? __mutex_unlock_slowpath+0x164/0x690 [ 1136.011033][T21140] ? fput+0x67/0x440 [ 1136.014929][T21140] ? ksys_write+0x1ba/0x250 [ 1136.019418][T21140] ? __pfx_ksys_write+0x10/0x10 [ 1136.024302][T21140] __x64_sys_bpf+0x78/0xc0 [ 1136.028712][T21140] ? lockdep_hardirqs_on+0x7c/0x110 [ 1136.033903][T21140] do_syscall_64+0xcd/0x250 [ 1136.038406][T21140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.044294][T21140] RIP: 0033:0x7f0cc2b85d29 [ 1136.048695][T21140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.068290][T21140] RSP: 002b:00007f0cc39f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1136.076692][T21140] RAX: ffffffffffffffda RBX: 00007f0cc2d75fa0 RCX: 00007f0cc2b85d29 [ 1136.084650][T21140] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 1136.092609][T21140] RBP: 00007f0cc39f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.100565][T21140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.108520][T21140] R13: 0000000000000000 R14: 00007f0cc2d75fa0 R15: 00007fffa5c393a8 [ 1136.116491][T21140] [ 1136.119530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.286777][T21149] input: syz0 as /devices/virtual/input/input49 [ 1136.349169][ T29] audit: type=1400 audit(2000000780.728:3209): avc: denied { write } for pid=21143 comm="syz.0.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1136.380895][ T29] audit: type=1400 audit(2000000780.756:3210): avc: denied { read } for pid=21143 comm="syz.0.4022" path="socket:[62872]" dev="sockfs" ino=62872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1136.422269][ T29] audit: type=1400 audit(2000000780.793:3211): avc: denied { write } for pid=21147 comm="syz.9.4023" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1136.543708][ T5865] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1136.631527][ T29] audit: type=1400 audit(2000000780.999:3212): avc: denied { lock } for pid=21143 comm="syz.0.4022" path="socket:[62355]" dev="sockfs" ino=62355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1138.443031][ T5865] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.454142][ T5865] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1138.497484][ T5865] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.521801][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.044248][T21146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1139.058467][ T5865] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.417153][ T5896] usb 5-1: USB disconnect, device number 26 [ 1140.245916][ T29] audit: type=1400 audit(2000000784.348:3213): avc: denied { ioctl } for pid=21168 comm="syz.4.4029" path="socket:[62377]" dev="sockfs" ino=62377 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1141.490451][T21188] netlink: 'syz.8.4033': attribute type 1 has an invalid length. [ 1143.858888][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4039'. [ 1144.087268][T21215] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1144.099714][T21215] block nbd0: shutting down sockets [ 1144.340676][ T5821] ================================================================== [ 1144.348765][ T5821] BUG: KASAN: slab-use-after-free in recv_work+0x6b4/0xaa0 [ 1144.355952][ T5821] Write of size 4 at addr ffff8880364f7c78 by task kworker/u9:3/5821 [ 1144.363997][ T5821] [ 1144.366306][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:3 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1144.377140][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1144.387181][ T5821] Workqueue: nbd0-recv recv_work [ 1144.392131][ T5821] Call Trace: [ 1144.395393][ T5821] [ 1144.398315][ T5821] dump_stack_lvl+0x116/0x1f0 [ 1144.402995][ T5821] print_report+0xc3/0x620 [ 1144.407400][ T5821] ? __virt_addr_valid+0x5e/0x590 [ 1144.412416][ T5821] ? __phys_addr+0xc6/0x150 [ 1144.416908][ T5821] kasan_report+0xd9/0x110 [ 1144.421321][ T5821] ? recv_work+0x6b4/0xaa0 [ 1144.425812][ T5821] ? recv_work+0x6b4/0xaa0 [ 1144.430233][ T5821] kasan_check_range+0xef/0x1a0 [ 1144.435102][ T5821] recv_work+0x6b4/0xaa0 [ 1144.439346][ T5821] ? __pfx_recv_work+0x10/0x10 [ 1144.444111][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1144.449755][ T5821] ? trace_lock_acquire+0x14e/0x1f0 [ 1144.454961][ T5821] ? lock_acquire+0x2f/0xb0 [ 1144.459458][ T5821] ? process_one_work+0x921/0x1ba0 [ 1144.464559][ T5821] process_one_work+0x9c5/0x1ba0 [ 1144.469489][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1144.475110][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 1144.480475][ T5821] ? rcu_is_watching+0x12/0xc0 [ 1144.485235][ T5821] ? assign_work+0x1a0/0x250 [ 1144.489813][ T5821] worker_thread+0x6c8/0xf00 [ 1144.494414][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 1144.499529][ T5821] kthread+0x2c1/0x3a0 [ 1144.503599][ T5821] ? _raw_spin_unlock_irq+0x23/0x50 [ 1144.508796][ T5821] ? __pfx_kthread+0x10/0x10 [ 1144.513396][ T5821] ret_from_fork+0x45/0x80 [ 1144.517820][ T5821] ? __pfx_kthread+0x10/0x10 [ 1144.522417][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1144.527195][ T5821] [ 1144.530204][ T5821] [ 1144.532527][ T5821] Allocated by task 19526: [ 1144.536923][ T5821] kasan_save_stack+0x33/0x60 [ 1144.541590][ T5821] kasan_save_track+0x14/0x30 [ 1144.546256][ T5821] __kasan_kmalloc+0xaa/0xb0 [ 1144.550834][ T5821] nbd_alloc_and_init_config+0x97/0x2a0 [ 1144.556381][ T5821] nbd_genl_connect+0x491/0x1c00 [ 1144.561316][ T5821] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1144.566870][ T5821] genl_rcv_msg+0x565/0x800 [ 1144.571364][ T5821] netlink_rcv_skb+0x16b/0x440 [ 1144.576125][ T5821] genl_rcv+0x28/0x40 [ 1144.580117][ T5821] netlink_unicast+0x53c/0x7f0 [ 1144.584886][ T5821] netlink_sendmsg+0x8b8/0xd70 [ 1144.589648][ T5821] ____sys_sendmsg+0xaaf/0xc90 [ 1144.594405][ T5821] ___sys_sendmsg+0x135/0x1e0 [ 1144.599070][ T5821] __sys_sendmsg+0x16e/0x220 [ 1144.603645][ T5821] do_syscall_64+0xcd/0x250 [ 1144.608136][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.614024][ T5821] [ 1144.616329][ T5821] Freed by task 5821: [ 1144.620287][ T5821] kasan_save_stack+0x33/0x60 [ 1144.624953][ T5821] kasan_save_track+0x14/0x30 [ 1144.629617][ T5821] kasan_save_free_info+0x3b/0x60 [ 1144.634646][ T5821] __kasan_slab_free+0x51/0x70 [ 1144.639421][ T5821] kfree+0x14f/0x4b0 [ 1144.643308][ T5821] nbd_config_put+0x3c1/0x750 [ 1144.647972][ T5821] recv_work+0x6a1/0xaa0 [ 1144.652212][ T5821] process_one_work+0x9c5/0x1ba0 [ 1144.657137][ T5821] worker_thread+0x6c8/0xf00 [ 1144.661716][ T5821] kthread+0x2c1/0x3a0 [ 1144.665777][ T5821] ret_from_fork+0x45/0x80 [ 1144.670183][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1144.674949][ T5821] [ 1144.677259][ T5821] The buggy address belongs to the object at ffff8880364f7c00 [ 1144.677259][ T5821] which belongs to the cache kmalloc-256 of size 256 [ 1144.691308][ T5821] The buggy address is located 120 bytes inside of [ 1144.691308][ T5821] freed 256-byte region [ffff8880364f7c00, ffff8880364f7d00) [ 1144.705088][ T5821] [ 1144.707393][ T5821] The buggy address belongs to the physical page: [ 1144.713789][ T5821] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x364f6 [ 1144.722542][ T5821] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1144.731023][ T5821] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1144.738549][ T5821] page_type: f5(slab) [ 1144.742514][ T5821] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 1144.751079][ T5821] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1144.759650][ T5821] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 1144.768318][ T5821] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1144.776989][ T5821] head: 00fff00000000001 ffffea0000d93d81 ffffffffffffffff 0000000000000000 [ 1144.785668][ T5821] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1144.794336][ T5821] page dumped because: kasan: bad access detected [ 1144.800738][ T5821] page_owner tracks the page as allocated [ 1144.806431][ T5821] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5817, tgid 5817 (syz-executor), ts 60043089190, free_ts 60038012308 [ 1144.827783][ T5821] post_alloc_hook+0x2d1/0x350 [ 1144.832540][ T5821] get_page_from_freelist+0xfce/0x2f80 [ 1144.837988][ T5821] __alloc_pages_noprof+0x223/0x25b0 [ 1144.843262][ T5821] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1144.848712][ T5821] new_slab+0x2c9/0x410 [ 1144.852855][ T5821] ___slab_alloc+0xd7d/0x17a0 [ 1144.857516][ T5821] __slab_alloc.constprop.0+0x56/0xb0 [ 1144.862876][ T5821] __kmalloc_noprof+0x2ec/0x510 [ 1144.867711][ T5821] fib_create_info+0x8c1/0x5080 [ 1144.872550][ T5821] fib_table_insert+0x1d7/0x1d70 [ 1144.877469][ T5821] fib_magic+0x4d6/0x5c0 [ 1144.881698][ T5821] fib_add_ifaddr+0x393/0x560 [ 1144.886364][ T5821] fib_netdev_event+0x38a/0x710 [ 1144.891208][ T5821] notifier_call_chain+0xb7/0x410 [ 1144.896221][ T5821] call_netdevice_notifiers_info+0xbe/0x140 [ 1144.902099][ T5821] __dev_notify_flags+0x12d/0x2e0 [ 1144.907112][ T5821] page last free pid 5817 tgid 5817 stack trace: [ 1144.913417][ T5821] free_unref_page+0x661/0x1080 [ 1144.918274][ T5821] __mmdrop+0xd5/0x460 [ 1144.922341][ T5821] finish_task_switch.isra.0+0x7af/0xcc0 [ 1144.927960][ T5821] __schedule+0xe60/0x5ad0 [ 1144.932362][ T5821] schedule+0xe7/0x350 [ 1144.936443][ T5821] schedule_preempt_disabled+0x13/0x30 [ 1144.941887][ T5821] __mutex_lock+0x62b/0xa60 [ 1144.946394][ T5821] rtnl_newlink+0x5d9/0x1d60 [ 1144.950975][ T5821] rtnetlink_rcv_msg+0x95b/0xea0 [ 1144.955901][ T5821] netlink_rcv_skb+0x16b/0x440 [ 1144.960655][ T5821] netlink_unicast+0x53c/0x7f0 [ 1144.965493][ T5821] netlink_sendmsg+0x8b8/0xd70 [ 1144.970249][ T5821] __sys_sendto+0x488/0x4f0 [ 1144.974753][ T5821] __x64_sys_sendto+0xe0/0x1c0 [ 1144.979506][ T5821] do_syscall_64+0xcd/0x250 [ 1144.983999][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.989881][ T5821] [ 1144.992203][ T5821] Memory state around the buggy address: [ 1144.997814][ T5821] ffff8880364f7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1145.005865][ T5821] ffff8880364f7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1145.013909][ T5821] >ffff8880364f7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.021951][ T5821] ^ [ 1145.029906][ T5821] ffff8880364f7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.037954][ T5821] ffff8880364f7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1145.045993][ T5821] ================================================================== [ 1145.057862][ T5821] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1145.065078][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:3 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 1145.075924][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1145.085990][ T5821] Workqueue: nbd0-recv recv_work [ 1145.091112][ T5821] Call Trace: [ 1145.094382][ T5821] [ 1145.097309][ T5821] dump_stack_lvl+0x3d/0x1f0 [ 1145.101905][ T5821] panic+0x71d/0x800 [ 1145.105792][ T5821] ? __pfx_panic+0x10/0x10 [ 1145.110196][ T5821] ? preempt_schedule_thunk+0x1a/0x30 [ 1145.115542][ T5821] ? preempt_schedule_common+0x44/0xc0 [ 1145.120986][ T5821] ? check_panic_on_warn+0x1f/0xb0 [ 1145.126071][ T5821] check_panic_on_warn+0xab/0xb0 [ 1145.130981][ T5821] end_report+0x117/0x180 [ 1145.135302][ T5821] kasan_report+0xe9/0x110 [ 1145.139708][ T5821] ? recv_work+0x6b4/0xaa0 [ 1145.144135][ T5821] ? recv_work+0x6b4/0xaa0 [ 1145.148535][ T5821] kasan_check_range+0xef/0x1a0 [ 1145.153391][ T5821] recv_work+0x6b4/0xaa0 [ 1145.157620][ T5821] ? __pfx_recv_work+0x10/0x10 [ 1145.162364][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1145.167981][ T5821] ? trace_lock_acquire+0x14e/0x1f0 [ 1145.173172][ T5821] ? lock_acquire+0x2f/0xb0 [ 1145.177650][ T5821] ? process_one_work+0x921/0x1ba0 [ 1145.182738][ T5821] process_one_work+0x9c5/0x1ba0 [ 1145.187671][ T5821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1145.193374][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 1145.198731][ T5821] ? rcu_is_watching+0x12/0xc0 [ 1145.203478][ T5821] ? assign_work+0x1a0/0x250 [ 1145.208049][ T5821] worker_thread+0x6c8/0xf00 [ 1145.212628][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 1145.217716][ T5821] kthread+0x2c1/0x3a0 [ 1145.221767][ T5821] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.226946][ T5821] ? __pfx_kthread+0x10/0x10 [ 1145.231519][ T5821] ret_from_fork+0x45/0x80 [ 1145.235911][ T5821] ? __pfx_kthread+0x10/0x10 [ 1145.240479][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1145.245248][ T5821] [ 1145.248374][ T5821] Kernel Offset: disabled [ 1145.252674][ T5821] Rebooting in 86400 seconds..