last executing test programs: 12m19.894544383s ago: executing program 3 (id=1429): socket$alg(0x26, 0x5, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000008}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0xc, 0x0, 0xdb, 0x80, 0x5, 0x400110}) bind$inet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x8, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x8) 12m18.837431291s ago: executing program 3 (id=1432): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x60}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0xd, @win={{0xd, 0x7f, 0x9c3, 0x5}, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}}) 12m18.414297323s ago: executing program 3 (id=1435): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="0c00d1ea800800020004000000"], 0x24}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x5b00, &(0x7f0000000680)={0x0, 0xfffffffd, 0x8, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000300)="4ce237bafa7d6aa2e0b5b00759f455b4e0a558ae4d7428a8c0ab8c7f73b2cb5e46d44b7151a13485d92a897495e2cd25ff1c61e85ee31fe10fb458455e4930c06be131bdd03d82d4ac2fd9d46d68c3f883ce24d5c0ea2d4b02ea279c4accd37931feec640f9dd207a3ba6d0d7c73b986585a5182e6a5f26a316b26773106a5be88ce07161ae0f527cbac2e3b92e8f2587e4b", 0x92, 0xfffffffffffffff9) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB="04"], 0x144}}, 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r11 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r5, r11}, &(0x7f00000004c0)=""/232, 0xe8, &(0x7f00000005c0)={&(0x7f0000000440)={'sha224-ni\x00'}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r12 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r12, &(0x7f0000000240)=""/112, 0x349b7f55) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12m12.628947788s ago: executing program 3 (id=1445): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x60}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0xd, @win={{0xd, 0x7f, 0x9c3, 0x5}, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}}) 12m11.794996798s ago: executing program 3 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x783300) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900fe0073797a300000000014000480080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000008000b40000000000900010073797a300000000018000480140001800a000100726564697200000004000280140000001100010000000000000000000000000a"], 0xc2}}, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) 12m10.536559039s ago: executing program 3 (id=1453): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1e, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d71d731630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b96411c3a7b99504c950fcba378fae7ec90b6da825996"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 11m55.474693916s ago: executing program 32 (id=1453): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1e, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d71d731630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b96411c3a7b99504c950fcba378fae7ec90b6da825996"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 5m16.864816724s ago: executing program 1 (id=2688): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x44, "cd20682e01c58e7828cbbacbc8949cea0e0f371ce05d880b7be7c4bddfa51e4c1e514c7ec21cc340db002a9c261d58b34cf66154d18a9764c7f7dbe1d28dcca18f41737d"}, &(0x7f0000000240)=0x4c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000300)={0x401, 0x8001, 0x423, 0x1, r8}, &(0x7f0000000380)=0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="2402000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000e40006"], 0x224}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x4040000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e0b06c900080008"], 0xe) 5m15.264539572s ago: executing program 1 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r3, 0x4b36) sysfs$2(0x4, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 5m13.767737089s ago: executing program 1 (id=2692): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @private=0xa010100, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x2ff, 0x0, 0x7}]}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af25, &(0x7f00000001c0)=0x304008000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x248040, 0x0) r7 = pidfd_getfd(r6, r1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000180)={0x10001, 0x480, &(0x7f00000000c0)="f0f3b0bb29127da0da73b1db1eef92c38cb06c677be9edda3b21508418e2070b669e5084f984e457b782c051005926816889dbb1ea14b318685d6a", &(0x7f0000000100)="cb4540bb589d3e10bf6ad7299b5a77d78307610c2b8673add46e9b8bde5c0879cd70cab433ba67b9045ab0281e7771e957f221d4f77751b32df451da2102a2439586", 0x3b, 0x42}) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 5m12.676498958s ago: executing program 1 (id=2695): recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000001300)=""/145, 0x91}], 0x2}}], 0x2, 0x20, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @initial, {0xc, 0x1}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000080) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5m11.276457632s ago: executing program 1 (id=2699): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20000080) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x1000004, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0xff, 0x16c0, 0x5df, 0x3, 0x0, 0xc, 'syz0\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000140)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000008c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6, 0x3, 0x6, 0x9, "28bfd29aca33938d4fb7588840d7bec0c25c39f92c4865b7b63e56eb31dd86c347d82269d24b7f2dae05ba064ea34e4b862a68ec14781103ee3c991ea3c83f471ce7c83cfae8642d4fd1741e7d1152ffa55f3e96bd091e964835e0b17856de38db11f15d0a0a3fb2ec706b169b0bcbf15c54c500cd485611b1946db187d81a6a"}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000001c0)={0x80}) 5m10.95857112s ago: executing program 1 (id=2700): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x18c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x3c, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x716d, 0xc, 0x1, {0x22, 0x9ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8d, 0x4, 0xf0}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x0, 0x10, 0x8}, 0x85, &(0x7f0000000200)={0x5, 0xf, 0x85, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0xcd, 0x1, 0x7, 0xf00f, 0x7, [0x3f00]}, @ptm_cap={0x3}, @generic={0x56, 0x10, 0x3, "91535226d875876d6584e918c7d3b5e48d34be6b12a8a6e322afc48d02e67ddc2907a61cf0da3bcc72323ff7a798d0475fd974587f2ae55b4c5d2bbd597a7b95d67c96e5ba7b5afd4ed7530f1c4e8301e508d9"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b7d4c2fdad57939ed0ae5a61089fb05d"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "8256b841428f9c532536df8f616271a317a01ab0ad2a89cf527b813f3c7e7302d2336dd1c726a5020420511d746d905f0c5ccec0ccb059"}}]}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) lremovexattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=@random={'trusted.', '\\*\\\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 5m10.799351906s ago: executing program 33 (id=2700): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x18c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x3c, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x716d, 0xc, 0x1, {0x22, 0x9ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8d, 0x4, 0xf0}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x0, 0x10, 0x8}, 0x85, &(0x7f0000000200)={0x5, 0xf, 0x85, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0xcd, 0x1, 0x7, 0xf00f, 0x7, [0x3f00]}, @ptm_cap={0x3}, @generic={0x56, 0x10, 0x3, "91535226d875876d6584e918c7d3b5e48d34be6b12a8a6e322afc48d02e67ddc2907a61cf0da3bcc72323ff7a798d0475fd974587f2ae55b4c5d2bbd597a7b95d67c96e5ba7b5afd4ed7530f1c4e8301e508d9"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b7d4c2fdad57939ed0ae5a61089fb05d"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "8256b841428f9c532536df8f616271a317a01ab0ad2a89cf527b813f3c7e7302d2336dd1c726a5020420511d746d905f0c5ccec0ccb059"}}]}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) lremovexattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=@random={'trusted.', '\\*\\\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 4m16.678416152s ago: executing program 6 (id=2879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ffcaea8338f1dd1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x5, &(0x7f00000002c0)={0x1000, 0x6ac}) setrlimit(0xe, &(0x7f0000000080)={0x4, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0xff) 4m15.638334881s ago: executing program 6 (id=2880): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r1, 0x0, r3}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000640)) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f94124fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@ipv6_delroute={0x12c, 0x19, 0x10, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x10, 0xef, 0xfe, 0x0, 0xfe, 0xa, 0x1100}, [@RTA_MARK={0x8, 0x10, 0x1}, @RTA_METRICS={0xfd, 0x8, 0x0, 0x1, "8e0c4195551efa5a3bfccc418b1e579727d1d8a2abd6fdb80e07fc5464dc78822012eb032bd2e8605c7907a8bad76dfd4321010a6332579354f238c4f01e641f5cbffe0e5c21a3ea2e8c407d3a32d066b521c92b43df36a5e833bd9cb1b42ef13f4568b8742521e0a6387a30c061b0c947648dbe4d2e8c128fa53ab16bb39a9875e08e78f9ce9692fa044bf72c9d176d599ff0049995c5f2f1346f415c3a682e0cbcff62d511312c00077135d3cb5b328a23c28eb4e0b7f382efed60282a86f3110a698fa821dfec6d27aa2c6a23ce9793125b576ea77e91f2fda145c26b5dc970fb85d8b73ce59cd65d8ed2fd4c3295b4070185c468cf6b7e"}, @RTA_MARK={0x8, 0x10, 0x10001}]}, 0x12c}, 0x1, 0xba01}, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100000000000000, 0x800000000000}, 0x0, 0x0, 0x0, 0x0) 4m15.396257462s ago: executing program 6 (id=2881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x5410, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000fc0600000500000000000000000000000500000005000000ffffffffffffff7fb7000000000000008000000005be0000"]) 4m15.205325661s ago: executing program 6 (id=2882): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r7, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0xffffff39, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x3d5b5852, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x10000006, 0xffffffff, 0x80000000, 0x0, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r8, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000240)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 4m13.177620341s ago: executing program 6 (id=2886): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}) timer_create(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe}, &(0x7f0000000100), &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0xfff, 0x48c1) close_range(r0, r4, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) recvfrom(r3, 0x0, 0x0, 0x10022, 0x0, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) 4m12.106550999s ago: executing program 6 (id=2892): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m54.256671305s ago: executing program 34 (id=2892): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.515156751s ago: executing program 5 (id=3621): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0x4180) 10.978477903s ago: executing program 4 (id=3623): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) pwritev2(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000001c0)="d39420b2f4a97d1ffee2506a8cec3f0db09a37a80bb55750bcf232e1cafb330055", 0x21}], 0x1, 0x9, 0x9, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_to_bridge\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="8000b6000a0002"], 0x30}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002aad7000ffdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x8001}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000002100), 0x10080, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r9, 0x4b52, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r10) 9.84509277s ago: executing program 4 (id=3624): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x7, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, 'w'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8ab0, 0xff4d, 0x0, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x16}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x630, 0x0, 0x7e, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x47, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x4, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0xfffffffffffffffc, 0x8) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) 9.755381437s ago: executing program 7 (id=3625): inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffff9c, 0x0, 0x84140, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x21) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x21, @rand_addr=0x64010101, 0x4e21, 0x4, 'rr\x00', 0x2, 0x7, 0x6c}, {@loopback, 0x4e24, 0x1, 0x7f, 0x5, 0x1ff}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r4, 0x1, 0x2, &(0x7f0000000000)=""/166, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x2, 0x5, 0x4, 0x0, 0x9, 0x0, 0x4}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400c0c0c00bdad446b9bbc7a71001df63546e3988285dcdf", 0x67}], 0x1}, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7cf7}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000080)={r9, 0x34, "d378dacb70aa6678c6371734ab24e323cc2f705a22493db917b2975c18a88e708419f32eae2479a88397f76a59f283e3b117268c"}, &(0x7f0000000100)=0x3c) 8.869019s ago: executing program 2 (id=3629): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r7, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0xffffff39, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x3d5b5852, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x10000006, 0xffffffff, 0x80000000, 0x0, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r8, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000240)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 8.788055021s ago: executing program 7 (id=3630): socket(0x0, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x0, &(0x7f00000001c0)=0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES8=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)=ANY=[@ANYBLOB="6479fa0a02"]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 7.645647855s ago: executing program 5 (id=3632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @private2}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="030000000b64ceb9d1663052bcda838bd053c349440db7106a1f38d7805eb93117fe680cbb1bd615cacefe2425a90e63636e", @ANYRES16=r2, @ANYBLOB="01042bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) pipe(&(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ustat(0x4, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0x11, 0x148, 0x318, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x4700, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x523) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000020d000400088038010c8054000b800800090078a52528080009000000000008"], 0x164}}, 0x0) 7.552112914s ago: executing program 2 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0xa, 0x800, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r5 = io_uring_setup(0x3e3a, &(0x7f0000000600)={0x0, 0xada2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0xa, 0x80000, 0x2) 6.803523092s ago: executing program 5 (id=3634): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r3 = socket(0x1, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39}}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0xffffffff, 0x0, 0x0, [0x0], [], [0x0, 0xee660df, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1ff, 0x3a, 'M', 0x3a, '@', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x50, 0x43, 0x4f, 0x46, 0x50]}, 0x30) 6.710749144s ago: executing program 0 (id=3635): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r7, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0xffffff39, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x3d5b5852, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x10000006, 0xffffffff, 0x80000000, 0x0, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r8, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000240)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 6.482726326s ago: executing program 2 (id=3636): migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 5.813427398s ago: executing program 4 (id=3637): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x2a082, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1) fcntl$F_SET_RW_HINT(r2, 0x407, &(0x7f0000000980)) r5 = fanotify_init(0x1, 0x101000) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x641, 0x1019, r6, 0x0) fanotify_mark(r5, 0x1, 0x8001023, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x20000023896) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) bind$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x31) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000640)='Ez', 0x2}], 0x1) r10 = accept4$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 5.712406139s ago: executing program 5 (id=3638): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030001000000050003dedb1b3863c5da7c00050000000800020001000000040008"], 0x44}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00', {}, {}, 0x0, 0xff03}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/84}, 0x5c, 0xda72ed5a9dc29567, 0x2000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x4161, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "9c45"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008307f2db6894cfcfae10d60af9f75277b32b955011ed5b0a15957d650e8be64667d673af7401f3f726011d0de10aa35920d7"], 0x48) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000200)='./file0\x00', 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r6, &(0x7f0000000180)}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.586400426s ago: executing program 7 (id=3639): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x8201, 0x10001, 0x7, r2}, &(0x7f00000000c0)=0x10) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xa, 0x0, 0x8, 0x81}}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x6, @name="f4e06b0a1673030000001e8623218cb8167a99b19faf676ddc55586411baebc8"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 5.537956766s ago: executing program 2 (id=3640): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8e5, 0x401, 0x1, 0x3, 0x1ff, 0x6, 0x5, 0xfffffffc, 0x8, 0x1, 0x7, 0x100, 0x0, 0x2, 0xb, 0x1, {0x9, 0x7}, 0x2, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x803, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) 5.475924211s ago: executing program 0 (id=3641): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x6585, 0x10100}, 0x0, 0x0) r1 = syz_io_uring_setup(0x5e2, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{r2}, "aeb393dd15195dcdbdb05065bf12596bfcf6b38b3d1fcafb18c80594e4cfa63966a45c59c487b8a5d28f111f3c4e6249eaaa8d65e3094462fb5e19fc0bbc82507ea56aebba52756afd0942324b960bf21c6275c1edcc057a35755a8fb51127ca8f497747990ef1664017485f13da9e87ff6557e2b351e67425aa79f741b65ca5b97eb36e2dc57172649687d4cdc3c0a1fa8040721e7b46eacb0595a82d3ba6eb1c326ecf1223a60579edd101027a9139ebb0300a0d48a310aef2d7d645347fb9fabbe615840ee5ed520601041635074697b3d5992421c1aaa142ca3fc7e8454acc5c58bb0fccb3b99f1236bfcbdd9d0942b8ffbe13612adb61a9d59b954ee28aca667dd9f10a7165c7207cd97cc667bbd4e4485f077f6db93ae15031e6685e1b4113d682cc57bd25dc707a94522770c22e901ab834e0b3b80e2554022f3d10e1ea3a8791d332544e511158fa11d16e5be15d6a362367c1f5bdfb2c23b1a4d16c0d4278e7fec4c9ec0668e82d89d96d1e3c21a4eeff28363fdd994f24c5196ce0d095ac0039f4d16e5f2e0225199426b887490f297a136a71e97e4825da7dc6180ed3111db06d363a0b157337d9a2848cf9d84e481aa7543b86353bd336fe612875a9347768e5e148fa3a92cab39e116989a5d26b34c84cbe4d059a294b1c2c02445d63d6f3ffdafb7e31102e59709a27359c3b7744a3466657192d13466f5e9622939831be3a2c1a51b2a08533a0b25ced663ee1f7468d1d3f183c1ceca4a71265c1affb594691e31478c9626f79df110e15434b921cc2f7fb6eeaa189af382f1cdd3e486e5316a6c3f4f06970b23b600c491704b47c59cfbe021addf824081c0f753a805081357fa50d60ec360a10ce62c0ceb506c8c0e2b50cfccdfc3013d4c2987b6875b8cd09cfefb98c732863578a5efb900a7d56cdcd782b0ee29ce5a55df134c97cef7d677b2cb193bbe66fe37b8494feeab6e76baf65a42849006d13d5711fe8560c0e9553ce954eaed486618dcc8ce7c84f5a07f27431d3800f43cae83d130031a53bb155d4d967ec0cbe268285d0825239eaa60113da3e6a005cb759a36c4d9beaa8bf53281a308dd8a84a46539ea679614bdb0c2888e6bab359ac17d37bc2efdd34e024401d5252f4ea3ec63a5bd31c1bf03326dfb8914bb5c4ab6d67d0531745d5610a312eb67f26b87be71c9b51aa992e784f999085b7533c05c68a22080e25e220ef3bdc97a45fdfdd0057d441ffbe3a6f61f63f4755942551e138429b0dc3ee9c522fa04ff56df24264dd50af482971db2f23f2e8c9830a4d9212efcec25fcba8de25733cdf50f8c602c82857313de43a63a74f62378d537c26f36b92c2b3a3eed498932d02b71fa9357a5f1f108d4cec2ea3f35b681bb457f63acdc5dc9abdb936f59a4b68a7c7cb14f8668d139b17252f9df9b4e5b324cdf994a380ef8874f5bc744bb4e0ee8c568fa8eb86f5ef262ef58efc512fef001df47bca068b5ba946159ff23b84cb1de252ea3faf8b3c9b81e6be69696f7ef62f9c2a114fd3f7166f65360d1201e6dcf947a9df14f65eab2d7a38447426debddb0f804e598cd6b3802af01ec4266aaf296c046b1a4e9c4322392c57c93b4b72459faf532e8790a14fe82b58aec134a634662584d4b7cfbbe90b3dd12afe2e9d0f1fa226bf035fcf34d01f8d639b05e31696a917a44b1b2f8aabf9026b61e86d083b3d4879d867bd8a48c494856c475bb53df4a9725b829658fad065905e168be141b1e2d4d7de961bdce82f6683cb733fb6f1cad84333678a3261037ce74d4c25bc48c2e37d91039251e131b59b5596a0528e928d37d7f4245b609c95b54e0162c7af904293048579fd8addab25b6508eea80639255e5629cbb4773734ac796052065ea7055c6edf055c02656752ea579b46cac6389bd9e17833f7577125e9d369db3f77aff9f1eff569568d24dce28032eae26c7bad8b1c0a8b2d6d9777f17c6fde7c75bf7827d6763567fa9bd268a387ffa83704978c3c72ea0bca46485e0149c36789c1a8d30c51a3af45150b7aa852bbbf4d05832d71fce60a545b6d70baaa0b8b226c92e3c1ec58790a7cb40c66e60107f483713d71e80870be91a92993dee808fb636491fe9889a1f5afd5058f0bf92602afd48b9c63fced0f9ea8d180552a5c08d370fdb46b0a59ee2cddf134fede5a0f32061cb663aa1436943eed2bc94bd215541dac5c8bcee8e9f4cd4f737dc26cea0cfdff0b41cf1e545c6da0e47c8b7463f2d139f98915592db1a1292abfe86f3fd0c6ceb1d8d4f740b099afb9f0d58ed9cebfdb35a8bcef455659eb42dde893aed6a25cd148e53e698c14dec1c7ff8b5b223641ec65f9bed5aa4956269b03c97529792046326cdc0ee28b3562663904a566760e728fe3bb3be8a417f27bd7c4b6ffac6bbaafd5faf1a2f0d92b905791481a70bb2010fed25cbaf650177af0cd201c30c50754b1c50ccf23d85651eb33e07d8d962c049d936cd1dc0c7006273554785f1322b265ac51e899b5f7893e5516489cd7d8ae5cd316bfecea4afaf69490ca96699863fb211ffcb3be74f8c365e795bddec142bce27b0b19ea30fb13d307cd8d733bf98217eecb5d7b639e8befba67f66fbcd9c4c5868113a1ac43992908972949ed1fa94d2792866374ff3c069708e0fff3dfebe050f60a03a4d2e9fe52474df210eba2864a9a367017cdc6ecbcdf1ef9fcb9e6bfe0c4f12dbd79de28b0b978600da0dd20e38223b9a82cf9baded19848259244d24351dce2d0b9310f4d31305776a6873b3c51d28771ddbb5f64a0e18c5113f6631fce95811c0682c41cf5a58cb5bb4e6c69c4ac62cff5f7667ca834074b4cccac60df37c760560a12388809ca19161067d9b53fdd56337db0f6fd4b6b74d651aac15d633208b3388b6a99661ed4beb8b12e74309784567628f133ae5855e0ed05add4091a9485f0b7e968d32fc6d9c37b741434adb928f40f466c6f7c0bb5ab87c7c3d0ec875cc49e9f9ef382c3a9b6d4542f62a3f6c69f920c7994eda4e779876a0593cb5253594b38ad25a7639de422748fe325dce0b4ff526fe39a7ddfd49c8b07e9b9fdea2ab0f9bade2a4bcbc84b1c5e75d59a48ee321b81e361f912fa0ae294ab5e69809c298ba5905a210a998582ed0196d3a6380acdfd0c76003395dc91964d15555a616a26170dc2d546426fff34ad57590b91dde6433781f2af6a2406b31ad2fdd3bf6c9ff5c88a49b818cb9eec149a3d996aaf78be867c59fcc14c408dcd22592df824a09368f61b4ac1535db2368ed2604470a5db54862fd381056c14d458127513a6352208b5bd07b5e9d4c1ac5f6c7fb9d13576ff0f34546d304d5020a4a3d05e5887a58f923e7161fd706179d865b5b1dad73c76cc31208cdd944119ad9efd6b306c92e32d51a00899842db418b425b930e0f68be6fa10805f2d8e6a2420e0c3bcccdfe31f940ff7b367d8835d4879d9e518e01a8af400915edc3ff012192371f6d944dbc0819250219d68f8205da59733327c95842a1cfafa8b9ce0a669bda48a520bff2d51b2c9e066d81654d32c471e4935110a8cbc063324e0525ac1273442876eb33522dfd05da63a6cc2fff78e9e3e384dfe2c8e8a5c2d6bcee5536e98a7d0b9060d22e1380d9e13053ef0147d6cd5922fba1a11bde111e3335295552451664b680a317e3feada1887944e09eb904e793953f289b416c90c991cb56691f2693f41081544cc46e57d3d76d811914545c300f468802c235ad393728bae411c743d4b4b8ae9d1ab51c4e89df415165c740afb391e3ea5a66d8d38489ea4eda2a9c42642c0cd8c0463523c234d24f00a292c5bfed54f87cf8738c51aba0d0869740c72ee34bad4e58e3ed3f6d8b8c57e606e2280a7fb29ca2731345a73a6f0cfe0582409220e3f7f7a6ec2bd972ebcf6fa45a67cfd264f44e85092043f0ddd40c9176f5cc6550712819ab5fca3bf695fc47ad0ac482cdac2f25188d6539c111a33de826ef8b6141d392f02a28b8b7966a4dd2f0630c8bdd993db385a99518ea373e364f5006c71ad15bf3a8c6e27331aa4adcd5ab9ab9246adf4eb85680d668b8616f3830c0b4552f2dda6c6b610060aa0efbbab04e6811cc4a2af96a4d04641e8bec91c4f39d379e5915265d2c02ee6f7c8b37b2f1bef4db0261cfb1307bb4b8e7cc0a840c4188a7809ec94b85886132998c35aa73dfdd9649406e003ab7d77afa8be8a70474d0820f1113ac06be7dfa5fad8b41eb198693697ec62e433e93201439b7420b084ade7db59e8703ce7e1c66c4f2e19a25d6d0de492f3ae6aeb79c6ed554a7cf4e9a71d7badda7e08f2f630e392536d57a3e35281accf2015a63294a03b524ea85e782bfa81d67beacf5396d962ac7bf3a0afba29d56c603015cb72a3fa80b8faa924a1aa301b76d07fc7d894ede1b1069fa68d781a0bb39279ba7957d2f02a9a0948710ac7eb7ce69ba4b3c4051001866772cec1c2fa355eb7d6c3a6ecde8c3ce41f2fd9e1afbb223d2be41868e32dfd1af55d18e3f7cb072195225fd2f4f96f06c95637ba6af50ea809c4c7c0b321f4dad1870126920b4a4aef427aa0e89f6374d346920aeef194f0c33aa09d271a9c6a97dbb4739cd911886c1cf136639de05cea3e1f35d0780a906d4d0c8ca9b2d666e22b1013f89d5def81a5ecbf0feba5b6c0cf3a07d0189e65049622dc3a8a04c460efd28657e786726702b3d1c71e424d222226788587e59416a0c720e35d687275b96044f57d7cbaafabbad284babb632b1e8cd77c9b1d2710112910f7b7083f917533ae7f29541148ef47e1b436c82921314364bdcb1ce24e255a042b2d055cfb99f9d12b879df0df8336330dc625a390a1c1745e85aec56cb3f2bd2da74a0687fa68347af139c5b10f490d794fafaa30b497a5422efe21c632ffaa8c908ba5a4be41cd12686b8a2e20b84adcce7757ddbf3dc7dca21154ebcefe15a5cf10704985e638afbf47d6d97203ccdc50fe0640293e2a566cf7f87024d07c657f8d2e1d005b0a48e833562eda0da4cd6dcb50eefc17b4dc411371091a6937663de97f1b54c61a0b8b960614bd54ad4c71c71ce561f11d56c3df662851db67e088a6bb73ca0e996cc96127a56a3c4b4193d2165a510348c532555e711bfae8ec371818610fa17085d78686fdfd66639dfc90bf5d0d231e2c881c5a423c71ab4f1beaab7ba2ee1284d3715f76ee60ac42d37b7d88e61bd05d0646e187a8e5e2bef176d55dba773dd48e9b7a3800be837618506eb8223a73bb4b7101ae45ed3ace7fdf4627a8cea368d498b8ab1e15ffd51699c426af763d3a08f4104de235c85c6325fa16af82280d2b69e82892bbdca1e2b33fa0236785e3c1fc63baf1eae6fad97be363691d25e55d8e9d1adff7c565c476468454cab60f57804d1ae6aac0d6c248acd7e022a9b0268c02b373bb41c6c9b2ccb5bd6fa51ba07c6940c55a7bb7e8ec6ee8a9d59de6685c3b7319983ef5d0d590e992ffdf117769de64a1e6d5fe180ac4317a750be62311d6f46dcafac491edd8d7ab178199144c8b1d10d9a0eda2b1019f3f938b05a30a835cf60e48b991690cdda21b739a7a7788004e0f4409ab45f126e92b114dd9c0f68d427b6a9d6a6491e3ea91e3c8e1b5ab8b6121b63a8e57e1e3fbd0a99d0f6cc9e0e637a16196a8f0877b1d8c6e85b6d6ddf512311cea63956e108091b4c809d3938425339e7206c69bd813d0adabe0c6ac2b5fd973ebf93b3a1857e2872d97bd63040f64269a7"}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, r7, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 5.238017781s ago: executing program 7 (id=3642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket(0xa, 0x800, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r5 = io_uring_setup(0x3e3a, &(0x7f0000000600)={0x0, 0xada2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x80000, 0x2) 4.380428644s ago: executing program 0 (id=3643): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0x4180) 3.846452835s ago: executing program 2 (id=3644): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x6585, 0x10100}, 0x0, 0x0) r1 = syz_io_uring_setup(0x5e2, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{r2}, "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"}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, r7, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 3.735278621s ago: executing program 0 (id=3645): ioperm(0x0, 0xd4b7, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x7fff, 0x6}, 0x10) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.78418997s ago: executing program 0 (id=3646): r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000003000004d433000000200100000000000000000000000000000000000000000000000000000000000005dc00000000000000000000000000400000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000a00000400000000000000005e001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000037eb0900000000000000e19b250f61b07af90000"], 0x150}}, 0x0) 2.586645963s ago: executing program 4 (id=3647): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000000)={@host, 0x101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.362297806s ago: executing program 0 (id=3648): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x7, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, 'w'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8ab0, 0xff4d, 0x0, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x16}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x630, 0x0, 0x7e, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x47, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x4, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0xfffffffffffffffc, 0x8) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) 2.346031809s ago: executing program 2 (id=3649): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xfffffffeffd, 0x0, 0x0, 0x49249b0}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x840, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r7 = dup(r4) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e006"]) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2030050000008506b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="d52db415632585ac4bae95c5626e80e0303620e35fa7fdc1ec24eef79a95c86f5f2fe4551842e91366641e3b5ee622a6db8971a615aabb1a102a2b1bf95342a92520a69c2f5f19dbc203ae8c4efd4f6287a33ba746254567c06cfe942102bfd358206df2da6c5d3117e742c6697905f30a9baf46ba6b216508a8c330ea1c0ac2d86e20b87dfaa7bb9714fd51405fc2759fdbd67d06a7f9c93e4caafd5e73ea70e3874ee533971ba441b8a4297b368509ddeae961a390d902933e727ee515e37826584c9484293bd45951e6acfb0c5146fd57429026", @ANYRESDEC], 0x28}}, 0x0) 2.274600365s ago: executing program 4 (id=3650): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="00000002000000000000000000000000000000006d341be362f00a9e6ac4ba0667f98c3c8900cdbb8e3ae0cf3947cf18f287ff29e65fe7fd0ab4d056a341fa79da9f0353e60fad66230c3442c497c4914cec6a03032a6c0f32ef6327c248c6e1c67b2c9c6d6772ca9d4b774cb3a0df281d08e54f645667b15db7983b750af55b3515ab0a1a7d39dddea8f1bac0a12360a8cc2fc1d3d41b8b103778edfad4546c996aef14c1cd46b6"], 0x408100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 2.026005199s ago: executing program 7 (id=3651): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x102) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0xfffffffffffffd57, 0x0, 0x0, {0x4000000000}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7400000000643b3356c9e8776e6f3df97c230943aafbcc3b88f7e001f8843592507ebea3959ca6139fca46c64ec30175f185ceac5b281ce5bcede9f2b4fcb1c53257bca1b0dc58e3c7cc0ac54d95f1ca81c1360ad50ca162cdc576fb0c292a9a0f01e520898e1e254354a451df720d4555f0674bb023fb38d1b1a3", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYRES64=r3]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x61, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, 0x0, 0x30, 0x0, @void}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) getgroups(0xffffff95, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20004005) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.049806607s ago: executing program 5 (id=3652): r0 = syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8000}, &(0x7f00000001c0), &(0x7f00000000c0)) r1 = socket$xdp(0x2c, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read(r3, 0x0, 0xffffffffffffff49) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000240)={0x2, "d2c40184521de22900ef000400000000001624a89e0000000000000000000200", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"fd0d1af889b4ea07001900005e99e47ac49e4906eddf9edd00004000000029e9", r7, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r7}, {r8}], 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000180)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x0, 0xffffffff}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x2, &(0x7f00000000c0), 0x20) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) 967.074775ms ago: executing program 7 (id=3653): r0 = syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8000}, &(0x7f00000001c0), &(0x7f00000000c0)) r1 = socket$xdp(0x2c, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read(r3, 0x0, 0xffffffffffffff49) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000240)={0x2, "d2c40184521de22900ef000400000000001624a89e0000000000000000000200", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"fd0d1af889b4ea07001900005e99e47ac49e4906eddf9edd00004000000029e9", r7, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r7}, {r8}], 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000180)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x4d5}}, 0x1006) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x2, &(0x7f00000000c0), 0x20) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) 157.380566ms ago: executing program 4 (id=3654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket(0xa, 0x800, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r6 = io_uring_setup(0x3e3a, &(0x7f0000000600)={0x0, 0xada2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x80000, 0x2) 0s ago: executing program 5 (id=3655): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0x4180) kernel console output (not intermixed with test programs): 319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.544591][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.721718][T17490] tipc: Started in network mode [ 1063.759460][T17490] tipc: Node identity ffffffff, cluster identity 4711 [ 1063.776828][T13440] usb 5-1: USB disconnect, device number 71 [ 1063.781465][T17490] tipc: Node number set to 4294967295 [ 1064.879972][ T29] audit: type=1400 audit(1732252935.347:1014): avc: denied { relabelfrom } for pid=17489 comm="syz.0.3027" name="" dev="pipefs" ino=67031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1065.604026][ T29] audit: type=1400 audit(1732252936.077:1015): avc: denied { nlmsg_read } for pid=17504 comm="syz.2.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.637840][T17505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3076'. [ 1066.261597][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1066.284757][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1066.294815][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1066.303034][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1066.312349][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1066.319543][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1066.358694][ T7602] IPVS: stop unused estimator thread 0... [ 1066.445815][ T29] audit: type=1400 audit(1732252936.917:1016): avc: denied { append } for pid=17512 comm="syz.2.3079" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1067.472252][T17513] chnl_net:caif_netlink_parms(): no params data found [ 1068.050396][T17513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.065201][T14512] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1068.077426][T17513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.107866][T17513] bridge_slave_0: entered allmulticast mode [ 1068.118680][T17513] bridge_slave_0: entered promiscuous mode [ 1068.129564][T17513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.136972][T17513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.144267][T17513] bridge_slave_1: entered allmulticast mode [ 1068.151324][T17513] bridge_slave_1: entered promiscuous mode [ 1068.216073][T17513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.233516][T17513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.240773][T14512] usb 3-1: Using ep0 maxpacket: 8 [ 1068.264110][T14512] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1068.272717][T14512] usb 3-1: can't read configurations, error -61 [ 1068.306983][T17513] team0: Port device team_slave_0 added [ 1068.328911][T17513] team0: Port device team_slave_1 added [ 1068.354103][ T7602] erspan0: left allmulticast mode [ 1068.363284][ T7602] erspan0: left promiscuous mode [ 1068.368438][ T7602] bridge0: port 3(erspan0) entered disabled state [ 1068.383906][ T7602] bridge_slave_1: left allmulticast mode [ 1068.389687][ T7602] bridge_slave_1: left promiscuous mode [ 1068.399463][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.410775][T11537] Bluetooth: hci0: command tx timeout [ 1068.410770][T14512] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1068.436389][ T7602] bridge_slave_0: left allmulticast mode [ 1068.445534][ T7602] bridge_slave_0: left promiscuous mode [ 1068.454842][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.596309][T14512] usb 3-1: Using ep0 maxpacket: 8 [ 1068.604089][T14512] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1068.618062][T14512] usb 3-1: can't read configurations, error -61 [ 1068.627792][T14512] usb usb3-port1: attempt power cycle [ 1068.889042][T17546] ubifs: Unknown parameter 'nfs4' [ 1068.980674][T14512] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1069.009248][T17548] overlayfs: failed to resolve './file0': -2 [ 1069.015964][T14512] usb 3-1: Using ep0 maxpacket: 8 [ 1069.027320][T14512] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1069.037479][T14512] usb 3-1: can't read configurations, error -61 [ 1069.116333][ T29] audit: type=1400 audit(1732252939.587:1017): avc: denied { getopt } for pid=17551 comm="syz.0.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1069.284574][T14512] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1069.313967][T14512] usb 3-1: Using ep0 maxpacket: 8 [ 1069.320890][T14512] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1069.328502][T14512] usb 3-1: can't read configurations, error -61 [ 1069.335126][T14512] usb usb3-port1: unable to enumerate USB device [ 1069.413714][T17556] sctp: [Deprecated]: syz.0.3087 (pid 17556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1069.413714][T17556] Use struct sctp_sack_info instead [ 1070.453826][ T7602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.469791][ T7602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.486445][T11537] Bluetooth: hci0: command tx timeout [ 1070.510798][ T7602] bond0 (unregistering): Released all slaves [ 1070.620885][T17513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.636384][T17513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.662342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.677310][T17513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.770235][T17513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.777449][T17513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.780807][ T7602] IPVS: stopping backup sync thread 9899 ... [ 1070.803541][T17513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.034961][T17513] hsr_slave_0: entered promiscuous mode [ 1071.126371][T17513] hsr_slave_1: entered promiscuous mode [ 1071.359748][T17566] batadv_slave_0: entered promiscuous mode [ 1071.830618][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3093'. [ 1071.993130][T17559] batadv_slave_0: left promiscuous mode [ 1072.076374][ T7602] hsr_slave_0: left promiscuous mode [ 1072.087159][ T7602] hsr_slave_1: left promiscuous mode [ 1072.560730][T11537] Bluetooth: hci0: command tx timeout [ 1072.892175][T17578] syz.0.3096: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1072.951607][T17578] CPU: 1 UID: 0 PID: 17578 Comm: syz.0.3096 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1072.962072][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1072.972137][T17578] Call Trace: [ 1072.975422][T17578] [ 1072.978357][T17578] dump_stack_lvl+0x16c/0x1f0 [ 1072.983059][T17578] warn_alloc+0x24d/0x3a0 [ 1072.987401][T17578] ? __pfx_warn_alloc+0x10/0x10 [ 1072.992257][T17578] ? __pfx_stack_trace_save+0x10/0x10 [ 1072.997658][T17578] ? kasan_save_stack+0x42/0x60 [ 1073.002526][T17578] ? kasan_save_stack+0x33/0x60 [ 1073.007389][T17578] ? kasan_save_track+0x14/0x30 [ 1073.012253][T17578] ? __kasan_kmalloc+0xaa/0xb0 [ 1073.017049][T17578] ? xskq_create+0x52/0x1d0 [ 1073.021567][T17578] ? do_sock_setsockopt+0x222/0x480 [ 1073.026782][T17578] ? __sys_setsockopt+0x1a0/0x230 [ 1073.031812][T17578] ? __x64_sys_setsockopt+0xbd/0x160 [ 1073.037112][T17578] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1073.043127][T17578] ? xskq_create+0xfb/0x1d0 [ 1073.047654][T17578] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1073.054005][T17578] ? xskq_create+0xfb/0x1d0 [ 1073.058530][T17578] vmalloc_user_noprof+0x6b/0x90 [ 1073.063502][T17578] ? xskq_create+0xfb/0x1d0 [ 1073.068022][T17578] xskq_create+0xfb/0x1d0 [ 1073.072366][T17578] xsk_setsockopt+0x757/0xa10 [ 1073.077056][T17578] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1073.082281][T17578] ? selinux_socket_setsockopt+0x6a/0x80 [ 1073.087933][T17578] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1073.093145][T17578] do_sock_setsockopt+0x222/0x480 [ 1073.098201][T17578] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1073.103762][T17578] ? lock_acquire+0x2f/0xb0 [ 1073.108288][T17578] __sys_setsockopt+0x1a0/0x230 [ 1073.113161][T17578] __x64_sys_setsockopt+0xbd/0x160 [ 1073.118290][T17578] ? do_syscall_64+0x91/0x250 [ 1073.122990][T17578] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.128211][T17578] do_syscall_64+0xcd/0x250 [ 1073.132739][T17578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.138650][T17578] RIP: 0033:0x7feaddd7e819 [ 1073.143067][T17578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.162684][T17578] RSP: 002b:00007feadeafd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1073.171103][T17578] RAX: ffffffffffffffda RBX: 00007feaddf35fa0 RCX: 00007feaddd7e819 [ 1073.179076][T17578] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1073.187052][T17578] RBP: 00007feadddf175e R08: 0000000000000020 R09: 0000000000000000 [ 1073.195021][T17578] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1073.202976][T17578] R13: 0000000000000000 R14: 00007feaddf35fa0 R15: 00007fffdf0d0ad8 [ 1073.210940][T17578] [ 1073.214005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.245832][T17578] Mem-Info: [ 1073.248942][T17578] active_anon:8827 inactive_anon:0 isolated_anon:0 [ 1073.248942][T17578] active_file:20806 inactive_file:39354 isolated_file:0 [ 1073.248942][T17578] unevictable:768 dirty:337 writeback:0 [ 1073.248942][T17578] slab_reclaimable:12925 slab_unreclaimable:109261 [ 1073.248942][T17578] mapped:32539 shmem:7144 pagetables:652 [ 1073.248942][T17578] sec_pagetables:0 bounce:0 [ 1073.248942][T17578] kernel_misc_reclaimable:0 [ 1073.248942][T17578] free:1283116 free_pcp:3135 free_cma:0 [ 1073.305324][T17578] Node 0 active_anon:35308kB inactive_anon:0kB active_file:83224kB inactive_file:157340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130156kB dirty:1344kB writeback:0kB shmem:27040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11200kB pagetables:2608kB sec_pagetables:0kB all_unreclaimable? no [ 1073.344080][T17578] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1073.604601][T17591] sctp: [Deprecated]: syz.2.3097 (pid 17591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1073.604601][T17591] Use struct sctp_sack_info instead [ 1073.785923][T17578] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.964938][T17578] lowmem_reserve[]: 0 2459 2459 0 0 [ 1074.363259][T17578] Node 0 DMA32 free:1216852kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35092kB inactive_anon:0kB active_file:83224kB inactive_file:157248kB unevictable:1536kB writepending:1328kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:2904kB local_pcp:2904kB free_cma:0kB [ 1074.364801][T17591] uprobe: syz.2.3097:17591 failed to unregister, leaking uprobe [ 1074.393778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.422105][T17578] lowmem_reserve[]: 0 0 0 0 0 [ 1074.426872][T17578] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1074.453284][T17594] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1074.471519][T17578] lowmem_reserve[]: 0 0 0 0 0 [ 1074.476225][T17578] Node 1 Normal free:3909432kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1074.519123][T17578] lowmem_reserve[]: 0 0 0 0 0 [ 1074.528929][T17578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1074.548421][T17578] Node 0 DMA32: 622*4kB (UME) 963*8kB (UME) 203*16kB (UME) 197*32kB (UME) 223*64kB (UME) 26*128kB (UME) 20*256kB (M) 55*512kB (UME) 46*1024kB (UME) 20*2048kB (UME) 259*4096kB (UM) = 1219552kB [ 1074.604322][T17578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1074.616187][T17578] Node 1 Normal: 201*4kB (UME) 61*8kB (UME) 48*16kB (UME) 207*32kB (UME) 108*64kB (UME) 29*128kB (UME) 16*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3909484kB [ 1074.636649][T17578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.658035][T11537] Bluetooth: hci0: command tx timeout [ 1074.694771][T17578] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1074.704722][T17578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.714506][T17578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.724145][T17578] 65504 total pagecache pages [ 1074.729055][T17578] 0 pages in swap cache [ 1074.733260][T17578] Free swap = 124732kB [ 1074.737413][T17578] Total swap = 124996kB [ 1074.741691][T17578] 2097051 pages RAM [ 1074.745522][T17578] 0 pages HighMem/MovableOnly [ 1074.750193][T17578] 428603 pages reserved [ 1074.754430][T17578] 0 pages cma reserved [ 1074.923514][T17601] loop2: detected capacity change from 0 to 7 [ 1074.952242][T17601] Dev loop2: unable to read RDB block 7 [ 1074.965446][T17601] loop2: unable to read partition table [ 1074.975571][T17601] loop2: partition table beyond EOD, truncated [ 1074.989546][T17601] loop_reread_partitions: partition scan of loop2 (žč¢«) failed (rc=-5) [ 1075.940308][T17604] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3100'. [ 1076.537697][ T7602] team0 (unregistering): Port device team_slave_1 removed [ 1076.668789][T17620] syz.5.3103: attempt to access beyond end of device [ 1076.668789][T17620] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1076.684676][T17620] efs: cannot read volume header [ 1076.736000][ T7602] team0 (unregistering): Port device team_slave_0 removed [ 1077.936045][T17635] bridge0: port 3(erspan0) entered blocking state [ 1077.942897][T17635] bridge0: port 3(erspan0) entered disabled state [ 1077.950624][T17635] erspan0: entered allmulticast mode [ 1077.962895][T17635] erspan0: entered promiscuous mode [ 1077.969841][T17635] bridge0: port 3(erspan0) entered blocking state [ 1077.976345][T17635] bridge0: port 3(erspan0) entered forwarding state [ 1078.786767][T17632] ubifs: Unknown parameter 'nfs4' [ 1079.873455][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1079.942410][T17513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1079.963542][T17513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1079.999080][T17513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1080.027116][T17513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1080.102844][T17658] ubifs: Unknown parameter 'nfs4' [ 1080.115504][T17513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.140149][T17513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.165606][T17513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1080.176018][T17513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.188099][T15929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.195256][T15929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.223026][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.230177][T15929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.310310][T17669] ubifs: Unknown parameter 'nfs4' [ 1080.843673][T17513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.239185][T11776] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1081.532836][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.563823][T11776] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1081.571915][T17513] veth0_vlan: entered promiscuous mode [ 1081.577816][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.590170][T11776] usb 3-1: config 0 descriptor?? [ 1081.600037][T17513] veth1_vlan: entered promiscuous mode [ 1081.655830][T17513] veth0_macvtap: entered promiscuous mode [ 1081.705255][T17513] veth1_macvtap: entered promiscuous mode [ 1081.745447][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.775391][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.808871][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.825770][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.835904][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.849004][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.863239][T17513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.900407][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.929441][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.940582][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.952987][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.963280][T17513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.973853][T17513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.985232][T17513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.997687][T17513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.011246][T17513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.020137][T17513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.034226][T17513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.038394][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.051993][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.114956][T11776] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 1082.130290][T11776] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003F/input/input72 [ 1082.142509][T11638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.150746][T11638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.175653][ T7602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.183953][ T7602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.471670][ T29] audit: type=1400 audit(1732252952.917:1018): avc: denied { read } for pid=17698 comm="syz.4.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1082.769638][T11776] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1082.890607][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3123'. [ 1083.130797][T17711] ubifs: Unknown parameter 'nfs4' [ 1083.371398][T11776] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1083.516799][ T5836] usb 3-1: USB disconnect, device number 82 [ 1083.530540][T11776] usb 5-1: Using ep0 maxpacket: 8 [ 1083.539015][T11776] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1083.547654][T11776] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1083.557848][T11776] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1083.569282][T11776] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1083.581204][T11776] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.594958][T11776] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1083.605250][T11776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.621344][T11776] usbtmc 5-1:16.0: bulk endpoints not found [ 1083.848023][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.856923][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.687461][T17722] ubifs: Unknown parameter 'nfs4' [ 1085.771006][T11776] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1085.948086][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.157218][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.206755][T17033] usb 5-1: USB disconnect, device number 72 [ 1086.215453][T11776] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1086.234755][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.268213][T11776] usb 3-1: config 0 descriptor?? [ 1086.329456][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 1086.485513][T17741] Process accounting resumed [ 1086.520656][T17741] Process accounting resumed [ 1086.561427][T17740] Process accounting resumed [ 1086.563232][ T29] audit: type=1400 audit(1732252957.037:1019): avc: denied { name_bind } for pid=17739 comm="syz.5.3135" src=64512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1086.646752][T17741] Process accounting resumed [ 1086.683081][T11776] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1086.762703][T11776] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected [ 1086.798445][T11776] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1086.889887][T11776] usb 3-1: USB disconnect, device number 83 [ 1086.910660][ T5836] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1086.916935][T11776] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected [ 1087.096759][ T5836] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1087.297431][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.319898][ T5836] usb 5-1: Product: syz [ 1087.335349][ T5836] usb 5-1: Manufacturer: syz [ 1087.350385][ T5836] usb 5-1: SerialNumber: syz [ 1087.398374][ T5836] usb 5-1: config 0 descriptor?? [ 1087.412777][ T5836] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1087.655361][T17744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.666263][T17744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.684098][ T5836] sonixb 5-1:0.0: Error reading register 00: -71 [ 1087.685740][ T5836] usb 5-1: USB disconnect, device number 73 [ 1088.076520][T17762] syz.5.3140: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1088.096186][T17762] CPU: 0 UID: 0 PID: 17762 Comm: syz.5.3140 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1088.106652][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1088.116737][T17762] Call Trace: [ 1088.120041][T17762] [ 1088.122996][T17762] dump_stack_lvl+0x16c/0x1f0 [ 1088.127719][T17762] warn_alloc+0x24d/0x3a0 [ 1088.132084][T17762] ? __pfx_warn_alloc+0x10/0x10 [ 1088.136966][T17762] ? __pfx_stack_trace_save+0x10/0x10 [ 1088.142372][T17762] ? kasan_save_stack+0x42/0x60 [ 1088.147241][T17762] ? kasan_save_stack+0x33/0x60 [ 1088.152113][T17762] ? kasan_save_track+0x14/0x30 [ 1088.156992][T17762] ? __kasan_kmalloc+0xaa/0xb0 [ 1088.161750][T17762] ? xskq_create+0x52/0x1d0 [ 1088.166254][T17762] ? do_sock_setsockopt+0x222/0x480 [ 1088.171462][T17762] ? __sys_setsockopt+0x1a0/0x230 [ 1088.176473][T17762] ? __x64_sys_setsockopt+0xbd/0x160 [ 1088.181754][T17762] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1088.187734][T17762] ? xskq_create+0xfb/0x1d0 [ 1088.192228][T17762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1088.198548][T17762] ? xskq_create+0xfb/0x1d0 [ 1088.203043][T17762] vmalloc_user_noprof+0x6b/0x90 [ 1088.207978][T17762] ? xskq_create+0xfb/0x1d0 [ 1088.212471][T17762] xskq_create+0xfb/0x1d0 [ 1088.216791][T17762] xsk_setsockopt+0x757/0xa10 [ 1088.221452][T17762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1088.226651][T17762] ? selinux_socket_setsockopt+0x6a/0x80 [ 1088.232275][T17762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1088.237457][T17762] do_sock_setsockopt+0x222/0x480 [ 1088.242485][T17762] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1088.248033][T17762] ? lock_acquire+0x2f/0xb0 [ 1088.252549][T17762] __sys_setsockopt+0x1a0/0x230 [ 1088.257412][T17762] __x64_sys_setsockopt+0xbd/0x160 [ 1088.262510][T17762] ? do_syscall_64+0x91/0x250 [ 1088.267175][T17762] ? lockdep_hardirqs_on+0x7c/0x110 [ 1088.272361][T17762] do_syscall_64+0xcd/0x250 [ 1088.276854][T17762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.282734][T17762] RIP: 0033:0x7fd3c017e819 [ 1088.287131][T17762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.306821][T17762] RSP: 002b:00007fd3c0efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1088.315218][T17762] RAX: ffffffffffffffda RBX: 00007fd3c0336080 RCX: 00007fd3c017e819 [ 1088.323174][T17762] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1088.331130][T17762] RBP: 00007fd3c01f175e R08: 0000000000000020 R09: 0000000000000000 [ 1088.339099][T17762] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1088.347079][T17762] R13: 0000000000000001 R14: 00007fd3c0336080 R15: 00007ffcd93b8e08 [ 1088.355071][T17762] [ 1088.377846][T17762] Mem-Info: [ 1088.381249][T17762] active_anon:6531 inactive_anon:0 isolated_anon:0 [ 1088.381249][T17762] active_file:20806 inactive_file:39361 isolated_file:0 [ 1088.381249][T17762] unevictable:768 dirty:333 writeback:0 [ 1088.381249][T17762] slab_reclaimable:12715 slab_unreclaimable:110033 [ 1088.381249][T17762] mapped:30567 shmem:4273 pagetables:704 [ 1088.381249][T17762] sec_pagetables:0 bounce:0 [ 1088.381249][T17762] kernel_misc_reclaimable:0 [ 1088.381249][T17762] free:1288588 free_pcp:310 free_cma:0 [ 1088.426800][T17762] Node 0 active_anon:26124kB inactive_anon:0kB active_file:83224kB inactive_file:157368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122268kB dirty:1328kB writeback:0kB shmem:15556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2816kB sec_pagetables:0kB all_unreclaimable? no [ 1088.460056][T17762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1088.490539][T17762] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.517730][T17762] lowmem_reserve[]: 0 2459 2459 0 0 [ 1088.523056][T17762] Node 0 DMA32 free:1229484kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:26124kB inactive_anon:0kB active_file:83224kB inactive_file:157268kB unevictable:1536kB writepending:1328kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:1308kB local_pcp:848kB free_cma:0kB [ 1088.554347][T17762] lowmem_reserve[]: 0 0 0 0 0 [ 1088.559114][T17762] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1088.590644][T17762] lowmem_reserve[]: 0 0 0 0 0 [ 1088.595348][T17762] Node 1 Normal free:3909508kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.627742][T17762] lowmem_reserve[]: 0 0 0 0 0 [ 1088.633822][T17762] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1088.652753][T17762] Node 0 DMA32: 941*4kB (UME) 1129*8kB (UME) 574*16kB (UME) 355*32kB (UME) 217*64kB (ME) 29*128kB (UME) 26*256kB (UM) 54*512kB (UME) 44*1024kB (UME) 15*2048kB (UME) 261*4096kB (UM) = 1230076kB [ 1088.685564][T17762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1088.734213][T17762] Node 1 Normal: 199*4kB (UME) 57*8kB (UME) 48*16kB (UME) 205*32kB (UME) 106*64kB (UME) 27*128kB (UME) 16*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3909508kB [ 1088.760551][T17762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.770411][T17762] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1088.779741][T17762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.783137][T17766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1088.810894][T17762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1088.820516][T17762] 64439 total pagecache pages [ 1088.825267][T17762] 0 pages in swap cache [ 1088.829516][T17762] Free swap = 124732kB [ 1088.841967][T17762] Total swap = 124996kB [ 1088.851286][T17762] 2097051 pages RAM [ 1088.855566][T17762] 0 pages HighMem/MovableOnly [ 1088.860237][T17762] 428603 pages reserved [ 1088.870530][T17762] 0 pages cma reserved [ 1089.892979][T17774] binder: BC_ATTEMPT_ACQUIRE not supported [ 1089.898810][T17774] binder: 17771:17774 ioctl c0306201 200001c0 returned -22 [ 1090.174132][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1090.904031][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.929228][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.094288][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1091.103953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.299062][ T9] usb 5-1: config 0 descriptor?? [ 1091.368691][ T29] audit: type=1326 audit(1732252961.817:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.7.3152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f224797e819 code=0x0 [ 1091.763607][ T9] hid-steam 0003:28DE:1142.0042: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1091.830544][ T9] hid-steam 0003:28DE:1142.0042: Steam wireless receiver connected [ 1091.850556][ T9] hid-steam 0003:28DE:1142.0043: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1091.969853][ T51] usb 5-1: USB disconnect, device number 74 [ 1091.971589][T17804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1091.987996][ T51] hid-steam 0003:28DE:1142.0042: Steam wireless receiver disconnected [ 1092.085374][T17806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.138668][ T29] audit: type=1400 audit(1732252962.607:1021): avc: denied { map } for pid=17805 comm="syz.0.3154" path="socket:[68151]" dev="sockfs" ino=68151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1092.539582][T17817] bridge0: port 3(erspan0) entered blocking state [ 1092.546380][T17817] bridge0: port 3(erspan0) entered disabled state [ 1092.553957][T17817] erspan0: entered allmulticast mode [ 1092.565766][T17817] erspan0: entered promiscuous mode [ 1092.572671][T17817] bridge0: port 3(erspan0) entered blocking state [ 1092.579147][T17817] bridge0: port 3(erspan0) entered forwarding state [ 1095.296249][ T29] audit: type=1326 audit(1732252965.767:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.320838][ T29] audit: type=1326 audit(1732252965.797:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.344669][ T29] audit: type=1326 audit(1732252965.797:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.380684][ T29] audit: type=1326 audit(1732252965.797:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.435246][ T29] audit: type=1326 audit(1732252965.797:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.677138][T17848] ubifs: Unknown parameter 'nfs4' [ 1095.824206][T17850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1095.836517][ T29] audit: type=1326 audit(1732252965.797:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.863236][ T29] audit: type=1326 audit(1732252965.797:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1095.890671][ T29] audit: type=1326 audit(1732252965.797:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaddd7e819 code=0x7ffc0000 [ 1096.369414][T17859] xt_hashlimit: size too large, truncated to 1048576 [ 1096.403657][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1097.310652][T11776] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1097.467735][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.488677][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.506517][T11776] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1097.516730][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.531649][T11776] usb 3-1: config 0 descriptor?? [ 1097.590219][T17870] loop2: detected capacity change from 0 to 7 [ 1097.626276][T17870] Dev loop2: unable to read RDB block 7 [ 1097.632803][T17870] loop2: unable to read partition table [ 1097.638577][T17870] loop2: partition table beyond EOD, truncated [ 1097.648002][T17870] loop_reread_partitions: partition scan of loop2 (žč¢«) failed (rc=-5) [ 1097.727916][T17871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1097.944751][T11776] hid-steam 0003:28DE:1142.0044: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1098.191062][T11776] hid-steam 0003:28DE:1142.0044: Steam wireless receiver connected [ 1098.469486][T11776] hid-steam 0003:28DE:1142.0045: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1098.514384][T11776] usb 3-1: USB disconnect, device number 84 [ 1098.603241][T11776] hid-steam 0003:28DE:1142.0044: Steam wireless receiver disconnected [ 1099.807440][T17893] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1100.234980][T17899] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1100.568534][T17905] sctp: [Deprecated]: syz.7.3180 (pid 17905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.568534][T17905] Use struct sctp_sack_info instead [ 1101.313033][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1101.313053][ T29] audit: type=1400 audit(1732252971.277:1049): avc: denied { listen } for pid=17902 comm="syz.5.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1101.351011][T17905] uprobe: syz.7.3180:17905 failed to unregister, leaking uprobe [ 1101.600529][T11776] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1101.627184][T17914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17914 comm=syz.5.3184 [ 1101.642374][ T29] audit: type=1400 audit(1732252972.117:1050): avc: denied { bind } for pid=17913 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1101.710700][ T29] audit: type=1400 audit(1732252972.117:1051): avc: denied { ioctl } for pid=17913 comm="syz.5.3184" path="socket:[68299]" dev="sockfs" ino=68299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1101.782192][T11776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.797861][T11776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.817901][T11776] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1101.837402][T11776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.848078][T11776] usb 5-1: config 0 descriptor?? [ 1102.020567][T13440] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1102.683908][T11776] hid-steam 0003:28DE:1142.0046: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1102.820749][T11776] hid-steam 0003:28DE:1142.0046: Steam wireless receiver connected [ 1102.834196][T11776] hid-steam 0003:28DE:1142.0047: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1102.849816][T11776] usb 5-1: USB disconnect, device number 75 [ 1102.856108][T13440] usb 6-1: Using ep0 maxpacket: 8 [ 1102.862743][T13440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1102.874435][T13440] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=4b.1e [ 1102.883985][T13440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.894993][T11776] hid-steam 0003:28DE:1142.0046: Steam wireless receiver disconnected [ 1102.907623][T13440] usb 6-1: Product: syz [ 1102.911978][T13440] usb 6-1: Manufacturer: syz [ 1102.921142][T13440] usb 6-1: SerialNumber: syz [ 1102.934375][T13440] usb 6-1: config 0 descriptor?? [ 1102.943173][T13440] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 020c [ 1103.030036][T17930] xt_hashlimit: size too large, truncated to 1048576 [ 1103.207042][T14512] usb 6-1: USB disconnect, device number 43 [ 1103.747916][T17938] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1104.210188][ T29] audit: type=1400 audit(1732252974.677:1052): avc: denied { bind } for pid=17941 comm="syz.5.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1104.746489][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1105.914551][T17957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1105.924165][T17957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1106.163110][T17960] netlink: set zone limit has 4 unknown bytes [ 1106.458857][T17966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3199'. [ 1106.722350][T17975] ubifs: Unknown parameter 'nfs4' [ 1106.980929][ T5882] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1107.110498][T11776] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1107.156031][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.244507][T17977] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1107.310962][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 1107.326038][ T5882] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 1107.336690][ T5882] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 1107.390338][ T5882] usb 3-1: config 0 has no interface number 0 [ 1107.396925][ T5882] usb 3-1: config 0 has no interface number 1 [ 1107.474762][ T5882] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1107.545574][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.652605][T11776] usb 5-1: Using ep0 maxpacket: 8 [ 1107.658234][ T5882] usb 3-1: Product: syz [ 1107.680378][ T5882] usb 3-1: Manufacturer: syz [ 1107.697009][T11776] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1107.724617][ T5882] usb 3-1: SerialNumber: syz [ 1107.770538][T11776] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1107.796858][ T5882] usb 3-1: config 0 descriptor?? [ 1107.796879][T11776] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1107.796927][T11776] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1107.822349][T11776] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1107.832615][T11776] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.904117][T11776] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1107.917347][T11776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.932216][ T5882] viperboard 3-1:0.61: version 0.00 found at bus 003 address 085 [ 1107.950940][T11776] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 1107.973776][ T5882] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1107.991973][ T5882] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1108.068146][ T5882] viperboard 3-1:0.98: version 0.00 found at bus 003 address 085 [ 1108.090514][ T5882] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1108.115341][ T5882] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1108.157119][ T5882] usb 3-1: USB disconnect, device number 85 [ 1108.285034][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.320127][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.450701][T17989] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1109.831846][ T29] audit: type=1400 audit(1732252980.297:1053): avc: denied { nlmsg_write } for pid=18007 comm="syz.0.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1110.491692][T18023] fuse: Bad value for 'fd' [ 1110.670631][T17033] usb 5-1: USB disconnect, device number 76 [ 1111.204793][T18028] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1111.561380][T18035] xt_hashlimit: size too large, truncated to 1048576 [ 1114.184687][T14512] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1114.478689][ T5882] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1114.559146][T18059] lo speed is unknown, defaulting to 1000 [ 1114.565208][T18059] lo speed is unknown, defaulting to 1000 [ 1114.575179][T18059] lo speed is unknown, defaulting to 1000 [ 1114.601820][T18061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1114.618029][T18063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3223'. [ 1114.622057][T14512] usb 3-1: device descriptor read/all, error -71 [ 1114.633825][T18059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1114.655482][T18059] lo speed is unknown, defaulting to 1000 [ 1114.665069][T18059] lo speed is unknown, defaulting to 1000 [ 1114.677945][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1114.684743][T18059] lo speed is unknown, defaulting to 1000 [ 1114.694278][ T5882] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1114.704011][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.714538][ T5882] usb 6-1: config 0 descriptor?? [ 1114.719387][T18059] lo speed is unknown, defaulting to 1000 [ 1114.734784][T18059] lo speed is unknown, defaulting to 1000 [ 1114.746380][T18059] lo speed is unknown, defaulting to 1000 [ 1114.755807][T18059] lo speed is unknown, defaulting to 1000 [ 1114.815770][T18070] vlan2: entered promiscuous mode [ 1114.827498][T18070] team_slave_0: entered promiscuous mode [ 1114.833603][T18070] team_slave_1: entered promiscuous mode [ 1114.839679][T18070] team0: entered promiscuous mode [ 1114.849831][T18070] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1114.917179][T18075] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1115.010940][T14512] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1115.219121][T14512] usb 3-1: config 0 has no interfaces? [ 1115.280507][T14512] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1115.303399][T14512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.340005][T14512] usb 3-1: config 0 descriptor?? [ 1115.349122][ T5882] viewsonic 0003:2133:0018.0048: hidraw0: USB HID v0.05 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 1115.575102][T14512] usb 6-1: USB disconnect, device number 44 [ 1115.620087][ T5836] usb 3-1: USB disconnect, device number 87 [ 1115.650708][T18081] xt_hashlimit: size too large, truncated to 1048576 [ 1115.764519][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.520695][T14512] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1116.910697][T14512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.936640][T14512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.992243][T14512] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1117.101588][T14512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.278592][T14512] usb 6-1: config 0 descriptor?? [ 1117.570678][T18091] syz.0.3234: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1117.638151][T18091] CPU: 1 UID: 0 PID: 18091 Comm: syz.0.3234 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1117.648634][T18091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1117.658701][T18091] Call Trace: [ 1117.661982][T18091] [ 1117.664915][T18091] dump_stack_lvl+0x16c/0x1f0 [ 1117.669615][T18091] warn_alloc+0x24d/0x3a0 [ 1117.673954][T18091] ? __pfx_warn_alloc+0x10/0x10 [ 1117.678808][T18091] ? __pfx_stack_trace_save+0x10/0x10 [ 1117.684211][T18091] ? kasan_save_stack+0x42/0x60 [ 1117.689078][T18091] ? kasan_save_stack+0x33/0x60 [ 1117.693943][T18091] ? kasan_save_track+0x14/0x30 [ 1117.698806][T18091] ? __kasan_kmalloc+0xaa/0xb0 [ 1117.703581][T18091] ? xskq_create+0x52/0x1d0 [ 1117.708095][T18091] ? do_sock_setsockopt+0x222/0x480 [ 1117.713307][T18091] ? __sys_setsockopt+0x1a0/0x230 [ 1117.718341][T18091] ? __x64_sys_setsockopt+0xbd/0x160 [ 1117.723641][T18091] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1117.729666][T18091] ? xskq_create+0xfb/0x1d0 [ 1117.734193][T18091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1117.740553][T18091] ? xskq_create+0xfb/0x1d0 [ 1117.745068][T18091] vmalloc_user_noprof+0x6b/0x90 [ 1117.750022][T18091] ? xskq_create+0xfb/0x1d0 [ 1117.754538][T18091] xskq_create+0xfb/0x1d0 [ 1117.758880][T18091] xsk_setsockopt+0x757/0xa10 [ 1117.763565][T18091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1117.768783][T18091] ? selinux_socket_setsockopt+0x6a/0x80 [ 1117.774429][T18091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1117.779640][T18091] do_sock_setsockopt+0x222/0x480 [ 1117.784682][T18091] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1117.790243][T18091] ? lock_acquire+0x2f/0xb0 [ 1117.794770][T18091] __sys_setsockopt+0x1a0/0x230 [ 1117.799645][T18091] __x64_sys_setsockopt+0xbd/0x160 [ 1117.804765][T18091] ? do_syscall_64+0x91/0x250 [ 1117.809468][T18091] ? lockdep_hardirqs_on+0x7c/0x110 [ 1117.814683][T18091] do_syscall_64+0xcd/0x250 [ 1117.819211][T18091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.825117][T18091] RIP: 0033:0x7feaddd7e819 [ 1117.829537][T18091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.849157][T18091] RSP: 002b:00007feadeafd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1117.857579][T18091] RAX: ffffffffffffffda RBX: 00007feaddf35fa0 RCX: 00007feaddd7e819 [ 1117.865560][T18091] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 1117.873531][T18091] RBP: 00007feadddf175e R08: 0000000000000020 R09: 0000000000000000 [ 1117.881505][T18091] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1117.889479][T18091] R13: 0000000000000000 R14: 00007feaddf35fa0 R15: 00007fffdf0d0ad8 [ 1117.897472][T18091] [ 1117.900588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.964512][T14512] hid-steam 0003:28DE:1142.0049: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1118.001133][T18091] Mem-Info: [ 1118.017292][T18091] active_anon:5957 inactive_anon:0 isolated_anon:0 [ 1118.017292][T18091] active_file:20806 inactive_file:39373 isolated_file:0 [ 1118.017292][T18091] unevictable:768 dirty:256 writeback:0 [ 1118.017292][T18091] slab_reclaimable:12467 slab_unreclaimable:112185 [ 1118.017292][T18091] mapped:30197 shmem:4273 pagetables:668 [ 1118.017292][T18091] sec_pagetables:0 bounce:0 [ 1118.017292][T18091] kernel_misc_reclaimable:0 [ 1118.017292][T18091] free:1284056 free_pcp:526 free_cma:0 [ 1118.071026][T14512] hid-steam 0003:28DE:1142.0049: Steam wireless receiver connected [ 1118.131071][T18091] Node 0 active_anon:24328kB inactive_anon:0kB active_file:83224kB inactive_file:157416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120788kB dirty:1020kB writeback:0kB shmem:15556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 1118.163608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.291926][T14512] hid-steam 0003:28DE:1142.004A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1118.460137][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1118.553594][T18091] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1118.583892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.620760][T14512] usb 6-1: USB disconnect, device number 45 [ 1118.646066][T18091] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.700589][T18091] lowmem_reserve[]: 0 2459 2459 0 0 [ 1118.705877][T18091] Node 0 DMA32 free:1201780kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:28128kB inactive_anon:0kB active_file:83224kB inactive_file:157316kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:6604kB local_pcp:1856kB free_cma:0kB [ 1118.736299][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.743603][T14512] hid-steam 0003:28DE:1142.0049: Steam wireless receiver disconnected [ 1118.761002][T18091] lowmem_reserve[]: 0 0 0 0 0 [ 1118.765788][T18091] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1118.792451][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.831744][T18091] lowmem_reserve[]: 0 0 0 0 0 [ 1118.836507][T18091] Node 1 Normal free:3909540kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.865210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.876856][T18091] lowmem_reserve[]: 0 0 0 0 0 [ 1118.881799][T18091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1118.900532][T18091] Node 0 DMA32: 572*4kB (UME) 563*8kB (UME) 576*16kB (UME) 373*32kB (UME) 224*64kB (UME) 22*128kB (UME) 22*256kB (UM) 30*512kB (UME) 39*1024kB (UME) 16*2048kB (UME) 261*4096kB (UM) = 1207848kB [ 1118.929351][T18091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.941251][T18091] Node 1 Normal: 199*4kB (UME) 57*8kB (UME) 48*16kB (UME) 204*32kB (UME) 107*64kB (UME) 27*128kB (UME) 16*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3909540kB [ 1118.960385][T18091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.971161][T18091] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1118.980873][T18091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.990645][T18091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1119.000002][T18091] 64452 total pagecache pages [ 1119.014740][T18091] 0 pages in swap cache [ 1119.018917][T18091] Free swap = 124732kB [ 1119.189359][T18091] Total swap = 124996kB [ 1119.200732][T18091] 2097051 pages RAM [ 1119.213761][T18091] 0 pages HighMem/MovableOnly [ 1119.234739][T18091] 428603 pages reserved [ 1119.250062][T18091] 0 pages cma reserved [ 1122.243552][T18151] xt_hashlimit: size too large, truncated to 1048576 [ 1122.830792][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 1123.798258][ T29] audit: type=1400 audit(1732252994.257:1054): avc: denied { append } for pid=18166 comm="syz.2.3254" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1123.953746][ T29] audit: type=1400 audit(1732252994.307:1055): avc: denied { open } for pid=18166 comm="syz.2.3254" path="/65/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1123.976458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.118064][T18175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1124.655493][T18188] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1124.714081][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1127.450582][T17033] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1127.803473][T17033] usb 3-1: Using ep0 maxpacket: 32 [ 1128.787354][T17033] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1128.901305][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3270'. [ 1129.001391][T17033] usb 3-1: config 0 has no interface number 0 [ 1129.190550][T17033] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1129.230661][T17033] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1129.526022][ T29] audit: type=1400 audit(1732252999.987:1056): avc: denied { ioctl } for pid=18246 comm="syz.5.3274" path="socket:[70057]" dev="sockfs" ino=70057 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1129.771739][T17033] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1129.781574][T17033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.789699][T17033] usb 3-1: Product: syz [ 1129.794130][T17033] usb 3-1: Manufacturer: syz [ 1129.799945][T17033] usb 3-1: SerialNumber: syz [ 1129.832360][T17033] usb 3-1: config 0 descriptor?? [ 1129.838071][T17033] usb 3-1: can't set config #0, error -71 [ 1129.852070][T17033] usb 3-1: USB disconnect, device number 88 [ 1130.289736][T11776] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1130.942891][T18268] ubifs: Unknown parameter 'nfs4' [ 1131.122924][T11776] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1131.132177][T11776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.142837][T11776] usb 6-1: Product: syz [ 1131.147021][T11776] usb 6-1: Manufacturer: syz [ 1131.151816][T11776] usb 6-1: SerialNumber: syz [ 1131.158311][T11776] usb 6-1: config 0 descriptor?? [ 1131.746862][T11776] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1132.176534][T11776] usb 6-1: USB disconnect, device number 46 [ 1132.216631][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1132.625096][T18297] xt_hashlimit: size too large, truncated to 1048576 [ 1133.700785][T14512] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1133.898493][T14512] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1133.908124][T14512] usb 3-1: not running at top speed; connect to a high speed hub [ 1133.940780][T14512] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 1133.962781][T14512] usb 3-1: config 9 has no interface number 0 [ 1133.968887][T14512] usb 3-1: config 9 interface 27 has no altsetting 0 [ 1134.026069][T14512] usb 3-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 1134.040695][T14512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.049078][T14512] usb 3-1: Product: syz [ 1134.083870][T14512] usb 3-1: Manufacturer: syz [ 1134.090603][T14512] usb 3-1: SerialNumber: syz [ 1134.094328][T18316] ubifs: Unknown parameter 'nfs4' [ 1134.512659][T14512] hub 3-1:9.27: bad descriptor, ignoring hub [ 1134.524957][T14512] hub 3-1:9.27: probe with driver hub failed with error -5 [ 1134.594592][T14512] kaweth 3-1:9.27: Firmware present in device. [ 1134.601409][T14512] kaweth 3-1:9.27: Error reading configuration (-71), no net device created [ 1134.611295][T14512] kaweth 3-1:9.27: probe with driver kaweth failed with error -5 [ 1134.654663][T14512] usb 3-1: USB disconnect, device number 89 [ 1134.887060][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'. [ 1138.848433][T18373] lo speed is unknown, defaulting to 1000 [ 1140.220688][T14512] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1140.390581][T14512] usb 5-1: Using ep0 maxpacket: 8 [ 1140.414990][T14512] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1140.472224][T14512] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1140.552669][T14512] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1140.586374][T14512] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1140.596550][T14512] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.609604][T14512] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1140.618723][T14512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.183657][T14512] usb 5-1: usb_control_msg returned -32 [ 1141.189756][T14512] usbtmc 5-1:16.0: can't read capabilities [ 1141.637242][T18416] ubifs: Unknown parameter 'nfs4' [ 1142.322100][T18429] sctp: [Deprecated]: syz.7.3320 (pid 18429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1142.322100][T18429] Use struct sctp_sack_info instead [ 1142.348221][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1142.998669][ T5882] usb 5-1: USB disconnect, device number 77 [ 1145.167956][T18467] ubifs: Unknown parameter 'nfs4' [ 1145.964138][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3335'. [ 1146.100713][ T5882] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1146.165648][T18483] xt_hashlimit: size too large, truncated to 1048576 [ 1146.282352][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.355444][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1146.423389][ T5882] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1146.526481][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.577612][ T5882] usb 5-1: config 0 descriptor?? [ 1146.593355][ T5882] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1146.610357][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 1146.633402][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1146.642435][ T5882] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1146.659766][ T5882] usb 5-1: media controller created [ 1146.666126][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.719552][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 1146.743571][ T5882] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1146.747884][T18488] geneve2: entered promiscuous mode [ 1146.780812][T18488] geneve2: entered allmulticast mode [ 1146.781479][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 1146.840511][T18472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.856746][T18488] batman_adv: batadv0: Adding interface: geneve2 [ 1146.863968][T18472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.871361][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 1147.033409][ T5882] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1147.055114][T18488] batman_adv: batadv0: Interface activated: geneve2 [ 1147.223185][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 1147.259441][ T5882] dvb-usb: error while querying for an remote control event. [ 1147.471695][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 1147.537564][ T5882] dvb-usb: error while querying for an remote control event. [ 1147.747115][ T5882] usb 5-1: USB disconnect, device number 78 [ 1147.762305][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1148.321175][T18508] Cannot find del_set index 3 as target [ 1148.403676][T18508] Bluetooth: MGMT ver 1.23 [ 1148.441985][ T29] audit: type=1400 audit(1732253018.917:1057): avc: denied { execute } for pid=18510 comm="syz.7.3345" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1149.674419][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1149.892471][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.220538][T18485] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1150.229242][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.274829][T15754] Bluetooth: hci0: command 0x0405 tx timeout [ 1150.314896][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.324742][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.342894][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.367340][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.380496][T18485] usb 5-1: device descriptor read/64, error -71 [ 1150.382847][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.404920][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.413015][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.422621][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.437185][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.446698][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.454768][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.476771][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.494989][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.505224][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.513127][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.524660][T18522] netlink: 'syz.4.3347': attribute type 16 has an invalid length. [ 1150.532571][T18522] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1150.620618][T18485] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1150.670949][T18528] syz.5.3348: attempt to access beyond end of device [ 1150.670949][T18528] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1150.700865][T18528] efs: cannot read volume header [ 1150.770606][T18485] usb 5-1: device descriptor read/64, error -71 [ 1150.888695][T18485] usb usb5-port1: attempt power cycle [ 1151.250501][T18485] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1151.281051][T18485] usb 5-1: device descriptor read/8, error -71 [ 1151.550579][T18485] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1151.572283][T18485] usb 5-1: device descriptor read/8, error -71 [ 1151.801012][T18485] usb usb5-port1: unable to enumerate USB device [ 1154.099469][T18555] syz.7.3359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1154.126859][T18555] CPU: 0 UID: 0 PID: 18555 Comm: syz.7.3359 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1154.137326][T18555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1154.147398][T18555] Call Trace: [ 1154.150686][T18555] [ 1154.153627][T18555] dump_stack_lvl+0x16c/0x1f0 [ 1154.158339][T18555] warn_alloc+0x24d/0x3a0 [ 1154.162684][T18555] ? __pfx_warn_alloc+0x10/0x10 [ 1154.167547][T18555] ? __pfx_stack_trace_save+0x10/0x10 [ 1154.172946][T18555] ? kasan_save_stack+0x42/0x60 [ 1154.177784][T18555] ? kasan_save_stack+0x33/0x60 [ 1154.182628][T18555] ? kasan_save_track+0x14/0x30 [ 1154.187491][T18555] ? __kasan_kmalloc+0xaa/0xb0 [ 1154.192259][T18555] ? xskq_create+0x52/0x1d0 [ 1154.196761][T18555] ? do_sock_setsockopt+0x222/0x480 [ 1154.201961][T18555] ? __sys_setsockopt+0x1a0/0x230 [ 1154.206984][T18555] ? __x64_sys_setsockopt+0xbd/0x160 [ 1154.212288][T18555] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1154.218281][T18555] ? xskq_create+0xfb/0x1d0 [ 1154.222791][T18555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1154.229133][T18555] ? xskq_create+0xfb/0x1d0 [ 1154.233637][T18555] vmalloc_user_noprof+0x6b/0x90 [ 1154.238578][T18555] ? xskq_create+0xfb/0x1d0 [ 1154.243078][T18555] xskq_create+0xfb/0x1d0 [ 1154.247407][T18555] xsk_setsockopt+0x757/0xa10 [ 1154.252080][T18555] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1154.257283][T18555] ? selinux_socket_setsockopt+0x6a/0x80 [ 1154.262918][T18555] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1154.268112][T18555] do_sock_setsockopt+0x222/0x480 [ 1154.273141][T18555] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1154.278690][T18555] ? lock_acquire+0x2f/0xb0 [ 1154.283206][T18555] __sys_setsockopt+0x1a0/0x230 [ 1154.288065][T18555] __x64_sys_setsockopt+0xbd/0x160 [ 1154.293175][T18555] ? do_syscall_64+0x91/0x250 [ 1154.297856][T18555] ? lockdep_hardirqs_on+0x7c/0x110 [ 1154.303141][T18555] do_syscall_64+0xcd/0x250 [ 1154.307647][T18555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.313541][T18555] RIP: 0033:0x7f224797e819 [ 1154.317948][T18555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.337552][T18555] RSP: 002b:00007f2248807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1154.345966][T18555] RAX: ffffffffffffffda RBX: 00007f2247b35fa0 RCX: 00007f224797e819 [ 1154.353933][T18555] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1154.361906][T18555] RBP: 00007f22479f175e R08: 0000000000000020 R09: 0000000000000000 [ 1154.369875][T18555] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1154.377841][T18555] R13: 0000000000000000 R14: 00007f2247b35fa0 R15: 00007fffd21c9028 [ 1154.385818][T18555] [ 1154.388894][ T5882] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1154.396858][T18555] Mem-Info: [ 1154.400057][T18555] active_anon:11766 inactive_anon:0 isolated_anon:0 [ 1154.400057][T18555] active_file:20806 inactive_file:39387 isolated_file:0 [ 1154.400057][T18555] unevictable:768 dirty:215 writeback:0 [ 1154.400057][T18555] slab_reclaimable:12337 slab_unreclaimable:111600 [ 1154.400057][T18555] mapped:33078 shmem:10013 pagetables:701 [ 1154.400057][T18555] sec_pagetables:0 bounce:0 [ 1154.400057][T18555] kernel_misc_reclaimable:0 [ 1154.400057][T18555] free:1282320 free_pcp:225 free_cma:0 [ 1154.495923][T18555] Node 0 active_anon:47064kB inactive_anon:0kB active_file:83224kB inactive_file:157472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132312kB dirty:860kB writeback:0kB shmem:38516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no [ 1155.235846][T18555] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1155.266171][T18555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.298041][ T5882] usb 6-1: device descriptor read/64, error -71 [ 1155.338976][T18555] lowmem_reserve[]: 0 2459 2459 0 0 [ 1155.461585][T18555] Node 0 DMA32 free:1200000kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:47164kB inactive_anon:0kB active_file:83224kB inactive_file:157372kB unevictable:1536kB writepending:1012kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:5124kB local_pcp:4884kB free_cma:0kB [ 1155.509124][T18580] xt_hashlimit: size too large, truncated to 1048576 [ 1155.510570][T18555] lowmem_reserve[]: 0 0 0 0 0 [ 1155.521920][T18555] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1155.612177][T18581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.210577][T18555] lowmem_reserve[]: 0 0 0 0 0 [ 1156.432872][T18555] Node 1 Normal free:3909540kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1156.484592][ T5882] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1156.527050][T18555] lowmem_reserve[]: 0 0 0 0 0 [ 1156.547232][T18555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1156.565813][T18555] Node 0 DMA32: 9*4kB (ME) 48*8kB (UE) 168*16kB (ME) 213*32kB (UME) 311*64kB (UME) 58*128kB (UME) 36*256kB (UM) 36*512kB (UME) 28*1024kB (UME) 16*2048kB (UME) 261*4096kB (UM) = 1195396kB [ 1156.586349][T18555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1156.599189][T18555] Node 1 Normal: 199*4kB (UME) 57*8kB (UME) 48*16kB (UME) 204*32kB (UME) 107*64kB (UME) 27*128kB (UME) 16*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3909540kB [ 1156.620541][T18555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1156.632411][T18555] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1156.642049][T18555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1156.652463][T18555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1156.662013][T18555] 67358 total pagecache pages [ 1156.666821][T18555] 0 pages in swap cache [ 1156.671080][T18555] Free swap = 124732kB [ 1156.675322][T18555] Total swap = 124996kB [ 1156.679809][T18555] 2097051 pages RAM [ 1156.683761][T18555] 0 pages HighMem/MovableOnly [ 1156.688531][T18555] 428603 pages reserved [ 1156.692998][T18555] 0 pages cma reserved [ 1157.010166][T18591] __nla_validate_parse: 23 callbacks suppressed [ 1157.010186][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1158.750509][ T5882] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1158.993167][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.026902][ T5882] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1159.254546][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.383957][ T5882] usb 6-1: config 0 descriptor?? [ 1160.030196][ T5882] viewsonic 0003:2133:0018.004B: hidraw0: USB HID v0.05 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 1160.510598][ T29] audit: type=1800 audit(1732253030.767:1058): pid=18625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3375" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1160.986570][ T5882] usb 6-1: USB disconnect, device number 49 [ 1161.579012][T18641] tmpfs: Bad value for 'size' [ 1161.597112][T18637] can: request_module (can-proto-5) failed. [ 1161.618889][T18642] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1161.764826][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3378'. [ 1164.351338][T18687] xt_hashlimit: size too large, truncated to 1048576 [ 1165.758328][T18698] Unsupported ieee802154 address type: 0 [ 1166.018940][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1166.967207][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3399'. [ 1168.202909][T18730] bond_slave_0: entered promiscuous mode [ 1168.208979][T18730] bond_slave_1: entered promiscuous mode [ 1168.215705][ T5912] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1168.270684][T18730] vlan2: entered promiscuous mode [ 1168.290507][T18730] bond0: entered promiscuous mode [ 1168.410842][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 1168.418054][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 14267, setting to 1024 [ 1168.479195][ T5912] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1168.867220][ T5912] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1169.031882][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.060737][ T5912] usb 6-1: Product: syz [ 1169.067144][ T5912] usb 6-1: Manufacturer: syz [ 1169.110168][ T5912] usb 6-1: SerialNumber: syz [ 1169.554252][ T5912] usb 6-1: config 0 descriptor?? [ 1169.564723][T18727] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1169.690509][ T29] audit: type=1400 audit(1732253040.137:1059): avc: denied { setattr } for pid=18742 comm="syz.0.3407" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1169.722246][ T29] audit: type=1400 audit(1732253040.147:1060): avc: denied { mounton } for pid=18742 comm="syz.0.3407" path="/70/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1169.723443][ T5912] kobil_sct 6-1:0.0: required endpoints missing [ 1171.768930][T18768] overlayfs: failed to resolve './file0': -2 [ 1171.771743][T11776] usb 6-1: USB disconnect, device number 50 [ 1171.889031][T18769] bridge0: port 3(erspan0) entered blocking state [ 1171.895832][T18769] bridge0: port 3(erspan0) entered disabled state [ 1171.902922][T18769] erspan0: entered allmulticast mode [ 1171.909189][T18769] erspan0: entered promiscuous mode [ 1171.915021][T18769] bridge0: port 3(erspan0) entered blocking state [ 1171.921530][T18769] bridge0: port 3(erspan0) entered forwarding state [ 1171.971283][T18781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1172.261036][T18778] overlayfs: failed to resolve './file1': -2 [ 1172.268046][T18784] overlayfs: failed to resolve './file1': -2 [ 1172.476173][T18796] validate_nla: 23 callbacks suppressed [ 1172.476191][T18796] netlink: 'syz.2.3420': attribute type 21 has an invalid length. [ 1172.490246][T18796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3420'. [ 1172.765802][T18803] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1172.778253][T18803] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1173.957310][T18822] overlayfs: failed to resolve './file0': -2 [ 1174.758664][ T29] audit: type=1400 audit(1732253045.227:1061): avc: denied { create } for pid=18826 comm="syz.4.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1174.798448][ T29] audit: type=1400 audit(1732253045.267:1062): avc: denied { read } for pid=18826 comm="syz.4.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1175.950651][ T5912] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1176.361995][ T5912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 1176.373344][ T5912] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1176.383639][ T5912] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1176.399146][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.570860][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1176.586428][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1176.618009][T18857] lo speed is unknown, defaulting to 1000 [ 1176.642321][T18860] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1176.655524][ T5912] usb 6-1: SerialNumber: syz [ 1176.670233][T18827] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1176.807074][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1176.816908][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1176.825340][ T9] usb 3-1: config 0 has no interface number 0 [ 1176.831749][ T9] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1176.842075][ T9] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1176.857404][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1176.866621][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.875741][ T9] usb 3-1: Product: syz [ 1176.881995][T18827] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1176.895550][ T9] usb 3-1: Manufacturer: syz [ 1176.900186][ T9] usb 3-1: SerialNumber: syz [ 1176.920668][ T9] usb 3-1: config 0 descriptor?? [ 1176.935181][T18855] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1176.954198][T18855] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1176.978697][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.202174][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.273503][ T9] usb 3-1: USB disconnect, device number 90 [ 1177.311978][ T5912] cdc_ether 6-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.5-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 1177.499445][T18869] FAULT_INJECTION: forcing a failure. [ 1177.499445][T18869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.517023][T18869] CPU: 0 UID: 0 PID: 18869 Comm: syz.0.3441 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1177.527447][T18869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1177.537498][T18869] Call Trace: [ 1177.540757][T18869] [ 1177.543666][T18869] dump_stack_lvl+0x16c/0x1f0 [ 1177.548329][T18869] should_fail_ex+0x497/0x5b0 [ 1177.552995][T18869] _copy_from_user+0x2e/0xd0 [ 1177.557566][T18869] do_fb_ioctl+0x1a0/0x7d0 [ 1177.561965][T18869] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1177.566883][T18869] ? do_vfs_ioctl+0x513/0x1990 [ 1177.571646][T18869] ? selinux_file_ioctl+0x180/0x270 [ 1177.576828][T18869] fb_ioctl+0xe5/0x150 [ 1177.580875][T18869] ? __pfx_fb_ioctl+0x10/0x10 [ 1177.585529][T18869] __x64_sys_ioctl+0x190/0x200 [ 1177.590269][T18869] do_syscall_64+0xcd/0x250 [ 1177.594756][T18869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.600631][T18869] RIP: 0033:0x7feaddd7e819 [ 1177.605023][T18869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.624611][T18869] RSP: 002b:00007feadeafd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.633006][T18869] RAX: ffffffffffffffda RBX: 00007feaddf35fa0 RCX: 00007feaddd7e819 [ 1177.640954][T18869] RDX: 0000000020000840 RSI: 0000000000004605 RDI: 0000000000000003 [ 1177.648900][T18869] RBP: 00007feadeafd090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.656846][T18869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.664795][T18869] R13: 0000000000000000 R14: 00007feaddf35fa0 R15: 00007fffdf0d0ad8 [ 1177.672750][T18869] [ 1177.675848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.915647][T18874] overlayfs: failed to resolve './file0': -2 [ 1178.109103][T18880] ubifs: Unknown parameter 'nfs4' [ 1178.559436][T13440] usb 6-1: USB disconnect, device number 51 [ 1178.570578][T13440] cdc_ether 6-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.5-1, Mobile Broadband Network Device [ 1179.829229][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3453'. [ 1180.150526][T18915] fuse: Unknown parameter '' [ 1180.166637][T18915] xt_l2tp: v2 tid > 0xffff: 262144 [ 1180.761022][T18922] overlayfs: failed to resolve './file0': -2 [ 1182.528648][T13440] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1182.918962][ T29] audit: type=1400 audit(1732253053.017:1063): avc: denied { read } for pid=18935 comm="syz.7.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1183.071092][ T5836] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1183.201247][T13440] usb 3-1: Using ep0 maxpacket: 32 [ 1183.311982][ T5836] usb 6-1: config 0 has an invalid interface number: 226 but max is 0 [ 1183.325544][ T5836] usb 6-1: config 0 has no interface number 0 [ 1183.328888][T13440] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1183.340035][ T5836] usb 6-1: too many endpoints for config 0 interface 226 altsetting 174: 74, using maximum allowed: 30 [ 1183.346843][T13440] usb 3-1: config 0 has no interface number 0 [ 1183.357474][T13440] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1183.360696][ T5836] usb 6-1: config 0 interface 226 altsetting 174 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 1183.389597][T13440] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1183.394438][T18959] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1183.408570][ T5836] usb 6-1: config 0 interface 226 has no altsetting 0 [ 1183.424283][T13440] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1183.433435][T13440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.445564][T13440] usb 3-1: Product: syz [ 1183.449735][T13440] usb 3-1: Manufacturer: syz [ 1183.455330][ T5836] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1183.456061][T13440] usb 3-1: SerialNumber: syz [ 1183.474712][ T5836] usb 6-1: New USB device strings: Mfr=237, Product=255, SerialNumber=0 [ 1183.484365][T13440] usb 3-1: config 0 descriptor?? [ 1183.498970][T18929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1183.506412][T18929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1183.526959][ T5836] usb 6-1: Product: syz [ 1183.533097][ T5836] usb 6-1: Manufacturer: syz [ 1183.534835][T13440] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.540227][ T5836] usb 6-1: config 0 descriptor?? [ 1183.806865][ T5912] usb 3-1: USB disconnect, device number 91 [ 1183.862548][T13440] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1184.022070][T13440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.033177][T13440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.043055][T13440] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1184.052190][T13440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.061880][T13440] usb 5-1: config 0 descriptor?? [ 1184.404286][T18968] overlayfs: failed to resolve './file0': -2 [ 1184.777782][T13440] hid-steam 0003:28DE:1142.004C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1184.831931][ T5836] usb 6-1: USB disconnect, device number 52 [ 1185.041062][T13440] hid-steam 0003:28DE:1142.004C: Steam wireless receiver connected [ 1185.067560][T13440] hid-steam 0003:28DE:1142.004D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1185.143941][T13440] usb 5-1: USB disconnect, device number 83 [ 1185.505122][T13440] hid-steam 0003:28DE:1142.004C: Steam wireless receiver disconnected [ 1185.523824][T18983] ubifs: Unknown parameter 'nfs4' [ 1187.340981][T19021] overlayfs: failed to resolve './file0': -2 [ 1187.421926][T19023] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3484'. [ 1187.431880][T19023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3484'. [ 1187.744666][T19027] warn_alloc: 2 callbacks suppressed [ 1187.744686][T19027] syz.2.3486: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1187.760751][T13440] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1187.798861][T19027] CPU: 1 UID: 0 PID: 19027 Comm: syz.2.3486 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1187.809315][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1187.819362][T19027] Call Trace: [ 1187.822641][T19027] [ 1187.825579][T19027] dump_stack_lvl+0x16c/0x1f0 [ 1187.830248][T19027] warn_alloc+0x24d/0x3a0 [ 1187.834565][T19027] ? __pfx_warn_alloc+0x10/0x10 [ 1187.839398][T19027] ? __pfx_stack_trace_save+0x10/0x10 [ 1187.844760][T19027] ? kasan_save_stack+0x42/0x60 [ 1187.849598][T19027] ? kasan_save_stack+0x33/0x60 [ 1187.854437][T19027] ? kasan_save_track+0x14/0x30 [ 1187.859278][T19027] ? __kasan_kmalloc+0xaa/0xb0 [ 1187.864041][T19027] ? xskq_create+0x52/0x1d0 [ 1187.868542][T19027] ? do_sock_setsockopt+0x222/0x480 [ 1187.873746][T19027] ? __sys_setsockopt+0x1a0/0x230 [ 1187.878757][T19027] ? __x64_sys_setsockopt+0xbd/0x160 [ 1187.884040][T19027] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1187.890019][T19027] ? xskq_create+0xfb/0x1d0 [ 1187.894512][T19027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1187.900837][T19027] ? xskq_create+0xfb/0x1d0 [ 1187.905337][T19027] vmalloc_user_noprof+0x6b/0x90 [ 1187.910268][T19027] ? xskq_create+0xfb/0x1d0 [ 1187.914761][T19027] xskq_create+0xfb/0x1d0 [ 1187.919085][T19027] xsk_setsockopt+0x757/0xa10 [ 1187.923768][T19027] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1187.928964][T19027] ? selinux_socket_setsockopt+0x6a/0x80 [ 1187.934589][T19027] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1187.939773][T19027] do_sock_setsockopt+0x222/0x480 [ 1187.944788][T19027] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1187.950326][T19027] ? lock_acquire+0x2f/0xb0 [ 1187.954822][T19027] __sys_setsockopt+0x1a0/0x230 [ 1187.959666][T19027] __x64_sys_setsockopt+0xbd/0x160 [ 1187.964763][T19027] ? do_syscall_64+0x91/0x250 [ 1187.969429][T19027] ? lockdep_hardirqs_on+0x7c/0x110 [ 1187.974617][T19027] do_syscall_64+0xcd/0x250 [ 1187.979118][T19027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.984999][T19027] RIP: 0033:0x7fe50d97e819 [ 1187.989409][T19027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.009013][T19027] RSP: 002b:00007fe50e838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1188.017418][T19027] RAX: ffffffffffffffda RBX: 00007fe50db35fa0 RCX: 00007fe50d97e819 [ 1188.025372][T19027] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1188.033350][T19027] RBP: 00007fe50d9f175e R08: 0000000000000020 R09: 0000000000000000 [ 1188.041303][T19027] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1188.049254][T19027] R13: 0000000000000000 R14: 00007fe50db35fa0 R15: 00007ffd47fb0908 [ 1188.057217][T19027] [ 1188.061058][T19027] Mem-Info: [ 1188.064193][T19027] active_anon:8928 inactive_anon:0 isolated_anon:0 [ 1188.064193][T19027] active_file:20806 inactive_file:39399 isolated_file:0 [ 1188.064193][T19027] unevictable:768 dirty:280 writeback:0 [ 1188.064193][T19027] slab_reclaimable:12320 slab_unreclaimable:111625 [ 1188.064193][T19027] mapped:30192 shmem:7144 pagetables:719 [ 1188.064193][T19027] sec_pagetables:0 bounce:0 [ 1188.064193][T19027] kernel_misc_reclaimable:0 [ 1188.064193][T19027] free:1282130 free_pcp:1358 free_cma:0 [ 1188.225192][T13440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1188.267293][T19027] Node 0 active_anon:35812kB inactive_anon:0kB active_file:83224kB inactive_file:157520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120768kB dirty:920kB writeback:0kB shmem:27040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 1188.302016][T13440] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1188.311958][T13440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.320669][T19027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1188.353443][T13440] usb 6-1: config 0 descriptor?? [ 1188.365228][T19027] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.399876][T19027] lowmem_reserve[]: 0 2459 2459 0 0 [ 1188.406158][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1188.420074][T19027] Node 0 DMA32 free:1206924kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35712kB inactive_anon:0kB active_file:83224kB inactive_file:157420kB unevictable:1536kB writepending:920kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:1836kB local_pcp:1064kB free_cma:0kB [ 1188.464498][T19027] lowmem_reserve[]: 0 0 0 0 0 [ 1188.482264][T19027] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1188.581355][T19027] lowmem_reserve[]: 0 0 0 0 0 [ 1188.586181][T19027] Node 1 Normal free:3909572kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.618152][T19027] lowmem_reserve[]: 0 0 0 0 0 [ 1188.623677][T19027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1188.638240][T19027] Node 0 DMA32: 1192*4kB (UME) 930*8kB (UME) 387*16kB (UME) 187*32kB (UME) 350*64kB (UME) 40*128kB (UME) 29*256kB (UM) 38*512kB (UME) 28*1024kB (UME) 15*2048kB (UME) 261*4096kB (UM) = 1207232kB [ 1189.013951][T13440] viewsonic 0003:2133:0018.004E: hidraw0: USB HID v0.05 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 1189.030623][T19027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1189.291579][T13440] usb 6-1: USB disconnect, device number 53 [ 1189.308455][T19027] Node 1 Normal: 199*4kB (UME) 57*8kB (UME) 48*16kB (UME) 203*32kB (UME) 106*64kB (UME) 26*128kB (UME) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3909572kB [ 1189.395775][T19027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.419942][T19027] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1189.442926][T19027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.464191][T19027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1189.530537][T15754] Bluetooth: hci0: command 0x0405 tx timeout [ 1189.550679][T19027] 67349 total pagecache pages [ 1189.555469][T19027] 0 pages in swap cache [ 1189.583145][T19027] Free swap = 124732kB [ 1189.587390][T19027] Total swap = 124996kB [ 1189.925415][T19027] 2097051 pages RAM [ 1189.929233][T19027] 0 pages HighMem/MovableOnly [ 1189.933991][T19027] 428603 pages reserved [ 1189.938153][T19027] 0 pages cma reserved [ 1190.631619][T19067] ubifs: Unknown parameter 'nfs4' [ 1191.392454][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3499'. [ 1193.120863][T15754] Bluetooth: hci0: command 0x0405 tx timeout [ 1194.311626][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3509'. [ 1196.495662][T19132] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1197.213964][ T29] audit: type=1400 audit(1732253067.687:1064): avc: denied { ioctl } for pid=19138 comm="syz.7.3519" path="socket:[74160]" dev="sockfs" ino=74160 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1197.290531][ T5836] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1198.297854][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 1198.585623][ T5836] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1198.607945][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1198.641803][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1198.658819][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1198.681552][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.213739][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1200.222915][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.370929][ T5836] usb 6-1: can't set config #16, error -71 [ 1200.378180][ T5836] usb 6-1: USB disconnect, device number 54 [ 1204.627389][T19180] uprobe: syz.2.3529:19180 failed to unregister, leaking uprobe [ 1205.931837][T19206] No source specified [ 1207.628570][T19222] syz.2.3538: attempt to access beyond end of device [ 1207.628570][T19222] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1207.641738][T19222] efs: cannot read volume header [ 1208.663424][T19229] ubifs: Unknown parameter 'nfs4' [ 1208.825773][T19232] x_tables: duplicate underflow at hook 2 [ 1209.130601][T11802] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1209.235077][T19238] netlink: 212400 bytes leftover after parsing attributes in process `syz.5.3543'. [ 1209.244827][T19238] netlink: zone id is out of range [ 1209.249941][T19238] netlink: zone id is out of range [ 1209.258722][T19238] netlink: zone id is out of range [ 1209.263917][T19238] netlink: zone id is out of range [ 1209.269097][T19238] netlink: zone id is out of range [ 1209.274861][T19238] netlink: get zone limit has 8 unknown bytes [ 1209.290076][ T29] audit: type=1400 audit(1732253079.757:1065): avc: denied { append } for pid=19236 comm="syz.5.3543" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1209.315190][T11802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.327112][T11802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.337697][T11802] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1209.348572][T11802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.359028][T11802] usb 5-1: config 0 descriptor?? [ 1209.966311][T11802] hid-steam 0003:28DE:1142.004F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1210.030513][T11802] hid-steam 0003:28DE:1142.004F: Steam wireless receiver connected [ 1210.042422][T11802] hid-steam 0003:28DE:1142.0050: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1210.625495][T11776] usb 5-1: USB disconnect, device number 84 [ 1210.633057][T11776] hid-steam 0003:28DE:1142.004F: Steam wireless receiver disconnected [ 1211.233326][T19266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.248348][T19266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.030647][T13440] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1212.212108][T13440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1212.246910][T13440] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1212.277163][T13440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.295584][T11802] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1212.306781][T13440] usb 6-1: config 0 descriptor?? [ 1212.451976][T11802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.463200][T11802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.473143][T11802] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1212.482264][T11802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.492190][T11802] usb 3-1: config 0 descriptor?? [ 1212.777324][T13440] viewsonic 0003:2133:0018.0051: hidraw0: USB HID v0.05 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 1213.005244][T11802] hid-steam 0003:28DE:1142.0052: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1213.330848][ T5882] usb 6-1: USB disconnect, device number 55 [ 1213.367035][T11802] hid-steam 0003:28DE:1142.0052: Steam wireless receiver connected [ 1213.389048][T11802] hid-steam 0003:28DE:1142.0053: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1213.419517][T11802] usb 3-1: USB disconnect, device number 92 [ 1213.586568][T11802] hid-steam 0003:28DE:1142.0052: Steam wireless receiver disconnected [ 1214.443496][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.455009][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.520602][T11776] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1214.839240][T19313] libceph: resolve '0' (ret=-3): failed [ 1214.851324][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.901938][T19314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.931617][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.958571][T19314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.980614][T11776] usb 5-1: Using ep0 maxpacket: 32 [ 1214.990709][T11776] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 1214.998971][T11776] usb 5-1: config 0 has no interface number 0 [ 1215.012124][T11776] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1215.080478][T11776] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1215.137751][T11776] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1215.146893][T11776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.154972][T11776] usb 5-1: Product: syz [ 1215.159173][T11776] usb 5-1: Manufacturer: syz [ 1215.164423][T11776] usb 5-1: SerialNumber: syz [ 1215.173061][T11776] usb 5-1: config 0 descriptor?? [ 1215.178727][T19303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.186547][T19303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.197062][T11776] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.720943][T11776] usb 5-1: USB disconnect, device number 85 [ 1218.051657][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1218.060651][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1219.114681][T19360] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1219.129736][T19360] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1220.620476][ T5836] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1220.770820][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 1220.777139][ T5836] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1220.790602][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1220.810457][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1220.822008][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1220.832149][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.846078][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1220.855225][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.050501][ T5912] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1221.074535][T19370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.083332][T19370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.092215][ T5836] usb 6-1: usb_control_msg returned -32 [ 1221.097950][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 1221.221892][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.236004][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.245962][ T5912] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1221.255623][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.265942][ T5912] usb 3-1: config 0 descriptor?? [ 1221.689128][ T5912] hid-steam 0003:28DE:1142.0054: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1221.750658][ T5912] hid-steam 0003:28DE:1142.0054: Steam wireless receiver connected [ 1221.764673][ T5912] hid-steam 0003:28DE:1142.0055: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1222.237511][ T5836] usb 3-1: USB disconnect, device number 93 [ 1222.259031][ T5836] hid-steam 0003:28DE:1142.0054: Steam wireless receiver disconnected [ 1222.818864][T13440] usb 6-1: USB disconnect, device number 56 [ 1222.917435][T19403] x_tables: duplicate underflow at hook 2 [ 1224.519592][T19429] syz.5.3595: attempt to access beyond end of device [ 1224.519592][T19429] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1224.532743][T19429] efs: cannot read volume header [ 1225.000577][ T5882] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1225.025650][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3598'. [ 1225.164087][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 1225.177417][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.206349][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.529975][ T5882] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1225.571716][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.627266][ T5882] usb 5-1: config 0 descriptor?? [ 1225.793928][T19439] IPVS: length: 121 != 8 [ 1226.058508][ T5882] savu 0003:1E7D:2D5A.0056: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1226.612698][T13440] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1226.820437][T13440] usb 3-1: Using ep0 maxpacket: 16 [ 1226.835040][T13440] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1226.857502][T13440] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1226.869797][T13440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.887452][T13440] usb 3-1: config 0 descriptor?? [ 1226.896637][T13440] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 1227.257204][ T29] audit: type=1400 audit(1732253097.727:1066): avc: denied { append } for pid=19444 comm="syz.2.3602" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1227.340294][ T5191] bcm5974 3-1:0.0: could not read from device [ 1227.521117][T13440] usb 3-1: USB disconnect, device number 94 [ 1227.530960][ T5836] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 1227.546949][ T5191] bcm5974 3-1:0.0: could not read from device [ 1227.993368][ T5191] bcm5974 3-1:0.0: could not read from device [ 1228.778728][T19476] syz.7.3606: attempt to access beyond end of device [ 1228.778728][T19476] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1228.791512][T19476] efs: cannot read volume header [ 1228.802378][T18485] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1228.860601][ T5836] usb 5-1: device descriptor read/64, error -71 [ 1228.992363][T18485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.021487][T18485] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.088900][T18485] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1229.142469][ T5836] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 1229.165034][T18485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.199011][ T5836] usb 5-1: device reset changed ep0 maxpacket size! [ 1229.266790][ T5882] usb 5-1: USB disconnect, device number 86 [ 1229.353194][T18485] usb 3-1: config 0 descriptor?? [ 1229.614481][ T5882] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1229.720709][T19489] sctp: [Deprecated]: syz.0.3611 (pid 19489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1229.720709][T19489] Use struct sctp_sack_info instead [ 1230.656401][T18485] hid-steam 0003:28DE:1142.0057: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1231.076689][T18485] hid-steam 0003:28DE:1142.0057: Steam wireless receiver connected [ 1231.105278][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.182347][T19494] ubifs: Unknown parameter 'nfs4' [ 1231.182574][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.470745][ T5882] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1231.482322][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.570671][T18485] hid-steam 0003:28DE:1142.0058: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1231.601752][ T5882] usb 5-1: config 0 descriptor?? [ 1231.620158][T18485] usb 3-1: USB disconnect, device number 95 [ 1231.666397][T18485] hid-steam 0003:28DE:1142.0057: Steam wireless receiver disconnected [ 1231.710179][ T5882] usb 5-1: can't set config #0, error -71 [ 1231.719156][ T5882] usb 5-1: USB disconnect, device number 87 [ 1232.433829][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3617'. [ 1232.660679][T19509] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3618'. [ 1232.669734][T19509] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3618'. [ 1233.079752][T19520] input: syz0 as /devices/virtual/input/input75 [ 1233.469040][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1233.650885][T11776] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1233.836562][T11776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.479432][T11776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.588161][T11776] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1234.601048][T11776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.662170][T11776] usb 6-1: config 0 descriptor?? [ 1235.329893][T13440] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1235.501393][T11776] hid-steam 0003:28DE:1142.0059: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1235.615269][T11776] hid-steam 0003:28DE:1142.0059: Steam wireless receiver connected [ 1235.627582][T11776] hid-steam 0003:28DE:1142.005A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1235.642472][T13440] usb 5-1: Using ep0 maxpacket: 8 [ 1235.651054][T11776] usb 6-1: USB disconnect, device number 57 [ 1235.664332][T11776] hid-steam 0003:28DE:1142.0059: Steam wireless receiver disconnected [ 1235.674596][T13440] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1235.683139][T13440] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.693115][T13440] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1235.704106][T13440] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.704137][T13440] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.704180][T13440] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1235.704207][T13440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.925214][T19533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.948885][T19533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.030592][T19553] sctp: [Deprecated]: syz.2.3629 (pid 19553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1236.030592][T19553] Use struct sctp_sack_info instead [ 1236.311637][T13440] usb 5-1: usb_control_msg returned -32 [ 1236.318991][T13440] usbtmc 5-1:16.0: can't read capabilities [ 1236.906672][T19561] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1236.918481][T19561] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1237.782076][T19569] afs: Unknown parameter 'dyś [ 1237.782076][T19569] ' [ 1237.944361][ T5882] usb 5-1: USB disconnect, device number 88 [ 1238.059075][T19577] binfmt_misc: register: failed to install interpreter file ./file0 [ 1238.240591][T19578] sctp: [Deprecated]: syz.0.3635 (pid 19578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1238.240591][T19578] Use struct sctp_sack_info instead [ 1238.883229][T19587] syz.7.3639: attempt to access beyond end of device [ 1238.883229][T19587] nbd7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1238.897820][T19587] hfsplus: unable to find HFS+ superblock [ 1239.094727][T13440] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1239.303006][T13440] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1239.345180][T13440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.971531][T13440] usb 6-1: config 0 descriptor?? [ 1240.610523][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1240.711139][ T29] audit: type=1400 audit(1732253111.167:1067): avc: denied { recv } for pid=19581 comm="syz.4.3637" saddr=10.128.0.169 src=30006 daddr=10.128.10.5 dest=48612 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1240.736514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.499801][T19585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.620660][T19585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.908121][T19619] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46357 sclass=netlink_xfrm_socket pid=19619 comm=syz.0.3646 [ 1242.149513][T13440] usb 6-1: Cannot set autoneg [ 1242.155748][T13440] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1242.188250][T13440] usb 6-1: USB disconnect, device number 58 [ 1242.215087][ T29] audit: type=1800 audit(1732253112.687:1068): pid=19624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3649" name="bus" dev="overlay" ino=922 res=0 errno=0 [ 1242.460867][T11776] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1242.727581][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1242.880799][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.390577][T11776] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1243.399651][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.412243][T11776] usb 3-1: config 0 descriptor?? [ 1243.578105][T19633] syz.5.3652: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1243.609557][T19633] CPU: 0 UID: 0 PID: 19633 Comm: syz.5.3652 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1243.620008][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1243.630071][T19633] Call Trace: [ 1243.633356][T19633] [ 1243.636291][T19633] dump_stack_lvl+0x16c/0x1f0 [ 1243.640990][T19633] warn_alloc+0x24d/0x3a0 [ 1243.645333][T19633] ? __pfx_warn_alloc+0x10/0x10 [ 1243.650190][T19633] ? __pfx_stack_trace_save+0x10/0x10 [ 1243.655588][T19633] ? kasan_save_stack+0x42/0x60 [ 1243.660455][T19633] ? kasan_save_stack+0x33/0x60 [ 1243.665332][T19633] ? kasan_save_track+0x14/0x30 [ 1243.670197][T19633] ? __kasan_kmalloc+0xaa/0xb0 [ 1243.674977][T19633] ? xskq_create+0x52/0x1d0 [ 1243.679490][T19633] ? do_sock_setsockopt+0x222/0x480 [ 1243.684710][T19633] ? __sys_setsockopt+0x1a0/0x230 [ 1243.689749][T19633] ? __x64_sys_setsockopt+0xbd/0x160 [ 1243.695052][T19633] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1243.701064][T19633] ? xskq_create+0xfb/0x1d0 [ 1243.705591][T19633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1243.711946][T19633] ? xskq_create+0xfb/0x1d0 [ 1243.716459][T19633] vmalloc_user_noprof+0x6b/0x90 [ 1243.721413][T19633] ? xskq_create+0xfb/0x1d0 [ 1243.725929][T19633] xskq_create+0xfb/0x1d0 [ 1243.730269][T19633] xsk_setsockopt+0x757/0xa10 [ 1243.734956][T19633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1243.740183][T19633] ? selinux_socket_setsockopt+0x6a/0x80 [ 1243.745831][T19633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1243.751043][T19633] do_sock_setsockopt+0x222/0x480 [ 1243.756086][T19633] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1243.761660][T19633] ? lock_acquire+0x2f/0xb0 [ 1243.766191][T19633] __sys_setsockopt+0x1a0/0x230 [ 1243.771061][T19633] __x64_sys_setsockopt+0xbd/0x160 [ 1243.776184][T19633] ? do_syscall_64+0x91/0x250 [ 1243.780884][T19633] ? lockdep_hardirqs_on+0x7c/0x110 [ 1243.786101][T19633] do_syscall_64+0xcd/0x250 [ 1243.790661][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.796593][T19633] RIP: 0033:0x7fd3c017e819 [ 1243.801009][T19633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.820627][T19633] RSP: 002b:00007fd3c0f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1243.829042][T19633] RAX: ffffffffffffffda RBX: 00007fd3c0335fa0 RCX: 00007fd3c017e819 [ 1243.837011][T19633] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1243.844980][T19633] RBP: 00007fd3c01f175e R08: 0000000000000020 R09: 0000000000000000 [ 1243.852947][T19633] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1243.860949][T19633] R13: 0000000000000000 R14: 00007fd3c0335fa0 R15: 00007ffcd93b8e08 [ 1243.868931][T19633] [ 1243.907805][T19633] Mem-Info: [ 1243.915808][T19633] active_anon:23475 inactive_anon:0 isolated_anon:0 [ 1243.915808][T19633] active_file:20806 inactive_file:39421 isolated_file:0 [ 1243.915808][T19633] unevictable:768 dirty:375 writeback:0 [ 1243.915808][T19633] slab_reclaimable:12306 slab_unreclaimable:111591 [ 1243.915808][T19633] mapped:33075 shmem:21744 pagetables:709 [ 1243.915808][T19633] sec_pagetables:0 bounce:0 [ 1243.915808][T19633] kernel_misc_reclaimable:0 [ 1243.915808][T19633] free:1264357 free_pcp:3975 free_cma:0 [ 1243.969795][T19633] Node 0 active_anon:84708kB inactive_anon:0kB active_file:83224kB inactive_file:157568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120824kB dirty:1504kB writeback:0kB shmem:76332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11224kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 1244.012939][T19633] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1244.087685][T19633] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.166127][T19624] autofs: Unknown parameter 'workdir' [ 1244.182001][T19633] lowmem_reserve[]: 0 2459 2459 0 0 [ 1244.199835][T19633] Node 0 DMA32 free:1187096kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35408kB inactive_anon:0kB active_file:83224kB inactive_file:157468kB unevictable:1536kB writepending:1504kB present:3129332kB managed:2547160kB mlocked:0kB bounce:0kB free_pcp:23692kB local_pcp:5612kB free_cma:0kB [ 1244.203221][T11776] hid-steam 0003:28DE:1102.005B: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1244.246009][T19633] lowmem_reserve[]: 0 0 0 0 0 [ 1244.246060][T19633] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1244.285298][T19633] lowmem_reserve[]: 0 0 0 0 0 [ 1244.285349][T19633] Node 1 Normal free:3889008kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:116kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12288kB local_pcp:6144kB free_cma:0kB [ 1244.285413][T19633] lowmem_reserve[]: 0 0 0 0 0 [ 1244.285458][T19633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1244.285603][T19633] Node 0 DMA32: 736*4kB (UME) 907*8kB (UME) 514*16kB (UME) 218*32kB (UME) 202*64kB (UME) 49*128kB (UME) 32*256kB (UM) 38*512kB (UME) 18*1024kB (UME) 13*2048kB (UME) 261*4096kB (UM) = 1186360kB [ 1244.285802][T19633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1244.285932][T19633] Node 1 Normal: 201*4kB (UME) 58*8kB (UME) 47*16kB (UE) 204*32kB (UME) 105*64kB (UME) 26*128kB (UME) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 939*4096kB (M) = 3889060kB [ 1244.286130][T19633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1244.286150][T19633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1244.286168][T19633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1244.286187][T19633] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1244.286205][T19633] 67519 total pagecache pages [ 1244.286215][T19633] 0 pages in swap cache [ 1244.286224][T19633] Free swap = 124732kB [ 1244.286233][T19633] Total swap = 124996kB [ 1244.286243][T19633] 2097051 pages RAM [ 1244.286251][T19633] 0 pages HighMem/MovableOnly [ 1244.286260][T19633] 428603 pages reserved [ 1244.286268][T19633] 0 pages cma reserved [ 1244.441678][T11776] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.441759][T11776] hid-steam 0003:28DE:1102.005B: Steam Controller 'XXXXXXXXXX' connected [ 1244.442185][T11776] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.442204][T11776] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.443756][T11776] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.005B/input/input76 [ 1244.452786][T11776] hid-steam 0003:28DE:1102.005C: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1244.468004][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.468070][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.487011][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.487031][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493345][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493364][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493537][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493555][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493866][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.493921][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494184][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494199][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494397][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494413][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494636][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.494653][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1244.525333][T19644] [ 1244.525341][T19644] ====================================================== [ 1244.525349][T19644] WARNING: possible circular locking dependency detected [ 1244.525358][T19644] 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 Not tainted [ 1244.525372][T19644] ------------------------------------------------------ [ 1244.525380][T19644] syz.5.3655/19644 is trying to acquire lock: [ 1244.525391][T19644] ffff88805a3342c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x24/0x450 [ 1244.525457][T19644] [ 1244.525457][T19644] but task is already holding lock: [ 1244.525464][T19644] ffff888064191e20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x25/0x170 [ 1244.525518][T19644] [ 1244.525518][T19644] which lock already depends on the new lock. [ 1244.525518][T19644] [ 1244.525525][T19644] [ 1244.525525][T19644] the existing dependency chain (in reverse order) is: [ 1244.525532][T19644] [ 1244.525532][T19644] -> #1 (&hdev->ll_open_lock){+.+.}-{4:4}: [ 1244.525569][T19644] __mutex_lock+0x19b/0xa60 [ 1244.525600][T19644] hid_hw_open+0x25/0x170 [ 1244.525630][T19644] input_open_device+0x1c9/0x320 [ 1244.525651][T19644] kbd_connect+0x103/0x160 [ 1244.525679][T19644] input_attach_handler.isra.0+0x181/0x260 [ 1244.525704][T19644] input_register_device+0xa84/0x1110 [ 1244.525728][T19644] hidinput_connect+0x1da5/0x2ba0 [ 1244.525751][T19644] hid_connect+0x1393/0x1890 [ 1244.525771][T19644] hid_hw_start+0xaa/0x140 [ 1244.525791][T19644] hid_device_probe+0x6ed/0x850 [ 1244.525810][T19644] really_probe+0x23e/0xa90 [ 1244.525835][T19644] __driver_probe_device+0x1de/0x440 [ 1244.525861][T19644] driver_probe_device+0x4c/0x1b0 [ 1244.525886][T19644] __device_attach_driver+0x1df/0x310 [ 1244.525912][T19644] bus_for_each_drv+0x157/0x1e0 [ 1244.525933][T19644] __device_attach+0x1e8/0x4b0 [ 1244.525958][T19644] bus_probe_device+0x17f/0x1c0 [ 1244.525980][T19644] device_add+0x114b/0x1a70 [ 1244.526004][T19644] hid_add_device+0x374/0xa60 [ 1244.526019][T19644] usbhid_probe+0xd32/0x1400 [ 1244.526041][T19644] usb_probe_interface+0x309/0x9d0 [ 1244.979103][T19644] really_probe+0x23e/0xa90 [ 1244.979133][T19644] __driver_probe_device+0x1de/0x440 [ 1244.979156][T19644] driver_probe_device+0x4c/0x1b0 [ 1244.979179][T19644] __device_attach_driver+0x1df/0x310 [ 1244.979201][T19644] bus_for_each_drv+0x157/0x1e0 [ 1244.979219][T19644] __device_attach+0x1e8/0x4b0 [ 1244.979241][T19644] bus_probe_device+0x17f/0x1c0 [ 1244.979260][T19644] device_add+0x114b/0x1a70 [ 1244.979284][T19644] usb_set_configuration+0x10cb/0x1c50 [ 1244.979303][T19644] usb_generic_driver_probe+0xb1/0x110 [ 1244.979328][T19644] usb_probe_device+0xec/0x3e0 [ 1244.979347][T19644] really_probe+0x23e/0xa90 [ 1244.979367][T19644] __driver_probe_device+0x1de/0x440 [ 1244.979389][T19644] driver_probe_device+0x4c/0x1b0 [ 1244.979411][T19644] __device_attach_driver+0x1df/0x310 [ 1244.979434][T19644] bus_for_each_drv+0x157/0x1e0 [ 1244.979451][T19644] __device_attach+0x1e8/0x4b0 [ 1244.979473][T19644] bus_probe_device+0x17f/0x1c0 [ 1244.979492][T19644] device_add+0x114b/0x1a70 [ 1244.979517][T19644] usb_new_device+0xd90/0x1a10 [ 1244.979533][T19644] hub_event+0x2d9a/0x4e10 [ 1244.979550][T19644] process_one_work+0x9c5/0x1ba0 [ 1244.979569][T19644] worker_thread+0x6c8/0xf00 [ 1244.979586][T19644] kthread+0x2c1/0x3a0 [ 1244.979607][T19644] ret_from_fork+0x45/0x80 [ 1244.979625][T19644] ret_from_fork_asm+0x1a/0x30 [ 1244.979650][T19644] [ 1244.979650][T19644] -> #0 (&dev->mutex#2){+.+.}-{4:4}: [ 1244.979681][T19644] __lock_acquire+0x249e/0x3c40 [ 1244.979699][T19644] lock_acquire.part.0+0x11b/0x380 [ 1244.979718][T19644] __mutex_lock+0x19b/0xa60 [ 1244.979742][T19644] __input_unregister_device+0x24/0x450 [ 1244.979766][T19644] input_unregister_device+0xb9/0x100 [ 1244.979789][T19644] steam_input_unregister+0x10c/0x2c0 [ 1244.979814][T19644] steam_client_ll_open+0xc9/0x100 [ 1244.979837][T19644] hid_hw_open+0xe2/0x170 [ 1244.979866][T19644] hidraw_open+0x274/0x7e0 [ 1244.979888][T19644] chrdev_open+0x237/0x6a0 [ 1244.979912][T19644] do_dentry_open+0x6ca/0x1530 [ 1244.979934][T19644] vfs_open+0x82/0x3f0 [ 1244.979958][T19644] path_openat+0x1e6a/0x2d60 [ 1244.979979][T19644] do_filp_open+0x20c/0x470 [ 1244.980000][T19644] do_sys_openat2+0x17a/0x1e0 [ 1244.980016][T19644] __x64_sys_openat+0x175/0x210 [ 1244.980032][T19644] do_syscall_64+0xcd/0x250 [ 1244.980056][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.980081][T19644] [ 1244.980081][T19644] other info that might help us debug this: [ 1244.980081][T19644] [ 1244.980086][T19644] Possible unsafe locking scenario: [ 1244.980086][T19644] [ 1244.980091][T19644] CPU0 CPU1 [ 1244.980097][T19644] ---- ---- [ 1244.980102][T19644] lock(&hdev->ll_open_lock); [ 1244.980115][T19644] lock(&dev->mutex#2); [ 1244.980132][T19644] lock(&hdev->ll_open_lock); [ 1244.980144][T19644] lock(&dev->mutex#2); [ 1244.980160][T19644] [ 1244.980160][T19644] *** DEADLOCK *** [ 1244.980160][T19644] [ 1244.980164][T19644] 2 locks held by syz.5.3655/19644: [ 1244.980176][T19644] #0: ffffffff8fc46030 (minors_rwsem){+.+.}-{4:4}, at: hidraw_open+0xa6/0x7e0 [ 1244.980224][T19644] #1: ffff888064191e20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x25/0x170 [ 1244.980273][T19644] [ 1244.980273][T19644] stack backtrace: [ 1244.980280][T19644] CPU: 0 UID: 0 PID: 19644 Comm: syz.5.3655 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1244.980301][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1244.980313][T19644] Call Trace: [ 1244.980319][T19644] [ 1244.980328][T19644] dump_stack_lvl+0x116/0x1f0 [ 1244.980354][T19644] print_circular_bug+0x419/0x5d0 [ 1244.980375][T19644] check_noncircular+0x31a/0x400 [ 1244.980404][T19644] ? __pfx_check_noncircular+0x10/0x10 [ 1244.980424][T19644] ? finish_task_switch.isra.0+0x212/0xcc0 [ 1244.980446][T19644] ? lockdep_lock+0xc6/0x200 [ 1244.980471][T19644] ? __pfx_lockdep_lock+0x10/0x10 [ 1244.980498][T19644] __lock_acquire+0x249e/0x3c40 [ 1244.980521][T19644] ? __pfx___lock_acquire+0x10/0x10 [ 1244.980541][T19644] ? find_held_lock+0x2d/0x110 [ 1244.980566][T19644] lock_acquire.part.0+0x11b/0x380 [ 1244.980586][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980612][T19644] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1244.980632][T19644] ? rcu_is_watching+0x12/0xc0 [ 1244.980656][T19644] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.980680][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980705][T19644] ? lock_acquire+0x2f/0xb0 [ 1244.980723][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980748][T19644] __mutex_lock+0x19b/0xa60 [ 1244.980772][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980798][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980822][T19644] ? __pfx___might_resched+0x10/0x10 [ 1244.980844][T19644] ? __pfx___mutex_lock+0x10/0x10 [ 1244.980874][T19644] ? synchronize_rcu_expedited+0x424/0x450 [ 1244.980897][T19644] ? __pfx_lock_release+0x10/0x10 [ 1244.980917][T19644] ? __input_unregister_device+0x24/0x450 [ 1244.980941][T19644] __input_unregister_device+0x24/0x450 [ 1244.980967][T19644] input_unregister_device+0xb9/0x100 [ 1244.980991][T19644] steam_input_unregister+0x10c/0x2c0 [ 1244.981018][T19644] steam_client_ll_open+0xc9/0x100 [ 1244.981043][T19644] hid_hw_open+0xe2/0x170 [ 1244.981070][T19644] hidraw_open+0x274/0x7e0 [ 1244.981095][T19644] ? __pfx_hidraw_open+0x10/0x10 [ 1244.981119][T19644] chrdev_open+0x237/0x6a0 [ 1244.981143][T19644] ? __pfx_chrdev_open+0x10/0x10 [ 1244.981169][T19644] ? security_file_open+0x62a/0x9d0 [ 1244.981196][T19644] do_dentry_open+0x6ca/0x1530 [ 1244.981219][T19644] ? __pfx_chrdev_open+0x10/0x10 [ 1244.981243][T19644] ? inode_permission+0xdd/0x5f0 [ 1244.981262][T19644] vfs_open+0x82/0x3f0 [ 1244.981288][T19644] ? may_open+0x1f2/0x400 [ 1244.981307][T19644] path_openat+0x1e6a/0x2d60 [ 1244.981334][T19644] ? __pfx_path_openat+0x10/0x10 [ 1244.981358][T19644] ? __pfx___lock_acquire+0x10/0x10 [ 1244.981379][T19644] do_filp_open+0x20c/0x470 [ 1244.981402][T19644] ? __pfx_do_filp_open+0x10/0x10 [ 1244.981424][T19644] ? find_held_lock+0x2d/0x110 [ 1244.981455][T19644] ? alloc_fd+0x41f/0x760 [ 1244.981481][T19644] do_sys_openat2+0x17a/0x1e0 [ 1244.981499][T19644] ? __pfx_do_sys_openat2+0x10/0x10 [ 1244.981517][T19644] ? do_user_addr_fault+0xe50/0x13f0 [ 1244.981537][T19644] ? __pfx_lock_release+0x10/0x10 [ 1244.981555][T19644] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.981580][T19644] __x64_sys_openat+0x175/0x210 [ 1244.981598][T19644] ? __pfx___x64_sys_openat+0x10/0x10 [ 1244.981618][T19644] ? do_user_addr_fault+0x83d/0x13f0 [ 1244.981638][T19644] do_syscall_64+0xcd/0x250 [ 1244.981663][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.981688][T19644] RIP: 0033:0x7fd3c017d1b0 [ 1244.981703][T19644] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1244.981721][T19644] RSP: 002b:00007fd3c0f1eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1244.981739][T19644] RAX: ffffffffffffffda RBX: 0000000000004180 RCX: 00007fd3c017d1b0 [ 1244.981753][T19644] RDX: 0000000000004180 RSI: 00007fd3c0f1ec10 RDI: 00000000ffffff9c [ 1244.981766][T19644] RBP: 00007fd3c0f1ec10 R08: 0000000000000000 R09: 0023776172646968 [ 1244.981779][T19644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1244.981791][T19644] R13: 0000000000000000 R14: 00007fd3c0335fa0 R15: 00007ffcd93b8e08 [ 1244.981810][T19644] [ 1245.172799][T11776] usb 3-1: USB disconnect, device number 96 [ 1245.389756][T19644] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.389779][T19644] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.390485][T19644] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.005B/input/input77 [ 1245.391755][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.391773][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.391912][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.391927][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.392205][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.392221][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.396723][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.396740][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.396897][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.396913][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397087][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397102][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397254][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397270][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397435][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.397450][ T5191] hid-steam 0003:28DE:1102.005B: No HID_FEATURE_REPORT submitted - nothing to read [ 1245.443585][T11776] hid-steam 0003:28DE:1102.005B: Steam Controller 'XXXXXXXXXX' disconnected [ 1249.420903][ T29] audit: type=1400 audit(1732253119.897:1069): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=48296 daddr=10.128.10.5 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1