last executing test programs: 12m40.754165s ago: executing program 0 (id=2549): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x3}], 0x13) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0xdeb, 0x4, 0xff, 0x1ff, 0x0, 0xfffffffd}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600000000", 0x85}, {&(0x7f0000000400)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d5", 0x29}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b135bfef85013c74b374f5892a7254e3405ebe8d6125ace8414fc44456c1c521ce19dae4a7f37f08f5e7b686c02967dfb02fa1ec528de641f95606c3be81b643b62d206a8aadea3d7663c32b159036bde2ee6fb0441c70bb0b0a46174f8387436eaeafa94aedef284393412f0239be8", 0x9a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fc", 0x26}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0de99505840905376e957c012fc4e4e0ea1c8db07ac01ae1e0e5c38a0963194a21", 0x1f9}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c2", 0x51}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(r0, &(0x7f0000006540)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000800)="27edad0454df45a3d715459ef216cf26cca475255ceb0b3bbfd4b9906364c6fde13d5bf86d19853ca97744f53139bf3b0dc4571edb2bad66152bb3d9b17b847de72e28b5b5abdc09d80ba19fda4aaa05c504f7001228d58544e3d24b0ecfbb9725db", 0x62}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000900)="4510d0a7bd756be21baf0932ac56336a648a317b7001566bf3cecbc6ca6838b8067099edc75f7fa659478ac6c3b290b56e79458d849bddb9c478a7a31696433e1a110d6c2083e9c638a377da592f79ca49fd0c3f0d7e81f9a676439ec17fb7cd84af8cdc9a53bcf5ca8a3525456432263fb6b6745686d6640c53332b945356abb18866c37d0e4e13ad5aef8cb2cddde4f196f9e73ac3c5db113be66b2c630040795e84c9218523c7da6b1ca40dece2c922f523e1aab1f8792aa0b93265bc19438a1b651bb1badac3cd", 0xc9}, {&(0x7f00000005c0)="6f9cc5652b12d497cbb948b4a47018927701076f0cfc1ffcf1923a86", 0x1c}, {&(0x7f0000000b00)="fc6a7caa88088ae3e114726169de39a92661ebbfa9a2cbb5a68bbcd42a462269b645f983eb54161624aabf68eea0020eeb5f904fd7e7e684afb4c20c818dce9c0cf5ec526f2007978df53f780ae2cbe0c49d38856b1d88437b033aa9e2be8b29b39d68375d49", 0x66}, {&(0x7f0000000640)="4fe018826b8b2b8d971efa6c33313c39b0aba901a0d2b6a44664f31508a26ec797f33f68453d6a", 0x27}, {&(0x7f0000002b00)="1d5438d203619d26fc2af36c9c90a52f9e1f3c0bd97d36348984e5af2c8972d7a918cc67a063301d5e2788d23b5d44b578f0653c935301624325f8ed0f2b692487fd3f5086a3265b01b17ac3fd7827da0d9028bd8331a46e14b7fd39044f1642f59f7bcefeaed1ad014eb1b312c7dd5cc76285eeb73f8cdf9896c1a824d9d9f61f85262070c1bbdda1721f676733294ba001b5d797dba98ebb32f0589efff921ff6e5d5e32e256ad402e426fde6378ff97bc536f4ba50469876e1d9babffc5f0f46fbfa5aadc4b5d6db9a74019ae29c978a6524a87c7179aff3c5b767da945c1ad952429e2cc975da469bf73182616", 0xef}, {&(0x7f0000000bc0)="e14fa2e5c4b5d23ccfcb1e2b7ac7569549e33d5f43267421636ff27f927bf4bd44a8b7204801cd38d2c4b2133067b4dc6e905dfa42622e629eceabe431580b082d520e4099b3cbc2685de8e401f8fd66501bd8aed46be3e69cf98301c1a6e153f2d1ffde1fd4", 0x66}, {&(0x7f0000001080)="e1b21409cbc101b497748f40dd5895655653cee8f8ac843a07f053d9dd6cc88d122e7f60c827e0ebe53942dc485387696a3f5344ed2c48b7f53e05e78d09f91e327c6d192a0b9dbac2343275bddbe4ca895ef665adad3a06179ccf6e3592002cf86eb6d658080e4a769730fa88970bc0ea8bcd7d6088fd7bdfc0a29b10b327e86eb8314977fa0020fbc1285d8a86b9eba1f315d9a73406543503baf916b2e4f30e28823097880d23d71a2d1be9fb376ef50bd4e2ef1ddd6badef91936fbbc8780e217a", 0xc3}], 0x7, 0x0, 0x0, 0x1}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001280)="a298e0ae8f9262df470969fb79902bf42d795c3dc1b7a53180de07e3a2ae5fca46786707d19fffe0839e66dc589b2eb69fba413c448100280cc4e8a1967b49693be5a7d2555a9cd463", 0x49}, {&(0x7f0000000d40)}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="25c2a1a3379d91aed926c95db94e2669d96e0471eb3b8b7ce12eea575b447a75ee094ebc1fbdc391ea57aa8b05393b0d71f88e45c1dae7af888402cb971eaa16251d6bce7b7f33979d462299b577156caffe8a84061b63210c0e5b287f7491d66cc676d17ca131e1744c3da6788e2fade0912cc14e234b415aac001e016f78b3b27502e8afc2e16e1dd0940a09ba40b4b8", 0x91}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f00000023c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002440)="5e6f2881e7213374661353568a87fa622ab03c2a93b05972cb84691beee2c8767bef8e7b8f38c59d5d150bc359638c7dce4590972f5e9e5d373c0eca579344ebf2db806a6e7b3562a06a263744a3a38a528347db409c507892d3e9cf8dedbc0e6d9ee823959b8ee9c78ae3da764fd6473bcb6ee7cf2ea8d756e1450111e0c5d003e438b73d2eea974f3a22e74cfdda9b0833205f24b7a784d34b0dde67d590f16810a762f58530fe152b2d69aa737042f4215631948f3678fa17184d99097463b0ccd94328b656efb9cbf8afa5cb1bcfef7fbce6ceb478635c47079a", 0xdc}, {&(0x7f0000002540)="d830e28ab077ff50af2ff2f8ba9feb7b1c4bd66689abdc012567c5d32ecb6871a7746c1a7e3babd98e350a418a8b03ed8831edac24379d89d5a234eed75a5f0f53d5ada45456f8948bb35d01bb999b5ec18e4140f8edb550f7fb19c65cd594204d231dcfaff568666c4e033608e29b66", 0x70}, {&(0x7f00000025c0)="f15cfba5aee565b24c7b7112444f0a32f8812ca67ae5921d99113164a215e27cedf386bcc0ae138a2d675bb1e4b10f3175ac1ffc4ae2c14b276237eed20f34222fefe8b8c89e4acc10802f13604c761ce68da66334e6526471cf7f0b0d2d8317e9ce2c533e7e257f049c6e1c5fabcd7103851cebeb7bf27005229b5528312642b630edb4bb8f2ac63cf03dea8cf5b69e0741e9994c970e726d2406a558ef0cc880d0d211b4c8c49ca1f74424f1967f6de274e4d35b76b73d319aa49ce412d855e166bbe22468bee2ebd3b74c5110d373475825559ef84d56e663d9430ed13443cb75e860014fcc671699", 0xea}, {&(0x7f00000026c0)="ce38d46d2d78be", 0x7}], 0x4, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}], 0x38, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002880)="a23cf4fc0f57e1e27abfe7d4e0270c4886f21e58119fb15b3d3d9f3c31636485405323ae1c66f10aef08e473209c950b600fbc12203d3a5940f0eb3b9b6dac02ccdc64cb2882afbbf80e49f43f9075926b439fad32894f66919538c8b880d107b9dec5c48aeb920f01d1f3dc5392ce8fb20fa127aba2aea7436d830035732a09d7d565b3968c421506b2c37e7a7c1a62dd181dae6d4e799aaa685d38d3472608200048a7b81bed34e04204771826e65ca0f62828c476", 0xb6}, {&(0x7f0000002940)="fd8182b3925fd760001890b8de52fa403b23d5427229b52c7775a2acd819c39447952ce5e22d4c56154eb5411a76ee31f89935bc28e410d7a2788559013bb1200bebeb7639f0a6e6794e7a95c528d7b3b654de09df02c0208fdb4db528c68b69a8b0a7f010862e54c3f64c04787f899d3566fcc6f1ed59ffd848", 0x7a}, {&(0x7f00000029c0)="39761de348356dc32c3dc2a18c488a506eba44b5a15b2df4ec16daeaaffc3ae76d5133a33b5d97acddeb9cb55842765130f19c79c10b857999ddbc2af634b3cb7380b70d88ea5315230483dcf1e61709ca580b41397660774abd559c1e2d537d96b56912fc919baf28ad7c64e861", 0x6e}], 0x3, &(0x7f0000004ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="54470ca045daac301e98ee895190b8d420b1adbedf36707a8618171034e986c5c03bff3e03a7c1983a48e8c0d29c6910951b6a0bf6bb0fbcef25a4323d26828b69a901b4e953052d74aa411af25e475284df1e46af9a5c2f21d5e0cb3d8eefe4b36a236775afc259d8ad9226b07962ae6e93087468197b3b1360c6f225ea3b5147d6", 0x82}, {&(0x7f0000005080)="0a852fc64f1d48c5097f738967dd40b54a1e1fdeba2926e78e0e81d78ef149eba6528d92adc48202718e84a28ab93e317efbe0f2e1fbea77bae049ceaec856682d26744cffa1485e8bf66351053a9c821bb09bb3e360d8d2b4c97814eea0e7e1561a482d408e986260019df17b435d0514eb9e01d068582f17f57a1049493e34c6dfcac70ca8de21352a", 0x8a}, {&(0x7f0000005140)="5f60520cb5a7f44233a65cf00ea6d9ee0f71401669463892eee29bfbe0d3834a0b48a52bd1da1b1a9b58f861cc2defe559b03c54eed5db39dcd56aa9e886d391aeb297fde6df8dbd24588f1e3b1ff97e85138835e74b6d46d6ef25c4cda38ae8585488", 0x63}], 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="24000000000084000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="00000062370000000000edff0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="41d6b5015025ee86c903a9e48d4cbc77f6be5a8da2e260b200beb01279751d237601702c34ea8fb3bd791bca3e11ecaadd48567acc3725e0486042fb408090aec41d2df2e3181eae8033a7fa374746a2ba04bc9fb103fd39429b8c6c1b88497a5fea109241af92d517db63929dfc79832b5e10399637d151695b5194a7", @ANYRESOCT], 0x68, 0x20008005}}], 0x6, 0xfe280826dac44f8) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340)=0x2, r2, &(0x7f0000000380)=0x8, 0x8, 0x5) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12m38.650719801s ago: executing program 0 (id=2554): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001080)=""/102392, 0x18ff8) userfaultfd(0x80801) ioctl$TIOCSTI(r0, 0x5412, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) 12m36.033870703s ago: executing program 0 (id=2565): syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r4, &(0x7f0000000040), 0x0, 0x0) 12m35.040502852s ago: executing program 0 (id=2566): syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240), &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f00000003c0), 0x800, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@appraise}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '*['}}, {@fowner_gt}, {@fowner_gt}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$dri(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) unlink(&(0x7f0000000040)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) 12m33.873228392s ago: executing program 0 (id=2569): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000004c0)={0x1, 'syz0\x00'}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 12m30.059258518s ago: executing program 0 (id=2581): syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) socket$inet6(0xa, 0xa, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000004f80)=@newae={0x50, 0x1e, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@private0, 0x4d4, 0x2, 0x6c}, @in=@broadcast, 0x9, 0x3502}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2b, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8002}, 0x40000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0xfffffffc}, 0x1c) listen(r6, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000000280)=0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYBLOB="c7c4faef633e40a35de6fd6b5d352d9dd9daa70fa11a1cf04e86d68268d93e12c45c046f05804f357d26a8456b0a9656db2637e876b2a1209f824f1cb1bf47f42f56e9aa7912550988becd91dec6b4dd9f6aa464aa8c677f463dc591841951c1b40160c0a0e4be0a3bd34ed6f263ed6db01f5601cf5e16818ecc5de34017da0f82aab886055813911b98639b354f1316d19ae1764a8b1d80246b055889ac4c25cadd41a3b74e3cbba22af1597967124b5d8e58867c694e76e133d920d79dc0a1e547a5bc506acd6f4e18c3e1c98f0cf2823e35da13c192705c0df5f284e46ea181c7cbf45140bed3342db544d9c215010267c41612161d", @ANYRES64=r5, @ANYRESHEX=r2], &(0x7f0000000040)='({\x00', 0x3, 0x1) 12m28.857883763s ago: executing program 32 (id=2581): syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) socket$inet6(0xa, 0xa, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000004f80)=@newae={0x50, 0x1e, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@private0, 0x4d4, 0x2, 0x6c}, @in=@broadcast, 0x9, 0x3502}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2b, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8002}, 0x40000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0xfffffffc}, 0x1c) listen(r6, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000000280)=0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYBLOB="c7c4faef633e40a35de6fd6b5d352d9dd9daa70fa11a1cf04e86d68268d93e12c45c046f05804f357d26a8456b0a9656db2637e876b2a1209f824f1cb1bf47f42f56e9aa7912550988becd91dec6b4dd9f6aa464aa8c677f463dc591841951c1b40160c0a0e4be0a3bd34ed6f263ed6db01f5601cf5e16818ecc5de34017da0f82aab886055813911b98639b354f1316d19ae1764a8b1d80246b055889ac4c25cadd41a3b74e3cbba22af1597967124b5d8e58867c694e76e133d920d79dc0a1e547a5bc506acd6f4e18c3e1c98f0cf2823e35da13c192705c0df5f284e46ea181c7cbf45140bed3342db544d9c215010267c41612161d", @ANYRES64=r5, @ANYRESHEX=r2], &(0x7f0000000040)='({\x00', 0x3, 0x1) 4m8.77765795s ago: executing program 3 (id=4009): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x3) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_open_dev$evdev(&(0x7f00000023c0), 0x6, 0x14480) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000005000900", 0x20) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m7.429335719s ago: executing program 3 (id=4011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x108) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) 4m6.306497674s ago: executing program 3 (id=4013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x3e00, 0x7ffe0000, 0x3e0000}], 0x0) 4m4.350292408s ago: executing program 3 (id=4024): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r1, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES32=r0], 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x1000) ioctl$VT_ACTIVATE(r5, 0x5606, 0xb) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8f42, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x15) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31, 0x2c, 0x2f]}}}}]}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x9}, @code={0x1, 0x5d, {"c4e12172d2f03667460f78b7c12e34eec74424000c000000c744240200000000c7442406000000000f0114240f01383e0f01c32ef2410f12f8c401c155e76642f4660f38348800a000000f07"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x46, {"0fc75e052e460f001b0f01dff3f08156be00600000c461825a9305000000420f01cb66bad104ecc463791dd50066440f38822f0f07"}}, @uexit={0x0, 0x18, 0x3ff}, @code={0x1, 0x77, {"c744240000280000c74424026b940000c7442406000000000f0114240f001766baf80cb8b4681a8eef66bafc0cb800000100ef0f063636430fc79a00980000c744240046000000c7442402c7622824ff2c24450f009fddd664ce470f2166460f01c3400f01df"}}, @code={0x1, 0x81, {"6666420f3a6169a4a3400312c48295be80cc8e0000c74424001b100000c744240200400000c7442406000000000f01142466660f3a0b8a0e000000a8c4c17973fee1b9800000c00f3235001000000f30c4824100e70f01c948b837fd0000000000000f23c80f21f835080010000f23f8"}}, @code={0x1, 0x70, {"c74424006a000000c7442402447cbbe9ff1c24c74424000b000000c744240208000000ff1c2466f3420fbd33450f0fcca064660f38812c7ac4e2fd22cb40d0910000c0fe8fa980920166baf80cb880ba7987ef66bafc0cb8fdffffffef0f09"}}, @code={0x1, 0x7b, {"c74424004a000000c74424025f170000c7442406000000000f011424450f01cb0f01f6f3470f1ec466ba4200b8ed1d0000ef67f3420f09c7442400f13b0000c74424020000c0fec7442406000000000f011c240f20e035000004000f22e0460f019dad000000490fc729"}}, @code={0x1, 0x69, {"36f30f5d3648b800000000008000000f23c80f21f8350000c0000f23f80f20c3c4a111ea707f660f3a2104ac070f205d66ba610066edc744240000b00d34c7442402c46bbbe8c7442406000000000f0114240f01c40f01c5"}}, @code={0x1, 0x56, {"f3440fc7771866450f3881830a0000003e0f1bcc0f78e4c4827931a09dd60000360f01cf0f20d835200000000f22d864400fc77e0066ba2100b800000000ef66b887008ee8"}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x76d}, @code={0x1, 0x53, {"2e420f01f0c403b17d1b003666460fc734f3f30f09c4422dafd841758466420f3a0a0e0c48b805000000000000000f23d80f21f835400000600f23f8c442098c33ac"}}, @code={0x1, 0x65, {"c4e10457625b0f20c035000000800f22c08f293899e766baf80cb8dce57d8bef66bafc0cb80f000000ef66bad004b066ee0f20c035000000200f22c066b827000f00d0676666430f384028c402390104090f01c8"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xd4}, @code={0x1, 0x6a, {"c402359ef266470f6daf00800000c4018572e02366baa100b800000000ef420f01cbc7442400c7000000c7442402ce3c0000ff2c240fc7bb09000000420f019b0f00000066baf80cb81e0e0388ef66bafc0c66edc4a27d1a1e"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x4}], 0x557}) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000480)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000280)={0x3e46, {{0xa, 0x4e24, 0x627, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}}, {{0xa, 0x4e21, 0x586, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x108) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xe0}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r8, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 4m3.297820768s ago: executing program 3 (id=4027): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x490}], 0x2, 0x0, 0xb005}, 0x0) 4m3.098457584s ago: executing program 3 (id=4030): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a240100000002010213"], 0x0) syz_usbip_server_init(0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d80", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x84) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r8, &(0x7f0000000180)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x10000007, 0x5) 3m48.017690398s ago: executing program 33 (id=4030): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a240100000002010213"], 0x0) syz_usbip_server_init(0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d80", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x84) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r8, &(0x7f0000000180)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x10000007, 0x5) 28.368100242s ago: executing program 5 (id=4710): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioperm(0x284, 0x7f, 0xe3) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r8 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r8, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r9}, 0x18) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="03000000000201", 0x7}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x800, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r14 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r15, 0x107, 0x13, 0x0, 0x0) lseek(r14, 0x7ff, 0x1) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r13, @ANYRES8=r0, @ANYRES32=r12, @ANYBLOB="f988e7069acabefce13b52ca14bae7ab11068a8ba412edc009a3607deb4930d8059a91df01fd3bc215b8e1b1980741e1087367ad82e0f980178eb94df422750bd36d39d11db8b6bc47509faa3bb3d231000e8e02da10c61f8456263c4cff24b0db13c507761b6f17a060457b858cecce9f02eb66845bf14a5989ada31e8f25f92cacc9f7a3538bdf1d3d6ba4a7"], 0x28}, 0x1, 0x8}, 0x0) 26.565407498s ago: executing program 5 (id=4715): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0xfffd, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 26.390704312s ago: executing program 5 (id=4718): socket$kcm(0xa, 0x2, 0x3a) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000140)={'geneve0\x00', 0x100}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="050000000100", 0x6) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000040)={0x29, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 24.494155157s ago: executing program 5 (id=4722): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd1, 0x20040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) lseek(r1, 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82002, 0x0) write$dsp(r4, &(0x7f0000000200)="a52876830a602214f6b4e928d79a861cf181ad23bde667333e87c086eb520f2fa404c82a4ff1fa989e242769d2d070214087", 0x32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x7, 0x0, 0x1, {0xa, 0x4e22, 0x7, @mcast2, 0x84c}}}, 0x3a) close(r5) 22.190609415s ago: executing program 5 (id=4728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, &(0x7f0000000b00), 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x26297a07, 0x7, 0xec, 0xfa2b, 0x10, 0x5, 0x6}, &(0x7f0000000080)=0x9c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "b754bfba83ccbf1f", "a14d36f594aa62607f1babdfb1eb5246", "04f2e30d", "04000e000000000e"}, 0x28) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="f80900f89957e9fa4dfa2a12e82f215a993b5ae94cbb8e242b47d0c98ffc83e8374c10e92a8ab393143374e12100115aa158962f54b34ad4cf6a31c17ead2551985e167b413e84c314806d7376707f57a412c4076f6d33d38e6351eecfacf30c6aa600000000000000", 0x69}], 0x1}, 0x0) 21.438768391s ago: executing program 5 (id=4732): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/68, 0x8b}], 0x1, 0x0, 0x0) 21.31529092s ago: executing program 34 (id=4732): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/68, 0x8b}], 0x1, 0x0, 0x0) 14.588637841s ago: executing program 6 (id=4754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf25050000003d3bee848169fde4f81dfea8d0b98b042d6a055ef0485fca615d12317e04e5244c390e0dcad5d8cfb6f73c9ba3fedd4ea5dacb"], 0x14}, 0x1, 0x2000000}, 0x0) 14.46860863s ago: executing program 6 (id=4757): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_uring_setup(0x4792, &(0x7f00000001c0)={0x0, 0x878f}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x9b, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x4, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x1, 0x0, 0x6, "8d1f0000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11.761889968s ago: executing program 6 (id=4765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) getsockopt$ax25_int(r8, 0x101, 0x1, &(0x7f00000016c0), &(0x7f0000001700)=0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x1, 0xffff, @local, 0x9}}, 0x2, 0x7, 0x4, 0xfffffff9, 0x44, 0x8ab9, 0x4}, 0x9c) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x534deff043ec6db7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0xfffffffc, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 10.417173583s ago: executing program 2 (id=4770): r0 = socket$kcm(0x25, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setreuid(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) accept4(r0, 0x0, 0x0, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a100800000000041600000014000200fc02000000000000000000000000000114000100200100"/66], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r7) 8.920167103s ago: executing program 2 (id=4773): r0 = fsopen(&(0x7f00000002c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 8.438506127s ago: executing program 2 (id=4774): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000000000040ac057d0200000000000109f33e00ea31547702240001000040010904f0ff01030001000921010100012205003b8d5258ee8d7da3a21d0dac991396572ec76c5b36e7f70c7a9c018d1314c13f0c3a4c9fe911e841c8"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000700)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r4, 0x1, r2, 0xffffffff}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT], &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x141, 0x9, 0xd, 0xb, 0xff, 0x10}, 0x13, &(0x7f0000000400)=ANY=[@ANYRES64=r2]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x55, 0xfa, 0x59}) syz_usb_control_io(r0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0), 0x0, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='v', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000000000000000000905753be775746682020002000000090503"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r10, 0x82, 0x5, &(0x7f0000002340)='hello') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x42002, 0x0) ioctl$SNDCTL_MIDI_INFO(r12, 0xc074510c, &(0x7f00000002c0)={"49eb5b3a41b30c1821b9848d739895cfaca1fae4f299b4c9de0596a2b831", 0x2, 0x100, 0x6, [0xfff, 0xff, 0x101, 0x97, 0x7fff, 0x200002, 0x8, 0x2, 0xbd, 0x3, 0x3, 0x5, 0xb908, 0x4, 0x73b5, 0xffb2, 0x2, 0x72]}) sendto$inet6(r11, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x82, 0x5, @remote, 0xa}, 0x1c) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000003c9f406fa692f432612436f355e5f5cc15c1e7de59ab8c6d38c515f1f4724d809ae6bec1a67c474d5de75ccdc6293fadd5c46663d0002eba0757861463fdc120d3472cd2fd9deb541939662322898cf8308425f5100852f1ff4957ed5903c5a983077e7f9f5908c129b7f08500de77948df222307a15f015b303eab5fe477452e6898cc64b828839a16b1cee3e7a8a9d321c35602fe9b6dd53ada85ff96b726aecbdb0026a7d33396883a6a0f6ce252dd5eff510debb2b7091a12e", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf256400000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x20, 0x12, 0x5, {0x5, 0xc, "8edd51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.19202235s ago: executing program 6 (id=4775): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x36942) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) socket(0x2, 0x80805, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f00000005c0)="6e13ca5ceca377ae09508b0a994822bcd5aa1aaba11a3cd6d6ad9cb0280178d7cff6732c46a57872525bf2bf4d297f553e6a0f3805a3ae829192e4412af6330ed0f556c4e55c377799675effe28c95ee7591f2b5c354bac793e7bdfac1e3ad2252f3e8799e52d785473e27099a4ec2d6df7dcfe1551a7bc1510000000000", 0x7e, 0x7, 0x0, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1, 0x4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00') syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010001", 0x7) 7.282601889s ago: executing program 6 (id=4780): syz_clone(0x80880000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000100000008004a000000000008004b0028"], 0x30}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf5, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4607020002040000000000000002003e00fcffff01000038000000fb01000000080000040020000400000044006a5b00000000000000600b000000050000004000000005000000f3ffffff100000000100000003000000fcffffff0180000006000000007d56660ca91f000001000060070000000300000004000000060000e60300000004000000040000430d00000000000000de040000ffffffff080000000600000003000000570800003f491130be9b35140d77253ef9b3f66596ab4a19893ea69029a36a2b5331d5659bbc666e6c1c1488516b94ce7239bccb73e43fd5cad30b35e3c8ada905e71b9088824620ec9d53942e84213df72735aa993b4ef313e1d0054b189276001836fec136dab0682d7fac1cec95775e78049570f4070200b0aa2cdfb886bd9a70655f61ddd2ce557417c587a1e1c96a5f201fc383798a68e73e5afa5936915a600cc0279fb08d31c24ac31940e57fc64b0a22f3f61227462cffd8f626b749fda5ab1f087de040fa883a88f75af34c8a0b83d55b9a7b95797001c49b8d3dccfbb9ef1babe01da8c3fb0a3d5d79b2ff11c1acdff38bc88c1fcc00ff9ce70f6657572e757fffa603bee95d7493b46a4d00817f91eb07a91d62246c4be22c73472e082e6336f151c5"], 0x2ff) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.095023057s ago: executing program 4 (id=4782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61a4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000022cf4907f18ba01060fb79ed29a19078bde77eb7e62a58373dcbbb3d50d5823ed0024ca67dc1ee4b99595bc07dc52af06d994e059013e63200ae8fcef08bed", @ANYRES16=r2, @ANYBLOB="010000000000000000000400000005000a000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ppoll(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r8 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x29, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000000000bf91000000000000b7020500020000008500000085000000b7000000000000009500"/64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r13, r13}, &(0x7f0000000600), &(0x7f0000000640)=r12}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0xffffff5f, 0xda, &(0x7f0000000500)=""/218, 0x40f00, 0x41, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r7, r8, r11, r13], &(0x7f0000000740)=[{0x3, 0x5, 0x7, 0x4}, {0x5, 0x1, 0x2, 0xb}, {0x0, 0x3, 0xf, 0x1}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x5, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$setflags(r3, 0x2, 0x0) r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r14, 0x4008af13, &(0x7f0000000080)={0x1, 0x7}) 6.817340538s ago: executing program 4 (id=4784): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x4, {0x0, 0x7, 0x100, 0x3}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_migrate_task\x00', r7, 0x0, 0x2}, 0x1a) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 5.660246979s ago: executing program 7 (id=4786): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz?2\xf0s\x01\xa6\x8dg\xe2\xc5)\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&', 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket(0x3, 0x6, 0xb) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "b42c170000005e1a850726e6efcc1300", 0x38415261}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xfffffffffffffff8]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', 0x100}) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x11, r0, 0x0) 5.452515705s ago: executing program 7 (id=4787): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x40, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) 4.519929497s ago: executing program 7 (id=4789): mkdir(&(0x7f0000000040)='./file1\x00', 0x1f5) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000002c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000370100000800000000001a001c0000e500000000", @ANYRES32=r2, @ANYBLOB="02005d00"], 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) tkill(0x0, 0x2e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3.629914903s ago: executing program 4 (id=4790): syz_emit_ethernet(0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb810009e98906eb2574a2030401aa9d29ad41dd54e8ce244289a850ded7fb01877b28d292a5bc3cf801bc4214"], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[]) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 3.474523918s ago: executing program 4 (id=4793): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x53) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)=0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6577206465666175797a20303030303030b1d7b0a2d40dcd563496ea6d7abfd3ae2df2c37806303030303030000000000000000000"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3955", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) write$binfmt_elf32(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e"], 0x58) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f00000003c0)={0x11ca979091dd7a5f, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x2e) 3.382414272s ago: executing program 1 (id=4794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61a4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000022cf4907f18ba01060fb79ed29a19078bde77eb7e62a58373dcbbb3d50d5823ed0024ca67dc1ee4b99595bc07dc52af06d994e059013e63200ae8fcef08bed", @ANYRES16=r2, @ANYBLOB="010000000000000000000400000005000a000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ppoll(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r8 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x29, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000000000bf91000000000000b7020500020000008500000085000000b7000000000000009500"/64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r13, r13}, &(0x7f0000000600), &(0x7f0000000640)=r12}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0xffffff5f, 0xda, &(0x7f0000000500)=""/218, 0x40f00, 0x41, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r7, r8, r11, r13], &(0x7f0000000740)=[{0x3, 0x5, 0x7, 0x4}, {0x5, 0x1, 0x2, 0xb}, {0x0, 0x3, 0xf, 0x1}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x5, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$setflags(r3, 0x2, 0x0) r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r14, 0x4008af13, &(0x7f0000000080)={0x1, 0x7}) 3.162949789s ago: executing program 7 (id=4795): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000340000000001000320003000000000000000000000010003300000000000000000000000000fc0200000000000000000000000000f4020005000000000002"], 0x80}}, 0x0) 2.85333932s ago: executing program 1 (id=4796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, &(0x7f0000000b00), 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x26297a07, 0x7, 0xec, 0xfa2b, 0x10, 0x5, 0x6}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="f80900f89957e9fa4dfa2a12e82f215a993b5ae94cbb8e242b47d0c98ffc83e8374c10e92a8ab393143374e12100115aa158962f54b34ad4cf6a31c17ead2551985e167b413e84c314806d7376707f57a412c4076f6d33d38e6351eecfacf30c6aa600000000000000", 0x69}], 0x1}, 0x0) 2.803127644s ago: executing program 7 (id=4797): openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/vmcoreinfo', 0x309080, 0x1) syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, &(0x7f0000000300), &(0x7f0000000200)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r0, &(0x7f00000000c0)=""/75, 0x4b) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmmsg$inet6(r1, &(0x7f00000065c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000009f0000000000e500"], 0x50) sched_setscheduler(r3, 0x3, &(0x7f0000000240)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r3, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) r5 = syz_open_dev$video(0x0, 0x8, 0x80081) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000cc0)={0x1, {0x0, 0x7b, 0x1000}}) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x1, 0x0, 0xffffffffffffffd1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') 1.401119824s ago: executing program 1 (id=4798): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x500, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.253872263s ago: executing program 1 (id=4799): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) 946.599675ms ago: executing program 2 (id=4801): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000080)=0x4) 523.257206ms ago: executing program 6 (id=4802): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x3}], 0x13) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0xdeb, 0x4, 0xff, 0x1ff, 0x0, 0xfffffffd}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600000000", 0x85}, {&(0x7f0000000400)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d5", 0x29}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b135bfef85013c74b374f5892a7254e3405ebe8d6125ace8414fc44456c1c521ce19dae4a7f37f08f5e7b686c02967dfb02fa1ec528de641f95606c3be81b643b62d206a8aadea3d7663c32b159036bde2ee6fb0441c70bb0b0a46174f8387436eaeafa94aedef284393412f0239be8", 0x9a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fc", 0x26}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1f9}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c2", 0x51}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(r0, &(0x7f0000006540)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000800)="27edad0454df45a3d715459ef216cf26cca475255ceb0b3bbfd4b9906364c6fde13d5bf86d19853ca97744f53139bf3b0dc4571edb2bad66152bb3d9b17b847de72e28b5b5abdc09d80ba19fda4aaa05c504f7001228d58544e3d24b0ecfbb9725db", 0x62}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000900)="4510d0a7bd756be21baf0932ac56336a648a317b7001566bf3cecbc6ca6838b8067099edc75f7fa659478ac6c3b290b56e79458d849bddb9c478a7a31696433e1a110d6c2083e9c638a377da592f79ca49fd0c3f0d7e81f9a676439ec17fb7cd84af8cdc9a53bcf5ca8a3525456432263fb6b6745686d6640c53332b945356abb18866c37d0e4e13ad5aef8cb2cddde4f196f9e73ac3c5db113be66b2c630040795e84c9218523c7da6b1ca40dece2c922f523e1aab1f8792aa0b93265bc19438a1b651bb1badac3cd", 0xc9}, {&(0x7f00000005c0)="6f9cc5652b12d497cbb948b4a47018927701076f0cfc1ffcf1923a86", 0x1c}, {&(0x7f0000000b00)="fc6a7caa88088ae3e114726169de39a92661ebbfa9a2cbb5a68bbcd42a462269b645f983eb54161624aabf68eea0020eeb5f904fd7e7e684afb4c20c818dce9c0cf5ec526f2007978df53f780ae2cbe0c49d38856b1d88437b033aa9e2be8b29b39d68375d49", 0x66}, {&(0x7f0000000640)="4fe018826b8b2b8d971efa6c33313c39b0aba901a0d2b6a44664f31508a26ec797f33f68453d6a", 0x27}, {&(0x7f0000002b00)="1d5438d203619d26fc2af36c9c90a52f9e1f3c0bd97d36348984e5af2c8972d7a918cc67a063301d5e2788d23b5d44b578f0653c935301624325f8ed0f2b692487fd3f5086a3265b01b17ac3fd7827da0d9028bd8331a46e14b7fd39044f1642f59f7bcefeaed1ad014eb1b312c7dd5cc76285eeb73f8cdf9896c1a824d9d9f61f85262070c1bbdda1721f676733294ba001b5d797dba98ebb32f0589efff921ff6e5d5e32e256ad402e426fde6378ff97bc536f4ba50469876e1d9babffc5f0f46fbfa5aadc4b5d6db9a74019ae29c978a6524a87c7179aff3c5b767da945c1ad952429e2cc975da469bf73182616", 0xef}, {&(0x7f0000000bc0)="e14fa2e5c4b5d23ccfcb1e2b7ac7569549e33d5f43267421636ff27f927bf4bd44a8b7204801cd38d2c4b2133067b4dc6e905dfa42622e629eceabe431580b082d520e4099b3cbc2685de8e401f8fd66501bd8aed46be3e69cf98301c1a6e153f2d1ffde1fd4", 0x66}, {&(0x7f0000001080)="e1b21409cbc101b497748f40dd5895655653cee8f8ac843a07f053d9dd6cc88d122e7f60c827e0ebe53942dc485387696a3f5344ed2c48b7f53e05e78d09f91e327c6d192a0b9dbac2343275bddbe4ca895ef665adad3a06179ccf6e3592002cf86eb6d658080e4a769730fa88970bc0ea8bcd7d6088fd7bdfc0a29b10b327e86eb8314977fa0020fbc1285d8a86b9eba1f315d9a73406543503baf916b2e4f30e28823097880d23d71a2d1be9fb376ef50bd4e2ef1ddd6badef91936fbbc8780e217a", 0xc3}], 0x7, 0x0, 0x0, 0x1}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001280)="a298e0ae8f9262df470969fb79902bf42d795c3dc1b7a53180de07e3a2ae5fca46786707d19fffe0839e66dc589b2eb69fba413c448100280cc4e8a1967b49693be5a7d2555a9cd463", 0x49}, {&(0x7f0000000d40)}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="25c2a1a3379d91aed926c95db94e2669d96e0471eb3b8b7ce12eea575b447a75ee094ebc1fbdc391ea57aa8b05393b0d71f88e45c1dae7af888402cb971eaa16251d6bce7b7f33979d462299b577156caffe8a84061b63210c0e5b287f7491d66cc676d17ca131e1744c3da6788e2fade0912cc14e234b415aac001e016f78b3b27502e8afc2e16e1dd0940a09ba40b4b8", 0x91}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f00000023c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002440)="5e6f2881e7213374661353568a87fa622ab03c2a93b05972cb84691beee2c8767bef8e7b8f38c59d5d150bc359638c7dce4590972f5e9e5d373c0eca579344ebf2db806a6e7b3562a06a263744a3a38a528347db409c507892d3e9cf8dedbc0e6d9ee823959b8ee9c78ae3da764fd6473bcb6ee7cf2ea8d756e1450111e0c5d003e438b73d2eea974f3a22e74cfdda9b0833205f24b7a784d34b0dde67d590f16810a762f58530fe152b2d69aa737042f4215631948f3678fa17184d99097463b0ccd94328b656efb9cbf8afa5cb1bcfef7fbce6ceb478635c47079a", 0xdc}, {&(0x7f0000002540)="d830e28ab077ff50af2ff2f8ba9feb7b1c4bd66689abdc012567c5d32ecb6871a7746c1a7e3babd98e350a418a8b03ed8831edac24379d89d5a234eed75a5f0f53d5ada45456f8948bb35d01bb999b5ec18e4140f8edb550f7fb19c65cd594204d231dcfaff568666c4e033608e29b66", 0x70}, {&(0x7f00000025c0)="f15cfba5aee565b24c7b7112444f0a32f8812ca67ae5921d99113164a215e27cedf386bcc0ae138a2d675bb1e4b10f3175ac1ffc4ae2c14b276237eed20f34222fefe8b8c89e4acc10802f13604c761ce68da66334e6526471cf7f0b0d2d8317e9ce2c533e7e257f049c6e1c5fabcd7103851cebeb7bf27005229b5528312642b630edb4bb8f2ac63cf03dea8cf5b69e0741e9994c970e726d2406a558ef0cc880d0d211b4c8c49ca1f74424f1967f6de274e4d35b76b73d319aa49ce412d855e166bbe22468bee2ebd3b74c5110d373475825559ef84d56e663d9430ed13443cb75e860014fcc671699", 0xea}, {&(0x7f00000026c0)}], 0x4, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0x38, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002880)="a23cf4fc0f57e1e27abfe7d4e0270c4886f21e58119fb15b3d3d9f3c31636485405323ae1c66f10aef08e473209c950b600fbc12203d3a5940f0eb3b9b6dac02ccdc64cb2882afbbf80e49f43f9075926b439fad32894f66919538c8b880d107b9dec5c48aeb920f01d1f3dc5392ce8fb20fa127aba2aea7436d830035732a09d7d565b3968c421506b2c37e7a7c1a62dd181dae6d4e799aaa685d38d3472608200048a7b81bed34e04204771826e65ca0f62828c476", 0xb6}, {0x0}, {&(0x7f00000029c0)="39761de348356dc32c3dc2a18c488a506eba44b5a15b2df4ec16daeaaffc3ae76d5133a33b5d97acddeb9cb55842765130f19c79c10b857999ddbc2af634b3cb7380b70d88ea5315230483dcf1e61709ca580b41397660774abd559c1e2d537d96b56912fc919baf28ad7c", 0x6b}], 0x3, &(0x7f0000004ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="54470ca045daac301e98ee895190b8d420b1adbedf36707a8618171034e986c5c03bff3e03a7c1983a48e8c0d29c6910951b6a0bf6bb0fbcef25a4323d26828b69a901b4e953052d74aa411af25e475284df1e46af9a5c2f21d5e0cb3d8eefe4b36a", 0x62}, {&(0x7f0000005080)="0a852fc64f1d48c5097f738967dd40b54a1e1fdeba2926e78e0e81d78ef149eba6528d92adc48202718e84a28ab93e317efbe0f2e1fbea77bae049ceaec856682d26744cffa1485e8bf66351053a9c821bb09bb3e360d8d2b4c97814eea0e7e1561a482d408e986260019df17b435d0514eb9e01d068582f17f57a1049493e34c6dfcac70ca8de21352a", 0x8a}, {&(0x7f0000005140)="5f60520cb5a7f44233a65cf00ea6d9ee0f71401669463892eee29bfbe0d3834a0b48a52bd1da1b1a9b58f861cc2defe559b03c54eed5db39dcd56aa9e886d391aeb297fde6df8dbd24588f1e3b1ff97e85138835e74b6d", 0x57}], 0x3, 0x0, 0x68, 0x20008005}}], 0x6, 0xfe280826dac44f8) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340)=0x2, r1, &(0x7f0000000380)=0x8, 0x8, 0x5) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 492.209531ms ago: executing program 2 (id=4803): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x26}}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@deltaction={0xbc, 0x31, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xbc}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000140)={0x0, 0x0, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x8}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000480)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0xfffffffffffffafd, 0x2aa6, 0x3}}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) 283.924493ms ago: executing program 4 (id=4804): memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa0200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x8}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 253.023067ms ago: executing program 1 (id=4805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/86, 0x56}], 0x1}, 0x8dffffffffffffff) 173.562765ms ago: executing program 7 (id=4806): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad", 0x27}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000050000008000003000000040004001c000180180010"], 0x34}}, 0x84) 0s ago: executing program 1 (id=4807): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x300}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsuid(0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x300}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) setfsuid(0x0) (async) kernel console output (not intermixed with test programs): : avc: denied { open } for pid=22094 comm="syz.5.4402" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1442.124573][ T30] audit: type=1400 audit(1746347745.910:2735): avc: denied { append } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1442.147838][ T30] audit: type=1400 audit(1746347746.060:2736): avc: denied { create } for pid=22094 comm="syz.5.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1442.148324][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1442.167317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.167649][ T30] audit: type=1400 audit(1746347746.070:2737): avc: denied { recv } for pid=22094 comm="syz.5.4402" saddr=10.128.0.169 src=30006 daddr=10.128.1.57 dest=48706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1442.210257][ T30] audit: type=1400 audit(1746347746.120:2738): avc: denied { map_create } for pid=22098 comm="syz.6.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1442.896541][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1442.917544][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1444.232919][T22148] netlink: 558 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1445.341136][ T5909] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1445.487997][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.982322][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 1445.989422][ T5909] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1446.005890][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1446.082903][ T5909] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1446.233209][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1446.350975][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1446.403411][ T5909] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1446.415009][T22172] block nbd4: not configured, cannot reconfigure [ 1446.458549][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1446.532636][ T5909] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1446.569505][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1446.586705][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1446.586722][ T30] audit: type=1400 audit(1746347752.110:2799): avc: denied { write } for pid=22176 comm="syz.4.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1446.787133][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1446.827020][ T5909] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1446.835071][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1446.846523][ T5909] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1446.867147][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1446.878488][ T5909] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1446.929246][ T30] audit: type=1400 audit(1746347752.450:2800): avc: denied { map_read map_write } for pid=22181 comm="syz.1.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1446.979997][ T5909] usb 7-1: string descriptor 0 read error: -22 [ 1446.996734][ T5909] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1447.010958][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.031666][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4427'. [ 1447.115427][ T5909] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1447.152433][T22189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4427'. [ 1447.341996][ T30] audit: type=1400 audit(1746347752.860:2801): avc: denied { prog_run } for pid=22158 comm="syz.6.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1448.016740][ T30] audit: type=1400 audit(1746347753.160:2802): avc: denied { write } for pid=22192 comm="syz.2.4429" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1448.290897][ T30] audit: type=1400 audit(1746347753.450:2803): avc: denied { read write } for pid=22192 comm="syz.2.4429" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1449.020189][T21079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.056470][ T30] audit: type=1400 audit(1746347753.450:2804): avc: denied { open } for pid=22192 comm="syz.2.4429" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1449.352867][ T5892] usb 7-1: USB disconnect, device number 7 [ 1449.859827][ T30] audit: type=1400 audit(1746347755.380:2805): avc: denied { create } for pid=22217 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1450.045579][ T30] audit: type=1400 audit(1746347755.550:2806): avc: denied { read } for pid=22222 comm="syz.5.4433" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1450.202786][ T30] audit: type=1400 audit(1746347755.550:2807): avc: denied { open } for pid=22222 comm="syz.5.4433" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1450.232831][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1450.289448][T22227] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1450.531281][ T30] audit: type=1400 audit(1746347755.550:2808): avc: denied { ioctl } for pid=22222 comm="syz.5.4433" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1450.591147][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 1450.599982][ T5892] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1450.673563][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.697550][ T5892] usb 7-1: config 0 descriptor?? [ 1450.916605][ T5892] usb 7-1: string descriptor 0 read error: -71 [ 1450.924302][ T5892] usb 7-1: Found UVC 0.00 device (2833:0201) [ 1450.932965][ T5892] usb 7-1: No valid video chain found. [ 1450.947626][ T5892] usb 7-1: USB disconnect, device number 8 [ 1451.221165][T16400] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1451.384019][T16400] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 1451.392463][T16400] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1451.400680][T16400] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1451.409897][T16400] usb 3-1: config 0 has no interface number 0 [ 1451.416740][T16400] usb 3-1: config 0 has no interface number 1 [ 1451.423080][T16400] usb 3-1: config 0 interface 165 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1451.436344][T16400] usb 3-1: too many endpoints for config 0 interface 68 altsetting 44: 113, using maximum allowed: 30 [ 1451.447898][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1451.459316][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1451.471197][T16400] usb 3-1: config 0 interface 68 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 1451.482979][T16400] usb 3-1: config 0 interface 68 altsetting 44 has a duplicate endpoint with address 0x3, skipping [ 1451.494859][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0xE has invalid maxpacket 1015, setting to 64 [ 1451.506519][T16400] usb 3-1: config 0 interface 68 altsetting 44 has a duplicate endpoint with address 0xF, skipping [ 1451.518632][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1451.530072][T16400] usb 3-1: config 0 interface 68 altsetting 44 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 1451.543332][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0x87 has invalid maxpacket 45591, setting to 64 [ 1451.660013][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0x8D has invalid maxpacket 13784, setting to 64 [ 1451.745846][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.889096][T16400] usb 3-1: config 0 interface 68 altsetting 44 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1451.933552][T16400] usb 3-1: config 0 interface 68 altsetting 44 has a duplicate endpoint with address 0xF, skipping [ 1451.974373][T16400] usb 3-1: config 0 interface 68 altsetting 44 has 13 endpoint descriptors, different from the interface descriptor's value: 113 [ 1451.989132][T16400] usb 3-1: config 0 interface 165 has no altsetting 0 [ 1451.996444][T16400] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1452.005992][T16400] usb 3-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=61.34 [ 1452.015633][T16400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.025201][T16400] usb 3-1: Product: syz [ 1452.030221][T16400] usb 3-1: Manufacturer: syz [ 1452.050927][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1452.050945][ T30] audit: type=1400 audit(1746347757.570:2822): avc: denied { create } for pid=22254 comm="syz.5.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1452.080622][T16400] usb 3-1: SerialNumber: syz [ 1452.201918][T16400] usb 3-1: config 0 descriptor?? [ 1452.215723][T16400] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 1452.224626][T16400] dvb-usb: bulk message failed: -8 (3/0) [ 1452.327521][T22261] fuse: Unknown parameter 'user_id00000000000000000000' [ 1452.354936][ T30] audit: type=1400 audit(1746347757.830:2823): avc: denied { write } for pid=22254 comm="syz.5.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1452.375824][ T30] audit: type=1400 audit(1746347757.840:2824): avc: denied { read write } for pid=22254 comm="syz.5.4441" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1452.400300][ T30] audit: type=1400 audit(1746347757.840:2825): avc: denied { open } for pid=22254 comm="syz.5.4441" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1452.585383][T16400] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1452.589050][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1452.594242][ T30] audit: type=1400 audit(1746347757.850:2826): avc: denied { mounton } for pid=22254 comm="syz.5.4441" path="/359/file0" dev="tmpfs" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1452.624746][T16400] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 1452.765194][T16400] usb 3-1: media controller created [ 1452.772653][T16400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.788918][T16400] dvb-usb: bulk message failed: -8 (6/0) [ 1452.797473][T16400] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 1452.808811][T16400] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 1453.281151][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1453.288678][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1453.322619][T16400] dvb-usb: schedule remote query interval to 150 msecs. [ 1453.332786][ T30] audit: type=1400 audit(1746347758.850:2827): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1453.355520][T16400] dvb-usb: bulk message failed: -8 (3/0) [ 1453.371822][ T30] audit: type=1400 audit(1746347758.850:2828): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1453.372969][ T9] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 1453.399056][T16400] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 1453.445506][ T30] audit: type=1400 audit(1746347758.850:2829): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3374 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1453.462245][T16400] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 1453.470532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.473249][ T9] usb 7-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1453.497856][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1453.632924][ T5821] dvb-usb: bulk message failed: -8 (1/0) [ 1453.639124][ T5821] dvb-usb: error while querying for an remote control event. [ 1453.649984][T16400] dvb-usb: bulk message failed: -8 (3/0) [ 1454.361245][ T30] audit: type=1400 audit(1746347759.750:2830): avc: denied { ioctl } for pid=22267 comm="syz.5.4444" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=77320 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1454.415289][ T24] dvb-usb: bulk message failed: -8 (1/0) [ 1454.558368][T14560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1454.706334][ T24] dvb-usb: error while querying for an remote control event. [ 1454.782201][ T9] usb 7-1: string descriptor 0 read error: -22 [ 1454.788586][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1455.706611][ T5821] dvb-usb: bulk message failed: -8 (1/0) [ 1455.719800][ T5821] dvb-usb: error while querying for an remote control event. [ 1455.734190][T16400] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1455.843289][ T30] audit: type=1400 audit(1746347761.330:2831): avc: denied { ioctl } for pid=22277 comm="syz.5.4447" path="/dev/video5" dev="devtmpfs" ino=939 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1455.868289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.041522][T16400] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 1456.049858][T16400] usb 3-1: media controller created [ 1456.055297][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.087515][ T9] usb 7-1: can't set config #1, error -71 [ 1456.132494][ T9] usb 7-1: USB disconnect, device number 9 [ 1456.149924][T22286] FAULT_INJECTION: forcing a failure. [ 1456.149924][T22286] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.191405][T22286] CPU: 0 UID: 0 PID: 22286 Comm: syz.2.4448 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1456.191434][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1456.191444][T22286] Call Trace: [ 1456.191450][T22286] [ 1456.191458][T22286] dump_stack_lvl+0x16c/0x1f0 [ 1456.191485][T22286] should_fail_ex+0x512/0x640 [ 1456.191506][T22286] ? fs_reclaim_acquire+0xae/0x150 [ 1456.191528][T22286] ? tomoyo_encode2+0x100/0x3e0 [ 1456.191548][T22286] should_failslab+0xc2/0x120 [ 1456.191565][T22286] __kmalloc_noprof+0xd2/0x510 [ 1456.191587][T22286] ? d_absolute_path+0x136/0x1a0 [ 1456.191617][T22286] tomoyo_encode2+0x100/0x3e0 [ 1456.191639][T22286] tomoyo_encode+0x29/0x50 [ 1456.191657][T22286] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1456.191683][T22286] tomoyo_path_number_perm+0x245/0x580 [ 1456.191699][T22286] ? tomoyo_path_number_perm+0x237/0x580 [ 1456.191718][T22286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1456.191735][T22286] ? find_held_lock+0x2b/0x80 [ 1456.191773][T22286] ? find_held_lock+0x2b/0x80 [ 1456.191788][T22286] ? hook_file_ioctl_common+0x145/0x410 [ 1456.191806][T22286] ? __fget_files+0x20e/0x3c0 [ 1456.191834][T22286] security_file_ioctl+0x9b/0x240 [ 1456.191857][T22286] __x64_sys_ioctl+0xb7/0x200 [ 1456.191878][T22286] do_syscall_64+0xcd/0x260 [ 1456.191899][T22286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.191915][T22286] RIP: 0033:0x7fab1178e969 [ 1456.191928][T22286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1456.191942][T22286] RSP: 002b:00007fab12690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.191957][T22286] RAX: ffffffffffffffda RBX: 00007fab119b5fa0 RCX: 00007fab1178e969 [ 1456.191967][T22286] RDX: 0000200000000040 RSI: 00000000c02c563a RDI: 0000000000000003 [ 1456.191976][T22286] RBP: 00007fab12690090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.191984][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.191992][T22286] R13: 0000000000000000 R14: 00007fab119b5fa0 R15: 00007ffc2dd5b898 [ 1456.192013][T22286] [ 1456.192031][T22286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1456.201637][ T24] dvb-usb: bulk message failed: -8 (1/0) [ 1456.261428][ T972] libceph: connect (1)[c::]:6789 error -101 [ 1456.267636][T16400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1456.270683][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 1456.352247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.480341][T16400] dvb-usb: bulk message failed: -8 (6/0) [ 1456.500537][T16400] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 1456.929335][T22287] ceph: No mds server is up or the cluster is laggy [ 1456.991286][T16400] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1457.224011][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1457.230054][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1457.260580][T16400] dvb-usb: schedule remote query interval to 150 msecs. [ 1457.284419][T16400] dvb-usb: bulk message failed: -8 (3/0) [ 1457.299875][ T24] dvb-usb: error while querying for an remote control event. [ 1457.330960][T16400] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 1457.347253][T16400] usb 3-1: USB disconnect, device number 99 [ 1457.397274][T16400] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 1457.538898][ T6409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.589339][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1457.589357][ T30] audit: type=1400 audit(1746347763.110:2838): avc: denied { read } for pid=22310 comm="syz.1.4456" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1457.678441][T22312] fuse: Unknown parameter 'user_id00000000000000000000' [ 1458.054877][T16400] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 1458.065950][ T30] audit: type=1400 audit(1746347763.580:2839): avc: denied { open } for pid=22310 comm="syz.1.4456" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1458.977989][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1459.021901][T22310] ALSA: mixer_oss: invalid index 40000 [ 1459.127386][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1459.311215][ T9] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1459.362437][T22323] netlink: 'syz.2.4459': attribute type 18 has an invalid length. [ 1459.476696][ T30] audit: type=1400 audit(1746347765.000:2840): avc: denied { execute } for pid=22320 comm="syz.2.4459" path="/287/blkio.throttle.io_serviced_recursive" dev="tmpfs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1460.524232][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1460.540975][ T30] audit: type=1400 audit(1746347766.060:2841): avc: denied { setopt } for pid=22320 comm="syz.2.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1461.401188][ T30] audit: type=1400 audit(1746347766.080:2842): avc: denied { bind } for pid=22320 comm="syz.2.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1461.438453][ T30] audit: type=1400 audit(1746347766.080:2843): avc: denied { write } for pid=22320 comm="syz.2.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1461.458841][ T30] audit: type=1400 audit(1746347766.890:2844): avc: denied { write } for pid=22338 comm="syz.4.4462" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1461.486216][ T30] audit: type=1400 audit(1746347766.900:2845): avc: denied { create } for pid=22338 comm="syz.4.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1461.519158][ T30] audit: type=1400 audit(1746347766.900:2846): avc: denied { write } for pid=22338 comm="syz.4.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1461.554574][ T30] audit: type=1400 audit(1746347766.900:2847): avc: denied { read } for pid=22338 comm="syz.4.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1461.820577][T22351] 9pnet_fd: Insufficient options for proto=fd [ 1461.883634][T22357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.980936][ T5909] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1462.521048][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 1462.529370][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.539590][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.561283][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1462.571113][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1462.603294][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1462.603300][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.642357][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1462.652769][ T5909] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1462.666735][ T5909] usb 5-1: Manufacturer: syz [ 1462.689789][ T5909] usb 5-1: config 0 descriptor?? [ 1462.960209][T22375] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1463.266631][T22377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1463.551220][ T5909] rc_core: IR keymap rc-hauppauge not found [ 1463.559040][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1463.559058][ T30] audit: type=1400 audit(1746347769.080:2849): avc: denied { write } for pid=22380 comm="syz.1.4475" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1463.559324][ T5909] Registered IR keymap rc-empty [ 1463.598610][ T30] audit: type=1400 audit(1746347769.130:2850): avc: denied { accept } for pid=22343 comm="syz.4.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1463.618860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.731820][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1463.751342][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 1463.757393][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 1463.764898][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1463.783046][T22388] ceph: No mds server is up or the cluster is laggy [ 1463.792131][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1463.996440][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 1464.067351][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.131141][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.152125][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.170980][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.191658][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.210984][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.266236][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.361805][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.381405][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1464.413958][ T5909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1465.163274][ T30] audit: type=1400 audit(1746347770.690:2851): avc: denied { write } for pid=22405 comm="syz.6.4481" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1465.187101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.192215][ T5909] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1465.203432][ T30] audit: type=1400 audit(1746347770.690:2852): avc: denied { open } for pid=22405 comm="syz.6.4481" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1465.275822][ T5909] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1465.501258][ T30] audit: type=1400 audit(1746347771.010:2853): avc: denied { execute_no_trans } for pid=22409 comm="syz.4.4482" path="/331/file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1465.795717][ T5909] usb 5-1: USB disconnect, device number 96 [ 1465.795799][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.995693][ T30] audit: type=1400 audit(1746347771.520:2854): avc: denied { create } for pid=22414 comm="syz.6.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1466.051359][ T30] audit: type=1400 audit(1746347771.550:2855): avc: denied { connect } for pid=22414 comm="syz.6.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1466.126981][T22417] ref_ctr_offset mismatch. inode: 0x638 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7110110900006800 [ 1466.177880][ T30] audit: type=1400 audit(1746347771.700:2856): avc: denied { setopt } for pid=22415 comm="syz.2.4485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1466.490963][ T5909] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1466.501222][ T5867] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1466.545522][ T30] audit: type=1400 audit(1746347772.070:2857): avc: denied { create } for pid=22425 comm="syz.4.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1466.610849][ T30] audit: type=1400 audit(1746347772.110:2858): avc: denied { getopt } for pid=22425 comm="syz.4.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1466.963676][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1467.301261][ T5867] usb 7-1: config 0 has an invalid interface number: 38 but max is 0 [ 1467.315456][ T5909] usb 3-1: not running at top speed; connect to a high speed hub [ 1467.321225][ T5867] usb 7-1: config 0 has no interface number 0 [ 1467.352079][ T5867] usb 7-1: config 0 interface 38 has no altsetting 0 [ 1467.352787][ T5909] usb 3-1: config 4 has an invalid interface number: 146 but max is 1 [ 1467.385397][ T5909] usb 3-1: config 4 has no interface number 1 [ 1467.412678][ T5909] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1467.429225][ T5867] usb 7-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=21.db [ 1467.438672][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.452695][ T5909] usb 3-1: config 4 interface 146 has no altsetting 0 [ 1467.456520][ T5867] usb 7-1: Product: syz [ 1467.479816][ T5867] usb 7-1: Manufacturer: syz [ 1467.484731][ T5909] usb 3-1: New USB device found, idVendor=06be, idProduct=d001, bcdDevice=cd.bd [ 1467.484763][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.484781][ T5909] usb 3-1: Product: syz [ 1467.484796][ T5909] usb 3-1: Manufacturer: syz [ 1467.515078][ T5867] usb 7-1: SerialNumber: syz [ 1467.524540][ T5867] usb 7-1: config 0 descriptor?? [ 1467.545778][ T5867] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 1467.546957][ T5909] usb 3-1: SerialNumber: syz [ 1467.576321][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 1467.607729][ T5867] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1467.631298][ T5867] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 1467.651308][ T5867] usb 7-1: media controller created [ 1467.668360][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1467.718759][ T5867] dvb-usb: bulk message failed: -22 (6/0) [ 1467.735316][ T5867] dvb-usb: no frontend was attached by 'DiBcom USB1.1 DVB-T reference design (MOD3000)' [ 1467.772354][T22423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.792436][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.806693][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 1467.834476][T22423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.998322][ T5909] gspca_main: nw80x-2.14.0 probing 06be:d001 [ 1468.017601][ T5909] gspca_nw80x: reg_w err -71 [ 1468.022126][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 1468.029393][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 1468.055369][ T5909] nw80x 3-1:4.0: probe with driver nw80x failed with error -71 [ 1468.055524][ T5867] dvb-usb: DiBcom USB1.1 DVB-T reference design (MOD3000) successfully initialized and connected. [ 1468.085277][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4491'. [ 1468.101382][ T5867] usb 7-1: USB disconnect, device number 10 [ 1468.114209][ T5909] usb 3-1: USB disconnect, device number 100 [ 1468.131942][T22445] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4491'. [ 1468.148660][ T5867] dvb-usb: DiBcom USB1.1 DVB-T reference design (M successfully deinitialized and disconnected. [ 1468.724560][T22447] fuse: Bad value for 'fd' [ 1468.899281][T18398] Bluetooth: hci4: link tx timeout [ 1468.903827][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1468.903845][ T30] audit: type=1400 audit(1746347774.420:2869): avc: denied { connect } for pid=22451 comm="syz.4.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1468.917573][T18398] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1468.943983][T18398] Bluetooth: hci4: link tx timeout [ 1468.949098][T18398] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1469.043322][T22461] netlink: 'syz.6.4498': attribute type 11 has an invalid length. [ 1469.050952][ T30] audit: type=1400 audit(1746347774.420:2870): avc: denied { write } for pid=22451 comm="syz.4.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1469.056003][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 1469.632496][ T30] audit: type=1400 audit(1746347775.170:2871): avc: denied { mount } for pid=22471 comm="syz.5.4501" name="/" dev="ramfs" ino=77587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1470.765181][ T30] audit: type=1400 audit(1746347776.290:2872): avc: denied { read write } for pid=22476 comm="syz.1.4503" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1470.807588][ T30] audit: type=1400 audit(1746347776.320:2873): avc: denied { open } for pid=22476 comm="syz.1.4503" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1470.841180][ T30] audit: type=1400 audit(1746347776.330:2874): avc: denied { read write } for pid=22476 comm="syz.1.4503" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1470.888176][T22480] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 1470.936333][ T30] audit: type=1400 audit(1746347776.330:2875): avc: denied { open } for pid=22476 comm="syz.1.4503" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1471.010318][ T30] audit: type=1400 audit(1746347776.410:2876): avc: denied { ioctl } for pid=22476 comm="syz.1.4503" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1471.035507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.081224][T22459] Bluetooth: hci4: command 0x0406 tx timeout [ 1471.161237][T22488] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1471.503068][ T30] audit: type=1400 audit(1746347776.530:2877): avc: denied { create } for pid=22481 comm="syz.6.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1471.541020][ T5867] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1471.551875][ T745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.582953][T22492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1472.056192][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 1472.094143][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1472.124991][ T5867] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 1472.141050][ T5867] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1472.154546][ T30] audit: type=1400 audit(1746347776.530:2878): avc: denied { bind } for pid=22481 comm="syz.6.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1472.197641][ T5867] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1472.217176][ T5867] usb 3-1: string descriptor 0 read error: -22 [ 1472.316089][ T5867] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1472.329163][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.350620][T22479] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1472.849315][ T972] usb 3-1: USB disconnect, device number 101 [ 1473.056305][T22507] netlink: 'syz.5.4511': attribute type 11 has an invalid length. [ 1473.065689][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4511'. [ 1473.209479][T18398] Bluetooth: hci4: command 0x0406 tx timeout [ 1473.324510][T22511] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1473.333057][T22511] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1473.343125][T22511] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1473.351074][T22511] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1473.616927][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.465758][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1474.466769][ T30] audit: type=1400 audit(1746347779.970:2886): avc: denied { getopt } for pid=22513 comm="syz.5.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1474.550341][ T30] audit: type=1400 audit(1746347779.970:2887): avc: denied { map } for pid=22513 comm="syz.5.4514" path="socket:[77642]" dev="sockfs" ino=77642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1474.777483][ T30] audit: type=1400 audit(1746347780.300:2888): avc: denied { mount } for pid=22518 comm="syz.6.4516" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1474.950035][ T30] audit: type=1400 audit(1746347780.470:2889): avc: denied { unmount } for pid=20925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1475.231458][T16400] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1475.797127][T22531] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1475.909375][T16400] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.283268][T16400] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1476.314873][T16400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.336625][T16400] usb 3-1: Product: syz [ 1476.353342][T16400] usb 3-1: Manufacturer: syz [ 1476.358105][T16400] usb 3-1: SerialNumber: syz [ 1476.411422][T16400] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1476.538055][T22550] vlan4: entered promiscuous mode [ 1476.545140][T22550] vlan4: entered allmulticast mode [ 1476.686713][T16400] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1476.849684][T16400] usb 3-1: USB disconnect, device number 102 [ 1477.312423][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1477.467488][T22566] Bluetooth: MGMT ver 1.23 [ 1477.511737][ T30] audit: type=1400 audit(1746347782.970:2890): avc: denied { bind } for pid=22562 comm="syz.6.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1477.701589][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1477.727745][T22564] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1477.888664][ T30] audit: type=1400 audit(1746347783.410:2891): avc: denied { unmount } for pid=15173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1478.124827][T22573] FAULT_INJECTION: forcing a failure. [ 1478.124827][T22573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.138543][T22430] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1478.150985][T22573] CPU: 0 UID: 0 PID: 22573 Comm: syz.5.4530 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1478.151014][T22573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1478.151025][T22573] Call Trace: [ 1478.151032][T22573] [ 1478.151038][T22573] dump_stack_lvl+0x16c/0x1f0 [ 1478.151070][T22573] should_fail_ex+0x512/0x640 [ 1478.151098][T22573] _copy_to_user+0x32/0xd0 [ 1478.151124][T22573] simple_read_from_buffer+0xcb/0x170 [ 1478.151153][T22573] proc_fail_nth_read+0x197/0x270 [ 1478.151181][T22573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.151205][T22573] ? rw_verify_area+0xcf/0x680 [ 1478.151225][T22573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.151248][T22573] vfs_read+0x1de/0xc70 [ 1478.151273][T22573] ? __pfx___mutex_lock+0x10/0x10 [ 1478.151296][T22573] ? __pfx_vfs_read+0x10/0x10 [ 1478.151325][T22573] ? __fget_files+0x20e/0x3c0 [ 1478.151356][T22573] ksys_read+0x12a/0x240 [ 1478.151378][T22573] ? __pfx_ksys_read+0x10/0x10 [ 1478.151402][T22573] ? __secure_computing+0x28e/0x3b0 [ 1478.151429][T22573] do_syscall_64+0xcd/0x260 [ 1478.151452][T22573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.151469][T22573] RIP: 0033:0x7f687478d37c [ 1478.151484][T22573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1478.151498][T22573] RSP: 002b:00007f68756cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1478.151514][T22573] RAX: ffffffffffffffda RBX: 00007f68749b5fa0 RCX: 00007f687478d37c [ 1478.151524][T22573] RDX: 000000000000000f RSI: 00007f68756cd0a0 RDI: 000000000000000b [ 1478.151533][T22573] RBP: 00007f68756cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.151543][T22573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.151551][T22573] R13: 0000000000000000 R14: 00007f68749b5fa0 R15: 00007ffc346960b8 [ 1478.151574][T22573] [ 1478.431000][T22430] usb 3-1: device descriptor read/64, error -71 [ 1478.487057][ T30] audit: type=1400 audit(1746347784.010:2892): avc: denied { unlink } for pid=22574 comm="syz.5.4532" name="#36" dev="tmpfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1478.510166][ T30] audit: type=1400 audit(1746347784.010:2893): avc: denied { mount } for pid=22574 comm="syz.5.4532" name="/" dev="overlay" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1478.533995][ T30] audit: type=1400 audit(1746347784.010:2894): avc: denied { mount } for pid=22574 comm="syz.5.4532" name="/" dev="hugetlbfs" ino=79901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1478.534044][ T30] audit: type=1400 audit(1746347784.010:2895): avc: denied { unmount } for pid=22574 comm="syz.5.4532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1478.541935][T22577] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1478.737694][T14560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.798196][T22430] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1478.930877][T22430] usb 3-1: device descriptor read/64, error -71 [ 1478.991226][ T5909] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1479.041852][T22430] usb usb3-port1: attempt power cycle [ 1479.161386][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1479.169576][ T5909] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1479.184005][ T5909] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1479.195271][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.203611][ T5909] usb 6-1: Product: syz [ 1479.207944][ T5909] usb 6-1: Manufacturer: syz [ 1479.212787][ T5909] usb 6-1: SerialNumber: syz [ 1479.219143][ T5909] usb 6-1: config 0 descriptor?? [ 1479.225773][ T5909] usb 6-1: bad CDC descriptors [ 1479.231513][ T5909] usb 6-1: unsupported MDLM descriptors [ 1479.402129][T22430] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1479.415808][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1479.512006][T22430] usb 3-1: device descriptor read/8, error -71 [ 1479.525459][ T5867] usb 6-1: USB disconnect, device number 36 [ 1479.605866][T22588] hsr_slave_1 (unregistering): left promiscuous mode [ 1479.630556][ T30] audit: type=1400 audit(1746347785.150:2896): avc: denied { create } for pid=22591 comm="syz.4.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1479.642720][T22592] delete_channel: no stack [ 1479.741115][T22430] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1479.741899][ T30] audit: type=1400 audit(1746347785.270:2897): avc: denied { append } for pid=22591 comm="syz.4.4537" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1479.789372][T22430] usb 3-1: device descriptor read/8, error -71 [ 1479.840878][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1479.914368][T22430] usb usb3-port1: unable to enumerate USB device [ 1480.740024][ T30] audit: type=1400 audit(1746347786.260:2898): avc: denied { unmount } for pid=15173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1480.823947][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1480.835191][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1480.873987][ T30] audit: type=1400 audit(1746347786.400:2899): avc: denied { setopt } for pid=22602 comm="syz.5.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1480.874891][ T9] usb 7-1: config 1 has no interface number 1 [ 1480.929511][T22604] ref_ctr_offset mismatch. inode: 0x82b offset: 0x7 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 [ 1481.001007][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1481.027865][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4541'. [ 1481.046978][T22606] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1481.063131][T22606] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1481.167390][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1481.180211][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.193603][ T9] usb 7-1: Product: syz [ 1481.197817][ T9] usb 7-1: Manufacturer: syz [ 1481.211957][ T9] usb 7-1: SerialNumber: syz [ 1481.671473][ T30] audit: type=1326 audit(1746347787.140:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1481.772316][ T30] audit: type=1326 audit(1746347787.140:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1481.816283][ T30] audit: type=1326 audit(1746347787.150:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1481.854554][T22613] xt_connbytes: Forcing CT accounting to be enabled [ 1481.861622][T22613] set match dimension is over the limit! [ 1482.141365][ T30] audit: type=1326 audit(1746347787.170:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1482.226542][ T30] audit: type=1326 audit(1746347787.180:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1482.910815][T22621] vivid-000: kernel_thread() failed [ 1483.011160][ T9] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1483.205474][ T30] audit: type=1326 audit(1746347787.230:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.5.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687478e969 code=0x7ffc0000 [ 1483.259152][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1483.390349][T22632] 9pnet_fd: Insufficient options for proto=fd [ 1483.508170][ T9] usb 7-1: failed to enable PITCH for EP 0x82 [ 1483.535925][ T9] usb 7-1: USB disconnect, device number 11 [ 1484.347638][T22656] random: crng reseeded on system resumption [ 1484.365678][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.580250][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1484.587023][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1485.277386][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1485.283689][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1485.299349][T22662] ceph: No mds server is up or the cluster is laggy [ 1485.398497][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1485.398515][ T30] audit: type=1400 audit(1746347790.920:2912): avc: denied { create } for pid=22676 comm="syz.6.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1485.426768][ T30] audit: type=1400 audit(1746347790.950:2913): avc: denied { connect } for pid=22676 comm="syz.6.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1485.638133][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.653143][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.219363][ T30] audit: type=1400 audit(1746347791.720:2914): avc: denied { ioctl } for pid=22655 comm="syz.1.4555" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1486.751014][ T5867] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1486.831545][ T9] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1487.001034][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 1487.016013][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1487.026240][ T5867] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 1487.039037][ T5867] usb 7-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1487.053545][ T5867] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1487.120440][ T5867] usb 7-1: string descriptor 0 read error: -22 [ 1487.127209][ T5867] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1487.136605][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.145919][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1487.159660][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1487.172369][ T9] usb 6-1: config 1 has no interface number 1 [ 1487.178917][T22692] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1487.196541][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1487.218504][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1487.228888][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.239777][ T9] usb 6-1: Product: syz [ 1487.244268][ T9] usb 6-1: Manufacturer: syz [ 1487.248873][ T9] usb 6-1: SerialNumber: syz [ 1487.576531][T22710] fuse: Unknown parameter '0x0000000000000009' [ 1487.781300][T16400] usb 7-1: USB disconnect, device number 12 [ 1487.867538][ T9] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1487.886851][ T9] usb 6-1: failed to enable PITCH for EP 0x82 [ 1487.919591][ T9] usb 6-1: USB disconnect, device number 37 [ 1487.926067][ T5867] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1488.501354][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 1488.683209][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.716582][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.730244][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1488.743905][ T5867] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1488.753275][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.765021][ T5867] usb 3-1: config 0 descriptor?? [ 1488.906346][T14560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1489.428819][ T5867] koneplus 0003:1E7D:2E22.002C: unknown main item tag 0x0 [ 1489.436764][ T5867] koneplus 0003:1E7D:2E22.002C: unknown main item tag 0x0 [ 1489.472662][ T5867] koneplus 0003:1E7D:2E22.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1489.827150][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1489.839122][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1489.865959][ T30] audit: type=1400 audit(1746347795.390:2915): avc: denied { read } for pid=22703 comm="syz.2.4567" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1489.895298][ T30] audit: type=1400 audit(1746347795.410:2916): avc: denied { open } for pid=22703 comm="syz.2.4567" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1489.927312][ T30] audit: type=1400 audit(1746347795.410:2917): avc: denied { map } for pid=22703 comm="syz.2.4567" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1490.018784][T22743] ceph: No mds server is up or the cluster is laggy [ 1490.037627][ T9] usb 3-1: USB disconnect, device number 107 [ 1491.144834][T22761] block nbd4: not configured, cannot reconfigure [ 1492.020971][T22772] fuse: Unknown parameter '0x0000000000000008' [ 1492.503072][ T30] audit: type=1400 audit(1746347798.020:2918): avc: denied { create } for pid=22775 comm="syz.2.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1492.691270][ T30] audit: type=1400 audit(1746347798.030:2919): avc: denied { setopt } for pid=22775 comm="syz.2.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1494.629123][ T745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1496.262610][ T30] audit: type=1400 audit(1746347801.780:2920): avc: denied { watch watch_reads } for pid=22819 comm="syz.4.4595" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1496.337445][T22826] loop6: detected capacity change from 0 to 524287999 [ 1496.345625][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.370850][ T30] audit: type=1400 audit(1746347801.860:2921): avc: denied { create } for pid=22819 comm="syz.4.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1496.401370][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.419909][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.439993][ T30] audit: type=1400 audit(1746347801.860:2922): avc: denied { append } for pid=22819 comm="syz.4.4595" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1496.461124][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.474495][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.482839][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.491209][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.499235][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.507223][T22826] ldm_validate_partition_table(): Disk read failed. [ 1496.514952][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.529441][T22826] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.537754][ T9] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1496.549117][T22826] Dev loop6: unable to read RDB block 0 [ 1496.558895][T22826] loop6: unable to read partition table [ 1496.566319][T22826] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1496.946489][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1497.153643][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1497.244217][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1497.250673][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 1497.278341][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1497.377649][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1497.399117][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.429776][ T9] usb 3-1: Product: syz [ 1497.437748][ T9] usb 3-1: Manufacturer: syz [ 1497.451824][ T9] usb 3-1: SerialNumber: syz [ 1497.472934][ T9] usb 3-1: config 0 descriptor?? [ 1497.504268][T22824] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1498.621105][ T9] rc_core: IR keymap rc-streamzap not found [ 1498.627505][ T9] Registered IR keymap rc-empty [ 1498.635721][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1498.648187][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 1498.684899][ T9] usb 3-1: USB disconnect, device number 108 [ 1498.850922][T16400] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1498.993554][T18398] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1499.201241][T16400] usb 7-1: Using ep0 maxpacket: 16 [ 1499.209095][T16400] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1499.217392][T16400] usb 7-1: config 0 has no interface number 0 [ 1499.223950][T16400] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1499.730966][T16400] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1499.770924][T16400] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1499.780114][T16400] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1499.798248][T16400] usb 7-1: Product: syz [ 1499.807844][T16400] usb 7-1: SerialNumber: syz [ 1499.912191][T16400] usb 7-1: config 0 descriptor?? [ 1499.937577][T16400] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1500.059848][T16400] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input45 [ 1500.648585][ T6409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.696292][ T30] audit: type=1400 audit(1746347806.220:2923): avc: denied { read } for pid=22842 comm="syz.6.4600" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1500.831291][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1501.101204][T22873] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1501.336036][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1501.959625][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.989722][ T24] usb 3-1: Product: syz [ 1502.060975][ T24] usb 3-1: Manufacturer: syz [ 1502.097809][ T24] usb 3-1: SerialNumber: syz [ 1502.187373][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1502.202361][ T30] audit: type=1400 audit(1746347807.720:2924): avc: denied { firmware_load } for pid=5909 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1502.547528][ T5909] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1502.559425][T22844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1502.565690][T22844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1502.571818][T22844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1502.652187][T22880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1502.663134][T22844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1502.669416][T22844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1502.688912][T22844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1502.698110][T22844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1502.910995][T22459] Bluetooth: hci3: command 0x0405 tx timeout [ 1503.121336][ T972] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1503.310925][ T30] audit: type=1400 audit(1746347808.710:2925): avc: denied { mount } for pid=22856 comm="syz.2.4604" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1503.355897][ T30] audit: type=1400 audit(1746347808.820:2926): avc: denied { connect } for pid=22856 comm="syz.2.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1503.376226][ T972] usb 6-1: Using ep0 maxpacket: 16 [ 1503.394984][ T972] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1503.415420][ T972] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1503.427501][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.444589][ T972] usb 6-1: Product: 刭鰥숎鄆䲞ﷂ騑ᩧῷ빁붰沧푉ዓ술盏㑳ဧ絘츄㙭᭘⋢臛酦鋼륧ꟁؚ⾅ྫ咾훸ﲙ逷킹퐃熼⋩⏔ಭ谳෬᨜堶쟿諕㦟ꣅ䤞疻╯귥ᕑ貪菱똄Ⴘᛰ닕⭉ࡌẈ㎧菗升杔┹ [ 1503.551647][ T6416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1503.571030][ T972] usb 6-1: Manufacturer: 镉矚燺►ﰫꄧ弄ỷ䣃⨥ܯㆂ∺詟皿ꄃ棜㠭䬘ꫵ魿䘢蓽䵠䷼㦜㰼ꧩ♷둶ᷥㆅࠍ뤳΀읮橷뜾㚯羺趛䊸倌۸ﺅ骠䭕Ոꞎ㨡㜟௒ශ㮴ꌹ鲿ٯ࢓쐿巏덵蒳귋 [ 1503.640468][ T30] audit: type=1400 audit(1746347809.150:2927): avc: denied { bind } for pid=22886 comm="syz.4.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1503.640920][ T5909] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1503.667349][ T972] usb 6-1: SerialNumber: syz [ 1503.675508][T22890] pimreg3: entered allmulticast mode [ 1503.820609][ T5909] ath9k_htc: Failed to initialize the device [ 1503.874571][ T5909] usb 3-1: ath9k_htc: USB layer deinitialized [ 1504.013854][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1504.014257][ T9] usb 7-1: USB disconnect, device number 13 [ 1504.020851][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1504.094033][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1504.119522][ T972] cdc_ncm 6-1:1.0: bind() failure [ 1504.144027][ T972] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1504.267733][ T972] cdc_ncm 6-1:1.1: bind() failure [ 1504.292823][ T972] usb 6-1: USB disconnect, device number 38 [ 1504.671045][T22458] Bluetooth: hci2: command 0x0406 tx timeout [ 1504.677205][T22459] Bluetooth: hci1: command 0x0c1a tx timeout [ 1504.751045][T22459] Bluetooth: hci4: command 0x0406 tx timeout [ 1504.757138][T22459] Bluetooth: hci0: command 0x0405 tx timeout [ 1504.800552][ T30] audit: type=1400 audit(1746347810.310:2928): avc: denied { bind } for pid=22900 comm="syz.5.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.130946][T22905] qnx6: unable to set blocksize [ 1505.492636][ T30] audit: type=1400 audit(1746347810.310:2929): avc: denied { accept } for pid=22900 comm="syz.5.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.512448][ T30] audit: type=1400 audit(1746347810.310:2930): avc: denied { read } for pid=22900 comm="syz.5.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.531971][ T30] audit: type=1400 audit(1746347810.400:2931): avc: denied { shutdown } for pid=22902 comm="syz.1.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1505.552420][ T30] audit: type=1400 audit(1746347810.650:2932): avc: denied { mounton } for pid=22902 comm="syz.1.4613" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1505.925045][T22911] FAULT_INJECTION: forcing a failure. [ 1505.925045][T22911] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.937865][T22911] CPU: 0 UID: 0 PID: 22911 Comm: syz.5.4615 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1505.937892][T22911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1505.937903][T22911] Call Trace: [ 1505.937911][T22911] [ 1505.937919][T22911] dump_stack_lvl+0x16c/0x1f0 [ 1505.937953][T22911] should_fail_ex+0x512/0x640 [ 1505.937977][T22911] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1505.938001][T22911] should_failslab+0xc2/0x120 [ 1505.938020][T22911] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1505.938038][T22911] ? rcu_is_watching+0x12/0xc0 [ 1505.938058][T22911] ? smb3_parse_devname+0xfd/0x480 [ 1505.938088][T22911] kstrndup+0x6d/0x160 [ 1505.938110][T22911] smb3_parse_devname+0xfd/0x480 [ 1505.938134][T22911] smb3_fs_context_parse_param+0x3d79/0xa2a0 [ 1505.938156][T22911] ? irqentry_exit+0x3b/0x90 [ 1505.938182][T22911] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 1505.938209][T22911] ? static_key_count+0x1a/0x70 [ 1505.938243][T22911] ? static_key_count+0x42/0x70 [ 1505.938268][T22911] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 1505.938292][T22911] ? vfs_parse_fs_param+0x208/0x3c0 [ 1505.938310][T22911] vfs_parse_fs_param+0x208/0x3c0 [ 1505.938328][T22911] __do_sys_fsconfig+0x930/0xbe0 [ 1505.938350][T22911] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1505.938369][T22911] ? fput+0x70/0xf0 [ 1505.938400][T22911] do_syscall_64+0xcd/0x260 [ 1505.938424][T22911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.938443][T22911] RIP: 0033:0x7f687478e969 [ 1505.938458][T22911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1505.938474][T22911] RSP: 002b:00007f687568b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1505.938493][T22911] RAX: ffffffffffffffda RBX: 00007f68749b6160 RCX: 00007f687478e969 [ 1505.938504][T22911] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 1505.938515][T22911] RBP: 00007f687568b090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.938525][T22911] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1505.938536][T22911] R13: 0000000000000000 R14: 00007f68749b6160 R15: 00007ffc346960b8 [ 1505.938561][T22911] [ 1505.939503][T22911] CIFS: VFS: Unable to allocate memory for devname [ 1506.174854][ T745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.197618][ T5901] usb 3-1: USB disconnect, device number 109 [ 1506.300918][ T5892] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1506.523738][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1506.530975][ T5892] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1506.549408][ T5892] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1506.560294][ T5892] usb 5-1: config 0 has no interface number 0 [ 1506.570475][ T5892] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1506.774855][T22459] Bluetooth: hci1: command 0x0c1a tx timeout [ 1506.781134][T22459] Bluetooth: hci2: command 0x0406 tx timeout [ 1506.890383][ T5892] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1506.911189][ T5892] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1506.923291][ T5892] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1506.933435][ T5892] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1506.943815][ T5892] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1506.957070][ T5892] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1506.966363][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.983538][ T5892] usb 5-1: config 0 descriptor?? [ 1506.989306][T22910] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1507.001940][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.041921][ T5892] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 1507.058146][T22922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1507.117695][T22922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1507.155888][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1507.195127][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1507.458521][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.468479][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.502483][ T30] audit: type=1400 audit(1746347813.010:2933): avc: denied { getattr } for pid=22909 comm="syz.4.4616" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1507.879671][T22932] netlink: 'syz.2.4622': attribute type 1 has an invalid length. [ 1508.698575][ T30] audit: type=1400 audit(1746347813.500:2934): avc: denied { read write } for pid=22936 comm="syz.2.4624" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1508.951148][ T5909] usb 5-1: USB disconnect, device number 97 [ 1509.061058][ T30] audit: type=1400 audit(1746347813.500:2935): avc: denied { open } for pid=22936 comm="syz.2.4624" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1509.190911][ T30] audit: type=1400 audit(1746347813.500:2936): avc: denied { ioctl } for pid=22936 comm="syz.2.4624" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1509.411184][ T745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1509.699543][ T30] audit: type=1400 audit(1746347815.080:2937): avc: denied { ioctl } for pid=22958 comm="syz.5.4630" path="socket:[81252]" dev="sockfs" ino=81252 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1509.770200][ T30] audit: type=1400 audit(1746347815.080:2938): avc: denied { setopt } for pid=22958 comm="syz.5.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1510.310480][T22967] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1510.798946][ T30] audit: type=1400 audit(1746347816.320:2939): avc: denied { setopt } for pid=22973 comm="syz.4.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1510.848854][ T30] audit: type=1400 audit(1746347816.360:2940): avc: denied { create } for pid=22971 comm="syz.1.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1510.894983][ T30] audit: type=1400 audit(1746347816.360:2941): avc: denied { ioctl } for pid=22971 comm="syz.1.4632" path="socket:[80567]" dev="sockfs" ino=80567 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1511.034781][ T30] audit: type=1400 audit(1746347816.440:2942): avc: denied { getopt } for pid=22973 comm="syz.4.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1511.377241][T22989] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1511.597274][T22991] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1511.871345][T14560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.962443][T22430] libceph: connect (1)[c::]:6789 error -101 [ 1511.968624][T22430] libceph: mon0 (1)[c::]:6789 connect error [ 1512.170520][T22974] syz.4.4634: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1512.344017][T22430] libceph: connect (1)[c::]:6789 error -101 [ 1512.350661][T22430] libceph: mon0 (1)[c::]:6789 connect error [ 1512.360307][T22974] CPU: 0 UID: 0 PID: 22974 Comm: syz.4.4634 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1512.360328][T22974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1512.360336][T22974] Call Trace: [ 1512.360341][T22974] [ 1512.360346][T22974] dump_stack_lvl+0x16c/0x1f0 [ 1512.360372][T22974] warn_alloc+0x248/0x3a0 [ 1512.360397][T22974] ? __pfx_warn_alloc+0x10/0x10 [ 1512.360419][T22974] ? __get_vm_area_node+0x1b9/0x300 [ 1512.360439][T22974] ? __get_vm_area_node+0x1e5/0x300 [ 1512.360456][T22974] __vmalloc_node_range_noprof+0x1110/0x1540 [ 1512.360477][T22974] ? xskq_create+0xfb/0x1d0 [ 1512.360495][T22974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1512.360514][T22974] ? xskq_create+0xfb/0x1d0 [ 1512.360527][T22974] vmalloc_user_noprof+0x6b/0x90 [ 1512.360542][T22974] ? xskq_create+0xfb/0x1d0 [ 1512.360553][T22974] xskq_create+0xfb/0x1d0 [ 1512.360567][T22974] xsk_setsockopt+0x684/0x840 [ 1512.360579][T22974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1512.360594][T22974] ? selinux_socket_setsockopt+0x6a/0x80 [ 1512.360612][T22974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1512.360624][T22974] do_sock_setsockopt+0x221/0x470 [ 1512.360642][T22974] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1512.360663][T22974] __sys_setsockopt+0x1a0/0x230 [ 1512.360684][T22974] __x64_sys_setsockopt+0xbd/0x160 [ 1512.360694][T22974] ? do_syscall_64+0x91/0x260 [ 1512.360708][T22974] ? lockdep_hardirqs_on+0x7c/0x110 [ 1512.360722][T22974] do_syscall_64+0xcd/0x260 [ 1512.360744][T22974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.360764][T22974] RIP: 0033:0x7f2cef38e969 [ 1512.360780][T22974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.360793][T22974] RSP: 002b:00007f2cf01c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1512.360805][T22974] RAX: ffffffffffffffda RBX: 00007f2cef5b5fa0 RCX: 00007f2cef38e969 [ 1512.360812][T22974] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 1512.360819][T22974] RBP: 00007f2cef410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 1512.360826][T22974] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1512.360832][T22974] R13: 0000000000000000 R14: 00007f2cef5b5fa0 R15: 00007ffd9b757a18 [ 1512.360846][T22974] [ 1512.938767][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1512.976096][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1512.989912][T22974] Mem-Info: [ 1513.036499][ T5892] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1513.053975][T22994] ceph: No mds server is up or the cluster is laggy [ 1513.135804][T22974] active_anon:40206 inactive_anon:1 isolated_anon:0 [ 1513.135804][T22974] active_file:21392 inactive_file:39726 isolated_file:0 [ 1513.135804][T22974] unevictable:768 dirty:321 writeback:0 [ 1513.135804][T22974] slab_reclaimable:11991 slab_unreclaimable:115456 [ 1513.135804][T22974] mapped:58437 shmem:37586 pagetables:891 [ 1513.135804][T22974] sec_pagetables:0 bounce:0 [ 1513.135804][T22974] kernel_misc_reclaimable:0 [ 1513.135804][T22974] free:1226842 free_pcp:5351 free_cma:0 [ 1513.192771][ T5892] usb 6-1: device descriptor read/64, error -71 [ 1513.471248][ T5892] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1513.489263][T22974] Node 0 active_anon:150124kB inactive_anon:4kB active_file:85568kB inactive_file:158800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:218020kB dirty:1284kB writeback:0kB shmem:138308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1513.684099][ T5892] usb 6-1: device descriptor read/64, error -71 [ 1513.694965][T23012] block nbd6: not configured, cannot reconfigure [ 1513.791404][ T5892] usb usb6-port1: attempt power cycle [ 1513.857621][T22974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1513.961103][T22974] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.008964][T22974] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 1514.014782][T22974] Node 0 DMA32 free:959752kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:166764kB inactive_anon:4kB active_file:85568kB inactive_file:156968kB unevictable:1536kB writepending:1284kB present:3129332kB managed:2543932kB mlocked:0kB bounce:0kB free_pcp:39316kB local_pcp:5136kB free_cma:0kB [ 1514.066757][T23015] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1514.076150][T22974] lowmem_reserve[]: 0 0 1 1 1 [ 1514.080970][T22974] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1514.161098][ T5892] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1514.171517][T22974] lowmem_reserve[]: 0 0 0 0 0 [ 1514.182611][T22974] Node 1 Normal free:3914636kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.235380][ T5892] usb 6-1: device descriptor read/8, error -71 [ 1514.271234][T22974] lowmem_reserve[]: 0 0 0 0 0 [ 1514.285451][T22974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1514.328233][T22974] Node 0 DMA32: 11*4kB (UE) 35*8kB (UME) 56*16kB (UE) 38*32kB (UE) 23*64kB (ME) 11*128kB (UE) 3*256kB (UE) 30*512kB (UE) 42*1024kB (UE) 33*2048kB (UME) 202*4096kB (UM) = 959428kB [ 1514.376231][T22974] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1514.409566][T22974] Node 1 Normal: 253*4kB (UME) 55*8kB (UME) 46*16kB (UME) 212*32kB (UME) 104*64kB (UME) 47*128kB (UME) 19*256kB (UME) 6*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3914636kB [ 1514.448763][T22974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.468965][T22974] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1514.488759][T22974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.499008][ T5892] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1514.615504][T23025] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1514.757938][T22974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.767743][T22974] 90188 total pagecache pages [ 1514.772753][ T5892] usb 6-1: device descriptor read/8, error -71 [ 1514.778985][T22974] 1 pages in swap cache [ 1514.783311][T22974] Free swap = 124992kB [ 1514.787439][T22974] Total swap = 124996kB [ 1514.791916][T22974] 2097051 pages RAM [ 1514.795701][T22974] 0 pages HighMem/MovableOnly [ 1514.801150][T22974] 428962 pages reserved [ 1514.811094][T22974] 0 pages cma reserved [ 1514.881400][ T5892] usb usb6-port1: unable to enumerate USB device [ 1515.272743][ T30] audit: type=1400 audit(1746347820.790:2943): avc: denied { create } for pid=23033 comm="syz.6.4650" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1515.393518][T23040] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1515.663940][ T30] audit: type=1400 audit(1746347820.790:2944): avc: denied { write } for pid=23033 comm="syz.6.4650" name="file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1516.125925][ T30] audit: type=1400 audit(1746347820.790:2945): avc: denied { open } for pid=23033 comm="syz.6.4650" path="/116/file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1516.155233][ T30] audit: type=1400 audit(1746347820.790:2946): avc: denied { ioctl } for pid=23033 comm="syz.6.4650" path="/116/file0" dev="tmpfs" ino=630 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1516.197833][ T30] audit: type=1400 audit(1746347821.180:2947): avc: denied { unlink } for pid=20925 comm="syz-executor" name="file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1516.293127][T23049] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1516.545984][T23050] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1516.818908][ T30] audit: type=1400 audit(1746347822.340:2948): avc: denied { accept } for pid=23051 comm="syz.6.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1516.922206][ T30] audit: type=1400 audit(1746347822.440:2949): avc: denied { bind } for pid=23053 comm="syz.6.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1517.834244][ T30] audit: type=1400 audit(1746347822.440:2950): avc: denied { create } for pid=23053 comm="syz.6.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1517.854823][ T30] audit: type=1400 audit(1746347822.480:2951): avc: denied { bind } for pid=23053 comm="syz.6.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1517.956400][ T30] audit: type=1400 audit(1746347823.480:2952): avc: denied { read } for pid=23059 comm="syz.4.4656" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1518.311535][ T745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.336303][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.947523][T23087] block nbd4: not configured, cannot reconfigure [ 1520.052000][ T24] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1520.741052][ T24] usb 6-1: device descriptor read/64, error -71 [ 1520.981149][ T24] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1521.145500][ T24] usb 6-1: device descriptor read/64, error -71 [ 1521.297238][ T24] usb usb6-port1: attempt power cycle [ 1521.632285][ T5901] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1521.681125][ T24] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1521.820569][ T24] usb 6-1: device descriptor read/8, error -71 [ 1522.171184][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 1522.195656][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1522.195673][ T30] audit: type=1400 audit(1746347827.720:2956): avc: denied { name_bind } for pid=23117 comm="syz.4.4673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1522.198570][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.246402][T23119] FAULT_INJECTION: forcing a failure. [ 1522.246402][T23119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1522.306337][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.332582][ T5901] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1522.364685][T23110] infiniband syz!: set active [ 1522.369546][T23110] infiniband syz!: added team_slave_0 [ 1522.375122][ T5901] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1522.417300][ T24] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1522.426198][ T5901] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1522.445330][T23119] CPU: 1 UID: 0 PID: 23119 Comm: syz.4.4673 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1522.445360][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1522.445371][T23119] Call Trace: [ 1522.445378][T23119] [ 1522.445385][T23119] dump_stack_lvl+0x16c/0x1f0 [ 1522.445416][T23119] should_fail_ex+0x512/0x640 [ 1522.445444][T23119] should_fail_alloc_page+0xe7/0x130 [ 1522.445468][T23119] prepare_alloc_pages+0x3c2/0x610 [ 1522.445495][T23119] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1522.445531][T23119] ? __lock_acquire+0x5ca/0x1ba0 [ 1522.445563][T23119] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1522.445600][T23119] ? find_held_lock+0x2b/0x80 [ 1522.445619][T23119] ? is_bpf_text_address+0x8a/0x1a0 [ 1522.445638][T23119] ? bpf_ksym_find+0x127/0x1c0 [ 1522.445656][T23119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.445683][T23119] ? policy_nodemask+0xea/0x4e0 [ 1522.445700][T23119] alloc_pages_mpol+0x1fb/0x550 [ 1522.445716][T23119] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1522.445731][T23119] ? __lock_acquire+0x5ca/0x1ba0 [ 1522.445757][T23119] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1522.445779][T23119] vma_alloc_folio_noprof+0xed/0x1e0 [ 1522.445799][T23119] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1522.445823][T23119] ? find_held_lock+0x2b/0x80 [ 1522.445843][T23119] ? do_wp_page+0x229a/0x58e0 [ 1522.445869][T23119] do_wp_page+0x1282/0x58e0 [ 1522.445897][T23119] ? __pfx_do_wp_page+0x10/0x10 [ 1522.445921][T23119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1522.445939][T23119] ? ___pte_offset_map+0x1bc/0x540 [ 1522.445964][T23119] __handle_mm_fault+0x1ada/0x2a40 [ 1522.445998][T23119] ? __pfx___handle_mm_fault+0x10/0x10 [ 1522.446037][T23119] ? find_vma+0xbf/0x140 [ 1522.446056][T23119] ? __pfx_find_vma+0x10/0x10 [ 1522.446079][T23119] handle_mm_fault+0x3fe/0xad0 [ 1522.446122][T23119] do_user_addr_fault+0x7a6/0x1370 [ 1522.446147][T23119] ? rcu_is_watching+0x12/0xc0 [ 1522.446174][T23119] exc_page_fault+0x5c/0xc0 [ 1522.446198][T23119] asm_exc_page_fault+0x26/0x30 [ 1522.446216][T23119] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1522.446239][T23119] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1522.446256][T23119] RSP: 0018:ffffc9000c5c79f8 EFLAGS: 00050293 [ 1522.446272][T23119] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000088b0 [ 1522.446282][T23119] RDX: ffff888057e5a440 RSI: ffffffff893de683 RDI: 0000000000000005 [ 1522.446293][T23119] RBP: ffffc9000c5c7d98 R08: 0000000000000005 R09: 0000000000000000 [ 1522.446304][T23119] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1522.446314][T23119] R13: 0000200000008880 R14: ffffc9000c5c7ddc R15: 0000000000000002 [ 1522.446332][T23119] ? ____sys_recvmsg+0x2e3/0x6b0 [ 1522.446361][T23119] ____sys_recvmsg+0x2ee/0x6b0 [ 1522.446388][T23119] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1522.446420][T23119] ? __lock_acquire+0x5ca/0x1ba0 [ 1522.446449][T23119] ___sys_recvmsg+0x114/0x1a0 [ 1522.446469][T23119] ? __pfx____sys_recvmsg+0x10/0x10 [ 1522.446490][T23119] ? find_held_lock+0x2b/0x80 [ 1522.446525][T23119] do_recvmmsg+0x2fe/0x740 [ 1522.446548][T23119] ? __pfx_do_recvmmsg+0x10/0x10 [ 1522.446572][T23119] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1522.446606][T23119] ? __fget_files+0x20e/0x3c0 [ 1522.446640][T23119] __x64_sys_recvmmsg+0x22a/0x280 [ 1522.446660][T23119] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1522.446677][T23119] ? rcu_is_watching+0x12/0xc0 [ 1522.446704][T23119] do_syscall_64+0xcd/0x260 [ 1522.446728][T23119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.446745][T23119] RIP: 0033:0x7f2cef38e969 [ 1522.446761][T23119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1522.446776][T23119] RSP: 002b:00007f2cf01a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1522.446791][T23119] RAX: ffffffffffffffda RBX: 00007f2cef5b6080 RCX: 00007f2cef38e969 [ 1522.446801][T23119] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000006 [ 1522.446811][T23119] RBP: 00007f2cf01a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.446821][T23119] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1522.446830][T23119] R13: 0000000000000000 R14: 00007f2cef5b6080 R15: 00007ffd9b757a18 [ 1522.446853][T23119] [ 1522.460828][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.474619][T23110] RDS/IB: syz!: added [ 1522.487602][ T5901] usb 7-1: Product: ⥝⯘赫㌘둮滀코쿖䋲䵮謧殸쥙脧䗔䪲⺄锁ꋪ묧ե‚碀蕲泒芇㶼㣴鏤괽팺 [ 1522.500601][ T24] usb 6-1: device descriptor read/8, error -71 [ 1522.506604][ T5901] usb 7-1: SerialNumber: ࡡ [ 1522.555348][T23110] smc: adding ib device syz! with port count 1 [ 1522.941363][T23110] smc: ib device syz! port 1 has pnetid [ 1523.041075][ T24] usb usb6-port1: unable to enumerate USB device [ 1523.142443][T16400] libceph: connect (1)[c::]:6789 error -101 [ 1523.149408][T16400] libceph: mon0 (1)[c::]:6789 connect error [ 1523.248527][T23127] ceph: No mds server is up or the cluster is laggy [ 1523.537670][ T30] audit: type=1400 audit(1746347829.060:2957): avc: denied { name_connect } for pid=23133 comm="syz.4.4676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1524.031344][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.053591][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.573440][T23141] xt_hashlimit: size too large, truncated to 1048576 [ 1524.917018][T23142] syzkaller0: entered promiscuous mode [ 1524.979001][T23142] syzkaller0: entered allmulticast mode [ 1525.857364][T23153] trusted_key: syz.5.4680 sent an empty control message without MSG_MORE. [ 1525.860491][ T30] audit: type=1400 audit(1746347831.380:2958): avc: denied { setopt } for pid=23152 comm="syz.5.4680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1525.970824][ T30] audit: type=1400 audit(1746347831.380:2959): avc: denied { write } for pid=23152 comm="syz.5.4680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1526.045397][ T30] audit: type=1400 audit(1746347831.440:2960): avc: denied { ioctl } for pid=23152 comm="syz.5.4680" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1527.666220][ T5901] cdc_ncm 7-1:1.0: bind() failure [ 1527.718436][ T5901] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1527.751470][ T5901] cdc_ncm 7-1:1.1: bind() failure [ 1528.223798][ T30] audit: type=1400 audit(1746347833.740:2961): avc: denied { ioctl } for pid=23162 comm="syz.4.4683" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1529.241365][T21079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.796745][ T6175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1530.163278][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4685'. [ 1530.290257][ T30] audit: type=1400 audit(1746347835.810:2962): avc: denied { map } for pid=23175 comm="syz.2.4688" path="socket:[81693]" dev="sockfs" ino=81693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1530.388072][ T972] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1530.453759][ T30] audit: type=1400 audit(1746347835.810:2963): avc: denied { read } for pid=23175 comm="syz.2.4688" path="socket:[81693]" dev="sockfs" ino=81693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1530.475295][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4688'. [ 1530.990463][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 1530.997447][ T972] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1531.006075][ T972] usb 5-1: config 6 has no interface number 0 [ 1531.012375][ T972] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1531.022081][ T972] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1531.036067][ T972] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1531.045363][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.058633][ T972] usb 5-1: Product: syz [ 1531.063243][ T972] usb 5-1: Manufacturer: syz [ 1531.067862][ T972] usb 5-1: SerialNumber: syz [ 1531.086382][ T972] hso 5-1:6.2: Failed to find INT IN ep [ 1531.296875][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.322227][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.332259][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.344166][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.427313][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.480990][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.548571][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.597344][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.703072][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.796453][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.179327][ T5909] usb 5-1: USB disconnect, device number 98 [ 1534.207844][ T9] usb 7-1: USB disconnect, device number 14 [ 1534.415711][ T30] audit: type=1400 audit(1746347839.940:2964): avc: denied { write } for pid=23221 comm="syz.6.4700" path="socket:[82102]" dev="sockfs" ino=82102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1534.914611][ T6175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1534.943793][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.385485][ T30] audit: type=1400 audit(1746347840.740:2965): avc: denied { read } for pid=23228 comm="syz.6.4702" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1535.592419][ T30] audit: type=1400 audit(1746347840.740:2966): avc: denied { open } for pid=23228 comm="syz.6.4702" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1535.616466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.651219][ T30] audit: type=1400 audit(1746347840.750:2967): avc: denied { ioctl } for pid=23228 comm="syz.6.4702" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1535.926726][T23236] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1535.973642][T23236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4703'. [ 1536.664268][ T30] audit: type=1400 audit(1746347842.190:2968): avc: denied { create } for pid=23241 comm="syz.5.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1537.273629][ T30] audit: type=1400 audit(1746347842.800:2969): avc: denied { ioctl } for pid=23241 comm="syz.5.4705" path="socket:[81761]" dev="sockfs" ino=81761 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1537.552763][ T30] audit: type=1400 audit(1746347843.080:2970): avc: denied { write } for pid=23250 comm="syz.4.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1537.887848][ T30] audit: type=1400 audit(1746347843.110:2971): avc: denied { read } for pid=23250 comm="syz.4.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1537.989670][ T30] audit: type=1400 audit(1746347843.510:2972): avc: denied { read } for pid=23268 comm="syz.4.4712" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1538.055977][ T30] audit: type=1400 audit(1746347843.510:2973): avc: denied { open } for pid=23268 comm="syz.4.4712" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1538.084533][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4710'. [ 1540.272082][T23311] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1540.682605][ T6409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.694039][ T6416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.233397][T23315] nbd4: detected capacity change from 0 to 1 [ 1541.298495][T18398] block nbd4: Receive control failed (result -32) [ 1542.340972][T16400] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1542.625930][T16400] usb 5-1: not running at top speed; connect to a high speed hub [ 1542.642203][T16400] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1542.664786][T16400] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1542.678024][T16400] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.691244][T16400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.699403][T16400] usb 5-1: Product: syz [ 1542.971051][T16400] usb 5-1: Manufacturer: syz [ 1542.975710][T16400] usb 5-1: SerialNumber: syz [ 1543.523600][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1543.523622][ T30] audit: type=1400 audit(1746347849.040:2976): avc: denied { create } for pid=23338 comm="syz.2.4727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1543.695967][T16400] usb 5-1: 0:2 : does not exist [ 1543.732969][T16400] usb 5-1: USB disconnect, device number 99 [ 1544.037283][T23345] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1544.067946][ T30] audit: type=1400 audit(1746347849.560:2977): avc: denied { remount } for pid=23338 comm="syz.2.4727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1544.111118][ T5892] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1544.208389][ T30] audit: type=1400 audit(1746347849.570:2978): avc: denied { relabelto } for pid=23338 comm="syz.2.4727" name="bus" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1544.241772][ T30] audit: type=1400 audit(1746347849.570:2979): avc: denied { associate } for pid=23338 comm="syz.2.4727" name="bus" dev="tmpfs" ino=1807 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1544.313917][ T30] audit: type=1400 audit(1746347849.840:2980): avc: denied { rmdir } for pid=17018 comm="syz-executor" name="bus" dev="tmpfs" ino=1807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1544.321125][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 1544.370336][ T5892] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1544.384414][ T5892] usb 7-1: config 0 has no interface number 0 [ 1544.390583][ T5892] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.408470][T23347] netlink: 'syz.2.4730': attribute type 2 has an invalid length. [ 1544.417258][T23347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1544.428642][ T5892] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1544.440541][ T5892] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1544.451890][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1544.460611][ T5892] usb 7-1: Product: syz [ 1544.469106][ T5892] usb 7-1: SerialNumber: syz [ 1544.476201][ T5892] usb 7-1: config 0 descriptor?? [ 1544.485269][ T5892] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1544.498729][ T5892] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input46 [ 1544.630858][T16400] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1544.800882][T16400] usb 5-1: Using ep0 maxpacket: 8 [ 1544.810299][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.817687][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.825818][T22459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1544.826228][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.836678][T22459] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1544.841075][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.851109][T22459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1544.855075][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.865725][T22459] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1544.868513][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.876660][T22459] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1544.882132][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.896699][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.903903][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.910051][ T30] audit: type=1400 audit(1746347850.430:2981): avc: denied { mounton } for pid=23353 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1544.911567][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1544.954224][ T5892] usb 7-1: USB disconnect, device number 15 [ 1544.954276][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1544.976383][ T5892] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1544.979549][T16400] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1544.994604][T16400] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1545.006571][T16400] usb 5-1: can't read configurations, error -71 [ 1546.491970][ T6414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.581442][T23379] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1547.376507][T18398] Bluetooth: hci3: command tx timeout [ 1547.384156][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.390655][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.416988][T23353] chnl_net:caif_netlink_parms(): no params data found [ 1547.607182][T23353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.637186][T23353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.659055][T23353] bridge_slave_0: entered allmulticast mode [ 1547.669240][T23353] bridge_slave_0: entered promiscuous mode [ 1547.687766][T23353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.695521][T23353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.708090][T23353] bridge_slave_1: entered allmulticast mode [ 1547.716316][T23353] bridge_slave_1: entered promiscuous mode [ 1547.755537][T23396] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1547.836362][T23353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.859962][T23353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.911045][ T5901] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1547.929085][T23353] team0: Port device team_slave_0 added [ 1547.940549][T23353] team0: Port device team_slave_1 added [ 1548.066449][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 1548.135027][ T5901] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1548.221897][ T5901] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1548.340201][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1548.349622][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1548.351941][T23353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.369662][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.369711][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1548.407202][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.408648][T23353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.415348][ T5901] usb 3-1: Product: syz [ 1548.415364][ T5901] usb 3-1: Manufacturer: syz [ 1548.415378][ T5901] usb 3-1: SerialNumber: syz [ 1548.446941][T23353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.454275][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.480554][T23353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.533105][T23353] hsr_slave_0: entered promiscuous mode [ 1548.540338][T23353] hsr_slave_1: entered promiscuous mode [ 1548.546834][T23353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.554521][T23353] Cannot create hsr debugfs directory [ 1548.759697][ T5901] usb 3-1: 0:2 : does not exist [ 1548.805722][ T5901] usb 3-1: USB disconnect, device number 110 [ 1548.897987][T23353] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1548.910546][T23353] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1548.928594][T23353] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1549.053032][T23353] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1549.279161][T23353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.297066][T23353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.314890][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.322024][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.372334][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.379487][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.395070][T18398] Bluetooth: hci3: command tx timeout [ 1549.403092][T23410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1549.443064][ T30] audit: type=1400 audit(1746347854.950:2982): avc: denied { map } for pid=23411 comm="syz.4.4748" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1549.504361][ T30] audit: type=1400 audit(1746347854.950:2983): avc: denied { execute } for pid=23411 comm="syz.4.4748" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1549.546246][ T30] audit: type=1400 audit(1746347854.960:2984): avc: denied { read } for pid=23411 comm="syz.4.4748" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1549.579907][ T30] audit: type=1400 audit(1746347854.960:2985): avc: denied { open } for pid=23411 comm="syz.4.4748" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1550.276675][ T6409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1550.763041][T23422] fuse: Bad value for 'user_id' [ 1550.767918][T23422] fuse: Bad value for 'user_id' [ 1551.329295][T23353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.503690][T18398] Bluetooth: hci3: command tx timeout [ 1551.602102][ T30] audit: type=1400 audit(1746347857.120:2986): avc: denied { ioctl } for pid=23447 comm="syz.2.4758" path="socket:[82633]" dev="sockfs" ino=82633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1551.638289][ T30] audit: type=1400 audit(1746347857.120:2987): avc: denied { bind } for pid=23447 comm="syz.2.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1551.659929][ T30] audit: type=1400 audit(1746347857.130:2988): avc: denied { connect } for pid=23447 comm="syz.2.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1551.669401][T23353] veth0_vlan: entered promiscuous mode [ 1551.690287][ T30] audit: type=1400 audit(1746347857.130:2989): avc: denied { write } for pid=23447 comm="syz.2.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1551.697794][T23353] veth1_vlan: entered promiscuous mode [ 1551.718943][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1551.726473][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1551.762272][T23353] veth0_macvtap: entered promiscuous mode [ 1551.778124][T23353] veth1_macvtap: entered promiscuous mode [ 1551.805470][T23450] ceph: No mds server is up or the cluster is laggy [ 1551.815978][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.828801][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.850933][T22430] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1551.858537][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880792f2c00: rx timeout, send abort [ 1551.878396][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.889950][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.906511][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.919518][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.934781][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.948879][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.960798][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.973116][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.986660][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.998551][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1552.004932][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1552.011118][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.022854][T22430] usb 7-1: not running at top speed; connect to a high speed hub [ 1552.031816][T22430] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1552.040623][T22430] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1552.122768][T23353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.133337][T22430] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1552.164591][T22430] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1552.187127][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.198879][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.200434][ T6416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.223044][T22430] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1552.232272][T22430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.240244][T22430] usb 7-1: Product: syz [ 1552.244578][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.260860][T22430] usb 7-1: Manufacturer: syz [ 1552.272181][T22430] usb 7-1: SerialNumber: syz [ 1552.300573][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.332905][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.346341][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.356230][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880792f3c00: rx timeout, send abort [ 1552.364494][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880792f2c00: abort rx timeout. Force session deactivation [ 1552.432568][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.508187][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.529141][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.545242][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.558332][T23353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.856281][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880792f3c00: abort rx timeout. Force session deactivation [ 1552.936263][T23457] veth0_macvtap: left promiscuous mode [ 1552.977617][T22430] usb 7-1: 0:2 : does not exist [ 1552.985803][T23457] macvtap0: entered allmulticast mode [ 1553.112074][T22430] usb 7-1: USB disconnect, device number 16 [ 1553.140179][T21079] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.172060][T23353] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.186027][T23353] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.197617][T23353] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.209565][T23353] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.253225][T21079] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.388613][T21079] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.551306][T18398] Bluetooth: hci3: command tx timeout [ 1553.696651][ T30] audit: type=1326 audit(1746347859.150:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23469 comm="syz.2.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1178e969 code=0x7ffc0000 [ 1553.974252][T21079] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.047170][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.069436][ T30] audit: type=1326 audit(1746347859.150:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23469 comm="syz.2.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1178e969 code=0x7ffc0000 [ 1554.074654][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.200536][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.315544][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.528549][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1554.528574][ T30] audit: type=1400 audit(1746347860.050:3023): avc: denied { mounton } for pid=23353 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1554.698364][ T30] audit: type=1400 audit(1746347860.100:3024): avc: denied { mount } for pid=23353 comm="syz-executor" name="/" dev="gadgetfs" ino=6439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1554.725911][ T30] audit: type=1400 audit(1746347860.130:3025): avc: denied { mount } for pid=23353 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1554.758997][ T30] audit: type=1400 audit(1746347860.180:3026): avc: denied { mounton } for pid=23353 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1555.496506][ T30] audit: type=1400 audit(1746347861.020:3027): avc: denied { create } for pid=23496 comm="syz.2.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1555.801172][ T30] audit: type=1326 audit(1746347861.310:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.6.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ad8e969 code=0x7ffc0000 [ 1555.834003][T23500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4770'. [ 1555.974920][T23500] futex_wake_op: syz.2.4770 tries to shift op by -1; fix this program [ 1556.236112][ T30] audit: type=1326 audit(1746347861.310:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.6.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd65ad8e969 code=0x7ffc0000 [ 1556.259620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.302415][ T30] audit: type=1400 audit(1746347861.380:3030): avc: denied { getopt } for pid=23477 comm="syz.6.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1556.322010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.354954][ T30] audit: type=1400 audit(1746347861.510:3031): avc: denied { accept } for pid=23496 comm="syz.2.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1556.374558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.806210][T21079] bond0 (unregistering): Released all slaves [ 1556.821386][T21079] bond1 (unregistering): Released all slaves [ 1557.201629][T21079] IPVS: stopping master sync thread 20429 ... [ 1557.940970][ T5909] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1558.105501][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1558.123903][ T5909] usb 3-1: can't read configurations, error -61 [ 1558.132685][ T972] libceph: connect (1)[c::]:6789 error -101 [ 1558.145888][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 1558.207756][T23529] ceph: No mds server is up or the cluster is laggy [ 1558.300849][ T5909] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1558.553007][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1558.561275][ T5909] usb 3-1: can't read configurations, error -61 [ 1558.584590][ T5909] usb usb3-port1: attempt power cycle [ 1558.681500][T21079] hsr_slave_0: left promiscuous mode [ 1558.716977][T21079] hsr0: left allmulticast mode [ 1558.723191][T21079] hsr0: left promiscuous mode [ 1558.728415][T21079] veth1_macvtap: left promiscuous mode [ 1558.736441][T21079] veth0_macvtap: left promiscuous mode [ 1558.747875][T21079] veth1_vlan: left promiscuous mode [ 1558.761390][T21079] veth0_vlan: left promiscuous mode [ 1558.960937][ T5909] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1558.969536][ T30] audit: type=1326 audit(1746347864.490:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23546 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264998e969 code=0x7ffc0000 [ 1558.993039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.993825][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4780'. [ 1559.009703][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4780'. [ 1559.028049][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1559.049497][ T5909] usb 3-1: can't read configurations, error -61 [ 1559.180682][T23548] loop8: detected capacity change from 0 to 1 [ 1559.311372][ T5909] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1559.320939][T23548] Dev loop8: unable to read RDB block 1 [ 1559.811343][T23548] loop8: unable to read partition table [ 1559.830411][T23557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1559.831397][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1559.849948][ T5909] usb 3-1: can't read configurations, error -61 [ 1559.896515][ T5909] usb usb3-port1: unable to enumerate USB device [ 1559.902701][T23548] loop8: partition table beyond EOD, truncated [ 1559.953871][T23548] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1560.379010][ T36] smc: removing ib device syz1 [ 1562.341994][T23578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4790'. [ 1562.359902][T23578] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4790'. [ 1562.370913][T23578] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4790'. [ 1563.212968][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1563.364740][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1564.007865][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1564.020925][T23596] ceph: No mds server is up or the cluster is laggy [ 1564.043197][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1564.371564][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1564.371582][ T30] audit: type=1400 audit(1746347869.900:3039): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=48466 daddr=10.128.1.57 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1564.846684][T23543] syz_tun: entered allmulticast mode [ 1565.089359][T23543] syz_tun: left allmulticast mode [ 1565.740442][T23617] netlink: 'syz.2.4803': attribute type 10 has an invalid length. [ 1565.822002][T23623] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 1565.849845][T23617] veth0_macvtap: left promiscuous mode [ 1566.025646][T23625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1566.119778][T23617] ================================================================== [ 1566.127921][T23617] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 1566.135379][T23617] Read of size 8 at addr ffffffff9af9a530 by task syz.2.4803/23617 [ 1566.143275][T23617] [ 1566.145598][T23617] CPU: 1 UID: 0 PID: 23617 Comm: syz.2.4803 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1566.145620][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1566.145630][T23617] Call Trace: [ 1566.145637][T23617] [ 1566.145644][T23617] dump_stack_lvl+0x116/0x1f0 [ 1566.145670][T23617] print_report+0xc3/0x670 [ 1566.145687][T23617] ? __virt_addr_valid+0x5e/0x590 [ 1566.145706][T23617] ? __phys_addr+0xc6/0x150 [ 1566.145724][T23617] ? fib6_ifdown+0x7f5/0x8f0 [ 1566.145737][T23617] kasan_report+0xe0/0x110 [ 1566.145750][T23617] ? fib6_ifdown+0x7f5/0x8f0 [ 1566.145762][T23617] fib6_ifdown+0x7f5/0x8f0 [ 1566.145785][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.145798][T23617] fib6_clean_node+0x2a4/0x5b0 [ 1566.145821][T23617] ? __pfx_fib6_clean_node+0x10/0x10 [ 1566.145838][T23617] fib6_walk_continue+0x44f/0x8d0 [ 1566.145858][T23617] fib6_walk+0x182/0x370 [ 1566.145878][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.145890][T23617] fib6_clean_tree+0xd4/0x110 [ 1566.145910][T23617] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1566.145929][T23617] ? update_curr+0x74/0x800 [ 1566.145944][T23617] ? __pfx_fib6_clean_node+0x10/0x10 [ 1566.145955][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.145968][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.145978][T23617] __fib6_clean_all+0x107/0x2d0 [ 1566.145997][T23617] rt6_disable_ip+0x2ec/0x990 [ 1566.146012][T23617] ? __mutex_trylock_common+0xe9/0x250 [ 1566.146031][T23617] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1566.146050][T23617] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1566.146067][T23617] ? rcu_is_watching+0x12/0xc0 [ 1566.146083][T23617] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1566.146097][T23617] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1566.146115][T23617] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1566.146129][T23617] addrconf_notify+0x220/0x19e0 [ 1566.146142][T23617] ? ip6mr_device_event+0x1bc/0x230 [ 1566.146158][T23617] notifier_call_chain+0xb9/0x410 [ 1566.146176][T23617] ? __pfx_addrconf_notify+0x10/0x10 [ 1566.146191][T23617] call_netdevice_notifiers_info+0xbe/0x140 [ 1566.146210][T23617] __dev_notify_flags+0x1f7/0x2e0 [ 1566.146221][T23617] ? __pfx___dev_notify_flags+0x10/0x10 [ 1566.146239][T23617] ? __dev_change_flags+0x3d5/0x720 [ 1566.146251][T23617] ? __pfx___dev_change_flags+0x10/0x10 [ 1566.146265][T23617] ? __pfx_validate_linkmsg+0x10/0x10 [ 1566.146278][T23617] netif_change_flags+0x108/0x160 [ 1566.146290][T23617] do_setlink.constprop.0+0xddf/0x44b0 [ 1566.146303][T23617] ? __lock_acquire+0xaa4/0x1ba0 [ 1566.146322][T23617] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1566.146335][T23617] ? find_held_lock+0x2b/0x80 [ 1566.146349][T23617] ? __mutex_trylock_common+0xe9/0x250 [ 1566.146367][T23617] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1566.146384][T23617] ? __pfx___might_resched+0x10/0x10 [ 1566.146400][T23617] ? rcu_is_watching+0x12/0xc0 [ 1566.146413][T23617] ? trace_contention_end+0xdd/0x130 [ 1566.146430][T23617] ? __mutex_lock+0x1ca/0xb90 [ 1566.146445][T23617] ? rtnl_newlink+0x600/0x2000 [ 1566.146457][T23617] ? __pfx___mutex_lock+0x10/0x10 [ 1566.146471][T23617] ? cap_capable+0xb3/0x250 [ 1566.146487][T23617] ? netlink_ns_capable+0xfa/0x130 [ 1566.146501][T23617] rtnl_newlink+0x1446/0x2000 [ 1566.146515][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1566.146526][T23617] ? find_held_lock+0x2b/0x80 [ 1566.146538][T23617] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1566.146551][T23617] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1566.146563][T23617] ? __lock_acquire+0x5ca/0x1ba0 [ 1566.146587][T23617] ? find_held_lock+0x2b/0x80 [ 1566.146600][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1566.146611][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1566.146622][T23617] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1566.146633][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1566.146644][T23617] rtnetlink_rcv_msg+0x95b/0xe90 [ 1566.146656][T23617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1566.146671][T23617] netlink_rcv_skb+0x16a/0x440 [ 1566.146684][T23617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1566.146696][T23617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1566.146711][T23617] ? netlink_deliver_tap+0x1ae/0xd30 [ 1566.146723][T23617] netlink_unicast+0x53a/0x7f0 [ 1566.146737][T23617] ? __pfx_netlink_unicast+0x10/0x10 [ 1566.146751][T23617] netlink_sendmsg+0x8d1/0xdd0 [ 1566.146764][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.146779][T23617] ____sys_sendmsg+0xa95/0xc70 [ 1566.146794][T23617] ? copy_msghdr_from_user+0x10a/0x160 [ 1566.146805][T23617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1566.146829][T23617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1566.146847][T23617] ___sys_sendmsg+0x134/0x1d0 [ 1566.146859][T23617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.146881][T23617] __sys_sendmsg+0x16d/0x220 [ 1566.146893][T23617] ? __pfx___sys_sendmsg+0x10/0x10 [ 1566.146905][T23617] ? __x64_sys_futex+0x1e0/0x4c0 [ 1566.146923][T23617] ? rcu_is_watching+0x12/0xc0 [ 1566.146937][T23617] do_syscall_64+0xcd/0x260 [ 1566.146953][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.146966][T23617] RIP: 0033:0x7fab1178e969 [ 1566.146978][T23617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1566.146992][T23617] RSP: 002b:00007fab12690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1566.147004][T23617] RAX: ffffffffffffffda RBX: 00007fab119b5fa0 RCX: 00007fab1178e969 [ 1566.147011][T23617] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1566.147018][T23617] RBP: 00007fab11810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1566.147025][T23617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1566.147032][T23617] R13: 0000000000000000 R14: 00007fab119b5fa0 R15: 00007ffc2dd5b898 [ 1566.147044][T23617] [ 1566.147049][T23617] [ 1566.690110][T23617] The buggy address belongs to the variable: [ 1566.696055][T23617] __key.0+0x30/0x40 [ 1566.699935][T23617] [ 1566.702231][T23617] The buggy address belongs to the physical page: [ 1566.708651][T23617] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9a [ 1566.717396][T23617] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1566.725283][T23617] raw: 00fff00000002000 ffffea00006be688 ffffea00006be688 0000000000000000 [ 1566.733840][T23617] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1566.742396][T23617] page dumped because: kasan: bad access detected [ 1566.748811][T23617] page_owner info is not present (never set?) [ 1566.754845][T23617] [ 1566.757141][T23617] Memory state around the buggy address: [ 1566.762742][T23617] ffffffff9af9a400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1566.770783][T23617] ffffffff9af9a480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1566.778830][T23617] >ffffffff9af9a500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1566.786864][T23617] ^ [ 1566.792565][T23617] ffffffff9af9a580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 1566.800595][T23617] ffffffff9af9a600: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 1566.808625][T23617] ================================================================== [ 1566.816728][T23617] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1566.823904][T23617] CPU: 1 UID: 0 PID: 23617 Comm: syz.2.4803 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 1566.835943][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1566.845973][T23617] Call Trace: [ 1566.849227][T23617] [ 1566.852136][T23617] dump_stack_lvl+0x3d/0x1f0 [ 1566.856711][T23617] panic+0x71c/0x800 [ 1566.860587][T23617] ? __pfx_panic+0x10/0x10 [ 1566.864980][T23617] ? mark_held_locks+0x49/0x80 [ 1566.869725][T23617] ? fib6_ifdown+0x7f5/0x8f0 [ 1566.874291][T23617] ? fib6_ifdown+0x7f5/0x8f0 [ 1566.878851][T23617] check_panic_on_warn+0xab/0xb0 [ 1566.883766][T23617] end_report+0x107/0x170 [ 1566.888068][T23617] kasan_report+0xee/0x110 [ 1566.892481][T23617] ? fib6_ifdown+0x7f5/0x8f0 [ 1566.897060][T23617] fib6_ifdown+0x7f5/0x8f0 [ 1566.901462][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.906372][T23617] fib6_clean_node+0x2a4/0x5b0 [ 1566.911120][T23617] ? __pfx_fib6_clean_node+0x10/0x10 [ 1566.916403][T23617] fib6_walk_continue+0x44f/0x8d0 [ 1566.921424][T23617] fib6_walk+0x182/0x370 [ 1566.925650][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.930560][T23617] fib6_clean_tree+0xd4/0x110 [ 1566.935224][T23617] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1566.940487][T23617] ? update_curr+0x74/0x800 [ 1566.944968][T23617] ? __pfx_fib6_clean_node+0x10/0x10 [ 1566.950236][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.955150][T23617] ? __pfx_fib6_ifdown+0x10/0x10 [ 1566.960061][T23617] __fib6_clean_all+0x107/0x2d0 [ 1566.964906][T23617] rt6_disable_ip+0x2ec/0x990 [ 1566.969559][T23617] ? __mutex_trylock_common+0xe9/0x250 [ 1566.974999][T23617] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1566.980895][T23617] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1566.986113][T23617] ? rcu_is_watching+0x12/0xc0 [ 1566.990878][T23617] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1566.996336][T23617] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1567.001966][T23617] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1567.007836][T23617] addrconf_notify+0x220/0x19e0 [ 1567.012667][T23617] ? ip6mr_device_event+0x1bc/0x230 [ 1567.017847][T23617] notifier_call_chain+0xb9/0x410 [ 1567.022852][T23617] ? __pfx_addrconf_notify+0x10/0x10 [ 1567.028121][T23617] call_netdevice_notifiers_info+0xbe/0x140 [ 1567.034001][T23617] __dev_notify_flags+0x1f7/0x2e0 [ 1567.039019][T23617] ? __pfx___dev_notify_flags+0x10/0x10 [ 1567.044546][T23617] ? __dev_change_flags+0x3d5/0x720 [ 1567.049715][T23617] ? __pfx___dev_change_flags+0x10/0x10 [ 1567.055243][T23617] ? __pfx_validate_linkmsg+0x10/0x10 [ 1567.060591][T23617] netif_change_flags+0x108/0x160 [ 1567.065590][T23617] do_setlink.constprop.0+0xddf/0x44b0 [ 1567.071025][T23617] ? __lock_acquire+0xaa4/0x1ba0 [ 1567.075944][T23617] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1567.081810][T23617] ? find_held_lock+0x2b/0x80 [ 1567.086462][T23617] ? __mutex_trylock_common+0xe9/0x250 [ 1567.091900][T23617] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1567.097772][T23617] ? __pfx___might_resched+0x10/0x10 [ 1567.103042][T23617] ? rcu_is_watching+0x12/0xc0 [ 1567.107788][T23617] ? trace_contention_end+0xdd/0x130 [ 1567.113064][T23617] ? __mutex_lock+0x1ca/0xb90 [ 1567.117720][T23617] ? rtnl_newlink+0x600/0x2000 [ 1567.122458][T23617] ? __pfx___mutex_lock+0x10/0x10 [ 1567.127463][T23617] ? cap_capable+0xb3/0x250 [ 1567.131947][T23617] ? netlink_ns_capable+0xfa/0x130 [ 1567.137044][T23617] rtnl_newlink+0x1446/0x2000 [ 1567.141698][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1567.146696][T23617] ? find_held_lock+0x2b/0x80 [ 1567.151350][T23617] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1567.156698][T23617] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1567.162048][T23617] ? __lock_acquire+0x5ca/0x1ba0 [ 1567.166968][T23617] ? find_held_lock+0x2b/0x80 [ 1567.171619][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1567.176616][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1567.181611][T23617] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1567.186694][T23617] ? __pfx_rtnl_newlink+0x10/0x10 [ 1567.191692][T23617] rtnetlink_rcv_msg+0x95b/0xe90 [ 1567.196604][T23617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1567.202039][T23617] netlink_rcv_skb+0x16a/0x440 [ 1567.206779][T23617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1567.212240][T23617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1567.217502][T23617] ? netlink_deliver_tap+0x1ae/0xd30 [ 1567.222761][T23617] netlink_unicast+0x53a/0x7f0 [ 1567.227505][T23617] ? __pfx_netlink_unicast+0x10/0x10 [ 1567.232774][T23617] netlink_sendmsg+0x8d1/0xdd0 [ 1567.237522][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1567.242789][T23617] ____sys_sendmsg+0xa95/0xc70 [ 1567.247531][T23617] ? copy_msghdr_from_user+0x10a/0x160 [ 1567.252962][T23617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1567.258226][T23617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1567.264011][T23617] ___sys_sendmsg+0x134/0x1d0 [ 1567.268661][T23617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1567.273842][T23617] __sys_sendmsg+0x16d/0x220 [ 1567.278416][T23617] ? __pfx___sys_sendmsg+0x10/0x10 [ 1567.283501][T23617] ? __x64_sys_futex+0x1e0/0x4c0 [ 1567.288418][T23617] ? rcu_is_watching+0x12/0xc0 [ 1567.293159][T23617] do_syscall_64+0xcd/0x260 [ 1567.297641][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.303510][T23617] RIP: 0033:0x7fab1178e969 [ 1567.307903][T23617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1567.327490][T23617] RSP: 002b:00007fab12690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1567.335885][T23617] RAX: ffffffffffffffda RBX: 00007fab119b5fa0 RCX: 00007fab1178e969 [ 1567.343836][T23617] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1567.351784][T23617] RBP: 00007fab11810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1567.359728][T23617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.367711][T23617] R13: 0000000000000000 R14: 00007fab119b5fa0 R15: 00007ffc2dd5b898 [ 1567.375681][T23617] [ 1567.378956][T23617] Kernel Offset: disabled [ 1567.383266][T23617] Rebooting in 86400 seconds..