last executing test programs: 7m40.533427569s ago: executing program 4 (id=254): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$pppoe(0x18, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0'}, 0xb) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0xee01, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 7m39.817970082s ago: executing program 4 (id=256): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) socket(0x2, 0x2, 0x1) 7m37.529514658s ago: executing program 4 (id=260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x1, 0x4) socket$unix(0x1, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) ppoll(&(0x7f0000000180)=[{r2, 0x8080}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r5}, 0x18) r6 = socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffff07, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0xe) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 7m32.790317175s ago: executing program 4 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xe, 0x2, 0x87, 0xffffffff, 0x40}) pivot_root(0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 7m32.671224754s ago: executing program 4 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x80000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0}) r4 = getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0x70, 0x86, 0x180000}, 0x20) 7m30.384613049s ago: executing program 4 (id=278): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYBLOB="fe9bc4b766a440a62e3141242c3bf774820331e88932296ac3e2cd93edf2210b58b6c44bb4193b80b4fc4873c82f2b0e918a53c35f034d01ee74ad29cd0e5d192015b8d70816e3ea330c761171d9be4dbf3cafe5c13409bd51e897e6f397be1b9c0f39fc7b6315aa33ca3252759e8b88076acb4dd4c81287bd8bb72fd44e9410adcdc0f71f186bd6cce44a9de7c7c5143a2528444a7f1e852514d8630dc23ad30274fbac0b13e7dd16e069531331494c073b083feda76cd5292d42864738466f6b91e818c3986f2f44cc2f91d7ea038ddb92278fdaa204c8d1244c5bfa74cff6b0161e3ddf6422ebe1ff740fe9154ea2f11046e57d5b985a474142c581f1681b48d4b4f74e4f3df5d60747b7b3553617cb29e941c39bc3f232748fdbf6f68b1ea6a31295c92d5f6ab1f688099db24d3b0c968e0269832a1398fff60b75b99bdfb19adba181c0dc0d1ad0013479c308608afcc6edf741524eeda180779e7661a3d1c5e56485d770da2e3e40f4c7be6e1cf3ef991bbdd3e6244aabcbff5b4b2179d5e5159d5beea15a2c6154c45fefb79348ac82086cac36bd9a50409c8bd85468d0342c386568a5ce10b5f7ebffa6ad5e53179dc3495f1bb03a106e3808cd1ff38db09f6de30cfbdad619e69bdd91199d83188713cf7c7c79243fa2a119bfc43e246e6a1751d0cfb3c591e6841f1ea391186084f750b775e18d6414c537e043818c71227f9aff66df06f13ae0d8f2264a1700d048997d062886e3d877c85511eaaa2b41dbd08f262af4014da602f5ea61a3bad34331f60ca7669d6fb3f0bb8635bdf591521845e722f83f3375442f9f481e83a14f0d4deec86d5eabbe2594dc07fc4eb32c9137e8807f2fc5adb296ebe3a603ad6f97ae4233bcfcd22ee7e9c9c6d2b73b4e35f8539b20931f942e8659b30428a974a0a8ef8fcfd98a21d3bd09d7a800848a1e4f966aca1162b2754a2513a47f1aee6d6e26f6b6a89bea82bec1496d8c1419275e0a4e7b6d62e3d79356275d59fd7436f693b9668d48bae971a1c76b4310a72c3a52485e6fdd8969dfd4fe644db2b4966f56f5c79ef5f44759f1a605140c900a38948bc2f6b828f7812c4bbd94b10f2707d4900d487881191f6191dbff1894e108ac4af4b674af61cce3ec7cd1ba1b7dd457f74f415d481ad1eb9b77c1f8b2a853e2eea6dbad58c93f5e784603da0eadb1a02e633a05b466ad4ae71dd37bf09f4b42c4d0b5165f145caba831e68f76c7552a1bf50f0abca33db49187b998779df618f32a45056fe03524d65c60baa5d1600cec9b179e944dca650b4de0c92a357db60a5fd10e04e5dc1d93d36fed7bcc719d840b4a890129d7edf7d88ae49fc5dd495535f79c63a9f1dab43907a8d1ed0d8255fa476dbe2ef80c2b0d72f65962d750c01aba51a8aaa105e974ed4b7c5462f8ec989f0b6961bd47a4339085171d3b3e67aabf89f49af4b745bda3d855ef25e8cf9c302fc0f51775bafb5d02951b22e2aaa9f3e4551332bde4a96313e7105d82d18a97588e6f250b085ae6e90cec4d871c8936c57c66be6304fbfcb949691d356f53bba0e5390dc0eaea6882750d1491a6209e1bdea78cf761e7ed1b146da573c9a7a82cdeb5254656d372c16006ee7f1e1c43b60db28e9f574c5afcca6daa9e7f9099f9f62b676ae1cbedb3d3ebb882052bce8de3c3ec13848fee30d777234624690b8f3398c2e31ae2869c7fb3b5f21db3d1f83b9714bb94fa85fa7b4e081106510726844c72b7ad6c7455deca41a9a3e819db9b4588ac1053b6e7960152672099a5dc2565b378aeeaf8786accebcdc3fefb5281b387d1ec244e7ef2864432f50f46a90cb35c3e25d2d1bdffb3f974633cff1406544b3fd213f9d1388bafdb4838f2adcdc7b4fa2828ba0a3f2262a5e0406820c16e43236f550d9b7f7c42424fbb7e2a0cd558646918078cc381fea9f7660be3986666587e7f9b78a97ce2a49eef982034fd081dd2610082fc1c1af0687f1c578dab9811c2278e8e3f345ee5ce5f7a8cd1de9e2a1619440ca51d5099455a3ef2c33589dfb0e5a6fc61848be7e63f3183f3900ed430570adfcf22bae816d97f6aa38f446a150072fd63d4ddd0e72dbe8e9b794ba6434d93fc987266fb3b4b577706b97048140e271a273fd72d44bb87ad2866ab93f9f01de11c14b85cc7f1a8a9c10183464c1ed87445dc6a6fd80d87fc7b58a17faa7608ed44d0cf9a68edacaa53fd8d11772c7aa3aa0d364e6eaaa9bd42ff60764c450a523410dc6ff5038a9a576ecd9d6e1674375ea21b4f3e804bd1827fb5e85600da24b9bbbaaaed0e4473c5018d9d220cf15d7be96ace462895ccd9afdb2054db823193cc5e8d4d91d3ee3367bbedc73674e8925a9eeb7bffd7abc7b2b6a06ca9109a7a8dbc7b6f0425f6f28f41a22613d38d76c253c0ec00fb232cd0f674c919671b0a75153107845b0f2a808770bc1e731e4d75958490be055e1fc9d59a3d87c2d2045154fced2be3cb402918a3f29e4a5d6a4210e68cd5454ea26d23521402c1fa05e0c1dc5912486a7015792f23e821f459405adcc6d281db4184e59d29d3ba5827face8723aa05c3948f1435793071843c4ce1d6eb701330f6c5b53b7dec82596eebb6d93787864502cbab71ca032da1548677fd099be0afff0ae77c88668ede03496fdf4d3ad2cd840a50a10ca57fcdabfeeeb0b934b85027223fb26ff4c9f010755ecd0a453c9c2024eeae344eadbabd43a7a7c5403ea1b5e761e3168240b40bf5007f2ce32099190bd626f579459017bdd00c36ee2f31cc4bf4aabb2e9f970e756c4a26f8e49389922875f465911198ec1ab3219fa5900d339e5ad1bca0703b6766fe03ad169309b7da98c2cc1601076237235c67b7b5aade542fbd36aaef7bbbdc5540cac808832c4dd437bbff227f90c7a81c8a963bfb7fe9aa872dc7f016132870b5453c256b85eefa9e9bd11e2d04cbb6b5e238a13cdf3557820c2c09f6a3481c2143e71aea670eca49a506aa984518fa94be35aeacad5fa562e7e449b50ce33eeeb144a2b18251349a60dbd4bb6db948edd4364d252589fa181592c39e7b98569d66de0b4eb533b6dfea9773fd47c4cc78b4027f9c819b3bf43fa0e1cb99b29daa50da960f8385d0f98ab99f5627443eff77b5a318cff32d26d09efe4bd267be1b7a62f4335ae916b7ac8b1b807843b272bcc4bd4365b37d51769724ddf67a6845f58ed8f7c821669145a533cad953e2fedb58dd45c0574741d267908fc4dda728815eaa44eb817a4290c421b2ce7bc8553cedf4d87aa017ee9fd6099895c2cf2d789ac0bc83efa6c9fa4b1466ac98b92fbba35bee41202c82606ed5708101b8e198ad79cb558328f5cd6a974c0689d5f2669189880db923cd0a9f0c8a5a22710ddc29a6c426dd828e83dc3d8a10e8a910708d862696207a0754b802ce89f5dcf2f398cadc395b032b8999cf107f5184c7b197d5d104f0b1a36144055eb320fc54fefa044a48f3653e21e0f5684296bc388bffdaa0f7ff0d378869bde9c6069179d14439ae6971ffd2a59e4afc398221f2d3cb8916720c590a809c9c91de464ef7af59e5e13214e7cbfe315468859e40a8839644bf59ac37e8d1fab128ca597fc61e7572e91ce64dc087637e4d5fd0139557b32bf539963ca8e227d2961f18a2c13ad0778601ef947c7fb06ff6b249e46fd208a8f45adec0636a6b867cccab9c66454ead13c9d9e2f898627538a8a55d20994e58571f85405fa0bce553285bca9fba6f15b6d5e2f0decc2d1e9c52033efca3182525aed065af5574f251b2809eee4d95f90b1491bf16d972e5079a3fabbe2a94d5aa1291dd1058938f72599c73c7aecb813ce0ce3956aa0cdd4b77aeb4bb89ada6b2aaed564d226b96014b81856d7d2db15df22b996e125c242ba20ef366b01f6a5f38648a1465693cc594902087d1df1a3e4a29ec43a2f49ae355abbf02fa2ef6667d6d08266be0fcee1a2349908219a6c74529a6c2a17150d86c0959f77bc18d42dc490c1d5f85ae50b41dec8ef84ce685de4f4ee933fda74bdad18b5f85f713dc397e410b13a48e66701a8ed9fdaa007015c06f06089d3560cfaea978bf23946d6b101bb55f28f139154fcdde7f439243d999c8d023c16fb3cef1b1068dae488f57ecd08fb5d5c5b45f2130b79764d5a814549a60fa6ada9fe96cb05a92a9843a2b40131f84aee267085221446ca35f2a2d3b86aa7aefdf95fb2e8fd95938548ff6039b43f6b696376de9bb91e42f72cc8f2c7bd92960f5a6eaf492f6fb0354477d6c33ed27142bad217e00e6fe7bfca4ba3b8f14ad3479bc161957d21fa6b11e2efccd4e88a8534e0352ffbefcfe793e59e2ab2a0761483f84d65bd4905cba9ec653602f2b5e5a16dffe822b3cb570f7b4dc1cb2bba982e8d3d60fc05a81635992375ace86cf8e869228c93bb96ad945f021493f3c680c1304b1c31170416a591d4da94100b9c500ba4f75c7ed320db054b9d1a218dd76500a29e52592aa39cbda1541aaf7f6588ecc71b2ebd70435497fec69504024cb78fd439003bf3f582f86d5b704cb81e7a74a85d2f6a840bd4d140e38ac82f9e78a0c6673ba92c4fb7fb06d9a26675f4307f1c6cd49496eee2971e6e267711553e83bace65faa0954209cf4dcd14e1bb2a82788e3df8cf40f68d83c830c600d1cc5edcc3d2b7ad3250e35984be7a73ca7d25989e0059da0e391ed6752775a65f3cafdb80d886ba2b1242cb02fce969d6294c00a44d90241b9acc960c1738b508afc24d265324aa614a85b3ef0811bf86e1778f35ee19f74bfae827e7bfdc320b2e431512bc369afd156b3f948b520385627364d41452b1709b083c30f4bb25192320a1346f0897b74e9fa60d63028c72d2b6ef6b8dd717830181b28ff74a89f42336058d137e2eae16ec8c0f77df5ce8a3c938b1d8dadbfaf6ef0f6dcc0a101e1b756f3fe911a3cad285e2fc398d57433fcdad944f2fe2408d418793ebde8d61311f8a2cc5af891fe45164276983d37c9b2096b637dc37fb269743654d73c28bb9b14d7e27688102f3ba9ec5c07bb427425180f10a9cedafe534abb43c6d786d2a201e863393ef12fd99589ab482df09d61b4b94af2b7dd6f4051a889582e8c444c89520040dc56893719fc4ee988b7fdab7a25b864ad464acfe3eb529eb695b48530d0c57d885193eeaa4fcd04a5166fb636310f27c2e3ed2b385e244f176977dafe9222d2a2e6b5d003e4f23ba90c6871308c3e82a5f97228c5161392daaaaf01017eb6125fd5d1c34f76f785443626d45b29938aa2bc30d28f120033e501e18fed569d8dcf1819cdbb9937dd7a66019b06cbbbebc327ed01e12fd2db754bc53e26bfffd69d37f0e3ea5a2335b44165e083aa8da45f2ddb7e328093b6bc08afc6f59a6e23bc1baf393e2c3b1f5823d00521e7cd8bb6455e4349e299df00a2cd818b8bc9a26dca5aafc1e4e2aa261a8dc368ce32ada82d1ba1c078f11c5e80d9d80e9a18f4fb0cfe0b352d79d874e0346bd56c318c35ebbf62749c08aef6a47deb77b8503338d35580682fd2f9db5d670e0f11d6631d6be28155fcc7276999e16c6f43b97bca73071adb682dbaed79fd38e5436b24135c937e30c5577e8b34088d4496bf8829baa1ce67b6982e8b49c228f45f5f56871f835442cb73bba6f71a582686edfd3a7412e3cbd8c8216c3b2918dc2e9cc9a5d8c99d91cbe4ea2e0c990baf4dbc45663810e762b860faa2a3773334df9d704fcd4f0c0be9cfcbd5f674c53854e2708e409ba33e29fd8883477a9c93ac7b7eaedf3689df83b2fcfa6dcf748a85b9b9554ec340cff3f9badce8a71b0d2da40fcf19d215ad508935aeafe1289f4b42f028df8ae31627aaff013eaf5aa8cc8284068e", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES32=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="e38a67d63299f0a0f735fc39453967f818000000000000000000e0f2b50b3c0eb56650ec45e7f0ba1972c56759a71bffb75989cd4b35560ce619af30f3d989571924a5b277edcc3702ee297db295d4f723e7b59f7daa5ed9d1359e3010439900fca7704be8b0a466beec5421c429cfea68e6e8841e"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064d1, &(0x7f0000000280)={0x0, 0x0, 0x0}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12019073ab"], 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r10]) ioctl$KVM_GET_VCPU_EVENTS(r11, 0xc048aeca, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 7m29.993271433s ago: executing program 32 (id=278): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES32=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="e38a67d63299f0a0f735fc39453967f818000000000000000000e0f2b50b3c0eb56650ec45e7f0ba1972c56759a71bffb75989cd4b35560ce619af30f3d989571924a5b277edcc3702ee297db295d4f723e7b59f7daa5ed9d1359e3010439900fca7704be8b0a466beec5421c429cfea68e6e8841e"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064d1, &(0x7f0000000280)={0x0, 0x0, 0x0}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12019073ab"], 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r10]) ioctl$KVM_GET_VCPU_EVENTS(r11, 0xc048aeca, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4m17.380527826s ago: executing program 1 (id=820): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="d01100002300020029bd7000fedbdf250a000000d4c59386a182cc631bd68189025b93390f84628b7866a30dca704a9dfcef88a4a74e753e4e47b8e83333c02d688a31a927f464bf319da8b9a642cae757b5019224335139b7d41469693f2c2592db0d2183e03021dceddb8607736ec9f18e21d93f1110334e2a6698d63c3c5d85a9c870b790c8634f141f5065d1b88eebf541ceb9fd77f7699ae0cda46d66034ef33a6bcbd028ebdc70e98220e2f34020c371606d931788bdd7e868054859ad87bef66111e6800cac68d2c177ab9d2a84ed12daaa91e4156918178e152453cc2c45eed434dc9117c2d1e7d33df99ae9999fb476004d40619762f3c5b9d87d8b4a97f1a391a4d1193e9555ad06fb94a755f1ac27b926ba5223a2f277779ce00ddb0ac12ec5478701e0e75b9b6bf525230fa1705ef4ed9a6205b61c7b7c869bfa0ffc352495b1224766e973f6e8e18a5e3d1f9baa973b25b84767828c4753df5aeba7de5b65bc31ef59cb1e7833228fdf924f1d667363a79458a03adeafcc1beaa62c2ae41bafb67ad81ddfda9ed7401d2bc3cd0c15deb2ab59e6a53da4f137c62c86b6add7f69a861768780fefc650c793431651be604bf86f4d745f0d173aa49201c0e2942d89fa1bb93bcee7806790f0ac453d45b5bb52ef578a811da73f23e5762056278172d692cbaaf4e9cc367112e6ead4b1bf58deabcabc46bd3a5a289c172e263c35bcddbe39380054dde4378fd8bf2968fd36ef5f96014c83b887b258fe7e85e8e953bb1762c58e94a1e6aef47e03e7f698ebe9a24eb09852169e00ae766ae86b66c0c0abc549f8824a00f2b1c9bde105ad484b078db3880c81e054701dc246b36eb24fffa4c5a6513c5fe02a3924b320f943d271252f394eb4ac913a26882cebd6ef20fbfbae044ffa6918da2fd1d23290ed05c19005130e5e05a9a85d6df5007a9ee349029f4b806ed98f7c2e18dae12930515a2cd2e24e1cece2a3a1649932ee8128e54bd47bd27be12b33b4dbfff3a460d7258152110b24ddec3ab81cfdce0e180b670ea7f052d6352b192645da549e78dc7073994e6150d085644c52b5a4daab354e944ddd28b07b7aec0d789cba54bd7ab4a7a23d48ad8b6bf58639d110e80ae358325779f821e30c9f6ad92817ccfebcd32ff1dbb2e76d12f4e35238c487afaebb8a21ee91ed00379f62ed6b35abc758239f8a03d0ffd64a89a36d4f85d7c786e05d3bb984a12935451d447b6d6dc0d6f1f21c3d42314a3bebeb68eafaa8fb23b9cdc19a2f74d7bb32ab857c1a8538f4d717762b8beaf579140f54668355d854ee3587eef498bd42c9430805312633e64bcc8ee69e5fc9c4365b897e971219891d78a40604ddfb7e31c008d7fdda83dac9202a8348ee6687575d98f6afaa1e38f5045cf1e94c4109b008c5323869ba72f10c4c4ce18a9d62b2cfd41cd1ef259045e9828815b11763c87a9e1016f0d21a82c2f35af462550d7cadef0cca434ed834f07689beb03e7b183ac47f86cc3bf93be3b374203844c883c0c100a98aa291887e24daa7e9587ff8deb704f71d665a7877d0de29eb159c4fce892aa0f28986925ba0dee1b436662249cdd54dbcc7261de2aabf720c548134c3a32d65c028d838b680b0de28e03fb9eed35e82e6929d726a6513b0cd7485329d93f0e3db46e4b92110f8758cdda642d2f15a14cca1e0e1a2be9370d4ec2e5f8b8abb73e475328b1172e023fe40f3fe5b0eaa77dae58baf4cb2f2bab06e36a5baedf3adecfa7ed57725797eb20741b72830ca879dafe0c9fb186b50eef5e9661dfec5ac7a6403759158ccbbba191990cbaab545014180bc18cbd1a50194ba052c14d1ff9818b866573ec6d6d58e88c257ade3b12a1b735a870181ae9c9d79333538928d9fd7a208e3d3064a56645eefc89b159f2266130421cc862b776ebdcc4a945cdea252b4efc554f88fa46501aac76b437e5d6d3e2e3499e88c6c202ced5c1addbe579f1f59745ba3e05619f4ec0decbaf9647dfc082a9233984c3bd4220c2698e632944d279459f700b00514e82009c89cab3469844424e0f84cd76649b0217631db53823d1c5c4335990a324ca407f72834ba6625a74eb4126d392cdf6645095372fd9f5870e7e266926ca1e12a370878e6e0d1964ca2b164732b1c510c8fb41f5ff19e1650e90c040d31bf2d6f222fece060b0cf0377f72c847f50741a4941c85e8b5ef8601ecfaea080c67b0d0411ab8372e1d890db87b53c5de6e65a4d5c8ed0631078b678ebcdf0a54d81f86713134712c8ae552fb591e7b8172ec3e46c05c4b2abfc87aae23842db37386b5baa4cb1bdd577e320495be5b2e1ae99d43586cc36a12ea4be5799cbe73867b1dba0a9fa51da030de97cdc241f9cb4ad0e96449cf5067a2c04391cf1cc33b3da101eb54c8c0cc5f87382e2154d54e2714aa9bb2532c6c5242305952fb3f9af17866e33f8027064e8dbce4f891b3ff6efd16cb7510df21da5572dddf2acf31ab3c5c8efe5106f0abe8497b0da179f3f741b1be3bfcb9af2a745183d411a6eee4266a480c03fd340d4e35ae1f03c904ab72a96146212ebc141e39bf56d787dab82c5c11caeea3babab53d8801dd625806800b2fda6024858fe095939bc7d140f1724d4f93db02c0c9022c8d9c3d90c6b7fbe148e784a875a0722ea6faa0148e2d8792a6e46446fc3c8584fe4ccfce0644d3d5a426469232db6aaf61eea6e74395b7d8560a140902830256cf436441a6e9f436940819c5abed71434d241830e6550c3adb8abb0fa2847b22fb18bae997e4736efc008017cd21af103264817f71c4db4c807286461fb5f0daf71b65ba055caf444c6d2185ce5c08cbb24697d074ce2aacbd0354d151dafd8ef7918c7cfff414cabfa8433380463b58448b5efffbf483db7c617294fde17883e6414a8641e0fb9977fd3427def9c1718f4ec23883552ae52cacec9389210f6f5082f9958e4f18c1834194e42ab928dba6aecbfb750b8717999de789894fbaf6ecd65d8cf219fcb4434eadcc67cf69d26d60a82077b8dafabf4ee281a8bd2fe4e6feffb75632c1a4289f9a53dd0e29707f0649277ee695ee8ddb54642b3083d5f337bd055ce86b80b55c3b2b847a01bf25c9984c513d6b357b1524a4bafed8ca51c8a58b1d24abcc8726b57ac82d22aea728cc2e704d9f282a17ede795ff2644de8d92ac691f0833b953ec99205b9b6a67b59eec351316b9e3f17ad1b69ce3d68e0430532b55b78ef67c63cc74221e9f5e0454c7aa9106001f88790f93077e6989a950ad17109f1f8ddf9deef74021c1d6e180e577ba47dec8f8244a766cb6b67a20f2b197707bf66a3d7c1e6dde93dd4e8b522b40baaba7cfe44895800302a3d95828cfe2c6bd3543965786a40da13ecafe7d3c71187434b0574bd1c9b60507f17129bcdbfa524c30d07d9ea5c6e6df3bbe76da6f829ee36f0733550e923ba1824c68a13e0ee1b5c8edffd9f40bd61771cb090df6cf35bb14906f0be496969f5b536a6f045d2ea41cffcd9a452d1d8fc4f1dd33b8a4b742b0fb7da1b75da220eb76e6d2734413434e70aa10b2f09e98237564d63220e76e3ddd5cef2c22b26abddbf745c62959bab20db716bf27e020fa963526a827809319b17c1640ff5519b818fdfcbc1dfff210af9036314217a0de0b28d261f25d2f920415ad94e81b28ed4cab864226fe944bfa8de2968f2878fd01f1778fc22d2909cf1edde96b6d9b7edaf8522f65855b500327c8dbcb6b472f384824b4669239a6c62b55782c8197801584bf2d6ca1ec31f48f1adb8b279446b3a9bd11f6ef8ee91d6406bfa52647623553f5198854122503eb6e0e377de2405e37edbcb5168b53b0678929aef2b2edcf57fb17e3737909c25cd6cb4e68f4000383e217ef47ddf2ff8166476511f47eb4b923768a48dfe25b4f5abfd0de1127349e65b90922a12ea2d4d55136c691cfe07ac1ceada19cba68f8e1693de1e82446285873315ed4cfe6a2721597f231f9a021525b43f417b9cf2c4433739dfc4284376e4a5b362a19fe8726356786e63e60a781e17a2616737ead45f9305272de7c28d0a958d0e285b6cc348f7a55b68d3d552ccd475123956d8b92f0080acb9fd39292e32565a4e3c912bad05a24e4f08fd56f355386200934b52295a9ee687900fafc69654b6ae4563ef587923191b54975413d8ded49cc652bd1d5538264c2c46094bfb53014066da97b7100eb573a791e1aa469fa6a21ab371b86daddcdb16afbc9139c2823c045a4168cd0465a6539c05fdc7a2b78ae708e272d3e445db2f58f18b6056db7e725a05dfcfb72506d9fe5dc74aacefb9f1e7cc8e1275e385cd8fe71810468c62d2964ed880fcd3d4b9ea52ca591e56bc48d70f7af2317b733c6d3d9f70296a5033770d391e59479732956baa25d9e84aab40f3a16d3ffaa6b9346e9a2c8d863e3d06dc978bb9b005ec5b1fefa030382e04cdd8b6c6fab405cb2640d545dda6ad51183dc824511b2d49dc05eb0e3277644740f53fce7faf2f019524761928318342ee24a0aa0c2dba514973d23680987656238c574a00b3e93b6b105035aa6f718db33154d42ef013fcb169ffa351080172e368536ec580a8f729dd2714693a1304d00bf4818626dd3361a1935c5785a285f608fa1a4649d1e1ee6d246bc09149612774ddc5385a68306eaa8a10a1782bbc293ae856addc2bea58d92918b3612ac06a7a677d3ea4bf7b4c41664f47d728879f0302be0f3dd30cf70cd0bed7fd85b55e3c85cb127967becfa4a643fe288f0529220b46006cbbe119f1fb3d50ebd278f995070ed65bf9ad6651597546592ccecc1d6f75a93cf46771e352048d7c36992cef3235e91a4e07e04bf5148759439f155b740104154371bfc0aa9e71d3164dbaa44bb73de2963a7ab33b197a90696e174eb7a5d239157dde53095f44a9f4e21a6b84fda56887bf8d38e4c647e4c64a47e331d480e8ed4d25e09b55fe9f45939d906df6bc1589a54e1c325f776ace5e56f96592670db7ede32838e81306ca05744e811d33619d6935014503405c579c1f45ca16ec8586ae39baa6dd11f2df0553e04bf70b2083bccb0320c9bf557cde3123e7155a19ba6f38de7a28d284db83c907d10724b6906f11f5d4727661e58e97d1106910eea8c0b05b04fc1e7c9bea0a08f2c26c0646b93ee03bf25c2889957e619f01a82bc31ca49d6c497ef5dfb93b3d715b4ac40ea8a6e164b15d56bc447fbc1f7fd88cbbad4e79ce499b48d8dc6ae68487bb7f57415c118ab2e39ccaa815e0c99fb9cd704aaed97055d726709ccef3399773aec2bbd1327fb1aa34adff627ec16cf435de870f0882efad32ca5310efcecc62e78588dd5feda5ec161ec9c4365a91faadbc82f7a472c0215e0060b55eb881895dee92cc9982d11d9c097a8636f072b1ea0bcd7319f90600813817395ef8e61354c36ea74e1177b318ad99f3178a03d25a4cea25a46d3b384d1c10cb3ad2ae7409d28bc3211751f6977edd36609403c0c30d03759648c4791e176b3b6ba6754a39c425f35e9f9f97f09e9368f9ef0957c94834ac05e620b1d875cafccda8762930cac71f63ada91d8aedec8afa146fe1ff234b2d72f4dd191b2660ebc3bb470fddb6deb895793b057d62cad7a836705a3379ed486be8e6ac91021c028a2622cc879a8dba2483ad4a3e9754efd281b6ce0cdab1ee061c9900b215f9f577051bb0934a39fc110c98321ff18afdaf60a2e3b0a22ad3949dd03c2691d205ddb1eafb68c40a3a9c76acd59e3d546914a362756b14000c00fc000000000000000000000000000000f44da618b38e5c972ba7f253db9d0b26015967cacc538ef4d130b14650b80b7af225304449b34dd9797a7e210ce15579ef60cd80233aa1f15b5ce252ce8b82cd4b2858d211187d8854508da570ea69c02353bca1b331b8448536fb6b1bc16000da2010534524a02d52acf9d1982787633a8c9ce2c0fd7176546f96f45c9783e285d9cc8165e7e238e3f9e7bed07b018081bebb43057fd5404e14780095c55d440e3526817da18bcf4d90a43f2a276e01a229f8d391612dcb7bdcb4819352b879f0bcf795b514f7dda76b4199b3ca5ba8e10bfb5c7182361c223af1ff3b5e47806d07ce7d6bb86bb373e3abf14dd2463b0b48a3ac17103827498d967bea1f06dc8dc020b9730a168341f781374814bea0b708825bbf7fb12fcfb3c943f73d20222b0027e589a18db3a8eac2792dd9f385e6a30134d636680d4bba8eb27216f8da53b713ad53dc672a566cc792824f833f923009ff91dd18be34f482621dd9d0edb0b93d348a9ed220211089fc984df731db8e17d315372537bdf3b0787efbb869d2435501323962730b8aa55cfc019d4507ed0b5d0400f1800500380000000000080015000f000000"], 0x11d0}, 0x1, 0x0, 0x0, 0xc084}, 0x24000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)={0x7fffffff}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m14.518910124s ago: executing program 1 (id=832): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 4m10.975963848s ago: executing program 1 (id=842): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000076c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4m5.538663084s ago: executing program 1 (id=854): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f0002000000000000070000", @ANYRES32=r2], 0x24}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x16, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0xf7, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}}}, 0x0) r3 = gettid() prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) r7 = dup2(r4, r5) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01"], 0x0) fcntl$setown(r4, 0x8, r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) tkill(r3, 0x13) 4m0.437741486s ago: executing program 1 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000140)={0xffff, 0x18, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000440)=""/133) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m58.957346027s ago: executing program 1 (id=868): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001d7"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f5bb71778efe00b35666e690"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f00000000c0), 0x64) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m43.431834965s ago: executing program 33 (id=868): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001d7"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f5bb71778efe00b35666e690"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f00000000c0), 0x64) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m34.724860327s ago: executing program 2 (id=1116): syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r0, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730a834d84b5a45c4", 0xf8, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) 2m32.981091585s ago: executing program 2 (id=1122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {0x0, 0x410c}, {0x14, 0x14, {0x8219, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000001c0)=""/94, 0x5e, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 2m30.969302129s ago: executing program 2 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffff07, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0xe) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x1, 0x5, @mcast2}, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}, 0x5c) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x98) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {0x0, 0x4}, {0xfff2, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x40800) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m29.840004304s ago: executing program 2 (id=1131): socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x80010042, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0xa8e41, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x3181, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') getdents(r7, &(0x7f0000000000)=""/42, 0x2a) getdents64(r7, &(0x7f0000000080)=""/147, 0x93) finit_module(r4, 0x0, 0x2) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') sendmmsg$inet(r0, &(0x7f00000057c0)=[{{&(0x7f0000001040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000047c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000ba6c3393c036078bb4d7a34570a597ca51412ee7cdf79ac8daffba8b9199dd1277d7098c36c9834da5334077f438c1b0ab66c583466748fa903fc637938a9c78f1d112f4c25e1014934740ef1a2eda520e0da13a083b0aef99e188413b5ef97cc30c590a8d935d7523f318a90e73f7cb9dffb28ee3671e0c2fd4a801f27fd059b9d486e2f91fbb2fd24a905663fe8fe7b8f2e54994096d602980c7510338aa13d314856e90bff36b2ebdd07bef6b19417bd740dd14abe98f89624b1800000000000000000000000000f68a62d37a11ae65c1dc15f650be62dbb5d71afa268a99c7f634e793efc7433dc9771d9538e2cef3e2afe6ad17da2b5feb28e546bd3046d5bbfcadd0c19d91d6dea90310b1c23c30d209f1eafbaf355beaf93e4ca9ac3a88bc8c5be07e3459d302c8", @ANYRES32=0x0, @ANYBLOB="0a010102e0000001000000007800000000000000000000000700000001441c9ff37f0000010000434d0a01010100000009ac1414bb00000002890445b84424cc1300000000fffff999ac14142c00000007ac1e0101ffffffffac1e01010000000189075fac1414bb831bbbe0000001e0000001ac1414bbe000000100000000e00000020011000000000000000000000001000000f700000000000000"], 0xb0}}, {{&(0x7f00000011c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001200)="2c83f769883e2293e7dc242857e1c8068599b2b7ef39bbae53839ebc9e33cc2f790159d9a62c50f98b7ec83aeb543c979db06ff5c0bacaf1fbd87abc850f9875ca87118aa73cc10676e1ef7a9831047a038c27be0865f69e971a3dbaf7e9477c707d43b27a9e08e41dcca19b", 0x6c}, {&(0x7f0000001280)="7f4930ba9df68fa9ba770f26045a639f1c174d76349150ce1e", 0x19}, {&(0x7f00000012c0)="98c8b33165ae9da5c66b5663a2712ae9ea253ec23f2df53579c8359b110ac4bb6995672e1fa6e2f987b6e58e8aeabc679c443a0427db68c6ef5f227b7459438c8b681fd0c8b3816250f980239a1a5b0278fdc980664934e5808fc0c67f6e44a54ff1d04323eeee248835345f0e29fddf15eddefcf5b95a9181084e5d10db7a0fd8efd6c577e57ed41f6ff59984e0f92c8dc88bcf4b0b0430471d7751eef6fdfdae074faf2071d24846211271862ca0a30dfc14ddb54f6a971dd62f8829c88e", 0xbf}, {&(0x7f0000001380)="86dedad4a85838d40cc5334ee588c34de9178c8adb938bb77dcbb2303110f6", 0x1f}, {&(0x7f00000013c0)="9dd2c68f0d8f6ce631ca72ae31843eb3f0ff8e853c29f1887bede81b47f61c68f94e2849820a5db90281a4068c2c6ea4c554b97dad05c7add9e75630", 0x3c}, {&(0x7f0000001400)="9ec2437343df56a5bd0692e01a3c623982a07745e1b7439936d76625f98140829df52bc2f8c0a383722f1b02dd6bb4e2c8c19aa5c56c8390556a676014aa3f7e53d63ca9875ca693faf6b5a042605ac445266177ba16d358fb8d187381feeb29faf252a8e257130d1b637533110b72ae8e9dbfbeab504e6984ac0730e14e27064e167ebf354a07fba8aa3f88786bb81ff789cbaa69ddbf88f399c00891b383f063d16a05234d", 0xa6}], 0x6, &(0x7f0000001600)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xd0}}, {{&(0x7f0000001700)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001080)="9026540eaaaf5200496e7e199c68ef6e1ef4f00a08fe6357814d12a7bcc8aef0d76c68639a7ae543fc19ca4dbe62f7871b958125a3a634061b1884a6cf926937a837469105a6f5212532b9b80073f3367de39459193c8533175fec5a23b46a47cca7c85e703930f6bda5b466838595073dd0f191695e785be419df1e9823825f283ee1a45cf59e986320af17e1ce000ea429371a17e70a28188333316413afee092fad5b6a9b1b2802ce5f8317ed530d43a171c74a79c7eca6778a7289ac2017b7ef91a1d98d45b0e0123dd9cebf204e", 0xd0}, {&(0x7f00000017c0)="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", 0xfd}, {&(0x7f00000018c0)="248f3355a35e3b46cb62dcd66a97c900b5da0beb0fbd1016fa94ffc5e1836060e3297829ce9e8fe61fcbabd70634fa0714fcb946c726d02ed831cdb5d08b18a73a57fd21a7a1fce8953555edd4f1fe12a7c6548cd96dbbfdc0ac8048fff8919d21fff3195a132fc1e7024ba367da8a0547bd316b4451b07ab3046b2a36d76f44a68cbdb86fd46b5707d135", 0x8b}], 0x3, &(0x7f0000001a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}], 0x68}}, {{&(0x7f0000001a80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="bffa0967c3fb5278154effc5c43bb2cb9a6897b4f30b91cf1577947856bb47943a9cf08819476d1df3", 0x29}, {&(0x7f0000001b00)="248117b8f5baa8486c2ffa0c3c4cb06e61ef158817031dbb47ed3e233110c69ee0464820d3846116bf18d19307a53f35baa0c906e0fa08072f7692afd106e420ecc5c0cdfc38edb30787efefc3aabb2a4815b600cc2f7773caefc144ee4e6a5a59cf664c5cedef1e373b2c34e75837e0a60b9dba6d96cee1886d3f0ef6292191a031af", 0x83}, {&(0x7f0000001bc0)="d83704a2f43fd1ed8bef68a56210591ba0f0a683ebc8", 0x16}, {&(0x7f0000001c00)="1f97557c3e0eca704775c2872e5aa552d801a9163eabc18b1b36bf8e480ed226716c207f3477ebb48ce62dc80526db2b426946a7b82ef39e7814ff488aabca3da1dc6983c6438934fbc792187cd4c2046fede0ce3d1bb890e14a9f849770bd0251e5a3eb4674993c7dc2ff853f16cc38b634ba183f6cf5b64ac6e743068023f7ff89376a33bfcdb85c5a33063027aa462bd8075d0c9550eca208828f2b0b5afac50f6f78bcb8663b41", 0xa9}, {&(0x7f0000001cc0)="56bc4680b6e5a4710df62b08b4bea5a648af2803abdb79aa6a0ae1ba9c02fd4465a2299536bd35a5d0e426eda5f843273bf2f76e3175a5d17f3ecef7b20a00960dac850f405c4c08b505111ded33bde8bb66a21b6321355a329b71c3db48a4a4926a20f23f54ed43502f0cdc180eca4f619c15a3138482f115363d5ead1a2ad9e85c3e930d73b8c4e60f02f1fb4a17980c57d755df47d571dd8f9e374505d2b8b85f172244721289e38e2877fde99d3b85c47f66f0b1025629a590e5fbcc03eb93c8adf8518532aa86920cb641a7742b2c0dd59b9325d1d1b350", 0xda}, {&(0x7f0000001dc0)="cd6715a4f887ad86e93b60292dc8347c58acab1b7e27700a678ad2f8752d05e0ad9951a4a3a0d251815603b259a9ef55880a03ce3f1dcaa437fc5d66c79e7475e3b9b2e3945f96659a", 0x49}], 0x6, &(0x7f00000049c0)=ANY=[@ANYBLOB="400000000000000000000000070000000707c7767c055644146bb00000000700000001fffffff7fffffffe01441419f0000000080000000400000004000000ff1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="64010100ac1e0101000000007c00000000000000000000000700000000940400000003ed865100000003020730ab1cbb5a000704672272460112391805dacc89ffa6ee045c4816f2c16f070bb262c3fb0e71297fde0510b0060e507f3231c162a5f2b8f56c050d0e4a199a78d3fe5f503cc9060332890fc9ac1e010100000000e000000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101ac1414aa00000000140000000000000000000000010000000300000000000000140000000000000000000000020000000800000000000000140000000000000000000000020000000f00000000000000e9b3b2c6a8515608228cc8718d56c51beb"], 0x148}}, {{&(0x7f0000002100)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000002180), 0x0, &(0x7f0000002280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}], 0xe0}}, {{&(0x7f0000002380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000076c0)="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", 0x1000}, {&(0x7f00000023c0)="c9eddac9e83b9691c1dd72e7f4b7", 0xe}, {&(0x7f0000002400)="21d7f6d07dc31a41fe7cc306614c356e533df566b04e2ebdaf2a6b5100de73dfb7f102afc8f21221d824482250373a09a859b8c148f18590f379d872198775994f9d65f91798124e0282c39e7531b3f423808347b3cea612e2e8478ea48de9e36b7ed4473c60c22bfc2247843861962a5aaf0cf3aed078b61a27fe5cee0c166985f15bf4f154b64231d4ab8d532528a60230af7109561e030e70cdc6e62dcef5c9500ff42218b35ed39f", 0xaa}, {&(0x7f00000024c0)="2ec10d16f39573d6d1269011b4eea9046e92cbdfdc52ed86b732a2cffe129804be875d36e6fedcf3af1597e77ea6cc0de6a57ed61a0e746ed68ddcd734e16dd337139214a37171a7813139b4bdef515a9f51c2f17bbf43d9a724b3180e7c325b5f3f33330b11dcb595b4e47480f274cb689ae9c17f76f20949332427f0fc24dc58164ab7d436627d34cb23afc2629b3114f6e90a2c7052fdc784", 0x9a}, {&(0x7f0000002580)="b09595995c89b6250c9fb9381232a2bb7ac9c0e26a25e64e27cbcb68da6e5ca43309200f10523b19ae", 0x29}], 0x5}}], 0x6, 0x40) read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 2m27.413908658s ago: executing program 2 (id=1137): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c000000020011907800000000000000004e23000000089078"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000640)={@local, @remote, 0x0}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x44851) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2000000}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x40880) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r9, &(0x7f0000000240)=""/112, 0x349b7f55) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m24.769645177s ago: executing program 2 (id=1145): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x4008, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c, r1}) ioctl$BLKTRACESTART(r0, 0x1274, 0xfdfd) syz_clone(0xc0942000, &(0x7f0000000040)="0369b7caa3a62af7776e29bf22efa244387a6dd92aedec9f471f83f4f5e94faa5e4e12e2b55f072cea4deb7d9620016aad13efb707a609f2c805d1bd11becc47700bc253aefb1f3adf4f9f6efb895b09ca1ab0f7f11ea7caeb05d153ce19762c8f96f9bb223c5c4ec3a7b19abd1541a94c1ab7076262c916251f8bae935c1e7c76ee427c29c8fd8116e2b1d83d83639eb2c9ae3f0ac1169454f5840b9b93c07334dd1dae0815ff934ea16a0ace971abba47ef75961f758a1987a0d265531391c8ec87401e6f2b2c103e034c777aa371c63e346689a260852bbce14d5df", 0xdd, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="e26d6ce47e2e1220cad48ac19d9e69f9775d8ea6d6e9403421fd366cb6774de5cc185e5e53452720c3b856c384a154fb2cf4a1d70d05d3212438013754bd412149aadfd761568ee8b593e38f60f6ed73cbda797dfb79ca437ed19456928b91baa3bf7b6e8fd5cd4db754171960f559e479e528a09716525dbf970d82cda10ef6a4dd376e23c54162c6764d80898c69e75321d1bc03a1c582770419a8eaadb25e359842e8d348122cce4cb2cae1ecbf579c96ae9f0c03bc32d48b29c8f108647564db04b2d7d256b7ec5e995b403dacdd6315fc92d7b184857ca05b") 2m9.67194091s ago: executing program 34 (id=1145): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x4008, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c, r1}) ioctl$BLKTRACESTART(r0, 0x1274, 0xfdfd) syz_clone(0xc0942000, &(0x7f0000000040)="0369b7caa3a62af7776e29bf22efa244387a6dd92aedec9f471f83f4f5e94faa5e4e12e2b55f072cea4deb7d9620016aad13efb707a609f2c805d1bd11becc47700bc253aefb1f3adf4f9f6efb895b09ca1ab0f7f11ea7caeb05d153ce19762c8f96f9bb223c5c4ec3a7b19abd1541a94c1ab7076262c916251f8bae935c1e7c76ee427c29c8fd8116e2b1d83d83639eb2c9ae3f0ac1169454f5840b9b93c07334dd1dae0815ff934ea16a0ace971abba47ef75961f758a1987a0d265531391c8ec87401e6f2b2c103e034c777aa371c63e346689a260852bbce14d5df", 0xdd, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="e26d6ce47e2e1220cad48ac19d9e69f9775d8ea6d6e9403421fd366cb6774de5cc185e5e53452720c3b856c384a154fb2cf4a1d70d05d3212438013754bd412149aadfd761568ee8b593e38f60f6ed73cbda797dfb79ca437ed19456928b91baa3bf7b6e8fd5cd4db754171960f559e479e528a09716525dbf970d82cda10ef6a4dd376e23c54162c6764d80898c69e75321d1bc03a1c582770419a8eaadb25e359842e8d348122cce4cb2cae1ecbf579c96ae9f0c03bc32d48b29c8f108647564db04b2d7d256b7ec5e995b403dacdd6315fc92d7b184857ca05b") 22.762501591s ago: executing program 6 (id=1469): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)={0x7fffffff}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19.986885109s ago: executing program 6 (id=1479): modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x20000000, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c000180080021"], 0x134}}, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x10001) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_PARMS={0x18, 0x1, {0xb899, 0x1, 0x0, 0x41d2, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003000100040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204000028728200000000a50c00000000000015f98d6e9555403152d7d00b42629d13885670911e5d25bf9983692d7fa45325c869af816af51df51bb9d6cd814d288d9832db4e68794ff5c9fcd2598e350b2eda1a7e1215aac3b76f02e3b86d9b65b706f3f8b4fca84d8c417eebfd9f03a46c61717ba43a621bdd74fc6c8ce2f9be70ac2385203e893186ebc852087597c16a33e9407cdaf421bf3cc59f4f31bbbc1746bba99c080800000000000000e139e048dce88fd51dc7d708d84fb2012846d5d1fddc616ff819684c1a2717c08000000000"], 0x78) 17.358913564s ago: executing program 6 (id=1483): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)=@fd={0xffffffff, 0x2, 0x4, 0x20, 0x3, {}, {0x4, 0xc, 0x3, 0x9, 0xc2, 0x10, "b8fa7f08"}, 0x4, 0x4, {}, 0x5324a5b7}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa0f, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x81}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000208, 0xffffffff, 0x4, 0x3, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 15.852451987s ago: executing program 5 (id=1485): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xf, 0x80000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0], 0x2, 0x0, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000fcdbdf"], 0x2c}}, 0x40) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 14.691477335s ago: executing program 0 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x158, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x144, 0x1, [@m_bpf={0x88, 0x4, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7f, 0x7, 0x3, 0x30, 0x3}}]}, {0x3e, 0x6, "03976c4ee4224b42f5ce66416386eeafa1922c136adc311b8ef2fee561097f8a2ee8aa72619a5c0f7623066dbf34795f0d297b36fe1b343739d4"}, {0xc, 0x7, {0x97629c97613db2bd, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x158}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xb0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000880)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x28}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fedbdf252000000044002d80050004000000000005000100fb0000000800030005000000050004000000000005000100b300000005000100f2000000050001000400000005000400000000000c0006000300000003000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x14004041) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000400)={0xf04601c4a2f46e46}) close(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 14.644689527s ago: executing program 5 (id=1490): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x15, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0xf7, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @lsrr={0x83, 0x2b, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}}}, 0x0) r3 = gettid() prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) r7 = dup2(r4, r5) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01"], 0x0) fcntl$setown(r4, 0x8, r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) tkill(r3, 0x13) 14.195835731s ago: executing program 0 (id=1491): syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r0, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) 12.604072187s ago: executing program 7 (id=1494): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003980)}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000080)={0x4, @raw_data="8394cca43e8bbf57d85ae099f79e1b3f885435515dd6e52d6c1d39ca185a6d426073826786e07cfaafdf020be0ca83939f62141324bd7d84929d53802fe47caca35fbec246350af6ca05ccb65c6ad4d62f77a0cb88654b8a107d73311f5eba05bb7534f92b56c17569298eb4a7030e64fb83ba10623a6eba96c9595eaa253aec5abdb0dd7bf20b24bae8abffe0495d2bc601f492b119107602cca79bcedb7e4f56d27d1057e57f285709224def8df1d2c15d32f1ba8ee3953519b6d980b946e686f70f661f2cce36"}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) 11.391581444s ago: executing program 6 (id=1496): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 9.328769528s ago: executing program 3 (id=1497): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="faf03d32da29692bc8fe30ff0d226da8b629bead0bafbc3aceec773f0b24935f8fa8f311fd588c3ce34e72fdecfdbdbf2037626cb1b8a5406207e7201b7e4020d9e90df6b2beca886afa607407e949c00f35344bb810f00e28e1bd37ba49b37a3b77ad0084809f", 0x67, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000180)={'syz', 0x2}, r1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) 8.457855549s ago: executing program 0 (id=1498): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2004, 0x0) umount2(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x1) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000280)=""/66) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 8.401192451s ago: executing program 5 (id=1499): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x63, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x0, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000300)={0x6a, {{0x2, 0x4e22, @broadcast}}}, 0x88) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x5a) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r2, 0x24020000) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0)) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x38, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x5e) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 7.227416116s ago: executing program 3 (id=1500): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015000000060002000100000004000b"], 0x30}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="f78d9ca38fff48f3a1619ca4be52", 0xe}, {&(0x7f0000000400)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f0000000140)="2c87bc0fd2ad98bbc172aaf084a51b0d5770486d40d7098826c07281541945ec7b6d39d375d5a25298123ec03771f8801543617df80fb4efe519a3783417f52e5b327435aabdda56650992d0c4bf7915de223d69b19be14f8ece5aaebdff0bbe8ebe002a97bb113a", 0x68}, {&(0x7f0000000540)="081d98784b6e8929c5bed1afb2551cd8ea48bca6b584c9215704d3a49cac0583d918b22d19ef4a4e34daecd3a96c8bd0ae35f0005360aa974e09cc68485b83917114d619", 0x44}], 0x4, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff9a, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/67, 0x51}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x2}, 0x40010000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x52, 0xa05, 0x0, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 7.223723125s ago: executing program 6 (id=1501): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x61}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r3, r3, 0x0, 0x200000) 7.073638862s ago: executing program 3 (id=1502): openat$urandom(0xffffffffffffff9c, 0x0, 0x40142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x0) pipe(0x0) pipe(0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x840) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.638508068s ago: executing program 7 (id=1503): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a", 0xf) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @dev, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) 6.62017986s ago: executing program 0 (id=1504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x7, 0xf, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x8, 0x9, 0xab47, 0xb0c, 0x8, 0x1417d221, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0xfffffffe, 0xfffffffe, 0x3, 0xa, 0x12, 0x8, 0xd2f1, 0x7, 0x7, 0x3, 0x3, 0x3, 0x2, 0x1ff, 0x47f2, 0x80000000, 0x4, 0xfffffffd, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x17ca, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x80000000, 0x227, 0x1ff, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x4, 0x8001, 0x801, 0x7, 0xa, 0xb, 0x9e, 0xd9, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x403, 0x5, 0x0, 0x1020, 0x5, 0x10, 0x5, 0x7fffffff, 0x3ea1, 0xffbffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x3fc, 0x2243ccfc, 0x8455, 0x0, 0xc2, 0xffffffa8, 0xdc9b, 0x0, 0x1553e2a8, 0xff, 0x80000005, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x8], [0x1, 0x7fff, 0x1, 0x0, 0x9, 0x3, 0xb99, 0x7ffffffc, 0x2, 0x7, 0x6, 0x0, 0x4, 0x440, 0x7, 0x2, 0x7, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x7, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x1, 0x2, 0x80000001, 0x1, 0x10001, 0x8004f68, 0x5, 0x10001, 0x5, 0xc, 0x3, 0x10003, 0x7, 0x409, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0xf53e, 0x2, 0x5, 0x7f, 0xf, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x406, 0x200, 0x40, 0x5, 0x40000000, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x7, 0x400, 0x4, 0xb, 0x9, 0x1, 0x9, 0x0, 0x2, 0x1, 0x7fffffff, 0x206, 0x80000001, 0x3, 0x4, 0xe79, 0x2, 0xe0, 0x2, 0x3ff, 0xfffffffa, 0x6, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0xe, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) (async) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0xffffffffffffffff) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000380)={&(0x7f0000000240)=[{0x5bd, 0xe011, 0x0, &(0x7f00000000c0)}, {0x5, 0x4010, 0x0, 0x0}], 0x2}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x48) (async) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x77, 0x4}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"8e015621caf6492d2b2e88bd9ae3141e", 0x0, 0x0, {0x8, 0x6}, {0x4, 0x7fff}, 0xfffffffffffffffa, [0x2, 0x7fff, 0x800, 0x0, 0x3, 0x3, 0x357, 0x6, 0x1e, 0x6000000000000000, 0x1, 0x7, 0x4, 0x7, 0x6, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r4}, r5, 0x8, @unused=[0x3ff, 0x4, 0x8, 0x9], @subvolid}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/4, 0x4}) 6.507882457s ago: executing program 3 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000000c0)) setrlimit(0xa, &(0x7f0000000040)={0x0, 0xc08}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="050000007d00000043000000010000", @ANYBLOB, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="00004498c600"/24], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r6}, 0x38) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) pipe(&(0x7f0000000240)) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x1098448, &(0x7f00000002c0)=ANY=[]) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.427621593s ago: executing program 3 (id=1506): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) sendmmsg$alg(r4, &(0x7f0000006980)=[{0x0, 0x0, &(0x7f0000000980)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x840}, {0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000003000)="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", 0xffc}], 0x2, &(0x7f0000004140), 0x0, 0x20004000}, {0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005300)="5a41fb45c1ddc12e5bed858b2d8877829a069897069bb2d1d1c28d", 0x1b}, {&(0x7f0000005340)="7af88b234a734bf00ec3186927ba7a1f38ade4b31e657860be193ec0aec24838c1b37346e4a407c720949469f20432a26bd17a5add5119e120433e854dd950c38b1aefca662ddffd0ff49c19bc99818a115b6869a35f72219500fc5338e28dc987b138cc6fd6447241fed5257a808dd4ff6e6f463ee822d4301cc610", 0x7c}, {0x0}, {&(0x7f0000005440)="4ed274867a6b484cb55f1480753e6846d6684bfb9ca855c952813f9cb356bf0fe1f865a09c517c0de2ad396b32a3b896d764f9131f875b32252c57738c71908eb8f9f74af55c22034f25b908f01b170a3ec2faf63c277c95ef6b181355b67ad707e45e9e9e7ff433f73a9de75d20832728d06034dfe3246f14f3466d688ac2085804ecd8a1f98976c2ed4151a2f5d841272bf4c38b622c53e25c3359a8a1f99a8824707f406da90ca7aa", 0xaa}], 0x4, &(0x7f00000055c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005600)="c19dd05ca56fe1b562f49e13709a4f41dc8f8bdad3fd09af2e8a75cbfc3bffd8a401e288a6c943a90da7efae700aa445dde21c01f437e70c819109ef928edaa06399daf58438894853cfd374db7f5a515ddf856badd69f688e0320c99e3c4b5c1350ff9fbb24981401201df49095efbd126f0d7f116f6f42814bd64783d32141c0aecbdd02e76e8dd749c3d28616c2f30c2b247768539a85acc13538315f650e4269e1a514fb3946df7248d49317c2e0ba494b6da841f4e1f0f0", 0xba}, {&(0x7f00000056c0)="9f41b888a13c28f2455b00cad9f8e64d2d0d71d862a9d56e0af7caafaefdb3dcb5e8f8a7837e6dad6ce0f8ce27a70491f2094cc1bd0d0797895e2657970db1e1af7300f4f3818d8a2967dcf0b9fa86b684416ccba47f1abd86dec68c6e252a65fb68784357375100d19d55d607d1b6ec2a046f66be5ea725ed672834bbc845c1f5fe2486b7ff6a07219afc79b4432c7a4d599f53a148f38a3af4b55e2c3dc4395a3f46a030540ce6191eeb1ded17a03edca591337b9cfb3c647a6167835fb9a7e655ff9f0ad4ae1c63ec7d252f85427a268cb81925", 0xd5}], 0x2, &(0x7f0000005800)=[@iv={0xfb8, 0x117, 0x2, 0xf9f, "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"}, @assoc={0x18, 0x117, 0x4, 0x4e89ba}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x80, 0x117, 0x2, 0x6c, "9b60d123a37cda69109e796953bb9eb94f16481ede4077e755f0d7b68980038aa1868fd771cac301d6b70afeeb1d8661b4f996f9a9a6fa758a09136d15a526d93ebe7f274f2548fe6049a7c3dc2c9d84e8556ce36508c40e42002121a3ca6e119146d945ca620c1bc71d20ee"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x10c8, 0x4010}], 0x5, 0x20000894) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r0, 0xa, 0x7, 0x0) syz_io_uring_submit(0x0, r5, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) openat2(r6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x628141, 0x28, 0x14}, 0x18) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x301, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) 5.164501476s ago: executing program 5 (id=1507): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0e, &(0x7f0000000040)) 5.121313496s ago: executing program 7 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {0x0, 0x410c}, {0x14, 0x14, {0x8219, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000001c0)=""/94, 0x5e, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 4.136873326s ago: executing program 0 (id=1509): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x2) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 2.014096796s ago: executing program 6 (id=1510): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) fsopen(0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0xfd3a, 0xfa00, {r3, 0x4734}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1.819875777s ago: executing program 3 (id=1511): r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket(0x1d, 0x3, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000056e000/0x3000)=nil, &(0x7f000056e000/0x2000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x1d, 0x58}) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r4, 0x3c9be000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @mcast1, 0xd}, 0x1c) 1.732815414s ago: executing program 7 (id=1512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fc8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000) 1.465392682s ago: executing program 5 (id=1513): r0 = fsopen(&(0x7f0000000240)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0xfff, 0x4) listen(r1, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/connector\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@loopback, 0xa, r8}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000002e80)=ANY=[@ANYBLOB="c0050000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1a0002006c6f0000000000000000000000005eb2a557f689ae90ea3cf4ecbba0e588373faa3ba812df2b4aaf5e0f8e8e91e1203d80e458787acd69", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x5c0}}, 0x810) close(0xffffffffffffffff) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 1.329813877s ago: executing program 7 (id=1514): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c000000020011907800000000000000004e23000000089078"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000640)={@local, @remote}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x44851) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2000000}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x40880) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 436.007747ms ago: executing program 0 (id=1515): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x401070cd, &(0x7f0000000040)) close_range(r0, r0, 0x2) 99.188241ms ago: executing program 5 (id=1516): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a", 0xf) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @dev, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) shutdown(r0, 0x2) 0s ago: executing program 7 (id=1517): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x9237, 0x149441) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r4, r3, &(0x7f0000000040)=0x10, 0x80000001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=@newchain={0xfa0, 0x64, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x7, 0x9}, {0xe, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x5d8, 0x2, [@TCA_ROUTE4_ACT={0x5d4, 0x6, [@m_xt={0x4d4, 0x1f, 0x0, 0x0, {{0x7}, {0x420, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x180, 'raw\x00', 0xff, 0xc, "ec4d11b7b6903ae78b8376aec217db844468c73f3eb3d8f1b359a4fd88893b0915fd0ba9c073cb5ee24dbabb6a72e7b45d5d1f670423ff38c2"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x7d, 0x6, {0x9, 'raw\x00', 0x0, 0x5, "735b4f0c12900ec33dc0c49ed93f50378a8a8b7703a5aee5430b528f549e3b20afb4f6980e5d2653cd3ac3b39f9cc5895b4c38e00cb47bb2bb61ce615a61c2814d2f226286775d5c918e857a3cae0cf7417d4c"}}, @TCA_IPT_TARG={0xf9, 0x6, {0x5, 'filter\x00', 0xfa, 0xc, "b273498c9209f426a20fcd1014b6aac379a0c347a81476af488b91a9660046c69da7c9678bb9e552db29d1327637719c89af3208859675c1b2a8258b8c7cecdebf4099f4cbee7453d68ce5fc7fa178eefa2d6d05ae117f0e52ff75f086f0b27335b093b96d26f37056b5a6fc24d863edbd944493e7bb98a3d168ad72ac4a784016f699b3a59019e862d4db5a90e2bbd42a93ef6890b4c1bba391620e9f8062993edb568fbaab739b1e6f12b68b2ba393bd2ca3e191155bd8f21cbdef026019541c218de737e770bad2def9a7c15d17"}}, @TCA_IPT_TARG={0xfe, 0x6, {0x2, 'filter\x00', 0x2, 0x10, "540c76f21d2fde21b81c53c3390660c54319545f4776192bef92af69bd4dae42bcd433f6d2701ff0d62a2d80a85ea4a1f952293082200a82315908c74d39cc6fbc5bb92f53487436ef80c1ccb7bcd7d9703cf45d24d7e7ae3f8188b0c0284222f5c7b20bb7bd3be4cd835051704b028ede934c9a09a19e80ddafcfc384da0aa784bdac5bbd7f050c0cbb26b7a55c6198a44ea496a2ce02b4e8d5ccbc995deba93e5587c2219b5e5629a89748731d882e3f57f61b849cc1286b48984c0f111e73df3e77d89627d5cad6debe1671308eaf34b834fd"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x10d, 0x6, {0x5, 'mangle\x00', 0x0, 0xffff, "c68cb6b055e8e6f33ce0d142a2c3c52caae731bc44a81a5ba18f7d82d62b85b7a648b05b8204ad3ea15f78e1f19c79579750cda5cc62ec25ff6efbe43ebe5c89cff170cbcc04309772be11ede01f44242dfd468a093d369bbc3e93286a21aefb4dbcec7e1cb5cba6d1c77d063b0865c8ce1bee89d6f04e1a6d83eee6882ece606dab8843c43b361c85e0875203c4b9d79597d2baeeaad6b2b336877249644821b2bbfb6df5e64e286c0d5381c35f6fc4ed5289a17fc0730179eb5a71566bcb65703fb3173a6b4627ead3168756890d12531db4abcca76a9840cae43692797c16cd845f"}}]}, {0x8d, 0x6, "52f4c605e9fbd527288ab27d25a9e92521a9aaa3aff6ad34f151366d19266587aa7b34ed088857a59e1329c440831e9ba66c36b32ebc5fa8ed5fd50b29fb22f216c1b282157152bb4c7af21763c9cd020c9e1e3f5ae9adaca697e81fdb285f884f01604b44c1b6622b9dabfed758d0d54ec6507b90c18e0ca9f00683f5b66c113bd1fc7483505932de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xfc, 0x10, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xac, 0x6, "bb6d84239b8b30ba0b48dd192417e140f851279e8d4a7abecb59b4310d7eb5e1bb06964dee4b35f712ed95c342cffccf1e99bc1b47e04ec123afebecaccbb7e7b57e54260efbd6808387abd600dae00888f14131492986b823a2782825feb9196bba2c30f5372d7a663d623aea92c4c6a3564311d07766b813849e3ab82a1278128c7d2677f34b50510b62258534eee86757b31acb00b5b5e3488b354dd7cf0ddeb999007bd98d3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x38}, @filter_kind_options=@f_cgroup={{0xb}, {0x974, 0x2, [@TCA_CGROUP_ACT={0x168, 0x1, [@m_connmark={0x164, 0xb, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf, 0x30000005, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x7, 0x7, 0x1}, 0x1}}]}, {0xfa, 0x6, "54f6b85d242d0ea90e12e5609cb8bdb351c11d45e92ed22dcd5b25c4b4626ae7bf4236d6f1b001783a6f9a30e8f9a2ada414e0ac0c8490b932800acf2c3454a7fcf1de8f906e1f10ec7a201c98b3d176902040084bafada194bbe09a4789859110faed771f745895f6eb1627d5ae4048270bc1ae4744784c6c94f02109922da804ac485b63e577a94a01f45635cb2fe64315226cd44c8e80c8d6fe0664113180302f8cbc944f53e918be12764492986a9fa7a459503167d72c14ee345a1e179b3e1bcd340ec3eef25463d04e1e0dc0279f78d58e794780b4b9b19fe1a4ae0fb44f61419e10573354149fab4646cf007aeaed26893308"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x44, 0xffffffff, 0x1, 0x7f, 0x1, 0xa0c, 0x4, 0x4, 0xffffff01, 0x5, 0x8, 0xe, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4000, 0x7, 0x1d, 0x1, 0x5, 0x0, 0xfffffffd, 0x9, 0x9, 0x2, 0x7fff, 0x7, 0x0, 0x8, 0x7ff, 0x7, 0x401, 0x2, 0x5, 0x1, 0x69a3, 0x0, 0x0, 0x81, 0x6, 0x9, 0x9, 0x8, 0x9, 0x4d3acf8, 0x8000, 0x1827, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x5, 0x41, 0x0, 0xf152, 0x1, 0x7, 0x8, 0x5, 0x5, 0xffffff80, 0x3, 0x8, 0xd6, 0x3, 0x1, 0x0, 0xd0b, 0x610, 0x7fffffff, 0x6, 0x321, 0x0, 0x200, 0x1, 0x3, 0x4, 0x76ab, 0x2, 0xa, 0x5, 0x7c, 0x3ff, 0x80000000, 0x800, 0x401, 0x8, 0x3, 0x40, 0x4b4, 0x8, 0x0, 0x4, 0x4, 0x4, 0xfffffffb, 0x9, 0x9, 0x90, 0x6, 0xcf3, 0x7d, 0x10000, 0x8, 0x96e8, 0x2, 0x4, 0x8000, 0x2, 0xa662, 0x0, 0x7f, 0x200, 0x8, 0xe0e, 0x400, 0x8, 0x1, 0x7fff, 0x3, 0x1, 0x9, 0x0, 0x401, 0x10000000, 0x6, 0x1, 0x80, 0xc, 0x0, 0x10, 0x3ff, 0x7, 0xffffffff, 0x7fffffff, 0x4, 0x5, 0x3ff, 0x7, 0x9, 0x5bc, 0x4, 0x38, 0x6, 0x8001, 0x2e, 0x5, 0x0, 0x1000, 0x5, 0x4, 0x4, 0x3, 0x9, 0xfffffff8, 0x9, 0x3, 0x3ff, 0x8, 0xfffff000, 0x9, 0xc8f1, 0xfff, 0x9, 0x0, 0xfffffff7, 0x9, 0x9, 0x0, 0x4, 0x94c8, 0xb, 0x6, 0x7fff, 0x4, 0x1000, 0x80e, 0x3ff, 0x9, 0x0, 0x400, 0xfffffffe, 0x8, 0x5b, 0x9, 0x6, 0x2, 0x5, 0x101, 0xfffffffa, 0x9, 0x1, 0x80000001, 0x8, 0x4, 0x1, 0xf, 0x800, 0x5, 0x3ff, 0x1, 0xae, 0x0, 0x2, 0x3ff, 0x7f, 0x400, 0x58, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x2, 0x2, 0x6, 0x4, 0x0, 0x1, 0x1, 0x620, 0x7ff, 0x3, 0x1, 0xffffffff, 0xab, 0xb, 0x168c, 0x3, 0x100, 0x3, 0x5, 0x2, 0xd, 0x800, 0x5, 0xd1, 0x8c6, 0xfffffffd, 0x8ab, 0xffffffff, 0x2, 0x8, 0x7fffffff, 0x800, 0x8, 0x2, 0x1, 0x80, 0xb8f, 0x1, 0xe]}]}, @TCA_CGROUP_EMATCHES={0x78, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1eb, 0x3, 0x8}, {0x8, 0xffff, 0x2, 0x4f}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xea45, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0xffffffffffffffff, 0x5, 0x1}}}]}]}, @TCA_CGROUP_EMATCHES={0x16c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7}, "629a036babcdc263b1ef2308ef7dbb395bce88066dc3dfbc7aa1db794530bf0fef4ded5ff7be7c93d0f653abbddf9652b586ca54259fa9d7a4d1eb1efe15db562ec0316547b9f813d658b597a325b242ee2ef3ad9e2d55a510675d29566374b6e35010fc2c99b8f274d01c35a449d9a56bc7420bbf44b36ce866c0847c026ca3790b65fea82e1657c6f92a16e207729a7f1a53e193d1b89b851dba"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x6}, {0x2, 0x1, 0x8000, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x2, 0x3}, {0x0, 0x2, 0x1, "cd44"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcbe, 0x1, 0x9}, {0x9, 0x200, 0x7ff, 0x1, 0x8, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffc1}, {0x1, 0x3, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffa, 0x7, 0x4}, {{0x3, 0x0, 0x1, 0x1}, {0x1ffffffe, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x4, 0x9a9, 0xf69, 0x800}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x1}, {0x5, 0x8, 0x1, "7d485a177e9e4b13"}}}]}]}, @TCA_CGROUP_ACT={0x21c, 0x1, [@m_gact={0x88, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x5, 0x3f2, 0x2}}]}, {0x44, 0x6, "094e8574eb49fed11e3afaa313f267224543ae7099e99083766901c1a83bc75bb6e3534a8205ae1f1259cb1bce88122ee4c41b17a46069eeaa811f58ca389123"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xdc, 0x7, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x2, 0x10000000, 0x2, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x6, 0x3, 0x3ff, 0x7fffffff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7f, 0x6, 0x1, 0x2}}, @TCA_DEF_DATA={0x12, 0x3, '+(!7\\)%.()@{*\x00'}, @TCA_DEF_DATA={0x16, 0x3, '/proc/thread-self\x00'}]}, {0x32, 0x6, "943bce2eed2cef1a5773d6eb1e2e83147238c31ba40c6a42b087f3d8dc753d0d8ee1c8d5150a875639138f14dfc0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0xb4, 0x19, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0x4, 0x8cff5b2, 0x3}, 0xa01a}}]}, {0x65, 0x6, "b6894b08b1c94e3a946f067c73360509c9f2c10223840cc47de8d7da0665b6df1b4e916588b3be68ea74c6b199ce4f9d485cf843a129dfefce057e3c372cec8337e37952af624e775a6bbdd5e7c49825e122947e9cf8cf29fcfade1f28f1bad028"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}}]}, 0xfa0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x8000000003c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fallocate(r6, 0x3, 0x9100, 0x3) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) kernel console output (not intermixed with test programs): number 33 using dummy_hcd [ 475.228452][T10206] usb 6-1: config 0 descriptor?? [ 475.246359][T10206] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 475.289956][T10206] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 475.300022][ T30] audit: type=1326 audit(1757115090.183:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.6.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4060b8ebe9 code=0x7ffc0000 [ 475.334775][T10206] usb-storage 6-1:0.0: USB Mass Storage device detected [ 475.351862][T11008] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 475.360672][ T5853] Bluetooth: hci2: command 0x0405 tx timeout [ 475.366802][T11008] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 475.379305][T10206] usb-storage 6-1:0.0: device ignored [ 475.396900][ T30] audit: type=1326 audit(1757115090.183:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.6.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4060b2adb9 code=0x7ffc0000 [ 475.424796][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.450140][ T975] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 475.472815][ T30] audit: type=1326 audit(1757115090.183:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.6.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4060b2adb9 code=0x7ffc0000 [ 475.506627][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.585192][ T975] usb 4-1: config 0 descriptor?? [ 475.894268][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 475.911648][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 475.928885][ T975] usb 4-1: USB disconnect, device number 33 [ 476.627489][T10206] usb 6-1: USB disconnect, device number 31 [ 476.671402][T11035] No source specified [ 476.830327][T11038] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1170'. [ 476.899078][T11044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.735970][T11051] ceph: No mds server is up or the cluster is laggy [ 477.836063][T11054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.344990][T11061] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1175'. [ 478.830706][T11063] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.871123][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.160110][T11080] FAULT_INJECTION: forcing a failure. [ 480.160110][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 480.172951][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.5.1179 Not tainted syzkaller #0 PREEMPT(full) [ 480.172975][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.172985][T11080] Call Trace: [ 480.172991][T11080] [ 480.172998][T11080] dump_stack_lvl+0x16c/0x1f0 [ 480.173026][T11080] should_fail_ex+0x512/0x640 [ 480.173048][T11080] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 480.173070][T11080] should_failslab+0xc2/0x120 [ 480.173097][T11080] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 480.173115][T11080] ? ptlock_alloc+0x1f/0x70 [ 480.173146][T11080] ptlock_alloc+0x1f/0x70 [ 480.173170][T11080] pte_alloc_one+0x82/0x3a0 [ 480.173192][T11080] __pte_alloc+0x6d/0x3c0 [ 480.173212][T11080] ? __pfx___pte_alloc+0x10/0x10 [ 480.173231][T11080] ? mark_held_locks+0x49/0x80 [ 480.173257][T11080] ? finish_task_switch.isra.0+0x221/0xc10 [ 480.173279][T11080] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.173303][T11080] do_pte_missing+0x285a/0x3ba0 [ 480.173328][T11080] ? trace_sched_exit_tp+0xd1/0x120 [ 480.173348][T11080] ? __schedule+0x11a3/0x5de0 [ 480.173374][T11080] __handle_mm_fault+0x152a/0x2a50 [ 480.173408][T11080] ? __pfx___handle_mm_fault+0x10/0x10 [ 480.173450][T11080] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.173476][T11080] handle_mm_fault+0x589/0xd10 [ 480.173508][T11080] __get_user_pages+0x551/0x34a0 [ 480.173542][T11080] ? __pfx___get_user_pages+0x10/0x10 [ 480.173566][T11080] ? __rcu_read_unlock+0x2bc/0x550 [ 480.173590][T11080] get_user_pages_remote+0x243/0xab0 [ 480.173614][T11080] ? mas_parent_gap+0x6f0/0x7b0 [ 480.173637][T11080] ? __pfx_get_user_pages_remote+0x10/0x10 [ 480.173664][T11080] ? __lock_acquire+0xb97/0x1ce0 [ 480.173695][T11080] __access_remote_vm+0x24d/0x850 [ 480.173722][T11080] ? do_raw_spin_lock+0x12c/0x2b0 [ 480.173740][T11080] ? __pfx___access_remote_vm+0x10/0x10 [ 480.173761][T11080] ? environ_read+0x214/0x450 [ 480.173818][T11080] environ_read+0x31e/0x450 [ 480.173841][T11080] ? __pfx_environ_read+0x10/0x10 [ 480.173856][T11080] vfs_readv+0x5c1/0x8b0 [ 480.173879][T11080] ? __pfx_vfs_readv+0x10/0x10 [ 480.173894][T11080] ? trace_sched_exit_tp+0xd1/0x120 [ 480.173914][T11080] ? __schedule+0x11a3/0x5de0 [ 480.173948][T11080] ? __fget_files+0x20e/0x3c0 [ 480.173975][T11080] ? do_preadv+0x1a6/0x270 [ 480.173989][T11080] do_preadv+0x1a6/0x270 [ 480.174006][T11080] ? __pfx_do_preadv+0x10/0x10 [ 480.174030][T11080] do_syscall_64+0xcd/0x4c0 [ 480.174054][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.174072][T11080] RIP: 0033:0x7f951298ebe9 [ 480.174092][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.174109][T11080] RSP: 002b:00007f95138a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 480.174127][T11080] RAX: ffffffffffffffda RBX: 00007f9512bc6180 RCX: 00007f951298ebe9 [ 480.174138][T11080] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 480.174148][T11080] RBP: 00007f95138a8090 R08: 0000000000000000 R09: 0000000000000000 [ 480.174159][T11080] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 480.174169][T11080] R13: 00007f9512bc6218 R14: 00007f9512bc6180 R15: 00007ffe6c987ea8 [ 480.174194][T11080] [ 481.164387][T11081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 481.173378][ T975] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 481.389604][ T975] usb 6-1: Using ep0 maxpacket: 8 [ 481.411671][ T975] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.452932][ T975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.527612][ T975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.577380][ T975] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.622241][ T975] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 481.662307][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.682521][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 481.682536][ T30] audit: type=1400 audit(1757115096.913:860): avc: denied { ioctl } for pid=11088 comm="syz.6.1181" path="socket:[32188]" dev="sockfs" ino=32188 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 481.930855][ T975] usb 6-1: GET_CAPABILITIES returned 0 [ 481.936590][ T975] usbtmc 6-1:16.0: can't read capabilities [ 482.739791][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.749797][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.759913][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.768091][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.776011][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.805955][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.813709][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.847710][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.858463][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.866312][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.945531][T11100] trusted_key: encrypted_key: insufficient parameters specified [ 483.047374][ T30] audit: type=1400 audit(1757115098.273:861): avc: denied { read write } for pid=11097 comm="syz.3.1183" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 483.153994][ T30] audit: type=1400 audit(1757115098.273:862): avc: denied { open } for pid=11097 comm="syz.3.1183" path="/dev/input/mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 483.989493][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 484.009902][ T30] audit: type=1400 audit(1757115098.283:863): avc: denied { ioctl } for pid=11097 comm="syz.3.1183" path="/dev/input/mouse0" dev="devtmpfs" ino=991 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 484.020861][ T5911] libceph: connect (1)[b::]:6789 error -101 [ 484.096844][ T5911] libceph: mon0 (1)[b::]:6789 connect error [ 484.160525][T11107] ceph: No mds server is up or the cluster is laggy [ 484.188098][ T5911] usb 6-1: USB disconnect, device number 32 [ 484.274016][T11111] syz_tun: entered allmulticast mode [ 484.491665][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.514622][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.525325][T11110] syz_tun: left allmulticast mode [ 485.061388][ T5966] libceph: connect (1)[b::]:6789 error -101 [ 485.081167][ T5853] Bluetooth: hci5: command tx timeout [ 485.084047][ T5966] libceph: mon0 (1)[b::]:6789 connect error [ 485.111766][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 485.159772][T11116] ceph: No mds server is up or the cluster is laggy [ 485.211183][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.318982][T11126] netlink: 'syz.5.1188': attribute type 1 has an invalid length. [ 485.348224][T11126] netlink: 'syz.5.1188': attribute type 4 has an invalid length. [ 485.375033][ T24] usb 4-1: config 0 descriptor?? [ 485.388571][T11126] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1188'. [ 485.464396][ T30] audit: type=1400 audit(1757115100.703:864): avc: denied { map } for pid=11125 comm="syz.6.1190" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.750400][T11095] chnl_net:caif_netlink_parms(): no params data found [ 485.778392][T11135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'. [ 485.910518][ T24] cp2112 0003:10C4:EA90.0004: item fetching failed at offset 5/7 [ 485.918980][ T24] cp2112 0003:10C4:EA90.0004: parse failed [ 485.924986][ T24] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 486.331147][ T5911] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 486.534631][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 486.563773][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.599484][ T5911] usb 6-1: Product: syz [ 486.609943][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.620762][ T5911] usb 6-1: Manufacturer: syz [ 486.637241][ T5911] usb 6-1: SerialNumber: syz [ 486.647908][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.692943][T11095] bridge_slave_0: entered allmulticast mode [ 486.702902][ T5923] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 486.736066][T11095] bridge_slave_0: entered promiscuous mode [ 486.789960][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.851296][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.874479][ T5923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.889199][ T5923] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.921392][ T5923] usb 7-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 486.935740][T11095] bridge_slave_1: entered allmulticast mode [ 486.959475][ T5923] usb 7-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 486.974245][T11095] bridge_slave_1: entered promiscuous mode [ 487.035998][ T5923] usb 7-1: config 1 interface 1 has no altsetting 0 [ 487.092830][ T5923] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.102320][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.111705][ T5853] Bluetooth: hci5: command tx timeout [ 487.117363][ T5923] usb 7-1: Product: syz [ 487.186043][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.198767][ T5923] usb 7-1: Manufacturer: syz [ 487.218704][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.227958][ T5923] usb 7-1: SerialNumber: syz [ 487.264432][ T5923] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 487.453827][T11095] team0: Port device team_slave_0 added [ 487.486831][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 487.520930][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 487.536695][ T5923] usb 4-1: USB disconnect, device number 34 [ 487.566958][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 487.599557][T11095] team0: Port device team_slave_1 added [ 487.629384][ T5911] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 487.729855][ T30] audit: type=1400 audit(1757115102.963:865): avc: denied { watch watch_reads } for pid=11151 comm="syz.3.1195" path="/239" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 487.754450][ T5911] usb 6-1: USB disconnect, device number 33 [ 487.882821][ T30] audit: type=1400 audit(1757115103.073:866): avc: denied { create } for pid=11151 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 487.912523][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 488.020631][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.032775][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.081626][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.114935][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 488.173365][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.202849][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.233948][ T10] usb 1-1: config 0 descriptor?? [ 488.281409][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.482466][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.751838][ T5911] libceph: connect (1)[b::]:6789 error -101 [ 488.759744][ T5911] libceph: mon0 (1)[b::]:6789 connect error [ 488.957253][ T10] lenovo 0003:17EF:6067.0005: unknown main item tag 0x0 [ 489.018164][ T10] lenovo 0003:17EF:6067.0005: item fetching failed at offset 3/5 [ 489.056104][ T10] lenovo 0003:17EF:6067.0005: hid_parse failed [ 489.082992][ T10] lenovo 0003:17EF:6067.0005: probe with driver lenovo failed with error -22 [ 489.102865][ T5911] libceph: connect (1)[b::]:6789 error -101 [ 489.120780][ T5911] libceph: mon0 (1)[b::]:6789 connect error [ 489.158546][T11160] ceph: No mds server is up or the cluster is laggy [ 489.168697][ T10] usb 1-1: USB disconnect, device number 41 [ 489.196359][ T5853] Bluetooth: hci5: command tx timeout [ 489.238993][T11095] hsr_slave_0: entered promiscuous mode [ 489.324150][T11095] hsr_slave_1: entered promiscuous mode [ 489.330883][T11095] debugfs: 'hsr0' already exists in 'hsr' [ 489.337598][T11095] Cannot create hsr debugfs directory [ 489.346613][ T30] audit: type=1400 audit(1757115104.583:867): avc: denied { bind } for pid=11163 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 489.390417][ T30] audit: type=1400 audit(1757115104.583:868): avc: denied { setopt } for pid=11163 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 489.438760][ T30] audit: type=1400 audit(1757115104.653:869): avc: denied { write } for pid=11163 comm="syz.3.1197" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 489.534563][ T30] audit: type=1400 audit(1757115104.653:870): avc: denied { ioctl } for pid=11163 comm="syz.3.1197" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 489.609202][ T30] audit: type=1400 audit(1757115104.803:871): avc: denied { write } for pid=11163 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 490.028580][ T30] audit: type=1326 audit(1757115105.223:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.5.1198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f951298ebe9 code=0xffff0000 [ 490.250539][T11095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 490.309035][T11095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 490.343234][T11182] No source specified [ 490.393588][T11095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 490.482686][T11095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 490.609642][ T5966] usb 7-1: USB disconnect, device number 6 [ 490.855873][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1201'. [ 491.275445][ T5853] Bluetooth: hci5: command tx timeout [ 491.322286][T11186] netlink: 'syz.0.1200': attribute type 2 has an invalid length. [ 491.586430][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.781933][T11206] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 491.909605][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.194717][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.201894][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.301015][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.308241][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.747828][T11095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.881597][T11095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.571634][ T30] audit: type=1400 audit(1757115108.803:873): avc: denied { watch_mount } for pid=11214 comm="syz.0.1207" path="/253" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 493.963529][T11226] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 493.988407][T11226] netlink: 'syz.5.1205': attribute type 4 has an invalid length. [ 494.013487][T11226] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1205'. [ 494.096915][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.954598][ T30] audit: type=1400 audit(1757115110.193:874): avc: denied { accept } for pid=11234 comm="syz.5.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 495.863540][ T30] audit: type=1400 audit(1757115111.103:875): avc: denied { kexec_image_load } for pid=11246 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 495.987142][T11095] veth0_vlan: entered promiscuous mode [ 496.070174][T11095] veth1_vlan: entered promiscuous mode [ 496.217543][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1210'. [ 497.157116][T11095] veth0_macvtap: entered promiscuous mode [ 497.314034][T11095] veth1_macvtap: entered promiscuous mode [ 497.497213][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.838495][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1213'. [ 498.018880][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.039529][ T3473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.239694][ T3473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.784084][ T3473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.994845][ T3473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.175416][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 499.653989][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.712422][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.808740][ T9884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.837263][ T9884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.114452][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.175106][T11290] SELinux: syz.7.1182 (11290) set checkreqprot to 1. This is no longer supported. [ 501.175106][ T30] audit: type=1400 audit(1757115116.413:876): avc: denied { setcheckreqprot } for pid=11289 comm="syz.7.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 502.587292][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 503.183263][ T10] usb 8-1: config 0 has no interfaces? [ 503.195760][T11316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1228'. [ 503.405101][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 503.488277][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.539947][T11318] trusted_key: encrypted_key: key user:syz not found [ 503.552618][ T10] usb 8-1: config 0 descriptor?? [ 504.651664][ T30] audit: type=1400 audit(1757115119.203:877): avc: denied { mounton } for pid=11299 comm="syz.7.1224" path="/proc/7/task" dev="proc" ino=33668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 506.781123][ T30] audit: type=1400 audit(1757115119.233:878): avc: denied { associate } for pid=11299 comm="syz.7.1224" name="freezer.self_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 506.831126][ T30] audit: type=1400 audit(1757115119.983:879): avc: denied { create } for pid=11299 comm="syz.7.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 506.951466][T10206] usb 8-1: USB disconnect, device number 2 [ 508.171329][T11340] ubi: mtd0 is already attached to ubi31 [ 508.649818][T11344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.770218][ T30] audit: type=1400 audit(1757115125.003:880): avc: denied { bind } for pid=11353 comm="syz.6.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 509.844743][T11355] random: crng reseeded on system resumption [ 509.859508][ T30] audit: type=1400 audit(1757115125.083:881): avc: denied { read write } for pid=11353 comm="syz.6.1237" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 510.338107][ T30] audit: type=1400 audit(1757115125.083:882): avc: denied { ioctl open } for pid=11353 comm="syz.6.1237" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 510.362175][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.482230][ T5923] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 510.687991][ T5923] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 510.809451][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.839170][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1239'. [ 511.247215][ T5923] usb 6-1: Product: syz [ 511.270102][ T5923] usb 6-1: Manufacturer: syz [ 511.288068][ T5923] usb 6-1: SerialNumber: syz [ 511.318103][ T5923] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.515886][ T5911] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 511.551605][ T30] audit: type=1400 audit(1757115126.773:883): avc: denied { write } for pid=11364 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.267123][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1243'. [ 512.315224][ T975] usb 6-1: USB disconnect, device number 34 [ 512.525717][ T30] audit: type=1400 audit(1757115127.713:884): avc: denied { setopt } for pid=11380 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 512.714118][T11389] ptrace attach of "./syz-executor exec"[11391] was attempted by "./syz-executor exec"[11389] [ 512.961701][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 513.052436][ T5911] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 513.060441][T11392] ALSA: mixer_oss: invalid OSS volume '' [ 513.094621][ T5911] ath9k_htc: Failed to initialize the device [ 513.191697][ T975] usb 6-1: ath9k_htc: USB layer deinitialized [ 513.326079][T11400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.451707][T11403] netlink: 'syz.3.1249': attribute type 4 has an invalid length. [ 513.610722][ T30] audit: type=1400 audit(1757115128.843:885): avc: denied { connect } for pid=11409 comm="syz.7.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.922499][ T30] audit: type=1326 audit(1757115128.913:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed98ebe9 code=0x7ffc0000 [ 514.096511][ T30] audit: type=1326 audit(1757115128.913:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed98ebe9 code=0x7ffc0000 [ 514.340357][ T30] audit: type=1326 audit(1757115128.913:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61ed92adb9 code=0x7ffc0000 [ 514.433849][ T30] audit: type=1326 audit(1757115128.913:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f61ed98ebe9 code=0x7ffc0000 [ 514.593468][ T30] audit: type=1326 audit(1757115128.913:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed98ebe9 code=0x7ffc0000 [ 514.711105][ T30] audit: type=1326 audit(1757115128.913:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed98ebe9 code=0x7ffc0000 [ 514.734538][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.473285][ T30] audit: type=1326 audit(1757115128.913:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61ed92adb9 code=0x7ffc0000 [ 515.497474][ T30] audit: type=1326 audit(1757115128.913:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61ed92adb9 code=0x7ffc0000 [ 515.520770][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.541183][T11421] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 516.005608][T11427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1253'. [ 516.581947][T11413] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 516.597898][T11413] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.605319][T11413] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.937163][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'. [ 516.965120][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 517.067459][T11440] ALSA: mixer_oss: invalid OSS volume '' [ 517.521205][ T5911] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 517.548118][ T5923] IPVS: starting estimator thread 0... [ 517.681277][T11456] IPVS: using max 73 ests per chain, 175200 per kthread [ 517.705231][T11457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.731241][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 517.798297][ T5911] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 517.873801][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.907504][ T5911] usb 6-1: config 0 has no interface number 0 [ 517.936835][ T5911] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 518.110507][ T5911] usb 6-1: config 0 interface 196 has no altsetting 0 [ 518.185055][ T5911] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 518.243653][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.413616][ T5911] usb 6-1: Product: syz [ 518.426592][ T5911] usb 6-1: Manufacturer: syz [ 518.437179][ T5911] usb 6-1: SerialNumber: syz [ 518.499485][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 518.499504][ T30] audit: type=1400 audit(1757115133.733:968): avc: denied { append } for pid=11463 comm="syz.0.1264" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 518.547316][ T5911] usb 6-1: config 0 descriptor?? [ 518.573208][ T5911] ipheth 6-1:0.196: Unable to find endpoints [ 518.935871][T11473] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 518.943822][T11473] netlink: 'syz.0.1265': attribute type 4 has an invalid length. [ 518.964071][T11473] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1265'. [ 519.053911][T11475] delete_channel: no stack [ 519.058872][ T30] audit: type=1400 audit(1757115134.273:969): avc: denied { create } for pid=11470 comm="syz.7.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 520.112773][ T24] usb 6-1: USB disconnect, device number 35 [ 520.250692][T11487] netlink: 'syz.5.1270': attribute type 16 has an invalid length. [ 520.281234][T11487] netlink: 'syz.5.1270': attribute type 17 has an invalid length. [ 521.929753][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 522.077200][T11487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.176138][T11497] ALSA: mixer_oss: invalid OSS volume '' [ 522.306022][ T30] audit: type=1400 audit(1757115137.523:970): avc: denied { connect } for pid=11499 comm="syz.6.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 522.478368][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1273'. [ 522.561326][ T30] audit: type=1400 audit(1757115137.603:971): avc: denied { setattr } for pid=11499 comm="syz.6.1272" name="LLC" dev="sockfs" ino=34628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 522.583791][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.921346][T10206] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 522.935169][T11516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.071276][T10206] usb 7-1: device descriptor read/64, error -71 [ 523.209502][T11518] bond0: entered promiscuous mode [ 523.248680][T11518] bond_slave_0: entered promiscuous mode [ 523.300769][T11518] bond_slave_1: entered promiscuous mode [ 523.341307][T10206] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 523.381838][T11518] dummy0: entered promiscuous mode [ 523.430380][T11518] hsr1: entered promiscuous mode [ 523.486454][T11518] hsr1: entered allmulticast mode [ 523.492000][T10206] usb 7-1: device descriptor read/64, error -71 [ 523.527602][T11518] bond0: entered allmulticast mode [ 523.581187][T11518] bond_slave_0: entered allmulticast mode [ 523.618966][T11518] bond_slave_1: entered allmulticast mode [ 523.633582][T10206] usb usb7-port1: attempt power cycle [ 523.681151][T11518] dummy0: entered allmulticast mode [ 524.013850][T10206] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 524.072811][T11524] loop2: detected capacity change from 0 to 7 [ 524.298371][ C0] blk_print_req_error: 32 callbacks suppressed [ 524.298390][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.313890][ C0] buffer_io_error: 32 callbacks suppressed [ 524.313907][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.330579][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.340129][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.350806][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.360099][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.370576][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.379954][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.390361][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.399666][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.412952][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.422230][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.431231][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.440517][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.449904][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.459140][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.467355][T11524] ldm_validate_partition_table(): Disk read failed. [ 524.480210][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.489525][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.498501][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 524.507823][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 524.521195][T11524] Dev loop2: unable to read RDB block 0 [ 524.528967][T11524] loop2: unable to read partition table [ 524.534888][T11524] loop2: partition table beyond EOD, truncated [ 524.541264][T11524] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 524.564188][T10206] usb 7-1: device descriptor read/8, error -71 [ 524.782131][T11528] loop7: detected capacity change from 0 to 524255232 [ 525.081222][T10206] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 525.148121][T10206] usb 7-1: device descriptor read/8, error -71 [ 525.223129][ T30] audit: type=1400 audit(1757115140.403:972): avc: denied { transfer } for pid=11531 comm="syz.7.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 525.312996][T11535] No source specified [ 525.501076][T10206] usb usb7-port1: unable to enumerate USB device [ 525.656878][ T30] audit: type=1400 audit(1757115140.583:973): avc: denied { cmd } for pid=11531 comm="syz.7.1279" path="socket:[34803]" dev="sockfs" ino=34803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 525.901159][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 526.166175][T11544] FAULT_INJECTION: forcing a failure. [ 526.166175][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 526.220171][T11544] CPU: 0 UID: 0 PID: 11544 Comm: syz.6.1283 Not tainted syzkaller #0 PREEMPT(full) [ 526.220199][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.220210][T11544] Call Trace: [ 526.220216][T11544] [ 526.220224][T11544] dump_stack_lvl+0x16c/0x1f0 [ 526.220256][T11544] should_fail_ex+0x512/0x640 [ 526.220284][T11544] should_failslab+0xc2/0x120 [ 526.220307][T11544] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 526.220327][T11544] ? skb_clone+0x190/0x3f0 [ 526.220355][T11544] skb_clone+0x190/0x3f0 [ 526.220378][T11544] netlink_deliver_tap+0xabd/0xd30 [ 526.220409][T11544] netlink_dump+0xa5f/0xd30 [ 526.220435][T11544] ? __pfx_netlink_dump+0x10/0x10 [ 526.220470][T11544] ? __asan_memset+0x23/0x50 [ 526.220497][T11544] ? genl_start+0x67f/0x980 [ 526.220526][T11544] __netlink_dump_start+0x6d6/0x990 [ 526.220554][T11544] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 526.220583][T11544] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 526.220606][T11544] ? genl_op_from_small+0x25/0x440 [ 526.220632][T11544] ? __pfx_genl_start+0x10/0x10 [ 526.220651][T11544] ? __pfx_genl_dumpit+0x10/0x10 [ 526.220672][T11544] ? __pfx_genl_done+0x10/0x10 [ 526.220694][T11544] ? bpf_lsm_capable+0x9/0x10 [ 526.220716][T11544] ? security_capable+0x7e/0x260 [ 526.220739][T11544] genl_rcv_msg+0x46e/0x800 [ 526.220763][T11544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.220785][T11544] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 526.220819][T11544] netlink_rcv_skb+0x155/0x420 [ 526.220839][T11544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.220861][T11544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.220891][T11544] ? netlink_deliver_tap+0x1ae/0xd30 [ 526.220912][T11544] genl_rcv+0x28/0x40 [ 526.220932][T11544] netlink_unicast+0x5aa/0x870 [ 526.220989][T11544] ? __pfx_netlink_unicast+0x10/0x10 [ 526.221008][T11544] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 526.221039][T11544] netlink_sendmsg+0x8d1/0xdd0 [ 526.221065][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.221097][T11544] ____sys_sendmsg+0xa98/0xc70 [ 526.221123][T11544] ? copy_msghdr_from_user+0x10a/0x160 [ 526.221141][T11544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.221174][T11544] ___sys_sendmsg+0x134/0x1d0 [ 526.221194][T11544] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.221241][T11544] __sys_sendmsg+0x16d/0x220 [ 526.221259][T11544] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.221293][T11544] do_syscall_64+0xcd/0x4c0 [ 526.221315][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.221331][T11544] RIP: 0033:0x7f4060b8ebe9 [ 526.221343][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.221359][T11544] RSP: 002b:00007f4061aea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.221373][T11544] RAX: ffffffffffffffda RBX: 00007f4060dc5fa0 RCX: 00007f4060b8ebe9 [ 526.221383][T11544] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 526.221392][T11544] RBP: 00007f4061aea090 R08: 0000000000000000 R09: 0000000000000000 [ 526.221401][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.221409][T11544] R13: 00007f4060dc6038 R14: 00007f4060dc5fa0 R15: 00007ffd13fc9dd8 [ 526.221431][T11544] [ 526.542635][ T24] usb 8-1: device descriptor read/64, error -71 [ 526.916415][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 527.268683][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 527.441004][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 527.473769][T11556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.481177][T11556] IPv6: NLM_F_CREATE should be set when creating new route [ 527.488392][T11556] IPv6: NLM_F_CREATE should be set when creating new route [ 527.509305][ T24] usb 8-1: device descriptor read/64, error -71 [ 527.550980][T11555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.641192][ T24] usb usb8-port1: attempt power cycle [ 528.033693][T11569] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 528.041484][T11569] netlink: 'syz.6.1289': attribute type 4 has an invalid length. [ 528.049280][T11569] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1289'. [ 528.071993][ T30] audit: type=1400 audit(1757115143.303:974): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 528.121599][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 528.502548][ T24] usb 8-1: device descriptor read/8, error -71 [ 529.844997][T11595] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 529.960478][T11596] netlink: 'syz.6.1298': attribute type 1 has an invalid length. [ 529.971594][T11596] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 529.999588][T11595] netlink: 'syz.7.1297': attribute type 10 has an invalid length. [ 530.007488][T11595] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1297'. [ 530.016530][T11595] batadv0: entered promiscuous mode [ 530.021759][T11595] batadv0: entered allmulticast mode [ 530.027547][T11595] bridge0: port 3(batadv0) entered blocking state [ 530.034017][T11595] bridge0: port 3(batadv0) entered disabled state [ 530.044206][ T30] audit: type=1400 audit(1757115145.233:975): avc: denied { mount } for pid=11587 comm="syz.7.1297" name="/" dev="pstore" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 530.066566][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.111635][T11596] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1298'. [ 530.114945][ T30] audit: type=1400 audit(1757115145.233:976): avc: denied { mounton } for pid=11587 comm="syz.7.1297" path="/" dev="pstore" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 530.256204][ T36] batman_adv: batadv0: IGMP Querier appeared [ 530.262633][ T36] batman_adv: batadv0: MLD Querier appeared [ 530.739525][ T30] audit: type=1400 audit(1757115145.973:977): avc: denied { unmount } for pid=11095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 531.275968][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 531.984091][T11609] trusted_key: encrypted_key: insufficient parameters specified [ 532.292356][ T30] audit: type=1400 audit(1757115147.523:978): avc: denied { setopt } for pid=11610 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 532.761683][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1307'. [ 532.763832][T10206] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 532.952294][T11628] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 533.032758][T10206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.051213][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 533.058577][T10206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 533.155366][T10206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 533.295698][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 533.305135][T10206] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 533.326479][T10206] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.345709][T10206] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.374308][T10206] usb 1-1: Manufacturer: syz [ 533.382050][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.395556][T10206] usb 1-1: config 0 descriptor?? [ 533.416019][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.455597][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.511185][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.564895][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.604024][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.801217][T10206] rc_core: IR keymap rc-hauppauge not found [ 533.840314][T10206] Registered IR keymap rc-empty [ 533.868998][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 533.872024][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 533.899263][ T24] usbtmc 4-1:16.0: can't read capabilities [ 533.928553][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 534.052056][T10206] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 534.149661][T10206] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 534.471574][ T975] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 534.671117][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 534.744878][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 534.813113][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 534.867097][ T975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.882847][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 534.947913][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.010403][T11653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 535.056092][ T975] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.100982][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.402168][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.429444][ T975] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.443875][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.531823][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.573188][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.602379][T10206] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 535.609378][ T975] usb 7-1: SerialNumber: syz [ 535.664564][T10206] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 535.695035][T10206] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.778097][T10206] usb 1-1: USB disconnect, device number 42 [ 535.852847][ T24] usb 4-1: USB disconnect, device number 35 [ 536.168191][ T30] audit: type=1400 audit(1757115151.383:979): avc: denied { ioctl } for pid=11658 comm="syz.7.1314" path="socket:[35750]" dev="sockfs" ino=35750 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.287855][T11668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.164608][ T975] usb 7-1: 0:2 : does not exist [ 538.169538][ T975] usb 7-1: unit 5: unexpected type 0x03 [ 538.281909][ T975] usb 7-1: USB disconnect, device number 11 [ 538.510625][T11681] veth0_to_bridge: entered promiscuous mode [ 538.625181][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.654090][ T30] audit: type=1400 audit(1757115153.883:980): avc: denied { read } for pid=11676 comm="syz.5.1319" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 538.657239][T11681] tipc: Enabling of bearer rejected, failed to enable media [ 539.234069][ T30] audit: type=1400 audit(1757115153.883:981): avc: denied { open } for pid=11676 comm="syz.5.1319" path="/201/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 539.665408][T11693] No source specified [ 539.727516][T11678] veth0_to_bridge: left promiscuous mode [ 539.962266][ T30] audit: type=1400 audit(1757115155.103:982): avc: denied { connect } for pid=11694 comm="syz.6.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 540.889577][T11708] delete_channel: no stack [ 542.831649][ T975] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 543.007053][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 543.018761][T11733] ALSA: mixer_oss: invalid OSS volume '' [ 543.079695][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 543.113635][ T975] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 543.181759][ T975] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.231373][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 543.255291][ T975] usb 8-1: config 0 has no interface number 0 [ 543.326177][ T975] usb 8-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.433633][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 543.445153][ T975] usb 8-1: config 0 interface 196 has no altsetting 0 [ 543.478929][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 543.479331][ T975] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 543.546368][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.622598][T11741] hugetlbfs: syz.5.1335 (11741): Using mlock ulimits for SHM_HUGETLB is obsolete [ 543.711161][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 543.866529][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.913883][ T30] audit: type=1400 audit(1757115158.873:983): avc: denied { read } for pid=11736 comm="syz.5.1335" path="socket:[36946]" dev="sockfs" ino=36946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 543.936007][ T975] usb 8-1: Product: syz [ 543.961171][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.964359][ T975] usb 8-1: Manufacturer: syz [ 543.970934][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.970962][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.004346][ T975] usb 8-1: SerialNumber: syz [ 544.034155][ T975] usb 8-1: config 0 descriptor?? [ 544.077168][ T975] ipheth 8-1:0.196: Unable to find endpoints [ 544.081560][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.128163][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.243822][T11745] netlink: 'syz.3.1336': attribute type 4 has an invalid length. [ 544.363292][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 544.368986][ T10] usbtmc 1-1:16.0: can't read capabilities [ 544.811488][T11753] netlink: 'syz.3.1336': attribute type 4 has an invalid length. [ 544.947936][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.957055][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.966108][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.975237][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.984288][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.993438][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.004037][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.013155][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.022227][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.031284][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.040351][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.122685][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.131829][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.140904][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.149997][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.159083][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.190330][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.199441][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 545.650867][T10471] usb 8-1: USB disconnect, device number 7 [ 545.814989][ T30] audit: type=1400 audit(1757115161.053:984): avc: denied { unmount } for pid=9865 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 546.542119][T11765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 547.337864][ T10] usb 1-1: USB disconnect, device number 43 [ 547.904127][T11778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.071141][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 548.146416][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 548.195129][T11779] ALSA: mixer_oss: invalid OSS volume '' [ 548.235414][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 548.245167][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.265564][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.301266][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.334633][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.391137][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.686722][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.861883][ T30] audit: type=1400 audit(1757115164.023:985): avc: denied { write } for pid=11786 comm="syz.3.1347" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 549.114206][ T30] audit: type=1400 audit(1757115164.353:986): avc: denied { map } for pid=11791 comm="syz.3.1349" path="socket:[36444]" dev="sockfs" ino=36444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.142004][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 549.167152][ T10] usbtmc 1-1:16.0: can't read capabilities [ 549.250361][ T30] audit: type=1400 audit(1757115164.353:987): avc: denied { read } for pid=11791 comm="syz.3.1349" path="socket:[36444]" dev="sockfs" ino=36444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.424438][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.433539][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.442627][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.451667][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.460716][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.469754][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.478793][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.487836][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.496877][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.574154][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.753067][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.762192][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.771246][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.780290][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.790843][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 549.831784][ T30] audit: type=1400 audit(1757115164.813:988): avc: denied { shutdown } for pid=11794 comm="syz.7.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 549.911368][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 550.269958][ T30] audit: type=1400 audit(1757115165.503:989): avc: denied { setopt } for pid=11803 comm="syz.6.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 550.424834][ T30] audit: type=1400 audit(1757115165.653:990): avc: denied { connect } for pid=11803 comm="syz.6.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 550.515638][ T30] audit: type=1400 audit(1757115165.753:991): avc: denied { ioctl } for pid=11803 comm="syz.6.1351" path="socket:[37190]" dev="sockfs" ino=37190 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 550.719024][T11812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11812 comm=syz.3.1352 [ 550.735516][ T30] audit: type=1400 audit(1757115165.973:992): avc: denied { accept } for pid=11806 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 551.357603][T10206] usb 1-1: USB disconnect, device number 44 [ 553.444978][T11839] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 553.453323][T11839] netlink: 'syz.3.1358': attribute type 4 has an invalid length. [ 553.495057][T11839] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1358'. [ 553.810710][T11847] FAULT_INJECTION: forcing a failure. [ 553.810710][T11847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.874215][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 553.884882][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.7.1361 Not tainted syzkaller #0 PREEMPT(full) [ 553.884900][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.884906][T11847] Call Trace: [ 553.884910][T11847] [ 553.884916][T11847] dump_stack_lvl+0x16c/0x1f0 [ 553.884933][T11847] should_fail_ex+0x512/0x640 [ 553.884950][T11847] _copy_from_user+0x2e/0xd0 [ 553.884966][T11847] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 553.884986][T11847] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 553.885005][T11847] ? __local_bh_enable_ip+0xa4/0x120 [ 553.885020][T11847] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.885035][T11847] do_ip_setsockopt+0x1dce/0x3240 [ 553.885059][T11847] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 553.885078][T11847] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 553.885095][T11847] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 553.885116][T11847] ip_setsockopt+0x59/0xf0 [ 553.885133][T11847] udp_setsockopt+0x7d/0xd0 [ 553.885150][T11847] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 553.885167][T11847] do_sock_setsockopt+0xf3/0x1d0 [ 553.885185][T11847] __sys_setsockopt+0x1a0/0x230 [ 553.885200][T11847] __x64_sys_setsockopt+0xbd/0x160 [ 553.885211][T11847] ? do_syscall_64+0x91/0x4c0 [ 553.885225][T11847] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.885237][T11847] do_syscall_64+0xcd/0x4c0 [ 553.885251][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.885262][T11847] RIP: 0033:0x7f158e78ebe9 [ 553.885271][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.885282][T11847] RSP: 002b:00007f158f660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.885293][T11847] RAX: ffffffffffffffda RBX: 00007f158e9c5fa0 RCX: 00007f158e78ebe9 [ 553.885300][T11847] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 553.885306][T11847] RBP: 00007f158f660090 R08: 000000000000000c R09: 0000000000000000 [ 553.885312][T11847] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 553.885318][T11847] R13: 00007f158e9c6038 R14: 00007f158e9c5fa0 R15: 00007ffcdcbafad8 [ 553.885333][T11847] [ 554.717801][T11857] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 554.767531][T11857] overlayfs: missing 'lowerdir' [ 555.018155][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 555.298187][T11864] vlan2: entered promiscuous mode [ 555.334952][T11870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.377747][T11864] gretap0: entered promiscuous mode [ 555.771130][ T5911] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 556.071587][T11881] FAULT_INJECTION: forcing a failure. [ 556.071587][T11881] name failslab, interval 1, probability 0, space 0, times 0 [ 556.085202][T11881] CPU: 0 UID: 0 PID: 11881 Comm: syz.7.1371 Not tainted syzkaller #0 PREEMPT(full) [ 556.085227][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.085238][T11881] Call Trace: [ 556.085243][T11881] [ 556.085250][T11881] dump_stack_lvl+0x16c/0x1f0 [ 556.085277][T11881] should_fail_ex+0x512/0x640 [ 556.085299][T11881] ? fs_reclaim_acquire+0xae/0x150 [ 556.085324][T11881] ? tomoyo_encode2+0x100/0x3e0 [ 556.085348][T11881] should_failslab+0xc2/0x120 [ 556.085368][T11881] __kmalloc_noprof+0xd2/0x510 [ 556.085393][T11881] tomoyo_encode2+0x100/0x3e0 [ 556.085422][T11881] tomoyo_encode+0x29/0x50 [ 556.085445][T11881] tomoyo_mount_acl+0x144/0x850 [ 556.085467][T11881] ? bpf_ksym_find+0x127/0x1c0 [ 556.085494][T11881] ? is_bpf_text_address+0x94/0x1a0 [ 556.085515][T11881] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 556.085537][T11881] ? __kernel_text_address+0xd/0x40 [ 556.085557][T11881] ? unwind_get_return_address+0x59/0xa0 [ 556.085579][T11881] ? arch_stack_walk+0xa6/0x100 [ 556.085625][T11881] ? tomoyo_domain+0xbb/0x150 [ 556.085640][T11881] ? tomoyo_profile+0x47/0x60 [ 556.085660][T11881] tomoyo_mount_permission+0x16d/0x420 [ 556.085682][T11881] ? tomoyo_mount_permission+0x14f/0x420 [ 556.085713][T11881] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 556.085754][T11881] security_sb_mount+0x9b/0x260 [ 556.085779][T11881] path_mount+0x15f/0x2000 [ 556.085807][T11881] ? __pfx_path_mount+0x10/0x10 [ 556.085830][T11881] ? kmem_cache_free+0x2d1/0x4d0 [ 556.085847][T11881] ? putname+0x154/0x1a0 [ 556.085874][T11881] ? putname+0x154/0x1a0 [ 556.085900][T11881] ? __x64_sys_mount+0x28d/0x310 [ 556.085920][T11881] __x64_sys_mount+0x28d/0x310 [ 556.085943][T11881] ? __pfx___x64_sys_mount+0x10/0x10 [ 556.085974][T11881] do_syscall_64+0xcd/0x4c0 [ 556.085999][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.086016][T11881] RIP: 0033:0x7f158e78ebe9 [ 556.086031][T11881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.086046][T11881] RSP: 002b:00007f158f61e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.086063][T11881] RAX: ffffffffffffffda RBX: 00007f158e9c6180 RCX: 00007f158e78ebe9 [ 556.086075][T11881] RDX: 000020000015bffc RSI: 0000200000000240 RDI: 0000000000000000 [ 556.086085][T11881] RBP: 00007f158f61e090 R08: 0000000000000000 R09: 0000000000000000 [ 556.086095][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.086105][T11881] R13: 00007f158e9c6218 R14: 00007f158e9c6180 R15: 00007ffcdcbafad8 [ 556.086130][T11881] [ 556.393360][ T5911] usb 1-1: unable to get BOS descriptor or descriptor too short [ 556.401771][ T5911] usb 1-1: not running at top speed; connect to a high speed hub [ 556.616312][ T5911] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 556.624734][ T5911] usb 1-1: config 1 has no interface number 0 [ 556.633583][ T5911] usb 1-1: config 1 interface 138 has no altsetting 0 [ 556.643082][ T5911] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 556.690959][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.769800][ T5911] usb 1-1: Product: syz [ 556.785169][ T5911] usb 1-1: Manufacturer: syz [ 556.832768][ T5911] usb 1-1: SerialNumber: syz [ 557.147539][T11893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1368'. [ 557.261449][T11894] input: syz1 as /devices/virtual/input/input61 [ 557.563794][ T30] audit: type=1400 audit(1757115172.803:993): avc: denied { bind } for pid=11885 comm="syz.7.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 557.960754][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.101864][ T5911] usb 1-1: USB disconnect, device number 45 [ 558.357373][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.692647][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 560.727657][T11939] trusted_key: encrypted_key: key user:syz not found [ 561.314766][ T30] audit: type=1400 audit(1757115176.553:994): avc: denied { ioctl } for pid=11947 comm="syz.7.1387" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.409906][ T30] audit: type=1400 audit(1757115176.643:995): avc: denied { bind } for pid=11950 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 561.461698][ T30] audit: type=1400 audit(1757115176.643:996): avc: denied { name_bind } for pid=11950 comm="syz.5.1388" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 561.522187][ T30] audit: type=1400 audit(1757115176.643:997): avc: denied { node_bind } for pid=11950 comm="syz.5.1388" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 561.562228][ T30] audit: type=1400 audit(1757115176.673:998): avc: denied { map } for pid=11950 comm="syz.5.1388" path="/proc/820/net/icmp6" dev="proc" ino=4026533965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 561.611325][ T30] audit: type=1400 audit(1757115176.673:999): avc: denied { execute } for pid=11950 comm="syz.5.1388" path="/proc/820/net/icmp6" dev="proc" ino=4026533965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 561.662345][ T30] audit: type=1400 audit(1757115176.843:1000): avc: denied { write } for pid=11950 comm="syz.5.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 561.684774][ T5868] Bluetooth: hci6: command 0x1003 tx timeout [ 561.692407][ T5853] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 561.728270][ T30] audit: type=1400 audit(1757115176.923:1001): avc: denied { ioctl } for pid=11950 comm="syz.5.1388" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 561.853374][T11931] mkiss: ax0: crc mode is auto. [ 562.060719][ T30] audit: type=1400 audit(1757115177.293:1002): avc: denied { bind } for pid=11947 comm="syz.7.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 562.555047][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.984499][T11687] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 563.106531][T11980] FAULT_INJECTION: forcing a failure. [ 563.106531][T11980] name failslab, interval 1, probability 0, space 0, times 0 [ 563.120132][T11980] CPU: 1 UID: 0 PID: 11980 Comm: syz.6.1392 Not tainted syzkaller #0 PREEMPT(full) [ 563.120159][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.120170][T11980] Call Trace: [ 563.120176][T11980] [ 563.120182][T11980] dump_stack_lvl+0x16c/0x1f0 [ 563.120209][T11980] should_fail_ex+0x512/0x640 [ 563.120232][T11980] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 563.120254][T11980] should_failslab+0xc2/0x120 [ 563.120275][T11980] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 563.120293][T11980] ? copy_net_ns+0xe8/0x5f0 [ 563.120322][T11980] copy_net_ns+0xe8/0x5f0 [ 563.120342][T11980] ? copy_cgroup_ns+0x71/0x700 [ 563.120370][T11980] create_new_namespaces+0x3ea/0xa90 [ 563.120401][T11980] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 563.120427][T11980] ksys_unshare+0x45b/0xa40 [ 563.120453][T11980] ? __pfx_ksys_unshare+0x10/0x10 [ 563.120479][T11980] ? ksys_write+0x1ac/0x250 [ 563.120589][T11980] __x64_sys_unshare+0x31/0x40 [ 563.120625][T11980] do_syscall_64+0xcd/0x4c0 [ 563.120650][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.120669][T11980] RIP: 0033:0x7f4060b8ebe9 [ 563.120684][T11980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.120702][T11980] RSP: 002b:00007f4061aa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 563.120720][T11980] RAX: ffffffffffffffda RBX: 00007f4060dc6180 RCX: 00007f4060b8ebe9 [ 563.120732][T11980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 563.120742][T11980] RBP: 00007f4061aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 563.120761][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.120772][T11980] R13: 00007f4060dc6218 R14: 00007f4060dc6180 R15: 00007ffd13fc9dd8 [ 563.120797][T11980] [ 563.300564][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.364566][T11941] mkiss: ax0: crc mode is auto. [ 563.492747][T11969] netlink: 'syz.5.1391': attribute type 21 has an invalid length. [ 563.958470][T11969] netlink: 'syz.5.1391': attribute type 1 has an invalid length. [ 564.055608][T11969] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1391'. [ 564.098519][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 564.098536][ T30] audit: type=1400 audit(1757115179.333:1005): avc: denied { create } for pid=11974 comm="syz.3.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 564.240258][T11989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.342040][ T30] audit: type=1400 audit(1757115179.473:1006): avc: denied { name_bind } for pid=11986 comm="syz.6.1395" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 564.363870][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.454827][ T30] audit: type=1400 audit(1757115179.473:1007): avc: denied { node_bind } for pid=11986 comm="syz.6.1395" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 564.528893][ T30] audit: type=1400 audit(1757115179.653:1008): avc: denied { setopt } for pid=11986 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.666209][ T30] audit: type=1400 audit(1757115179.653:1009): avc: denied { shutdown } for pid=11986 comm="syz.6.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.788548][ T30] audit: type=1400 audit(1757115179.673:1010): avc: denied { read write } for pid=11095 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.812848][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.985344][ T30] audit: type=1400 audit(1757115179.673:1011): avc: denied { open } for pid=11095 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.013196][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.020482][T10471] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 565.143614][ T30] audit: type=1400 audit(1757115179.673:1012): avc: denied { ioctl } for pid=11095 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.169567][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.248191][T11999] netlink: 'syz.6.1399': attribute type 1 has an invalid length. [ 565.284044][T10471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.318449][T11999] netlink: 'syz.6.1399': attribute type 4 has an invalid length. [ 565.333538][T11999] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1399'. [ 565.348543][T10471] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.379285][ T30] audit: type=1400 audit(1757115179.983:1013): avc: denied { read write } for pid=11990 comm="syz.7.1397" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 565.427695][T10471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.477209][T10471] usb 8-1: config 0 descriptor?? [ 565.519816][ T30] audit: type=1400 audit(1757115179.983:1014): avc: denied { open } for pid=11990 comm="syz.7.1397" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 565.697953][T12003] veth0_to_bridge: entered promiscuous mode [ 565.761687][T10471] usbhid 8-1:0.0: can't add hid device: -71 [ 565.768466][T10471] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 565.908893][T12003] tipc: Started in network mode [ 565.944389][T10471] usb 8-1: USB disconnect, device number 8 [ 565.970770][T12003] tipc: Node identity 8af9d4578a87, cluster identity 4711 [ 566.035524][T12003] tipc: Enabled bearer , priority 0 [ 566.125188][T12007] syzkaller0: entered promiscuous mode [ 566.174353][T12007] syzkaller0: entered allmulticast mode [ 566.315771][T12003] tipc: Resetting bearer [ 566.391686][T10471] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 566.591740][T10471] usb 8-1: Using ep0 maxpacket: 32 [ 566.631186][T12002] tipc: Resetting bearer [ 566.745314][T10471] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.763615][T10471] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 566.783396][T10471] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.799301][T12002] tipc: Disabling bearer [ 566.799362][T10471] usb 8-1: config 0 descriptor?? [ 566.814519][T10471] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 566.880232][T10471] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 566.938084][T12002] veth0_to_bridge: left promiscuous mode [ 567.883050][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.225386][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.244320][ T5853] Bluetooth: hci6: command 0x1003 tx timeout [ 568.261745][T11687] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 568.280988][T12012] mkiss: ax0: crc mode is auto. [ 569.323055][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 569.323903][ T30] audit: type=1400 audit(1757115184.563:1050): avc: denied { read } for pid=12036 comm="syz.3.1408" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 569.702803][ T30] audit: type=1400 audit(1757115184.803:1051): avc: denied { open } for pid=12036 comm="syz.3.1408" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 569.726319][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.764637][ T5966] usb 8-1: USB disconnect, device number 9 [ 569.837536][ T5966] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 569.903099][ T30] audit: type=1400 audit(1757115185.123:1052): avc: denied { create } for pid=12036 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 569.956992][T12041] 9pnet_fd: Insufficient options for proto=fd [ 570.014139][ T30] audit: type=1400 audit(1757115185.193:1053): avc: denied { getopt } for pid=12036 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 570.441834][ T30] audit: type=1400 audit(1757115185.193:1054): avc: denied { mounton } for pid=12040 comm="syz.5.1409" path="/218" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 570.566985][ T30] audit: type=1400 audit(1757115185.223:1055): avc: denied { perfmon } for pid=12040 comm="syz.5.1409" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 570.929318][ T30] audit: type=1400 audit(1757115186.163:1056): avc: denied { write } for pid=12048 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 571.103752][ T30] audit: type=1400 audit(1757115186.333:1057): avc: denied { map_create } for pid=12054 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 571.250886][ T30] audit: type=1400 audit(1757115186.333:1058): avc: denied { map_read map_write } for pid=12054 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 571.528466][T12066] netlink: 'syz.6.1415': attribute type 1 has an invalid length. [ 571.536670][T12066] netlink: 'syz.6.1415': attribute type 4 has an invalid length. [ 571.544827][T12066] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1415'. [ 571.782774][ T30] audit: type=1400 audit(1757115186.973:1059): avc: denied { execute } for pid=12058 comm="syz.3.1416" name="file0" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 572.069991][T12067] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 572.080753][T12067] overlayfs: missing 'lowerdir' [ 572.104563][T12065] tipc: Enabled bearer , priority 0 [ 572.207322][T12069] ceph: No mds server is up or the cluster is laggy [ 572.260235][T12072] syzkaller0: entered promiscuous mode [ 572.482958][T12072] syzkaller0: entered allmulticast mode [ 572.566098][T12065] tipc: Resetting bearer [ 572.695483][T12064] tipc: Resetting bearer [ 572.790027][T12064] tipc: Disabling bearer [ 573.067804][ T1324] Bluetooth: hci6: Frame reassembly failed (-84) [ 573.204919][T12088] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 574.008201][T12099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.550104][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 574.550116][ T30] audit: type=1400 audit(1757115189.783:1100): avc: denied { ioctl } for pid=12103 comm="syz.3.1427" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 574.642822][T12104] Bluetooth: MGMT ver 1.23 [ 574.734492][ T30] audit: type=1400 audit(1757115189.883:1101): avc: denied { bind } for pid=12103 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.864975][ T30] audit: type=1400 audit(1757115189.883:1102): avc: denied { write } for pid=12103 comm="syz.3.1427" path="socket:[38073]" dev="sockfs" ino=38073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.888782][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.097712][ T30] audit: type=1400 audit(1757115190.033:1103): avc: denied { ioctl } for pid=12076 comm="syz.6.1420" path="socket:[38017]" dev="sockfs" ino=38017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 575.122599][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.122969][T11687] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 575.133718][ T5853] Bluetooth: hci6: command 0x1003 tx timeout [ 575.209689][T12114] FAULT_INJECTION: forcing a failure. [ 575.209689][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 575.211592][T12087] mkiss: ax0: crc mode is auto. [ 575.319095][ T30] audit: type=1400 audit(1757115190.083:1104): avc: denied { connect } for pid=12103 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.352216][T12114] CPU: 0 UID: 0 PID: 12114 Comm: syz.7.1430 Not tainted syzkaller #0 PREEMPT(full) [ 575.352240][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.352251][T12114] Call Trace: [ 575.352258][T12114] [ 575.352265][T12114] dump_stack_lvl+0x16c/0x1f0 [ 575.352294][T12114] should_fail_ex+0x512/0x640 [ 575.352323][T12114] ? fs_reclaim_acquire+0xae/0x150 [ 575.352349][T12114] ? tomoyo_encode2+0x100/0x3e0 [ 575.352373][T12114] should_failslab+0xc2/0x120 [ 575.352393][T12114] __kmalloc_noprof+0xd2/0x510 [ 575.352418][T12114] tomoyo_encode2+0x100/0x3e0 [ 575.352445][T12114] tomoyo_encode+0x29/0x50 [ 575.352469][T12114] tomoyo_realpath_from_path+0x18f/0x6e0 [ 575.352502][T12114] tomoyo_path_number_perm+0x245/0x580 [ 575.352524][T12114] ? tomoyo_path_number_perm+0x237/0x580 [ 575.352548][T12114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.352571][T12114] ? find_held_lock+0x2b/0x80 [ 575.352618][T12114] ? find_held_lock+0x2b/0x80 [ 575.352638][T12114] ? hook_file_ioctl_common+0x145/0x410 [ 575.352662][T12114] ? __fget_files+0x20e/0x3c0 [ 575.352687][T12114] security_file_ioctl+0x9b/0x240 [ 575.352713][T12114] __x64_sys_ioctl+0xb7/0x210 [ 575.352742][T12114] do_syscall_64+0xcd/0x4c0 [ 575.352767][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.352784][T12114] RIP: 0033:0x7f158e78ebe9 [ 575.352799][T12114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.352816][T12114] RSP: 002b:00007f158f660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.352833][T12114] RAX: ffffffffffffffda RBX: 00007f158e9c5fa0 RCX: 00007f158e78ebe9 [ 575.352844][T12114] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 575.352855][T12114] RBP: 00007f158f660090 R08: 0000000000000000 R09: 0000000000000000 [ 575.352865][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.352875][T12114] R13: 00007f158e9c6038 R14: 00007f158e9c5fa0 R15: 00007ffcdcbafad8 [ 575.352900][T12114] [ 575.352915][T12114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.746502][ T30] audit: type=1400 audit(1757115190.163:1105): avc: denied { unlink } for pid=12103 comm="syz.3.1427" name="#11" dev="tmpfs" ino=1581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 575.769023][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.919888][ T30] audit: type=1400 audit(1757115190.163:1106): avc: denied { mount } for pid=12103 comm="syz.3.1427" name="/" dev="overlay" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 575.944717][T12127] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 575.975021][T12127] netlink: 'syz.3.1431': attribute type 4 has an invalid length. [ 576.051959][T12127] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1431'. [ 576.783093][ T5966] libceph: connect (1)[b::]:6789 error -101 [ 576.814965][T12134] ceph: No mds server is up or the cluster is laggy [ 576.825254][ T5966] libceph: mon0 (1)[b::]:6789 connect error [ 577.131118][ T30] audit: type=1400 audit(1757115190.253:1107): avc: denied { write } for pid=12109 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 577.150302][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.191879][T10471] libceph: connect (1)[b::]:6789 error -101 [ 577.205523][T10471] libceph: mon0 (1)[b::]:6789 connect error [ 577.314256][ T30] audit: type=1400 audit(1757115190.553:1108): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 577.334018][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.641542][ T5966] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 577.755458][ T49] libceph: connect (1)[b::]:6789 error -101 [ 577.765469][ T49] libceph: mon0 (1)[b::]:6789 connect error [ 577.836463][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 577.850971][ T5966] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 577.873988][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.931977][ T5966] usb 1-1: config 0 has no interface number 0 [ 577.938225][ T5966] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.972352][ T5966] usb 1-1: config 0 interface 196 has no altsetting 0 [ 577.999471][ T5966] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 578.010522][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.044595][ T5966] usb 1-1: Product: syz [ 578.048896][ T5966] usb 1-1: Manufacturer: syz [ 578.064979][ T5966] usb 1-1: SerialNumber: syz [ 578.088836][ T5966] usb 1-1: config 0 descriptor?? [ 578.123999][ T5966] ipheth 1-1:0.196: Unable to find endpoints [ 578.140245][ T30] audit: type=1400 audit(1757115193.353:1109): avc: denied { read write } for pid=12146 comm="syz.6.1437" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 578.862097][T12138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.877827][ T49] usb 1-1: USB disconnect, device number 46 [ 579.486463][T12157] FAULT_INJECTION: forcing a failure. [ 579.486463][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 579.542798][T12157] CPU: 1 UID: 0 PID: 12157 Comm: syz.3.1441 Not tainted syzkaller #0 PREEMPT(full) [ 579.542827][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.542836][T12157] Call Trace: [ 579.542841][T12157] [ 579.542848][T12157] dump_stack_lvl+0x16c/0x1f0 [ 579.542874][T12157] should_fail_ex+0x512/0x640 [ 579.542896][T12157] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 579.542918][T12157] should_failslab+0xc2/0x120 [ 579.542938][T12157] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 579.542957][T12157] ? __alloc_skb+0x2b2/0x380 [ 579.542981][T12157] __alloc_skb+0x2b2/0x380 [ 579.543000][T12157] ? __pfx___alloc_skb+0x10/0x10 [ 579.543022][T12157] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 579.543051][T12157] netlink_alloc_large_skb+0x69/0x130 [ 579.543075][T12157] netlink_sendmsg+0x6a1/0xdd0 [ 579.543102][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.543134][T12157] ____sys_sendmsg+0xa98/0xc70 [ 579.543161][T12157] ? copy_msghdr_from_user+0x10a/0x160 [ 579.543181][T12157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.543219][T12157] ___sys_sendmsg+0x134/0x1d0 [ 579.543242][T12157] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.543296][T12157] __sys_sendmsg+0x16d/0x220 [ 579.543322][T12157] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.543361][T12157] do_syscall_64+0xcd/0x4c0 [ 579.543385][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.543402][T12157] RIP: 0033:0x7f61ed98ebe9 [ 579.543416][T12157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.543433][T12157] RSP: 002b:00007f61ee857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.543452][T12157] RAX: ffffffffffffffda RBX: 00007f61edbc5fa0 RCX: 00007f61ed98ebe9 [ 579.543464][T12157] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000006 [ 579.543474][T12157] RBP: 00007f61ee857090 R08: 0000000000000000 R09: 0000000000000000 [ 579.543484][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.543495][T12157] R13: 00007f61edbc6038 R14: 00007f61edbc5fa0 R15: 00007ffe89a58e58 [ 579.543519][T12157] [ 579.789687][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 579.830657][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 579.830673][ T30] audit: type=1400 audit(1757115195.013:1122): avc: denied { module_request } for pid=12163 comm="syz.5.1445" kmod="net-pf-22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 579.907643][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1445'. [ 579.919582][ T30] audit: type=1400 audit(1757115195.133:1123): avc: denied { create } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 579.942845][ T30] audit: type=1400 audit(1757115195.133:1124): avc: denied { connect } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 579.963348][ T30] audit: type=1400 audit(1757115195.133:1125): avc: denied { write } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 579.990843][ T30] audit: type=1400 audit(1757115195.143:1126): avc: denied { create } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 580.011998][ T30] audit: type=1400 audit(1757115195.143:1127): avc: denied { write } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 580.039447][ T30] audit: type=1400 audit(1757115195.153:1128): avc: denied { read } for pid=12163 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 580.562266][ T5966] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 580.625335][T12178] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.637055][T12178] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 580.741441][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 580.752886][ T5966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 580.851515][T12183] trusted_key: encrypted_key: key user:syz not found [ 580.901650][T10471] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 581.383579][ T5966] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 581.401951][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 581.413520][ T5966] usb 4-1: Product: syz [ 581.425318][ T5966] usb 4-1: Manufacturer: syz [ 581.429992][ T5966] usb 4-1: SerialNumber: syz [ 581.481722][T10471] usb 1-1: Using ep0 maxpacket: 8 [ 581.502166][ T5966] usb 4-1: config 0 descriptor?? [ 581.519340][T10471] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 581.539909][T12175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 581.556677][T10471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.595853][T10471] usb 1-1: config 0 descriptor?? [ 581.635233][T10471] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 581.664978][ T30] audit: type=1400 audit(1757115196.893:1129): avc: denied { connect } for pid=12184 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 581.695024][T10471] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 581.740824][T10471] usb-storage 1-1:0.0: USB Mass Storage device detected [ 581.792522][T10471] usb-storage 1-1:0.0: device ignored [ 581.865583][ T1632] usb 4-1: USB disconnect, device number 36 [ 582.294464][ T30] audit: type=1400 audit(1757115197.533:1130): avc: denied { create } for pid=12191 comm="syz.6.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 582.473711][ T30] audit: type=1400 audit(1757115197.703:1131): avc: denied { prog_run } for pid=12191 comm="syz.6.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 582.493115][ T1632] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 582.641288][ T1632] usb 4-1: device descriptor read/64, error -71 [ 582.939796][ T1632] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 583.281232][ T1632] usb 4-1: device descriptor read/64, error -71 [ 583.401386][ T1632] usb usb4-port1: attempt power cycle [ 584.571931][T12209] trusted_key: encrypted_key: insufficient parameters specified [ 584.901593][T10471] usb 1-1: USB disconnect, device number 47 [ 584.910490][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 585.037854][T12216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.241126][T10206] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 585.461710][T10471] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 585.538974][T10206] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 585.547620][T10206] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.636660][T10206] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 585.652354][T10206] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 585.671145][ T5911] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 585.679384][T10206] usb 8-1: Manufacturer: syz [ 585.688920][T10206] usb 8-1: config 0 descriptor?? [ 585.701490][T10471] usb 4-1: Using ep0 maxpacket: 8 [ 585.709930][T10471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.756456][T10471] usb 4-1: config 0 has no interfaces? [ 585.771843][T10471] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.790257][T10471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.810777][T10471] usb 4-1: config 0 descriptor?? [ 585.832287][T10206] rc_core: IR keymap rc-hauppauge not found [ 585.841994][T10206] Registered IR keymap rc-empty [ 585.897039][T10206] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 585.941788][ T5911] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 585.966814][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.013597][T10206] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input63 [ 586.039170][ T5911] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 586.046673][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 586.057478][ T5911] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 586.057561][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 586.057572][ T30] audit: type=1400 audit(1757115201.283:1137): avc: denied { read } for pid=5208 comm="acpid" name="event4" dev="devtmpfs" ino=3466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.075811][ T5911] usb 1-1: Manufacturer: syz [ 586.115339][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 586.131765][ T5966] usb 4-1: USB disconnect, device number 40 [ 586.151147][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.286977][ T30] audit: type=1400 audit(1757115201.283:1138): avc: denied { open } for pid=5208 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.302241][ T5911] usb 1-1: config 0 descriptor?? [ 586.328607][ T30] audit: type=1400 audit(1757115201.283:1139): avc: denied { ioctl } for pid=5208 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3466 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.476020][ T10] usb 8-1: USB disconnect, device number 10 [ 586.481731][ T30] audit: type=1400 audit(1757115201.503:1140): avc: denied { bind } for pid=12213 comm="syz.7.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 586.541742][ T5911] rc_core: IR keymap rc-hauppauge not found [ 586.547810][ T5911] Registered IR keymap rc-empty [ 586.571670][ T30] audit: type=1400 audit(1757115201.563:1141): avc: denied { create } for pid=12213 comm="syz.7.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 586.606485][ T5911] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 586.632672][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input64 [ 586.735819][ T5911] usb 1-1: USB disconnect, device number 48 [ 587.091846][ T30] audit: type=1400 audit(1757115202.293:1142): avc: denied { write } for pid=12237 comm="syz.3.1462" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 587.240142][ T30] audit: type=1400 audit(1757115202.293:1143): avc: denied { ioctl } for pid=12237 comm="syz.3.1462" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 587.269028][ T30] audit: type=1400 audit(1757115202.363:1144): avc: denied { read append } for pid=12244 comm="syz.7.1465" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 587.294431][T12247] ubi: mtd0 is already attached to ubi31 [ 587.313682][ T30] audit: type=1400 audit(1757115202.363:1145): avc: denied { open } for pid=12244 comm="syz.7.1465" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 587.410565][T12242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.440308][T12245] tipc: Enabled bearer , priority 0 [ 587.467287][ T30] audit: type=1400 audit(1757115202.593:1146): avc: denied { create } for pid=12244 comm="syz.7.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 587.533174][T12245] syzkaller0: entered promiscuous mode [ 587.791170][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1466'. [ 588.182005][T12245] syzkaller0: entered allmulticast mode [ 588.291509][T12245] tipc: Resetting bearer [ 588.357055][T12243] tipc: Resetting bearer [ 588.479801][T12261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 588.540906][ T5911] tipc: Node number set to 8311895 [ 588.541807][T12243] tipc: Disabling bearer [ 589.672013][T12270] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 591.158791][T12293] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 591.193928][T12293] overlayfs: missing 'lowerdir' [ 592.051361][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 592.051384][ T30] audit: type=1400 audit(1757115207.023:1155): avc: denied { ioctl } for pid=12292 comm="syz.7.1477" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 592.704879][ T30] audit: type=1400 audit(1757115207.813:1156): avc: denied { mount } for pid=12300 comm="syz.5.1480" name="/" dev="gadgetfs" ino=6897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 592.899534][ T30] audit: type=1400 audit(1757115208.133:1157): avc: denied { load_policy } for pid=12306 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 592.899935][T12307] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 592.919888][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.111700][T12307] SELinux: failed to load policy [ 595.392719][T12319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 595.449900][ T30] audit: type=1400 audit(1757115210.683:1158): avc: denied { setopt } for pid=12326 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 595.469484][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.841081][T12334] trusted_key: encrypted_key: key user:syz not found [ 596.345865][T12324] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 596.362861][T12324] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 596.373341][T12324] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 596.487331][ T30] audit: type=1400 audit(1757115211.613:1159): avc: denied { firmware_load } for pid=12320 comm="syz.0.1484" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 596.819909][ T30] audit: type=1400 audit(1757115211.733:1160): avc: denied { create } for pid=12338 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 596.971483][ T30] audit: type=1400 audit(1757115211.803:1161): avc: denied { create } for pid=12338 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.248501][ T30] audit: type=1400 audit(1757115211.813:1162): avc: denied { write } for pid=12338 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.278339][T12350] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 597.322166][T12350] overlayfs: missing 'lowerdir' [ 597.488702][ T30] audit: type=1400 audit(1757115212.113:1163): avc: denied { mount } for pid=12342 comm="syz.0.1489" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 598.026391][ T30] audit: type=1400 audit(1757115212.143:1164): avc: denied { create } for pid=12342 comm="syz.0.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 598.062583][ T5911] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 598.108264][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 598.474744][ T30] audit: type=1400 audit(1757115212.143:1165): avc: denied { connect } for pid=12342 comm="syz.0.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 598.495378][ T30] audit: type=1400 audit(1757115212.143:1166): avc: denied { shutdown } for pid=12342 comm="syz.0.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 598.521169][ T30] audit: type=1400 audit(1757115212.143:1167): avc: denied { block_suspend } for pid=12342 comm="syz.0.1489" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 598.638822][ T30] audit: type=1400 audit(1757115212.163:1168): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 598.642027][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 598.661093][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 598.677426][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.698130][ T5911] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 598.711776][ T10] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 598.735227][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.839430][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.928704][ T10] usb 6-1: config 0 has no interface number 0 [ 599.698391][ T10] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.719410][ T5911] usb 1-1: config 0 descriptor?? [ 599.786961][ T10] usb 6-1: config 0 interface 196 has no altsetting 0 [ 599.902044][ T30] audit: type=1400 audit(1757115215.123:1169): avc: denied { read write } for pid=12368 comm="syz.6.1496" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 599.925792][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.712013][T11687] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 600.718499][ T5853] Bluetooth: hci6: command 0x1003 tx timeout [ 601.616651][ T30] audit: type=1400 audit(1757115215.123:1170): avc: denied { open } for pid=12368 comm="syz.6.1496" path="/dev/input/mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 601.640885][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.877389][T12362] mkiss: ax0: crc mode is auto. [ 602.267248][ T30] audit: type=1400 audit(1757115217.433:1171): avc: denied { setopt } for pid=12348 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.473680][ T30] audit: type=1400 audit(1757115217.433:1172): avc: denied { create } for pid=12348 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 602.530794][ T30] audit: type=1400 audit(1757115217.433:1173): avc: denied { read } for pid=12348 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 602.633648][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 602.644796][ T30] audit: type=1400 audit(1757115217.813:1174): avc: denied { read write } for pid=12374 comm="syz.3.1497" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 602.649951][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 602.669964][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.694861][ T10] usb 6-1: string descriptor 0 read error: -71 [ 602.773149][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 602.819888][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.969315][ T30] audit: type=1400 audit(1757115217.813:1175): avc: denied { open } for pid=12374 comm="syz.3.1497" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 603.655918][ T10] usb 6-1: config 0 descriptor?? [ 603.747686][ T10] usb 6-1: can't set config #0, error -71 [ 603.854114][ T5911] usb 1-1: USB disconnect, device number 49 [ 603.873118][ T10] usb 6-1: USB disconnect, device number 36 [ 603.982404][ T30] audit: type=1400 audit(1757115219.213:1176): avc: denied { bind } for pid=12387 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.097121][ T30] audit: type=1400 audit(1757115219.223:1177): avc: denied { setopt } for pid=12387 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.565463][ T30] audit: type=1400 audit(1757115219.223:1178): avc: denied { accept } for pid=12387 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.644083][T12400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.662322][T12399] input: syz0 as /devices/virtual/input/input65 [ 604.690787][ T30] audit: type=1400 audit(1757115219.223:1179): avc: denied { write } for pid=12387 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.722731][T12405] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 604.741197][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 604.759452][T12405] overlayfs: missing 'lowerdir' [ 604.779447][ T30] audit: type=1400 audit(1757115219.223:1180): avc: denied { read } for pid=12387 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.977157][ T49] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 605.260489][T10932] syz.2.1145: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 605.299207][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.2.1145 Not tainted syzkaller #0 PREEMPT(full) [ 605.299229][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.299236][T10932] Call Trace: [ 605.299241][T10932] [ 605.299248][T10932] dump_stack_lvl+0x16c/0x1f0 [ 605.299268][T10932] warn_alloc+0x248/0x3a0 [ 605.299284][T10932] ? __pfx_warn_alloc+0x10/0x10 [ 605.299312][T10932] ? relay_open_buf.part.0+0x18f/0xc30 [ 605.299341][T10932] ? __vmalloc_node_noprof+0xad/0xf0 [ 605.299365][T10932] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 605.299387][T10932] ? relay_open_buf.part.0+0x18f/0xc30 [ 605.299413][T10932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.299433][T10932] ? ___kmalloc_large_node+0xed/0x160 [ 605.299451][T10932] __kvmalloc_node_noprof+0x30a/0x620 [ 605.299462][T10932] ? relay_open_buf.part.0+0x18f/0xc30 [ 605.299480][T10932] ? trace_kmalloc+0x2b/0xd0 [ 605.299493][T10932] ? __kmalloc_noprof+0x242/0x510 [ 605.299503][T10932] ? relay_open_buf.part.0+0x18f/0xc30 [ 605.299524][T10932] ? relay_open_buf.part.0+0x18f/0xc30 [ 605.299541][T10932] relay_open_buf.part.0+0x18f/0xc30 [ 605.299564][T10932] relay_open+0x653/0xad0 [ 605.299574][T10932] ? debugfs_create_file_full+0x41/0x60 [ 605.299592][T10932] do_blk_trace_setup+0x4c5/0xb00 [ 605.299611][T10932] blk_trace_setup+0xed/0x1b0 [ 605.299628][T10932] ? __pfx_blk_trace_setup+0x10/0x10 [ 605.299643][T10932] ? futex_wake+0x1ad/0x530 [ 605.299660][T10932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.299676][T10932] sg_ioctl+0x7d7/0x2880 [ 605.299689][T10932] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 605.299709][T10932] ? __pfx_sg_ioctl+0x10/0x10 [ 605.299721][T10932] ? hook_file_ioctl_common+0x145/0x410 [ 605.299736][T10932] ? selinux_file_ioctl+0x180/0x270 [ 605.299752][T10932] ? selinux_file_ioctl+0xb4/0x270 [ 605.299768][T10932] ? __pfx_sg_ioctl+0x10/0x10 [ 605.299779][T10932] __x64_sys_ioctl+0x18e/0x210 [ 605.299798][T10932] do_syscall_64+0xcd/0x4c0 [ 605.299814][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.299826][T10932] RIP: 0033:0x7feba638ebe9 [ 605.299841][T10932] Code: Unable to access opcode bytes at 0x7feba638ebbf. [ 605.299847][T10932] RSP: 002b:00007feba71ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.299858][T10932] RAX: ffffffffffffffda RBX: 00007feba65c5fa0 RCX: 00007feba638ebe9 [ 605.299865][T10932] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000003 [ 605.299872][T10932] RBP: 00007feba6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.299878][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.299885][T10932] R13: 00007feba65c6038 R14: 00007feba65c5fa0 R15: 00007fffa4138478 [ 605.299900][T10932] [ 605.560218][T10932] Mem-Info: [ 605.562532][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 605.564186][T10932] active_anon:13194 inactive_anon:26 isolated_anon:0 [ 605.564186][T10932] active_file:17815 inactive_file:288 isolated_file:0 [ 605.564186][T10932] unevictable:768 dirty:503 writeback:0 [ 605.564186][T10932] slab_reclaimable:8061 slab_unreclaimable:111016 [ 605.564186][T10932] mapped:39392 shmem:10549 pagetables:3847 [ 605.564186][T10932] sec_pagetables:0 bounce:0 [ 605.564186][T10932] kernel_misc_reclaimable:0 [ 605.564186][T10932] free:112312 free_pcp:29050 free_cma:0 [ 605.614079][ T5923] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 605.614126][ T5923] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 605.614150][ T5923] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.614172][ T5923] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 605.615868][ T5923] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 605.625086][T10932] Node 0 active_anon:20kB inactive_anon:104kB active_file:188kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135276kB dirty:32kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12800kB pagetables:5320kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 605.688683][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.703330][T10932] Node 1 active_anon:52656kB inactive_anon:0kB active_file:71072kB inactive_file:960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22292kB dirty:1980kB writeback:0kB shmem:40660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:716kB pagetables:10068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.744474][T10932] Node 0 DMA free:10140kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 605.748793][ T5923] usb 7-1: Product: syz [ 605.774591][T10932] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 605.784668][T10932] Node 0 DMA32 free:41100kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:20kB inactive_anon:100kB active_file:188kB inactive_file:192kB unevictable:1536kB writepending:32kB present:3129332kB managed:2539352kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:8152kB free_cma:0kB [ 605.817263][T10932] lowmem_reserve[]: 0 0 1 1 1 [ 605.822649][T10932] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 605.901779][T10932] lowmem_reserve[]: 0 0 0 0 0 [ 605.906551][T10932] Node 1 Normal free:397992kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39056kB inactive_anon:0kB active_file:71072kB inactive_file:960kB unevictable:1536kB writepending:1980kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:114276kB local_pcp:65464kB free_cma:0kB [ 605.940203][T10932] lowmem_reserve[]: 0 0 0 0 0 [ 605.949643][T10932] Node 0 DMA: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (UM) 0*64kB 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10140kB [ 605.977098][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 606.000598][ T5923] usb 7-1: Manufacturer: syz [ 606.010835][ T5923] usb 7-1: SerialNumber: syz [ 606.042658][ T5923] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 606.050607][ T5923] imon 7-1:155.0: unable to initialize intf0, err -19 [ 606.065304][T10932] Node 0 DMA32: 185*4kB (ME) 185*8kB (UME) 324*16kB (UME) 189*32kB (UME) 118*64kB (ME) 75*128kB (UME) 37*256kB (UME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 41100kB [ 606.085377][ T5923] imon:imon_probe: failed to initialize context! [ 606.092434][T10932] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 606.109593][ T5923] imon 7-1:155.0: unable to register, err -19 [ 606.138583][ T49] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 606.168989][T10932] Node 1 Normal: 56*4kB (UM) 43*8kB (UM) 35*16kB (M) 36*32kB (M) 34*64kB (UM) 18*128kB (UME) 8*256kB (ME) 0*512kB 2*1024kB (UE) 1*2048kB (U) 97*4096kB (M) = 410216kB [ 606.177302][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.327002][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 606.371702][T10932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.382878][T10932] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 606.620387][T10932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.721253][T10932] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 606.809389][T10932] 22218 total pagecache pages [ 606.827294][T10932] 2315 pages in swap cache [ 606.833248][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 606.834898][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 606.845484][ T49] pvrusb2: ********** [ 606.850177][T10932] Free swap = 65480kB [ 606.865620][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 606.872144][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.897688][T10932] Total swap = 124996kB [ 606.902379][ T49] pvrusb2: Important functionality might not be entirely working. [ 606.906653][T10932] 2097051 pages RAM [ 606.932073][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.942126][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 606.948331][T10932] 0 pages HighMem/MovableOnly [ 606.959801][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.974641][ T49] pvrusb2: ********** [ 607.150383][ T49] usb 1-1: USB disconnect, device number 50 [ 607.159672][T10932] 430251 pages reserved [ 607.214558][ T2333] pvrusb2: Invalid write control endpoint [ 607.244706][T10932] 0 pages cma reserved [ 608.664660][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.717728][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.727800][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.786414][ T5923] usb 7-1: USB disconnect, device number 12 [ 608.950875][ T2333] pvrusb2: Invalid write control endpoint [ 608.965838][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 608.997793][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 608.999067][ T10] usb 6-1: usb_control_msg returned -71 [ 609.025421][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 609.052152][ T2333] pvrusb2: Device being rendered inoperable [ 609.066149][ T10] usbtmc 6-1:16.0: can't read capabilities [ 609.117685][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 609.148290][ T10] usb 6-1: USB disconnect, device number 37 [ 609.149813][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 609.210812][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 609.210828][ T30] audit: type=1400 audit(1757115224.443:1183): avc: denied { append } for pid=12425 comm="syz.6.1510" name="nbd6" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.344803][ T2333] pvrusb2: Attached sub-driver cx25840 [ 609.350755][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 609.412733][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 609.512524][ T975] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 609.597560][ T30] audit: type=1400 audit(1757115224.833:1184): avc: denied { create } for pid=12427 comm="syz.3.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 609.761158][ T30] audit: type=1400 audit(1757115224.893:1185): avc: denied { write } for pid=12427 comm="syz.3.1511" laddr=172.20.20.170 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 609.867789][ T49] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 609.878170][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 609.888692][ T975] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 609.901780][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 609.926603][ T975] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 609.937137][ T975] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 609.948532][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.967993][ T975] usb 7-1: config 0 descriptor?? [ 610.428367][T12433] can: request_module (can-proto-0) failed. [ 610.441098][ T30] audit: type=1400 audit(1757115224.963:1186): avc: denied { map } for pid=12427 comm="syz.3.1511" path="socket:[38899]" dev="sockfs" ino=38899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 610.469128][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.486423][ T30] audit: type=1400 audit(1757115224.963:1187): avc: denied { read accept } for pid=12427 comm="syz.3.1511" path="socket:[38899]" dev="sockfs" ino=38899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 610.500367][T10471] libceph: connect (1)[b::]:6789 error -101 [ 610.581260][T12441] ceph: No mds server is up or the cluster is laggy [ 610.622007][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.646011][T10471] libceph: mon0 (1)[b::]:6789 connect error [ 610.671111][T12446] trusted_key: encrypted_key: key user:syz not found [ 610.679838][ T975] hdpvr 7-1:0.0: firmware version 0x0 dated [ 610.726632][ T49] usb 1-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 610.855161][ T49] usb 1-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 610.875430][ T975] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 611.115582][ T49] usb 1-1: config 1 interface 1 has no altsetting 0 [ 611.142284][ T49] usb 1-1: string descriptor 0 read error: -71 [ 611.180588][T12452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.201634][ T31] INFO: task syz.2.1145:10935 blocked for more than 143 seconds. [ 611.226610][ T31] Not tainted syzkaller #0 [ 611.232266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.290292][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.317241][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.333700][ T49] usb 1-1: can't set config #1, error -71 [ 611.343243][ T49] usb 1-1: USB disconnect, device number 51 [ 611.463044][ T31] task:syz.2.1145 state:D stack:29112 pid:10935 tgid:10931 ppid:5856 task_flags:0x400040 flags:0x00004004 [ 611.475335][ T31] Call Trace: [ 611.479911][ T31] [ 611.483719][ T31] __schedule+0x1190/0x5de0 [ 611.488257][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 611.493595][ T31] ? __pfx___schedule+0x10/0x10 [ 611.498590][ T31] ? find_held_lock+0x2b/0x80 [ 611.504623][ T31] ? schedule+0x2d7/0x3a0 [ 611.509033][ T31] ? blk_trace_startstop+0x7f/0x480 [ 611.562730][T12457] loop2: detected capacity change from 0 to 7 [ 611.731235][ C0] blk_print_req_error: 11 callbacks suppressed [ 611.731253][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.746682][ C0] buffer_io_error: 11 callbacks suppressed [ 611.746700][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.760810][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.770004][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.770934][ T31] schedule+0xe7/0x3a0 [ 611.784284][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.787893][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.790402][ T31] __mutex_lock+0x81b/0x1060 [ 611.798953][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.804295][ T31] ? blk_trace_startstop+0x7f/0x480 [ 611.818304][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.827498][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.838404][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.847891][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.858795][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.868033][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.877262][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.886468][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.889570][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 611.900226][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.909435][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.917665][T12457] ldm_validate_partition_table(): Disk read failed. [ 611.925131][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.934329][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.942645][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 611.948742][ T975] hdpvr 7-1:0.0: Could not setup controls [ 611.951831][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 611.969570][T12457] Dev loop2: unable to read RDB block 0 [ 611.981601][T12457] loop2: unable to read partition table [ 611.987400][T12457] loop2: partition table beyond EOD, truncated [ 611.994429][T12457] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 612.028703][ T31] ? find_held_lock+0x2b/0x80 [ 612.064170][ T31] ? blk_trace_startstop+0x7f/0x480 [ 612.088466][ T31] blk_trace_startstop+0x7f/0x480 [ 612.099964][ T975] hdpvr 7-1:0.0: registering videodev failed [ 612.104677][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 612.126537][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 612.140884][ T31] sg_ioctl+0xa3a/0x2880 [ 612.145416][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 612.156765][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 612.161875][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 612.217796][ T49] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 612.228022][ T31] ? selinux_file_ioctl+0x180/0x270 [ 612.234416][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 612.243042][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 612.256934][ T31] __x64_sys_ioctl+0x18e/0x210 [ 612.271758][ T31] do_syscall_64+0xcd/0x4c0 [ 612.278603][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.285096][ T975] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 612.294187][ T31] RIP: 0033:0x7feba638ebe9 [ 612.308830][ T31] RSP: 002b:00007feba71de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.328761][ T31] RAX: ffffffffffffffda RBX: 00007feba65c6090 RCX: 00007feba638ebe9 [ 612.352461][ T31] RDX: 000000000000fdfd RSI: 0000000000001274 RDI: 0000000000000003 [ 612.372321][ T975] usb 7-1: USB disconnect, device number 13 [ 612.381774][ T31] RBP: 00007feba6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 612.401687][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 612.403565][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.423054][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 612.430523][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 612.430864][ T31] R13: 00007feba65c6128 R14: 00007feba65c6090 R15: 00007fffa4138478 [ 612.469156][ T31] [ 612.480383][ T31] [ 612.480383][ T31] Showing all locks held in the system: [ 612.511886][ T31] 1 lock held by khungtaskd/31: [ 612.516845][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.522512][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 612.558964][ T31] 3 locks held by kworker/1:1/49: [ 612.570025][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 612.574402][ T31] 3 locks held by kworker/1:2/975: [ 612.610480][ T31] #0: ffff888021ada148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 612.631543][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.638522][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 612.666373][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 612.674660][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 612.678291][ T31] #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 612.716033][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.726615][ T31] 2 locks held by getty/5609: [ 612.741291][ T31] #0: ffff88814d1610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 612.769943][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 612.771066][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 612.828959][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.851485][ T31] 1 lock held by ipvs-e:6:0/8166: [ 612.864389][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 612.880659][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 612.890058][ T31] 2 locks held by syz.2.1145/10932: [ 612.890094][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 612.904823][ T31] 1 lock held by syz.2.1145/10935: [ 612.929678][ T31] #0: ffff88802670e178 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x7f/0x480 [ 612.951439][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.963355][ T31] 1 lock held by syz.3.1511/12429: [ 612.963386][ T31] [ 612.963393][ T31] ============================================= [ 612.963393][ T31] [ 612.963401][ T31] NMI backtrace for cpu 0 [ 612.963413][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.963434][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.963446][ T31] Call Trace: [ 612.963452][ T31] [ 612.963459][ T31] dump_stack_lvl+0x116/0x1f0 [ 612.963488][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 612.963518][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 612.963548][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 612.963579][ T31] watchdog+0xf0e/0x1260 [ 612.963605][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.963623][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.963647][ T31] ? __kthread_parkme+0x19e/0x250 [ 612.963676][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.963695][ T31] kthread+0x3c2/0x780 [ 612.963714][ T31] ? __pfx_kthread+0x10/0x10 [ 612.963732][ T31] ? rcu_is_watching+0x12/0xc0 [ 612.963754][ T31] ? __pfx_kthread+0x10/0x10 [ 612.963772][ T31] ret_from_fork+0x5d4/0x6f0 [ 612.963787][ T31] ? __pfx_kthread+0x10/0x10 [ 612.963804][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.963835][ T31] [ 612.963841][ T31] Sending NMI from CPU 0 to CPUs 1: [ 613.095753][ C1] NMI backtrace for cpu 1 [ 613.095769][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 613.095785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.095794][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 613.095817][ C1] Code: dc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 d3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 613.095831][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 613.095843][ C1] RAX: 0000000002bd5745 RBX: 0000000000000001 RCX: ffffffff8b943c29 [ 613.095852][ C1] RDX: 0000000000000000 RSI: ffffffff8de519e8 RDI: ffffffff8c162b00 [ 613.095861][ C1] RBP: ffffed1003c55488 R08: 0000000000000001 R09: ffffed10170a6655 [ 613.095870][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 613.095882][ C1] R13: ffff88801e2aa440 R14: ffffffff90ab6190 R15: 0000000000000000 [ 613.095891][ C1] FS: 0000000000000000(0000) GS:ffff8881247b6000(0000) knlGS:0000000000000000 [ 613.095905][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.095914][ C1] CR2: 0000555580d2b5c8 CR3: 0000000074afe000 CR4: 00000000003526f0 [ 613.095923][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 613.095931][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 613.095940][ C1] Call Trace: [ 613.095947][ C1] [ 613.095952][ C1] default_idle+0x13/0x20 [ 613.095971][ C1] default_idle_call+0x6d/0xb0 [ 613.095988][ C1] do_idle+0x391/0x510 [ 613.096008][ C1] ? __pfx_do_idle+0x10/0x10 [ 613.096023][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 613.096041][ C1] cpu_startup_entry+0x4f/0x60 [ 613.096057][ C1] start_secondary+0x21d/0x2b0 [ 613.096077][ C1] ? __pfx_start_secondary+0x10/0x10 [ 613.096098][ C1] common_startup_64+0x13e/0x148 [ 613.096118][ C1] [ 613.516897][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.535806][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 613.542728][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 613.551866][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.561932][ T31] Call Trace: [ 613.565226][ T31] [ 613.568167][ T31] dump_stack_lvl+0x3d/0x1f0 [ 613.572893][ T31] vpanic+0x6e8/0x7a0 [ 613.576918][ T31] ? __pfx_vpanic+0x10/0x10 [ 613.581499][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 613.587449][ T31] panic+0xca/0xd0 [ 613.591228][ T31] ? __pfx_panic+0x10/0x10 [ 613.595689][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 613.601095][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 613.607310][ T31] ? watchdog+0xd78/0x1260 [ 613.611786][ T31] ? watchdog+0xd6b/0x1260 [ 613.616262][ T31] watchdog+0xd89/0x1260 [ 613.620586][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.625318][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.630565][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.635642][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.640396][ T31] kthread+0x3c2/0x780 [ 613.644505][ T31] ? __pfx_kthread+0x10/0x10 [ 613.649156][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.653981][ T31] ? __pfx_kthread+0x10/0x10 [ 613.658591][ T31] ret_from_fork+0x5d4/0x6f0 [ 613.663292][ T31] ? __pfx_kthread+0x10/0x10 [ 613.667900][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.672691][ T31] [ 613.675980][ T31] Kernel Offset: disabled [ 613.680292][ T31] Rebooting in 86400 seconds..