last executing test programs: 10m55.225351155s ago: executing program 0 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10152, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_open_dev$sndpcmp(0x0, 0xee, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7a, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324da7002fcdbdf2508b30400"], 0x14}}, 0x4004000) 10m53.196483757s ago: executing program 0 (id=102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10152, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000280)={"06528e9c6b2f5b2b00", 0x0, 0x0, {0x0, 0x11}, {0x200, 0x10}, 0xce50, [0x400000002, 0x200, 0xfffffffeffffffff, 0x4, 0x5, 0x5, 0x80000000008, 0x5, 0x8000000000000001, 0x4fff1, 0xa, 0x1000, 0x2, 0x40000007, 0x4, 0x4]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xee, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7a, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324da7002fcdbdf2508b30400"], 0x14}}, 0x4004000) 10m53.020922263s ago: executing program 4 (id=103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcgss_need_reencode\x00', 0xffffffffffffffff, 0x0, 0x5a0d}, 0x55) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20000000) syz_open_dev$dri(0x0, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) 10m51.429921367s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'ovf\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa00000000000008004500001c0000000000119078000000000000000000004e2100089078"], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x5) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0xf1f8, 0xe}, 'syz1\x00', 0x22}) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x800, 0xfffffffffffffffa}, 0x0) 10m50.825348956s ago: executing program 4 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000001000005010040"]) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, '\x00y'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000006940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000006840)={0x20, 0x1, 0x10, "e6905d92f449f14270dfca28d29a90f8"}, 0x0}) r4 = socket$kcm(0x29, 0x5, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/188, 0xbc) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x20000007) 10m49.601063222s ago: executing program 0 (id=111): syz_emit_ethernet(0x36, &(0x7f0000019340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000007300fe800000000000000000000000000000fe8000000000000000000000000000aa440ed8843b88f567d0fd6d67d502e3710e6e1c60b62a35757aed3201c23da1d35baf0f52c95d74c00d347f3a3a6d7568648a2b5e67749ab66887c3076aaa589988f619efd6123673e5820232e40101d83530040b49b2d784b24e5d135eed447171296ec62db1"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000380)=0x28c0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0xd79, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x1, 0x3, 0x100000001, 0x0, 0x7, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x0, 0xdffffffe, 0x1000000000000, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 10m48.301643399s ago: executing program 0 (id=116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10152, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000280)={"06528e9c6b2f5b2b00", 0x0, 0x0, {0x0, 0x11}, {0x200, 0x10}, 0xce50, [0x400000002, 0x200, 0xfffffffeffffffff, 0x4, 0x5, 0x5, 0x80000000008, 0x5, 0x8000000000000001, 0x4fff1, 0xa, 0x1000, 0x2, 0x40000007, 0x4, 0x4]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xee, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="84", 0xffdf}], 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7a, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324da7002fcdbdf2508b30400"], 0x14}}, 0x4004000) 10m46.724288695s ago: executing program 4 (id=120): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688", 0x10) (fail_nth: 1) 10m45.72862811s ago: executing program 0 (id=121): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000004c0)={0x356, 0x140, 0x320, 0x1000, 0x766f, 0x3, 0x1, 0x0, {0x27a2, 0xffffffff, 0x1}, {}, {0x8959, 0x4, 0x1}, {0x0, 0xf, 0x1}, 0x2, 0xc1, 0x3def, 0x5, 0x0, 0x5, 0x3, 0x6, 0x1, 0x101, 0x3, 0x2, 0x4, 0x0, 0x1, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) recvfrom$inet(r1, &(0x7f0000001780)=""/4096, 0x1000, 0x42, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m44.849381243s ago: executing program 4 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x3, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00, 0x2, 0x189}, &(0x7f0000000440), &(0x7f00000004c0)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x800, @remote}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4000000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r6 = dup(r4) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r6, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xfff}, @timestamp, @timestamp, @mss={0x2, 0x1}, @mss, @sack_perm], 0x8) sendto$inet(r3, &(0x7f0000000200)='\t', 0x1, 0x4000000, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000)="d9", 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805"], 0x80}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) sendto$inet(r3, &(0x7f00000004c0)="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", 0x121, 0x805, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 10m43.187195803s ago: executing program 4 (id=127): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x83, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x5}]}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc}) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x12, &(0x7f0000000440)=@framed={{}, [@tail_call, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x9, 0xa, 0x9, 0x37, 0x4}, @map_fd={0x18, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000901ff8100000003400003000000000300040001000000", 0x24) socket$inet6(0xa, 0x3, 0x8000000003c) r9 = syz_open_procfs(0x0, 0x0) preadv(r9, &(0x7f0000004380)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7, 0x16) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000640)={0x20, r6, 0x0, 0x0, &(0x7f0000000680)}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/18, 0x12}], 0x1) close_range(r0, r0, 0x0) 10m42.741993015s ago: executing program 4 (id=128): syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) 10m30.075895643s ago: executing program 32 (id=121): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000004c0)={0x356, 0x140, 0x320, 0x1000, 0x766f, 0x3, 0x1, 0x0, {0x27a2, 0xffffffff, 0x1}, {}, {0x8959, 0x4, 0x1}, {0x0, 0xf, 0x1}, 0x2, 0xc1, 0x3def, 0x5, 0x0, 0x5, 0x3, 0x6, 0x1, 0x101, 0x3, 0x2, 0x4, 0x0, 0x1, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) recvfrom$inet(r1, &(0x7f0000001780)=""/4096, 0x1000, 0x42, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m27.587207013s ago: executing program 33 (id=128): syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) 9m51.494544185s ago: executing program 6 (id=235): r0 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x4000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000380)={@hyper}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9m50.204884706s ago: executing program 6 (id=237): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x60060000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x404c054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4, 0x2}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getnexthop={0x20, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 9m49.265450539s ago: executing program 6 (id=242): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='configfs\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) syz_usb_connect(0x1, 0x2d, &(0x7f00000002c0)=ANY=[], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000060000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00', 0x500}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x450, 0x8080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x80000) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x4, 0x12) fstat(0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xd662, 0x0) getdents(r4, 0x0, 0x22) 9m47.516012075s ago: executing program 3 (id=245): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) ioperm(0x4, 0x9fe6, 0xfffffffffffffff7) r1 = io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1}) r2 = dup2(r1, r1) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000003c0)={0x281, 0x3}) 9m46.13581664s ago: executing program 3 (id=248): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = dup(0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x410, &(0x7f0000000700)=ANY=[@ANYBLOB="0000004e800000"]) 9m46.061114349s ago: executing program 6 (id=249): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x155883) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x4000, 0x2000}) accept4(r0, &(0x7f00000003c0)=@hci, &(0x7f0000000080)=0x80, 0x800) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioperm(0x2, 0x83, 0x1b) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000040)={0x8, @vbi={0x724a, 0x8, 0xefbe, 0x32435750, [0x4, 0x8], [0x1, 0xb], 0x108}}) fchown(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2) 9m45.429613599s ago: executing program 6 (id=251): bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0xe22, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0x4020565a, &(0x7f0000000040)={0x8, 0x980902, 0x792401ec7132fc34, 0xa6e6, 0x0, 0x0, 0x1000000f, 0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x24}}, 0x884) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @data}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x6, @private2, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) syz_emit_ethernet(0xd2, &(0x7f0000000980)={@local, @dev, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x1e, 0x4, 0x1, 0x2, 0xc0, 0x67, 0x0, 0x44, 0x11, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x3, 0x60}, @rr={0x7, 0xb, 0xab, [@local, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xc, [{@loopback, 0x1}, {@multicast2, 0x7fff}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb0d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x62b}]}, @generic={0x83, 0x6, "2a9af31a"}, @noop]}}, {0x4e21, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "32ff4a1d79726b29b6c50241a8f1038cc71e382009b398cd", "7821f3254144e22ce09e9db2eea54b72dcb371552d21c9d8ab72562ccfe3c258"}}}}}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000440), 0x4001) setsockopt$inet6_udp_int(r0, 0x11, 0x3, &(0x7f0000000240)=0x6, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8b) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a300000000005000100070100004c0008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000eaff00100c00078008000a400000ffff10000780060014"], 0x74}}, 0x40800) r8 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r8, r9, r9}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004000000511e6ff406007da6482fcba507358b7a750600800a0000040502"], 0x528}}, 0xc000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 9m43.741367355s ago: executing program 6 (id=253): r0 = syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r6, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf9ce}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002a40)={0x1, @pix_mp={0x3, 0x401, 0x35314142, 0x3, 0x0, [{0xff7e, 0x1}, {0x1, 0x40}, {0xb, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x86c}, {0x206, 0x9fa}], 0x8, 0x8, 0x1, 0x1, 0x3}}) 9m42.142439546s ago: executing program 3 (id=256): r0 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x4000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000380)={@hyper}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9m41.033608344s ago: executing program 3 (id=258): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) ioperm(0x4, 0x9fe6, 0xfffffffffffffff7) r1 = io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1}) r2 = dup2(r1, r1) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0), 0x900}, 0x20) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000003c0)={0x281, 0x3}) 9m38.066705774s ago: executing program 3 (id=264): bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0xe22, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0x4020565a, &(0x7f0000000040)={0x8, 0x980902, 0x792401ec7132fc34, 0xa6e6, 0x0, 0x0, 0x1000000f, 0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x24}}, 0x884) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @data}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x6, @private2, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) syz_emit_ethernet(0xd2, &(0x7f0000000980)={@local, @dev, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x1e, 0x4, 0x1, 0x2, 0xc0, 0x67, 0x0, 0x44, 0x11, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x3, 0x60}, @rr={0x7, 0xb, 0xab, [@local, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xc, [{@loopback, 0x1}, {@multicast2, 0x7fff}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb0d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x62b}]}, @generic={0x83, 0x6, "2a9af31a"}, @noop]}}, {0x4e21, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "32ff4a1d79726b29b6c50241a8f1038cc71e382009b398cd", "7821f3254144e22ce09e9db2eea54b72dcb371552d21c9d8ab72562ccfe3c258"}}}}}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000440), 0x4001) setsockopt$inet6_udp_int(r0, 0x11, 0x3, &(0x7f0000000240)=0x6, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8b) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a300000000005000100070100004c0008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000eaff00100c00078008000a400000ffff10000780060014"], 0x74}}, 0x40800) r8 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r8, r9, r9}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004000000511e6ff406007da6482fcba507358b7a750600800a0000040502"], 0x528}}, 0xc000) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x5) 9m36.492334666s ago: executing program 3 (id=267): r0 = syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r6, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf9ce}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002a40)={0x1, @pix_mp={0x3, 0x401, 0x35314142, 0x3, 0x0, [{0xff7e, 0x1}, {0x1, 0x40}, {0xb, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x86c}, {0x206, 0x9fa}], 0x8, 0x8, 0x1, 0x1, 0x3}}) 9m27.954723015s ago: executing program 34 (id=253): r0 = syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r6, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf9ce}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002a40)={0x1, @pix_mp={0x3, 0x401, 0x35314142, 0x3, 0x0, [{0xff7e, 0x1}, {0x1, 0x40}, {0xb, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x86c}, {0x206, 0x9fa}], 0x8, 0x8, 0x1, 0x1, 0x3}}) 9m21.229014531s ago: executing program 35 (id=267): r0 = syz_open_dev$vim2m(&(0x7f0000002a00), 0x7, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0xf, 0x0) timer_create(0x3, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$tipc(r6, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf9ce}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002a40)={0x1, @pix_mp={0x3, 0x401, 0x35314142, 0x3, 0x0, [{0xff7e, 0x1}, {0x1, 0x40}, {0xb, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x86c}, {0x206, 0x9fa}], 0x8, 0x8, 0x1, 0x1, 0x3}}) 8m34.882756186s ago: executing program 1 (id=393): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000440)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x8, 0xfffffffffffffff4, 0x8}, @jmp={0x5, 0x0, 0x2, 0xd, 0x3, 0x40, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96a1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r5, 0x11, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'bridge_slave_1\x00', 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x301000, 0x0) connect(r3, &(0x7f00000004c0)=@qipcrtr={0x2a, 0x2, 0xffffc002}, 0x80) connect(0xffffffffffffffff, &(0x7f00000002c0)=@rc={0x1f, @none, 0x8}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r8, 0x42, 0x0, 0x10fff9) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) pipe(&(0x7f00000000c0)) 8m31.732775261s ago: executing program 1 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2b56}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x208}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x494}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b2}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84841}, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffffffffffeaa, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x1, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/110, 0x6e}], 0x5, &(0x7f0000000ec0), 0x2f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @alu={0x7, 0x0, 0x5, 0xb, 0x9, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000840)='GPL\x00', 0x3, 0x7a, &(0x7f0000000880)=""/122, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xf, 0x1, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r3}, &(0x7f0000000740), &(0x7f0000000a80)=r4}, 0x20) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 8m30.873427184s ago: executing program 1 (id=402): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0xab01ac5f8da7c4d0}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYRES16], 0x18}], 0x1, 0x0, 0x0, 0x40050}, 0x20000000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8m28.956472624s ago: executing program 1 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) (async) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000280)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0xffffff4a) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socket$kcm(0x11, 0x3, 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8000000, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xc, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x100b, 0x3, 'snmp_trap\x00', {0x9}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0xffffff00, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) r7 = accept$alg(r5, 0x0, 0x0) dup(r7) 8m28.394105456s ago: executing program 1 (id=409): socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fanotify_init(0x79, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) (fail_nth: 26) 8m27.185302585s ago: executing program 1 (id=411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009cb23f08a5040330b23a010203010902120001000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) sendto$inet6(r1, &(0x7f0000000200)="a6911510a6212b1488bd7a9e93efc74897c21866f3a162f26ef045dece63f3eea8550afe508201f746d4693967432cfeb72daf049fa035a02b024ab71144032c65869946bac9fca3bb095b8945bec59af9d2449e37a8baacb19d904e8b15b275c9bc3513d2d559b888dc0121475e71dfea4a36b8a796a59b2818e4fe0e461e744db1491f98cb4dc1e5a9aa8821f7fdc4020e", 0x92, 0x8000, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @mcast2, 0x7}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0) 8m12.024724819s ago: executing program 36 (id=411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009cb23f08a5040330b23a010203010902120001000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) sendto$inet6(r1, &(0x7f0000000200)="a6911510a6212b1488bd7a9e93efc74897c21866f3a162f26ef045dece63f3eea8550afe508201f746d4693967432cfeb72daf049fa035a02b024ab71144032c65869946bac9fca3bb095b8945bec59af9d2449e37a8baacb19d904e8b15b275c9bc3513d2d559b888dc0121475e71dfea4a36b8a796a59b2818e4fe0e461e744db1491f98cb4dc1e5a9aa8821f7fdc4020e", 0x92, 0x8000, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @mcast2, 0x7}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0) 15.604891762s ago: executing program 8 (id=1805): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, &(0x7f0000000400)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, 0x0, 0x1) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) r5 = socket$igmp6(0xa, 0x3, 0x2) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xfffffffffffffe07) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x6, 0x8, 0x21a, 0x4, 0x6, 0x400, 0xcd8, [0x4, 0x7ff]}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) socket$key(0xf, 0x3, 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r8, 0x80044dfd, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x4000) 15.213514478s ago: executing program 7 (id=1806): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="0f22a5b93a090000b8433e0000ba000000000f300f2063f30fc735977f00008fc9e093ae3e4600000f01769c660f38100e66baf80cb890e55383ef66bafc0cb8540a0000ef36670f0172750f20d835200000000f22d8", 0x56}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080), 0x0) r10 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r10, &(0x7f00000000c0), 0xfec8) r11 = fsmount(r1, 0x1, 0x85) ioctl$KVM_RUN(r11, 0xae80, 0x0) recvmmsg(r10, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b00)=""/134, 0x86}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 15.130054187s ago: executing program 9 (id=1807): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002100), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x11, 0x7efffeff00000000) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) socketpair(0xb, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = fsopen(&(0x7f00000020c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, r9, 0x0, 0x0, @void}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) 12.30759934s ago: executing program 9 (id=1809): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0xab01ac5f8da7c4d0}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYRES16], 0x18}], 0x1, 0x0, 0x0, 0x40050}, 0x20000000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12.280854838s ago: executing program 2 (id=1810): r0 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) syz_open_dev$vcsa(0x0, 0x5, 0x4000) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}}, 0x0) 10.838003752s ago: executing program 7 (id=1811): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0xc020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000800)=0x8000000) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) r7 = getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r9, 0x27e2, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) sendmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="b4", 0x1}], 0x1}, 0x4041) 10.832944187s ago: executing program 9 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x200, 0x202}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[], 0x200}, 0x1, 0x0, 0x0, 0x2000a800}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth1_to_bridge\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x2, 0xc3, "91d22e9f1b8487631fa59996f5f46ce977c05eb5b2176ae5f102283ed9ecc52a2e788ee33cf693ad6828906467da8b10bc57fe54e9a73864f063d7b718a33787ffbe605d01649318cb45b3e70ff69b2135d3c07502afe3a703b57bac2832a3d405671be5440fc9bf23671401660231a4905d85f06ff49eb5c3673201236f02b93285b0393e7a191edb3064c87140c58d8b0ad4e1d443ae0d379d978fe59b5f664fabfa917a3bd16badc0159cebf3e900733e29338125a12db589eef59ae8bcd2ee9b97"}}) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 10.796482582s ago: executing program 8 (id=1813): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x222000) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000020000008020"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r3 = syz_open_dev$loop(&(0x7f00000032c0), 0x8, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000003440)=ANY=[@ANYBLOB="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"]) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000021c0)={{}, "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"}) 10.660166264s ago: executing program 5 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x4020744f, &(0x7f00000003c0)=0xc090002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xe1}], 0x30, 0x20000080}, 0x4000) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x12f4}}, 0x240000c4) recvmmsg(r7, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000400)=""/75, 0x4b}], 0x2, 0x0, 0xfff0}, 0x9}], 0x1, 0x12122, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 10.40220495s ago: executing program 8 (id=1815): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="666405", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0xd0008}}, 0x50) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x14}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bind$netrom(r2, &(0x7f0000000340)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 9.004390435s ago: executing program 7 (id=1816): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000180), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x44}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) pipe2$9p(0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001800c38d0000000000000000020000000000000500000000100016800c0003800800", @ANYRES32, @ANYBLOB="06001500020000000600150006"], 0x44}}, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 8.45697014s ago: executing program 5 (id=1817): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x7cc}, {}, 0x0, 0xfffffffd, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.20845984s ago: executing program 2 (id=1818): r0 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x4000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000380)={@hyper}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}}, 0x0) 7.230800102s ago: executing program 9 (id=1819): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x555) semtimedop(r4, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000540)={0x1, 0x5, @start={0x0, 0x0, "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", "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"}, [0x6, 0x652, 0x40, 0xfffffffffffffff8, 0x1, 0xf7, 0x0, 0x5, 0x6000000000000, 0x6, 0x0, 0xf7, 0x8, 0x9, 0x6, 0x0, 0xf, 0x3, 0x5, 0x6, 0xfffffffffffffffe, 0x3, 0x81, 0x5, 0x2, 0x0, 0x1, 0x4, 0x101, 0x4, 0x5, 0x800, 0x7fffffffffffffff, 0x6, 0x81, 0x0, 0x2, 0x7fff, 0x2, 0x10001, 0x11e, 0x401, 0x5, 0x2, 0x6, 0x3c, 0x9f, 0x2, 0x6, 0xce1, 0x1, 0x8, 0xc3, 0xc, 0x913, 0x0, 0x8000000000000000, 0x1, 0x7ff, 0x9, 0x81, 0x7, 0x8000000000000001, 0x7ff]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r8 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47f5, 0x6021, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 7.011333517s ago: executing program 5 (id=1820): socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 5.358669074s ago: executing program 7 (id=1822): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000700)=0x13) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfbfffff7, 0x0, 0xd, 0xf7d, 0x18, "010100"}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8a55}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x53) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$setpipe(r8, 0x407, 0x100000000) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000600000004010c00080008000c4004480000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) getpid() mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) socket$can_raw(0x1d, 0x3, 0x1) 4.990520998s ago: executing program 8 (id=1823): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0xab01ac5f8da7c4d0}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYRES16], 0x18}], 0x1, 0x0, 0x0, 0x40050}, 0x20000000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.792646762s ago: executing program 2 (id=1824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='sys_enter\x00'}, 0x10) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_raw(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x3000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcff, 0x0, 0xfffffff2, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68aa, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x110]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c692401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4756, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6b, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0xffffffffffffffff, 0x6, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0xf0, 0x4}, 0x6, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x40000) 4.618339231s ago: executing program 5 (id=1825): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003200)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x222000) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000020000008020"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r3 = syz_open_dev$loop(&(0x7f00000032c0), 0x8, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000003440)=ANY=[@ANYBLOB="813f0000000000000400000000000000ff0f00000000000007000000000000000600000000000000070910de00000000c90b0000000000000000000000000000000000000000000000000000000000000800000000000000070000b90000000000010000000000000008010108000000000800000000000000000000000000000000000000000000000000000000000000ff01000000000000010000800000000008000000000000000ec9021000000000ea00000000000000000000000000000000000000000000000000000000000000010000000000000004000000000000000400000000000000b602020e0000000080000000000000000000000000000000000000000000000000000000000000004809856c2921c0ac2fb90453440992b826a528679af0482972f89b341d0000000000000004fadf15a3bd1d8afedefecfbf9e9e1982dbc104fb853d725cba9a455ceb3726316e3f964922b99b91202a8e39643bc1de9bcd54ae7028906a0a685c1da69b0845ddab"]) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000021c0)={{}, "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"}) 3.980982801s ago: executing program 8 (id=1826): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0xff000000}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r3, 0x402, 0x80000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x21000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/196, 0xc4}], 0x6, &(0x7f0000000880)=""/45, 0x2d}, 0xffff0001}, {{&(0x7f00000008c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=""/211, 0xd3}, 0x7fff}, {{&(0x7f0000000c80)=@nl, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/67, 0x43}], 0x1}}, {{&(0x7f0000000dc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e40)=""/33, 0x21}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/62, 0x3e}], 0x3, &(0x7f0000001f00)=""/101, 0x65}, 0x7fffffff}, {{&(0x7f0000001f80)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002000)=""/142, 0x8e}, {&(0x7f00000020c0)=""/35, 0x23}, {&(0x7f0000002100)=""/96, 0x60}, {&(0x7f0000002180)=""/5, 0x5}], 0x4, &(0x7f0000002200)=""/99, 0x63}}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450d001c006600000011907800000040e0cf00a00001004e204e20000890784657a17a7cce8ae80000000000000099"], 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000380)={0x7, 0x4, 0x104, 0x1200, 0x9, 0x0, 0xc}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r7}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"1322f9ffe361dd494234901b30ca00", r2}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x13b0, &(0x7f0000000100)=ANY=[]) 3.730036677s ago: executing program 7 (id=1827): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x7cc}, {}, 0x0, 0xfffffffd, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.560458752s ago: executing program 2 (id=1828): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$inet(0x2, 0xa, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}]}, 0x38}}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x8, 0xffffffffffffff9e, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.843431325s ago: executing program 7 (id=1829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000e80)="1300000032001f00320300f9002304000a04d6", 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040fc04d80500000000000109022d00010000000009040000010300010009216b0100012205000905810300040c"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001180)={0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="40e21b"], 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffc49}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) mq_open(0x0, 0x40, 0x8, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000280)=@x86={0x3, 0xc, 0x1, 0x0, 0xdc, 0x2, 0x7, 0x3, 0x8d, 0x29, 0x60, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7, 0x9, '\x00', 0x3, 0x40000000000}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.540846305s ago: executing program 5 (id=1830): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x7cc}, {}, 0x0, 0xfffffffd, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.250380441s ago: executing program 2 (id=1831): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x0, @sdr={0x31364d59, 0x876b}}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000021c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="94007d8004"], 0xb0}, 0x1, 0x0, 0x0, 0x2040000}, 0x80) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b1cc37e0"}, 0x0, 0x2, {0x0}}) write$nbd(r1, &(0x7f0000000440)={0x67446698, 0x1, 0x1, 0x4, 0x2, "f3bcdd4da1162637a9fa4be4f9e9c8b2db66afb5fbd2aef3f00b8bf3849ac78d479adc70396359d4c537eefaa93fa8b1f5fa4c6851a0067989c9459e6f2bcc108ea872905c08073a37930a9e4dad1686387eed779867edab7e31a188546978c2ea7aef46b40cf45a52764f5998d508f57359cd4e6dd765d3684a366328f660740c2b5da11ac239"}, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 972.181199ms ago: executing program 9 (id=1832): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}, 0x45ff}], 0x1, 0x20, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100080009000000010000007a38a713052f7dbee755835382f1257337a05f5396f60228ec8699175afbab450cf1fda127e45710f9ed06e130eb96ecf8cbaecaa68ef1489bf584b562ccf8456f6a4dcc557bf985d344044003dc75b1c275981ce11398154e558a34faabfe90ab5e127a66aaeb75686419cf414fa8c7cc84381010a227c30164fd02ba85eb2e701fdafb699b01f83cf22f69dfcf144226575bf6a6dff6267d3ebf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 281.787275ms ago: executing program 8 (id=1833): socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 HID v0.08 Device [syz1] on syz0 [ 652.107641][T13638] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.1555'. [ 652.116908][ T29] audit: type=1400 audit(1737187528.632:789): avc: denied { nlmsg_write } for pid=13637 comm="syz.5.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 652.153479][T13638] openvswitch: netlink: Flow key attr not present in new flow. [ 652.207170][T13634] loop6: detected capacity change from 0 to 64 [ 652.221203][ T29] audit: type=1400 audit(1737187528.642:790): avc: denied { setopt } for pid=13637 comm="syz.5.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 652.283569][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 652.306541][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.315775][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.348365][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.357577][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.371021][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.380274][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.393931][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.403185][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.414193][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.423421][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.432818][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.442051][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.453685][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.462938][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.557987][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.567212][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.591741][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.601001][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.630609][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 652.641493][ T29] audit: type=1400 audit(1737187529.171:791): avc: denied { write } for pid=13647 comm="syz.5.1559" name="raw" dev="proc" ino=4026533963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 653.775570][ T29] audit: type=1326 audit(1737187530.301:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.8.1561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f327b185d29 code=0x0 [ 655.063838][T13673] fuse: Unknown parameter 'fd0x0000000000000003' [ 655.336056][T13683] openvswitch: netlink: Flow key attr not present in new flow. [ 656.895276][T13710] FAULT_INJECTION: forcing a failure. [ 656.895276][T13710] name failslab, interval 1, probability 0, space 0, times 0 [ 656.925764][T13710] CPU: 0 UID: 0 PID: 13710 Comm: syz.7.1573 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 656.936572][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 656.946642][T13710] Call Trace: [ 656.949934][T13710] [ 656.952873][T13710] dump_stack_lvl+0x16c/0x1f0 [ 656.957572][T13710] should_fail_ex+0x497/0x5b0 [ 656.962269][T13710] should_failslab+0xc2/0x120 [ 656.966958][T13710] __kmalloc_cache_noprof+0x68/0x410 [ 656.972255][T13710] ? stack_depot_init+0x39/0x120 [ 656.977219][T13710] __hw_addr_add_ex+0x3c8/0x7c0 [ 656.982094][T13710] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 656.987480][T13710] ? __mutex_unlock_slowpath+0x101/0x690 [ 656.993138][T13710] dev_addr_init+0x162/0x250 [ 656.997750][T13710] ? __pfx_dev_addr_init+0x10/0x10 [ 657.002884][T13710] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 657.008447][T13710] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 657.014010][T13710] alloc_netdev_mqs+0x3ef/0x1510 [ 657.018974][T13710] rtnl_create_link+0xc10/0xfa0 [ 657.023853][T13710] rtnl_newlink+0x14c6/0x1d60 [ 657.028556][T13710] ? __pfx_rtnl_newlink+0x10/0x10 [ 657.033604][T13710] ? __pfx___lock_acquire+0x10/0x10 [ 657.038813][T13710] ? cred_has_capability.isra.0+0x192/0x2f0 [ 657.044722][T13710] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 657.050981][T13710] ? find_held_lock+0x2d/0x110 [ 657.055771][T13710] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 657.060901][T13710] ? __pfx_lock_release+0x10/0x10 [ 657.065942][T13710] ? trace_lock_acquire+0x14e/0x1f0 [ 657.071181][T13710] ? __pfx_rtnl_newlink+0x10/0x10 [ 657.076228][T13710] rtnetlink_rcv_msg+0x95b/0xea0 [ 657.081190][T13710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.084416][ T5959] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 657.086665][T13710] netlink_rcv_skb+0x16b/0x440 [ 657.086697][T13710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.104426][T13710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.109747][T13710] ? netlink_deliver_tap+0x1ae/0xd30 [ 657.115057][T13710] netlink_unicast+0x53c/0x7f0 [ 657.119844][T13710] ? __pfx_netlink_unicast+0x10/0x10 [ 657.126130][T13710] netlink_sendmsg+0x8b8/0xd70 [ 657.130931][T13710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.136245][T13710] ____sys_sendmsg+0xaaf/0xc90 [ 657.141026][T13710] ? copy_msghdr_from_user+0x10b/0x160 [ 657.146492][T13710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.151806][T13710] ___sys_sendmsg+0x135/0x1e0 [ 657.156499][T13710] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.161720][T13710] ? __pfx_lock_release+0x10/0x10 [ 657.166752][T13710] ? trace_lock_acquire+0x14e/0x1f0 [ 657.171976][T13710] ? __fget_files+0x206/0x3a0 [ 657.176674][T13710] __sys_sendmsg+0x16e/0x220 [ 657.181274][T13710] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.186413][T13710] do_syscall_64+0xcd/0x250 [ 657.190934][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.196848][T13710] RIP: 0033:0x7f80d3585d29 [ 657.201273][T13710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.220899][T13710] RSP: 002b:00007f80d4301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.229337][T13710] RAX: ffffffffffffffda RBX: 00007f80d3775fa0 RCX: 00007f80d3585d29 [ 657.237324][T13710] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 657.245314][T13710] RBP: 00007f80d4301090 R08: 0000000000000000 R09: 0000000000000000 [ 657.253298][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.261284][T13710] R13: 0000000000000000 R14: 00007f80d3775fa0 R15: 00007ffde79ae5d8 [ 657.269286][T13710] [ 657.298914][ T5959] usb 9-1: Using ep0 maxpacket: 32 [ 657.306388][ T5959] usb 9-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.350364][ T5959] usb 9-1: config 1 interface 0 has no altsetting 0 [ 657.381800][ T29] audit: type=1400 audit(1737187533.921:793): avc: denied { write } for pid=13717 comm="syz.2.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 657.392611][ T5959] usb 9-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 657.476325][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.489043][ T5959] usb 9-1: Product: Њ [ 657.493158][ T5959] usb 9-1: Manufacturer: ࡃ [ 657.506553][ T5959] usb 9-1: SerialNumber: ÑŠ [ 657.721018][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1571'. [ 657.774578][ T29] audit: type=1326 audit(1737187534.311:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.7.1577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80d3585d29 code=0x0 [ 657.833263][ T5959] usbhid 9-1:1.0: can't add hid device: -71 [ 657.840792][ T5959] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 657.866229][ T5959] usb 9-1: USB disconnect, device number 18 [ 657.910602][ T29] audit: type=1400 audit(1737187534.431:795): avc: denied { append } for pid=13720 comm="syz.7.1577" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 658.074869][T13735] [U] [ 658.077631][T13735] [U] [ 658.080343][T13735] [U] [ 658.083054][T13735] [U] [ 658.091303][T13735] [U] [ 658.094039][T13735] [U] [ 658.096746][T13735] [U] [ 658.099457][T13735] [U] [ 658.107462][T13735] [U] [ 658.110190][T13735] [U] [ 658.112895][T13735] [U] [ 658.115601][T13735] [U] [ 658.121652][T13735] [U] [ 658.124382][T13735] [U] [ 658.127087][T13735] [U] [ 658.129791][T13735] [U] [ 658.136658][T13735] [U] [ 658.139371][T13735] [U] [ 658.142054][T13735] [U] [ 658.144733][T13735] [U] [ 658.153715][T13735] [U] [ 658.156432][T13735] [U] [ 658.159135][T13735] [U] [ 658.161859][T13735] [U] [ 658.167828][T13735] [U] [ 658.170545][T13735] [U] [ 658.173254][T13735] [U] [ 658.175958][T13735] [U] [ 658.185859][T13735] [U] [ 658.188573][T13735] [U] [ 658.191446][T13735] [U] [ 658.194139][T13735] [U] [ 658.198496][T13735] [U] [ 658.201211][T13735] [U] [ 658.203916][T13735] [U] [ 658.206610][T13735] [U] [ 658.228816][T13735] [U] [ 658.231553][T13735] [U] [ 658.234255][T13735] [U] [ 658.236964][T13735] [U] [ 658.274125][T13735] [U] [ 658.276877][T13735] [U] [ 658.279591][T13735] [U] [ 658.282296][T13735] [U] [ 658.301829][T13735] [U] [ 658.304568][T13735] [U] [ 658.307271][T13735] [U] [ 658.309975][T13735] [U] [ 658.318011][T13735] [U] [ 658.320737][T13735] [U] [ 658.323434][T13735] [U] [ 658.326129][T13735] [U] [ 658.342831][T13735] [U] [ 658.345553][T13735] [U] [ 658.348252][T13735] [U] [ 658.350962][T13735] [U] [ 658.415537][T13735] [U] [ 658.418286][T13735] [U] [ 658.420991][T13735] [U] [ 658.423696][T13735] [U] [ 658.458788][ T5868] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 658.476822][T13735] [U] [ 658.479550][T13735] [U] [ 658.482254][T13735] [U] [ 658.484955][T13735] [U] [ 658.543869][T13735] [U] [ 658.546602][T13735] [U] [ 658.549282][T13735] [U] [ 658.551961][T13735] [U] [ 658.672081][T13748] FAULT_INJECTION: forcing a failure. [ 658.672081][T13748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.685351][T13748] CPU: 0 UID: 0 PID: 13748 Comm: syz.8.1582 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 658.696114][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 658.706158][T13748] Call Trace: [ 658.709452][T13748] [ 658.712392][T13748] dump_stack_lvl+0x16c/0x1f0 [ 658.717062][T13748] should_fail_ex+0x497/0x5b0 [ 658.721734][T13748] _copy_from_user+0x2e/0xd0 [ 658.726336][T13748] copy_msghdr_from_user+0x99/0x160 [ 658.731519][T13748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 658.737316][T13748] ___sys_sendmsg+0xff/0x1e0 [ 658.739172][T13735] [U] [ 658.741887][T13748] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.744563][T13735] [U] [ 658.749716][T13748] ? __pfx_lock_release+0x10/0x10 [ 658.752375][T13735] [U] [ 658.757344][T13748] ? trace_lock_acquire+0x14e/0x1f0 [ 658.760016][T13735] [U] [ 658.765167][T13748] ? __fget_files+0x206/0x3a0 [ 658.772519][T13748] __sys_sendmsg+0x16e/0x220 [ 658.777090][T13748] ? __pfx___sys_sendmsg+0x10/0x10 [ 658.782189][T13748] do_syscall_64+0xcd/0x250 [ 658.786675][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.792553][T13748] RIP: 0033:0x7f327b185d29 [ 658.796946][T13748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.816557][T13748] RSP: 002b:00007f327bf26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.824959][T13748] RAX: ffffffffffffffda RBX: 00007f327b376160 RCX: 00007f327b185d29 [ 658.832920][T13748] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000c [ 658.840876][T13748] RBP: 00007f327bf26090 R08: 0000000000000000 R09: 0000000000000000 [ 658.848836][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.856804][T13748] R13: 0000000000000000 R14: 00007f327b376160 R15: 00007ffef95e2108 [ 658.864768][T13748] [ 659.199038][T13735] [U] [ 659.248871][ T5868] usb 10-1: config 0 has an invalid interface number: 171 but max is 0 [ 659.257237][ T5868] usb 10-1: config 0 has no interface number 0 [ 659.294215][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1583'. [ 659.348007][ T5868] usb 10-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 659.361897][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.372385][ T5868] usb 10-1: Product: syz [ 659.379982][ T5868] usb 10-1: Manufacturer: syz [ 659.390162][ T5868] usb 10-1: SerialNumber: syz [ 659.412551][ T5868] usb 10-1: config 0 descriptor?? [ 659.737570][ T29] audit: type=1400 audit(1737187536.271:796): avc: denied { append } for pid=13736 comm="syz.9.1579" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 661.549125][ T5868] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 661.709157][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 661.836158][ T5868] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 661.855484][ T5868] usb 6-1: config 0 has no interface number 0 [ 661.876145][ T5868] usb 6-1: config 0 interface 12 has no altsetting 0 [ 661.897135][ T5868] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 661.924272][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.954719][ T5868] usb 6-1: Product: syz [ 661.967806][ T5868] usb 6-1: Manufacturer: syz [ 661.982842][ T5868] usb 6-1: SerialNumber: syz [ 662.008405][ T5868] usb 6-1: config 0 descriptor?? [ 662.708520][ T5868] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 662.725255][ T5868] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 662.768670][ T5868] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 662.809428][ T5868] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 662.861579][ T5868] usb 6-1: USB disconnect, device number 30 [ 662.879967][T13779] FAULT_INJECTION: forcing a failure. [ 662.879967][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.955289][T13779] CPU: 0 UID: 0 PID: 13779 Comm: syz.7.1590 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 662.966102][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 662.976171][T13779] Call Trace: [ 662.979467][T13779] [ 662.982453][T13779] dump_stack_lvl+0x16c/0x1f0 [ 662.987158][T13779] should_fail_ex+0x497/0x5b0 [ 662.991860][T13779] _copy_to_user+0x32/0xd0 [ 662.996292][T13779] simple_read_from_buffer+0xd0/0x160 [ 663.001696][T13779] proc_fail_nth_read+0x198/0x270 [ 663.006745][T13779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.012342][T13779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.017907][T13779] vfs_read+0x1df/0xbe0 [ 663.022079][T13779] ? __fget_files+0x1fc/0x3a0 [ 663.026774][T13779] ? __pfx___mutex_lock+0x10/0x10 [ 663.031817][T13779] ? __pfx_vfs_read+0x10/0x10 [ 663.036517][T13779] ? __fget_files+0x206/0x3a0 [ 663.041219][T13779] ksys_read+0x12b/0x250 [ 663.045471][T13779] ? __pfx_ksys_read+0x10/0x10 [ 663.050258][T13779] do_syscall_64+0xcd/0x250 [ 663.054785][T13779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.060695][T13779] RIP: 0033:0x7f80d358473c [ 663.065119][T13779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 663.084750][T13779] RSP: 002b:00007f80d4301030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.093185][T13779] RAX: ffffffffffffffda RBX: 00007f80d3775fa0 RCX: 00007f80d358473c [ 663.101168][T13779] RDX: 000000000000000f RSI: 00007f80d43010a0 RDI: 0000000000000003 [ 663.109147][T13779] RBP: 00007f80d4301090 R08: 0000000000000000 R09: 0000000000000000 [ 663.117128][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.125109][T13779] R13: 0000000000000000 R14: 00007f80d3775fa0 R15: 00007ffde79ae5d8 [ 663.133103][T13779] [ 663.440566][T13551] Bluetooth: hci0: command 0x0405 tx timeout [ 663.769159][ C1] sched: DL replenish lagged too much [ 664.050379][ T29] audit: type=1400 audit(1737187540.580:797): avc: denied { execute } for pid=13780 comm="syz.7.1591" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=41724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 664.601539][ T5959] usb 10-1: USB disconnect, device number 18 [ 665.227344][ T8798] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 665.379650][ T8798] usb 6-1: device descriptor read/64, error -71 [ 666.529640][ T8798] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 666.851393][ T29] audit: type=1400 audit(1737187543.380:798): avc: denied { read write } for pid=13825 comm="syz.7.1601" name="mouse0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 666.875306][ T8798] usb 6-1: device descriptor read/64, error -71 [ 666.928167][ T29] audit: type=1400 audit(1737187543.380:799): avc: denied { open } for pid=13825 comm="syz.7.1601" path="/dev/input/mouse0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 666.999809][ T8798] usb usb6-port1: attempt power cycle [ 667.248813][ T29] audit: type=1400 audit(1737187543.780:800): avc: denied { ioctl } for pid=13834 comm="syz.8.1604" path="socket:[42401]" dev="sockfs" ino=42401 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 667.310828][ T29] audit: type=1400 audit(1737187543.820:801): avc: denied { ioctl } for pid=13834 comm="syz.8.1604" path="socket:[42398]" dev="sockfs" ino=42398 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 667.335921][ T5868] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 667.359765][ T8798] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 667.384317][ T8798] usb 6-1: device descriptor read/8, error -71 [ 667.489726][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 667.499345][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 667.508798][ T5868] usb 3-1: config index 0 descriptor too short (expected 2093, got 45) [ 667.517646][ T5868] usb 3-1: config 7 has an invalid interface number: 117 but max is 0 [ 667.580393][ T5868] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 667.722686][ T5868] usb 3-1: config 7 has no interface number 0 [ 667.729237][ T5868] usb 3-1: config 7 interface 117 has no altsetting 0 [ 667.738266][ T5868] usb 3-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=ed.ff [ 667.750076][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.758093][ T5868] usb 3-1: Product: syz [ 667.781869][ T5868] usb 3-1: Manufacturer: syz [ 667.786639][ T5868] usb 3-1: SerialNumber: syz [ 668.472742][ T29] audit: type=1400 audit(1737187544.990:802): avc: denied { sqpoll } for pid=13830 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 668.498474][ T29] audit: type=1400 audit(1737187544.990:803): avc: denied { execute_no_trans } for pid=13830 comm="syz.2.1602" path="/366/file1" dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 668.695233][ T5868] usb 3-1: bad CDC descriptors [ 668.717751][ T5868] usb 3-1: USB disconnect, device number 32 [ 669.018524][T13870] FAULT_INJECTION: forcing a failure. [ 669.018524][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 669.089680][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.5.1613 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 669.100482][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 669.110521][T13870] Call Trace: [ 669.113784][T13870] [ 669.116700][T13870] dump_stack_lvl+0x16c/0x1f0 [ 669.121367][T13870] should_fail_ex+0x497/0x5b0 [ 669.126030][T13870] ? fs_reclaim_acquire+0xae/0x150 [ 669.131123][T13870] should_failslab+0xc2/0x120 [ 669.135793][T13870] __kmalloc_cache_noprof+0x68/0x410 [ 669.141091][T13870] ovl_encode_real_fh+0xcb/0x420 [ 669.146048][T13870] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 669.151614][T13870] ? mark_held_locks+0x9f/0xe0 [ 669.156392][T13870] ovl_lookup_index+0xdf/0x870 [ 669.161176][T13870] ? __pfx_ovl_lookup_index+0x10/0x10 [ 669.166566][T13870] ovl_lookup+0xbf5/0x21f0 [ 669.171000][T13870] ? __pfx_ovl_lookup+0x10/0x10 [ 669.175868][T13870] ? lock_acquire.part.0+0x11b/0x380 [ 669.181163][T13870] ? find_held_lock+0x2d/0x110 [ 669.185944][T13870] ? d_alloc+0x176/0x1e0 [ 669.190201][T13870] ? __pfx_lock_release+0x10/0x10 [ 669.195236][T13870] ? do_raw_spin_lock+0x12d/0x2c0 [ 669.200283][T13870] ? do_raw_spin_unlock+0x172/0x230 [ 669.205498][T13870] ? _raw_spin_unlock+0x28/0x50 [ 669.210364][T13870] lookup_one_qstr_excl+0x11d/0x190 [ 669.215580][T13870] ? mnt_want_write+0x161/0x450 [ 669.220454][T13870] do_renameat2+0x532/0xdd0 [ 669.224980][T13870] ? __pfx_do_renameat2+0x10/0x10 [ 669.230034][T13870] ? lock_acquire+0x2f/0xb0 [ 669.234046][ T29] audit: type=1400 audit(1737187545.730:804): avc: denied { ioctl } for pid=13871 comm="syz.8.1614" path="socket:[42475]" dev="sockfs" ino=42475 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 669.234548][T13870] ? __virt_addr_valid+0x5e/0x590 [ 669.264111][T13870] ? __phys_addr_symbol+0x30/0x80 [ 669.269158][T13870] ? getname_flags.part.0+0x1c5/0x550 [ 669.274552][T13870] __x64_sys_renameat2+0xe7/0x130 [ 669.279598][T13870] do_syscall_64+0xcd/0x250 [ 669.284126][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.290038][T13870] RIP: 0033:0x7f310d985d29 [ 669.294463][T13870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.314090][T13870] RSP: 002b:00007f310e788038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 669.322518][T13870] RAX: ffffffffffffffda RBX: 00007f310db75fa0 RCX: 00007f310d985d29 [ 669.330507][T13870] RDX: ffffffffffffff9c RSI: 0000000020000a00 RDI: ffffffffffffff9c [ 669.338487][T13870] RBP: 00007f310e788090 R08: 0000000000000002 R09: 0000000000000000 [ 669.346469][T13870] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 669.354452][T13870] R13: 0000000000000000 R14: 00007f310db75fa0 R15: 00007ffd3be27a68 [ 669.362449][T13870] [ 669.725853][ T29] audit: type=1400 audit(1737187546.250:805): avc: denied { bind } for pid=13885 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 669.803118][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1620'. [ 670.080059][ T8798] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 670.340029][ T8798] usb 9-1: Using ep0 maxpacket: 16 [ 670.346732][ T8798] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.362471][ T8798] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.383311][ T8798] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.417498][ T8798] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 670.430022][ T8798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.452210][ T8798] usb 9-1: config 0 descriptor?? [ 671.922938][ T29] audit: type=1400 audit(1737187548.459:806): avc: denied { watch_mount } for pid=13890 comm="syz.8.1620" path="/252" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 672.986935][ T8798] usbhid 9-1:0.0: can't add hid device: -71 [ 672.994257][ T8798] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 673.067168][ T8798] usb 9-1: USB disconnect, device number 19 [ 673.103497][T13925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13925 comm=syz.8.1629 [ 673.116922][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1629'. [ 673.170711][T13925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.223493][ T29] audit: type=1400 audit(1737187549.759:807): avc: denied { bind } for pid=13928 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.271657][T13927] vxcan2: entered allmulticast mode [ 673.304933][ T29] audit: type=1400 audit(1737187549.789:808): avc: denied { setopt } for pid=13928 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.317815][T13927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.348301][T13927] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 673.398393][T13927] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 673.433407][T13934] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.471658][T13934] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 673.480183][ T29] audit: type=1800 audit(1737187550.009:809): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1629" name="/newroot/253/file0" dev="tmpfs" ino=1365 res=0 errno=0 [ 673.504211][T13934] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.512108][T13934] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 674.058342][ T29] audit: type=1400 audit(1737187550.579:810): avc: denied { ioctl } for pid=13941 comm="syz.2.1633" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 674.656709][T13929] FAULT_INJECTION: forcing a failure. [ 674.656709][T13929] name failslab, interval 1, probability 0, space 0, times 0 [ 674.671245][T13929] CPU: 0 UID: 0 PID: 13929 Comm: syz.5.1630 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 674.682031][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 674.692094][T13929] Call Trace: [ 674.695376][T13929] [ 674.698310][T13929] dump_stack_lvl+0x16c/0x1f0 [ 674.703007][T13929] should_fail_ex+0x497/0x5b0 [ 674.707706][T13929] should_failslab+0xc2/0x120 [ 674.712399][T13929] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 674.717789][T13929] ? skb_clone+0x190/0x3f0 [ 674.722217][T13929] skb_clone+0x190/0x3f0 [ 674.726476][T13929] netlink_deliver_tap+0xabd/0xd30 [ 674.731613][T13929] netlink_dump+0x639/0xd00 [ 674.736131][T13929] ? __pfx_netlink_dump+0x10/0x10 [ 674.741174][T13929] __netlink_dump_start+0x6ca/0x970 [ 674.746370][T13929] ip_set_dump+0x180/0x210 [ 674.750783][T13929] ? __pfx_ip_set_dump+0x10/0x10 [ 674.755715][T13929] ? __pfx_ip_set_dump_start+0x10/0x10 [ 674.761167][T13929] ? __pfx_ip_set_dump_do+0x10/0x10 [ 674.766353][T13929] ? __pfx_ip_set_dump_done+0x10/0x10 [ 674.771729][T13929] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 674.776757][T13929] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 674.782212][T13929] ? __pfx___lock_acquire+0x10/0x10 [ 674.787424][T13929] ? lock_acquire+0x2f/0xb0 [ 674.791916][T13929] ? avc_has_perm_noaudit+0x61/0x3a0 [ 674.797203][T13929] netlink_rcv_skb+0x16b/0x440 [ 674.801963][T13929] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 674.807416][T13929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.812711][T13929] ? bpf_lsm_capable+0x9/0x10 [ 674.817375][T13929] ? security_capable+0x7e/0x260 [ 674.822303][T13929] ? ns_capable+0xd7/0x110 [ 674.826725][T13929] nfnetlink_rcv+0x1b4/0x430 [ 674.831337][T13929] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 674.836454][T13929] ? netlink_deliver_tap+0x1ae/0xd30 [ 674.841761][T13929] netlink_unicast+0x53c/0x7f0 [ 674.846541][T13929] ? __pfx_netlink_unicast+0x10/0x10 [ 674.851831][T13929] netlink_sendmsg+0x8b8/0xd70 [ 674.856598][T13929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.861884][T13929] ____sys_sendmsg+0xaaf/0xc90 [ 674.866645][T13929] ? copy_msghdr_from_user+0x10b/0x160 [ 674.872096][T13929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.877387][T13929] ___sys_sendmsg+0x135/0x1e0 [ 674.882082][T13929] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.887291][T13929] ? __pfx_lock_release+0x10/0x10 [ 674.892311][T13929] ? trace_lock_acquire+0x14e/0x1f0 [ 674.897519][T13929] ? __fget_files+0x206/0x3a0 [ 674.902197][T13929] __sys_sendmsg+0x16e/0x220 [ 674.906782][T13929] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.912248][T13929] do_syscall_64+0xcd/0x250 [ 674.916749][T13929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.922640][T13929] RIP: 0033:0x7f310d985d29 [ 674.927047][T13929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.946643][T13929] RSP: 002b:00007f310e788038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.955048][T13929] RAX: ffffffffffffffda RBX: 00007f310db75fa0 RCX: 00007f310d985d29 [ 674.963008][T13929] RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000007 [ 674.970965][T13929] RBP: 00007f310e788090 R08: 0000000000000000 R09: 0000000000000000 [ 674.978927][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.986892][T13929] R13: 0000000000000000 R14: 00007f310db75fa0 R15: 00007ffd3be27a68 [ 674.994866][T13929] [ 675.158344][T13957] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.1635'. [ 675.175423][T13957] openvswitch: netlink: Flow key attr not present in new flow. [ 675.290554][ T29] audit: type=1400 audit(1737187551.819:811): avc: denied { mount } for pid=13962 comm="syz.9.1639" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 675.294864][T13963] program syz.9.1639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.363372][ T29] audit: type=1400 audit(1737187551.819:812): avc: denied { write } for pid=13962 comm="syz.9.1639" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 675.474751][ T29] audit: type=1400 audit(1737187552.009:813): avc: denied { unmount } for pid=8309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 675.790889][ T5868] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 675.996660][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 676.046546][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 676.122638][T13979] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 676.131465][T13979] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 676.307492][ T5868] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 676.315470][T13984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.336279][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.344961][ T5868] usb 10-1: Product: syz [ 676.349301][ T5868] usb 10-1: Manufacturer: syz [ 676.359953][ T5868] usb 10-1: SerialNumber: syz [ 676.366748][ T5868] usb 10-1: config 0 descriptor?? [ 676.615811][ T5868] usb 10-1: USB disconnect, device number 19 [ 676.883309][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.036820][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 677.056950][T13992] batadv0: entered promiscuous mode [ 677.067185][T13992] team0: entered promiscuous mode [ 677.075412][T13992] team_slave_0: entered promiscuous mode [ 677.086787][T13992] team_slave_1: entered promiscuous mode [ 677.113253][T13992] hsr1: entered promiscuous mode [ 677.120428][T13992] hsr1: entered allmulticast mode [ 677.126256][T13992] batadv0: entered allmulticast mode [ 677.132172][T13992] team0: entered allmulticast mode [ 677.148065][T13992] team_slave_0: entered allmulticast mode [ 677.160982][T13992] team_slave_1: entered allmulticast mode [ 677.294272][T13995] program syz.5.1650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 677.400555][T13997] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1649'. [ 682.348750][T14028] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1658'. [ 682.488521][T14032] loop2: detected capacity change from 0 to 7 [ 682.648762][T14035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14035 comm=syz.8.1661 [ 682.674546][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1661'. [ 682.692747][T14032] Dev loop2: unable to read RDB block 7 [ 682.744680][T14032] loop2: unable to read partition table [ 682.872826][T14032] loop2: partition table beyond EOD, truncated [ 682.885894][T14032] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 682.896273][T14035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.060666][T14041] vxcan2: entered allmulticast mode [ 683.834322][T14057] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 683.842221][T14057] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 683.843489][T14041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.851879][T14057] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 683.866467][T14057] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 683.875734][T14041] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 683.978637][T14060] program syz.7.1663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 684.029802][T14041] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 684.093711][ T29] audit: type=1800 audit(1737187560.578:814): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1661" name="/newroot/260/file0" dev="tmpfs" ino=1402 res=0 errno=0 [ 684.252341][ T29] audit: type=1400 audit(1737187560.768:815): avc: denied { write } for pid=14058 comm="syz.5.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 685.866744][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.874398][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.372361][ T29] audit: type=1400 audit(1737187563.788:816): avc: denied { read } for pid=14105 comm="syz.2.1680" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 687.626985][ T29] audit: type=1400 audit(1737187563.798:817): avc: denied { open } for pid=14105 comm="syz.2.1680" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 688.054539][T14119] program syz.7.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.246873][T14122] netlink: 'syz.2.1683': attribute type 9 has an invalid length. [ 689.140027][T14132] fuse: Unknown parameter 'fd0x0000000000000003' [ 689.512559][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 689.636427][ T29] audit: type=1400 audit(1737187566.147:818): avc: denied { search } for pid=14140 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.689421][ T29] audit: type=1400 audit(1737187566.157:819): avc: denied { read } for pid=14142 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.909535][ T29] audit: type=1400 audit(1737187566.157:820): avc: denied { open } for pid=14142 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.272675][ T29] audit: type=1400 audit(1737187566.157:821): avc: denied { getattr } for pid=14142 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.322288][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 690.342702][ T29] audit: type=1400 audit(1737187566.157:822): avc: denied { getattr } for pid=14142 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.362915][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.369301][ T29] audit: type=1400 audit(1737187566.767:823): avc: denied { read } for pid=14144 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.389764][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.401735][ T29] audit: type=1400 audit(1737187566.767:824): avc: denied { open } for pid=14144 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.443324][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.460180][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 690.474026][ T25] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 690.487686][ T25] usb 3-1: Product: syz [ 690.491937][ T25] usb 3-1: Manufacturer: syz [ 690.496832][ T25] usb 3-1: SerialNumber: syz [ 690.533741][ T25] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input61 [ 690.554563][T14129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.572293][T14129] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 690.661558][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1690'. [ 690.669217][ T29] audit: type=1400 audit(1737187567.197:825): avc: denied { write } for pid=14140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.712262][ T29] audit: type=1400 audit(1737187567.197:826): avc: denied { add_name } for pid=14140 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.800391][T14136] SET target dimension over the limit! [ 690.802600][ T29] audit: type=1400 audit(1737187567.197:827): avc: denied { create } for pid=14140 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.835444][ T5868] usb 3-1: USB disconnect, device number 33 [ 690.914435][ T5868] appletouch 3-1:1.0: input: appletouch disconnected [ 690.980902][T14162] input: syz0 as /devices/virtual/input/input62 [ 691.074433][T14129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.080374][T14129] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 691.171220][T14129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 691.184516][T14129] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 691.279720][ T5959] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 691.487433][ T5959] usb 10-1: Using ep0 maxpacket: 8 [ 691.524763][T14174] FAULT_INJECTION: forcing a failure. [ 691.524763][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.533561][ T5959] usb 10-1: config 0 has an invalid interface number: 33 but max is 1 [ 691.539956][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.2.1694 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 691.556702][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 691.566763][T14174] Call Trace: [ 691.570048][T14174] [ 691.572987][T14174] dump_stack_lvl+0x16c/0x1f0 [ 691.577683][T14174] should_fail_ex+0x497/0x5b0 [ 691.579492][ T5959] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.582365][T14174] _copy_to_user+0x32/0xd0 [ 691.582392][T14174] simple_read_from_buffer+0xd0/0x160 [ 691.582423][T14174] proc_fail_nth_read+0x198/0x270 [ 691.605846][ T5959] usb 10-1: config 0 has no interface number 1 [ 691.607288][T14174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.607327][T14174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.622328][ T5959] usb 10-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 691.624496][T14174] vfs_read+0x1df/0xbe0 [ 691.624524][T14174] ? __fget_files+0x1fc/0x3a0 [ 691.624547][T14174] ? __pfx___mutex_lock+0x10/0x10 [ 691.649303][T14174] ? __pfx_vfs_read+0x10/0x10 [ 691.653981][T14174] ? __fget_files+0x206/0x3a0 [ 691.658651][T14174] ksys_read+0x12b/0x250 [ 691.662882][T14174] ? __pfx_ksys_read+0x10/0x10 [ 691.667637][T14174] do_syscall_64+0xcd/0x250 [ 691.672136][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.678022][T14174] RIP: 0033:0x7f3668b8473c [ 691.682425][T14174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 691.702023][T14174] RSP: 002b:00007f3669a26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.710449][T14174] RAX: ffffffffffffffda RBX: 00007f3668d75fa0 RCX: 00007f3668b8473c [ 691.718410][T14174] RDX: 000000000000000f RSI: 00007f3669a260a0 RDI: 0000000000000004 [ 691.726368][T14174] RBP: 00007f3669a26090 R08: 0000000000000000 R09: 0000000000000000 [ 691.734325][T14174] R10: 0000000020005e40 R11: 0000000000000246 R12: 0000000000000001 [ 691.742285][T14174] R13: 0000000000000000 R14: 00007f3668d75fa0 R15: 00007ffcdb803688 [ 691.750265][T14174] [ 691.763448][ T5959] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 691.830890][T14129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.858514][T14129] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 691.867866][ T5959] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 691.885432][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.934212][ T5959] usb 10-1: Product: syz [ 691.986619][ T5959] usb 10-1: Manufacturer: syz [ 691.991343][ T5959] usb 10-1: SerialNumber: syz [ 692.204896][ T5959] usb 10-1: config 0 descriptor?? [ 692.410309][T14185] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 692.418175][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 692.845140][ T5959] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 692.883859][ T2323] pvrusb2: Invalid write control endpoint [ 692.913020][ T5959] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 692.934714][ T5959] usb 10-1: USB disconnect, device number 20 [ 692.984276][ T2323] usb 10-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 693.098163][T14175] program syz.8.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.128463][ T2323] usb 10-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 696.522327][T10366] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 696.663497][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 696.663514][ T29] audit: type=1400 audit(1737187573.157:834): avc: denied { connect } for pid=14247 comm="syz.2.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 696.689553][ T29] audit: type=1400 audit(1737187573.157:835): avc: denied { bind } for pid=14247 comm="syz.2.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 696.843511][T10366] usb 8-1: Using ep0 maxpacket: 16 [ 696.857391][T10366] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 696.875480][T10366] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 696.896678][T10366] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 696.912247][T10366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.930150][ T29] audit: type=1326 audit(1737187573.457:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14258 comm="syz.8.1711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f327b185d29 code=0x0 [ 696.982289][T10366] usb 8-1: config 0 descriptor?? [ 697.291098][T14267] netlink: 'syz.2.1712': attribute type 21 has an invalid length. [ 697.299043][T14267] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1712'. [ 697.436886][T10366] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 697.444299][T10366] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 697.467360][T10366] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 697.486427][ T29] audit: type=1400 audit(1737187573.946:837): avc: denied { ioctl } for pid=14258 comm="syz.8.1711" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 697.768718][ T29] audit: type=1400 audit(1737187573.966:838): avc: denied { bind } for pid=14258 comm="syz.8.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 698.030579][ T29] audit: type=1400 audit(1737187573.966:839): avc: denied { name_bind } for pid=14258 comm="syz.8.1711" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 698.052340][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.230951][ T29] audit: type=1400 audit(1737187573.966:840): avc: denied { node_bind } for pid=14258 comm="syz.8.1711" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 698.396979][T10366] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 698.411979][T10366] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 698.422307][ T29] audit: type=1400 audit(1737187574.926:841): avc: denied { getopt } for pid=14222 comm="syz.7.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 698.455122][T10366] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 698.510208][T10366] usb 8-1: USB disconnect, device number 20 [ 698.605830][ T29] audit: type=1400 audit(1737187575.136:842): avc: denied { bind } for pid=14285 comm="syz.8.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 699.530407][T14305] mmap: syz.8.1721 (14305): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 699.654058][T10366] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 699.803264][ T29] audit: type=1400 audit(1737187576.316:843): avc: denied { create } for pid=14328 comm="syz.8.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 699.958808][T10366] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 699.968366][T10366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.985676][T10366] usb 8-1: config 0 descriptor?? [ 699.994651][T10366] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 700.352304][T14355] netlink: 'syz.5.1728': attribute type 9 has an invalid length. [ 700.413793][T10366] gp8psk: usb out operation failed. [ 700.419728][T10366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 700.528943][T10366] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 700.713149][T10366] usb 8-1: media controller created [ 700.842633][T10366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.956443][T10366] gp8psk_fe: Frontend attached [ 700.961270][T10366] usb 8-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 700.969347][T10366] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 700.995358][T10366] gp8psk: usb in 138 operation failed. [ 701.000849][T10366] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 701.073441][T10366] gp8psk: found Genpix USB device pID = 203 (hex) [ 701.175242][T10366] usb 8-1: USB disconnect, device number 21 [ 702.162464][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 702.162480][ T29] audit: type=1400 audit(1737187578.686:846): avc: denied { read } for pid=14361 comm="syz.7.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 702.188060][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.430651][T10366] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 702.718242][ T29] audit: type=1400 audit(1737187578.946:847): avc: denied { read write } for pid=14361 comm="syz.7.1731" name="cgroup.subtree_control" dev="cgroup2" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 702.852178][ T29] audit: type=1400 audit(1737187578.946:848): avc: denied { open } for pid=14361 comm="syz.7.1731" path="" dev="cgroup2" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.038385][T14379] FAULT_INJECTION: forcing a failure. [ 704.038385][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.293539][ T29] audit: type=1400 audit(1737187580.566:849): avc: denied { read write } for pid=14374 comm="syz.2.1736" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 704.400618][T14379] CPU: 1 UID: 0 PID: 14379 Comm: syz.2.1736 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 704.411415][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 704.421467][T14379] Call Trace: [ 704.424742][T14379] [ 704.427671][T14379] dump_stack_lvl+0x16c/0x1f0 [ 704.432359][T14379] should_fail_ex+0x497/0x5b0 [ 704.437047][T14379] _copy_from_user+0x2e/0xd0 [ 704.441651][T14379] snd_seq_ioctl+0x1c0/0x3f0 [ 704.446247][T14379] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 704.451359][T14379] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 704.458238][T14379] ? selinux_file_ioctl+0x180/0x270 [ 704.463444][T14379] ? selinux_file_ioctl+0xb4/0x270 [ 704.468567][T14379] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 704.473681][T14379] __x64_sys_ioctl+0x190/0x200 [ 704.478453][T14379] do_syscall_64+0xcd/0x250 [ 704.482964][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.488865][T14379] RIP: 0033:0x7f3668b85d29 [ 704.493279][T14379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.512893][T14379] RSP: 002b:00007f3669a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.521313][T14379] RAX: ffffffffffffffda RBX: 00007f3668d75fa0 RCX: 00007f3668b85d29 [ 704.529284][T14379] RDX: 0000000020000140 RSI: 00000000c08c5334 RDI: 0000000000000009 [ 704.537256][T14379] RBP: 00007f3669a26090 R08: 0000000000000000 R09: 0000000000000000 [ 704.545229][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.553196][T14379] R13: 0000000000000000 R14: 00007f3668d75fa0 R15: 00007ffcdb803688 [ 704.561188][T14379] [ 704.641670][ T29] audit: type=1400 audit(1737187580.566:850): avc: denied { open } for pid=14374 comm="syz.2.1736" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 704.976771][T14391] FAULT_INJECTION: forcing a failure. [ 704.976771][T14391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.989908][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.7.1737 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 705.000677][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 705.010741][T14391] Call Trace: [ 705.014023][T14391] [ 705.016964][T14391] dump_stack_lvl+0x16c/0x1f0 [ 705.021658][T14391] should_fail_ex+0x497/0x5b0 [ 705.026336][T14391] _copy_to_user+0x32/0xd0 [ 705.030743][T14391] pagemap_read+0x536/0x880 [ 705.035243][T14391] ? __pfx_pagemap_read+0x10/0x10 [ 705.040264][T14391] ? __pfx_pagemap_read+0x10/0x10 [ 705.045283][T14391] vfs_read+0x1df/0xbe0 [ 705.049434][T14391] ? __fget_files+0x1fc/0x3a0 [ 705.054102][T14391] ? __pfx_lock_release+0x10/0x10 [ 705.059114][T14391] ? __pfx_vfs_read+0x10/0x10 [ 705.063782][T14391] ? lock_acquire+0x2f/0xb0 [ 705.068271][T14391] ? __fget_files+0x40/0x3a0 [ 705.072851][T14391] ? __fget_files+0x206/0x3a0 [ 705.077521][T14391] __x64_sys_pread64+0x1f6/0x250 [ 705.082446][T14391] ? __pfx___x64_sys_pread64+0x10/0x10 [ 705.087897][T14391] do_syscall_64+0xcd/0x250 [ 705.092395][T14391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.098285][T14391] RIP: 0033:0x7f80d3585d29 [ 705.102686][T14391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.122278][T14391] RSP: 002b:00007f80d42e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 705.130680][T14391] RAX: ffffffffffffffda RBX: 00007f80d3776080 RCX: 00007f80d3585d29 [ 705.138637][T14391] RDX: 0000000000200000 RSI: 0000000020001240 RDI: 0000000000000007 [ 705.146594][T14391] RBP: 00007f80d42e0090 R08: 0000000000000000 R09: 0000000000000000 [ 705.154548][T14391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.162507][T14391] R13: 0000000000000000 R14: 00007f80d3776080 R15: 00007ffde79ae5d8 [ 705.170475][T14391] [ 705.378341][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1739'. [ 705.506961][T14400] 9p: Unknown Cache mode or invalid value m*‚*¸jÚªøø®üHijjèÏOï¯eµ*‰²w–yêTݳg6¼…²YÌv [ 706.269604][T14411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.347509][T14414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14414 comm=syz.9.1745 [ 706.361576][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1745'. [ 706.374648][ T8798] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 706.388584][T14414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.397248][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 706.420064][T14414] vxcan2: entered allmulticast mode [ 706.428031][T14414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.434835][T14414] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 706.445659][T14414] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 706.568605][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.605452][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.722049][ T8798] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 706.979070][T14422] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 707.047694][T14422] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 707.147844][T14422] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 707.155867][T14422] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 707.174206][ T8798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.193770][ T8798] usb 8-1: config 0 descriptor?? [ 707.228476][ T29] audit: type=1800 audit(1737187583.755:851): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.9.1745" name="/newroot/220/file0" dev="tmpfs" ino=1180 res=0 errno=0 [ 707.332530][ T29] audit: type=1400 audit(1737187583.845:852): avc: denied { append } for pid=14430 comm="syz.5.1749" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 707.356061][ T29] audit: type=1400 audit(1737187583.855:853): avc: denied { read } for pid=14430 comm="syz.5.1749" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 707.394215][ T29] audit: type=1400 audit(1737187583.855:854): avc: denied { open } for pid=14430 comm="syz.5.1749" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 707.585272][T14442] syz_tun: entered allmulticast mode [ 707.590666][ T29] audit: type=1400 audit(1737187584.115:855): avc: granted { setsecparam } for pid=14441 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 707.784812][ T5868] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 707.795158][ T8798] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 707.803026][ T8798] cm6533_jd 0003:0D8C:0022.000A: item fetching failed at offset 4/5 [ 707.824756][ T8798] cm6533_jd 0003:0D8C:0022.000A: parse failed [ 707.839018][ T8798] cm6533_jd 0003:0D8C:0022.000A: probe with driver cm6533_jd failed with error -22 [ 707.970507][ T29] audit: type=1400 audit(1737187584.415:856): avc: denied { setopt } for pid=14445 comm="syz.9.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 708.164331][ T5868] usb 9-1: not running at top speed; connect to a high speed hub [ 708.205844][ T29] audit: type=1400 audit(1737187584.735:857): avc: denied { ioctl } for pid=14426 comm="syz.8.1747" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.307037][ T5868] usb 9-1: config 1 interface 0 has no altsetting 0 [ 708.360828][ T29] audit: type=1400 audit(1737187584.765:858): avc: denied { ioctl } for pid=14426 comm="syz.8.1747" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.421902][ T5868] usb 9-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.40 [ 708.440656][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.450003][ T29] audit: type=1400 audit(1737187584.795:859): avc: denied { ioctl } for pid=14426 comm="syz.8.1747" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.472308][ T5868] usb 9-1: Product: syz [ 708.475047][ T29] audit: type=1400 audit(1737187584.835:860): avc: denied { ioctl } for pid=14426 comm="syz.8.1747" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.597075][ T5868] usb 9-1: Manufacturer: ï“¿ [ 708.601710][ T5868] usb 9-1: SerialNumber: syz [ 708.914666][T14441] syz_tun: left allmulticast mode [ 709.328772][ T5868] usbhid 9-1:1.0: can't add hid device: -71 [ 709.334953][ T5868] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 709.361274][ T5868] usb 9-1: USB disconnect, device number 20 [ 709.514849][T14461] netlink: 'syz.2.1756': attribute type 9 has an invalid length. [ 710.125786][ T25] usb 8-1: USB disconnect, device number 22 [ 712.273299][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 712.273319][ T29] audit: type=1400 audit(1737187588.585:1018): avc: denied { recv } for pid=7909 comm="kworker/u8:19" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 712.341519][ T29] audit: type=1400 audit(1737187588.585:1019): avc: denied { recv } for pid=7909 comm="kworker/u8:19" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 712.385833][ T29] audit: type=1400 audit(1737187588.595:1020): avc: denied { recv } for pid=7909 comm="kworker/u8:19" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 712.411585][ T29] audit: type=1400 audit(1737187588.635:1021): avc: denied { execmem } for pid=14473 comm="syz.9.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 712.431036][ T29] audit: type=1400 audit(1737187588.685:1022): avc: denied { read write } for pid=7343 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.455529][ T29] audit: type=1400 audit(1737187588.695:1023): avc: denied { read write open } for pid=7343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.483630][ T29] audit: type=1400 audit(1737187588.695:1024): avc: denied { ioctl } for pid=7343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.515278][ T29] audit: type=1400 audit(1737187588.895:1025): avc: denied { create } for pid=14481 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.538794][ T29] audit: type=1400 audit(1737187589.045:1026): avc: denied { recv } for pid=14473 comm="syz.9.1760" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 712.564247][ T29] audit: type=1400 audit(1737187589.045:1027): avc: denied { read write } for pid=14473 comm="syz.9.1760" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 713.095999][T14482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14482 comm=syz.2.1762 [ 713.156203][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 713.190924][T14482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 713.203353][T14482] vxcan4: entered allmulticast mode [ 713.221185][T14482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 713.227978][T14482] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 713.238830][T14482] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 714.657593][T14496] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 717.727000][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 717.727018][ T29] audit: type=1400 audit(1737187593.484:1234): avc: denied { create } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.165564][ T29] audit: type=1400 audit(1737187593.634:1235): avc: denied { setopt } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.189125][ T29] audit: type=1400 audit(1737187593.774:1236): avc: denied { create } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.209766][ T29] audit: type=1400 audit(1737187593.894:1237): avc: denied { create } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.230568][ T29] audit: type=1400 audit(1737187593.934:1238): avc: denied { write } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.251057][ T29] audit: type=1400 audit(1737187593.964:1239): avc: denied { read } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.271638][ T29] audit: type=1400 audit(1737187593.984:1240): avc: denied { read } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.293303][ T29] audit: type=1400 audit(1737187594.044:1241): avc: denied { recv } for pid=14513 comm="syz.5.1769" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 718.318801][ T29] audit: type=1400 audit(1737187594.234:1242): avc: denied { write } for pid=14513 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.358737][ T29] audit: type=1400 audit(1737187594.504:1243): avc: denied { ioctl } for pid=14513 comm="syz.5.1769" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 720.133690][T14521] netlink: 'syz.9.1770': attribute type 9 has an invalid length. [ 721.888192][ T5865] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 722.075916][ T5865] usb 3-1: device descriptor read/64, error -71 [ 722.326002][ T5865] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 722.563653][ T5865] usb 3-1: device descriptor read/64, error -71 [ 722.677736][ T5865] usb usb3-port1: attempt power cycle [ 722.727592][T14561] netlink: 320 bytes leftover after parsing attributes in process `syz.7.1779'. [ 722.736794][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 722.736808][ T29] audit: type=1400 audit(1737187599.254:1511): avc: denied { write } for pid=14560 comm="syz.7.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 722.774078][ T29] audit: type=1400 audit(1737187599.264:1512): avc: denied { ioctl } for pid=14558 comm="syz.5.1778" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.804619][ T29] audit: type=1400 audit(1737187599.264:1513): avc: denied { create } for pid=14563 comm="syz.8.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 722.824512][ T29] audit: type=1400 audit(1737187599.274:1514): avc: denied { bind } for pid=14563 comm="syz.8.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 722.846585][ T29] audit: type=1400 audit(1737187599.284:1515): avc: denied { ioctl } for pid=14544 comm="syz.2.1774" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.871579][ T5868] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 722.871619][ T29] audit: type=1400 audit(1737187599.284:1516): avc: denied { ioctl } for pid=14544 comm="syz.2.1774" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.904898][ T29] audit: type=1400 audit(1737187599.294:1517): avc: denied { connect } for pid=14563 comm="syz.8.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 722.924739][ T29] audit: type=1400 audit(1737187599.294:1518): avc: denied { prog_load } for pid=14563 comm="syz.8.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 722.943965][ T29] audit: type=1400 audit(1737187599.294:1519): avc: denied { bpf } for pid=14563 comm="syz.8.1780" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 722.964684][ T29] audit: type=1400 audit(1737187599.294:1520): avc: denied { perfmon } for pid=14563 comm="syz.8.1780" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.026008][ T5865] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 723.039884][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 723.057957][ T5868] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 723.097125][ T5865] usb 3-1: device descriptor read/8, error -71 [ 723.102397][T14567] fuse: Unknown parameter 'fd0x0000000000000003' [ 723.103466][ T5868] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 723.149192][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 723.214618][ T5868] usb 6-1: config 1 has no interface number 0 [ 723.247537][ T5868] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.331570][ T5868] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 723.364919][ T5868] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 723.376262][ T5865] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 723.405127][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.417206][ T5865] usb 3-1: device descriptor read/8, error -71 [ 723.496628][ T5868] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 723.538350][ T5865] usb usb3-port1: unable to enumerate USB device [ 723.723933][ T5868] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 723.751444][T14561] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 723.786078][T14561] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 723.829371][T14561] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 724.528866][ T25] usb 6-1: USB disconnect, device number 35 [ 724.535554][ T25] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 727.648677][T14581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 727.878791][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 727.878818][ T29] audit: type=1400 audit(1737187604.393:1771): avc: denied { create } for pid=14580 comm="syz.7.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 728.110968][ T29] audit: type=1400 audit(1737187604.613:1772): avc: denied { recv } for pid=11887 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 728.305296][ T29] audit: type=1400 audit(1737187604.773:1773): avc: denied { create } for pid=14586 comm="syz.5.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 728.335034][ T29] audit: type=1400 audit(1737187604.803:1774): avc: denied { map_create } for pid=14596 comm="syz.9.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 728.401567][ T29] audit: type=1400 audit(1737187604.803:1775): avc: denied { map_read map_write } for pid=14596 comm="syz.9.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 728.499692][ T29] audit: type=1400 audit(1737187604.893:1776): avc: denied { recv } for pid=14586 comm="syz.5.1787" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 728.532047][ T29] audit: type=1400 audit(1737187604.893:1777): avc: denied { recv } for pid=14596 comm="syz.9.1789" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 728.558396][ T29] audit: type=1400 audit(1737187604.893:1778): avc: denied { recv } for pid=14596 comm="syz.9.1789" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 728.717510][ T29] audit: type=1400 audit(1737187604.933:1779): avc: denied { prog_load } for pid=14596 comm="syz.9.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 728.999535][ T29] audit: type=1400 audit(1737187604.933:1780): avc: denied { bpf } for pid=14596 comm="syz.9.1789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 730.317077][ T5868] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 730.350151][T14603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.476754][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 730.583829][ T5868] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.659678][ T5868] usb 8-1: config 0 interface 0 has no altsetting 0 [ 731.155987][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880315aa800: rx timeout, send abort [ 731.166741][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880315aa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 731.273183][ T5868] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 731.282340][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.657703][ T5868] usb 8-1: config 0 descriptor?? [ 732.474057][T14603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.847380][T14603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.083028][T14645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14645 comm=syz.9.1798 [ 733.098583][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1798'. [ 733.147027][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 733.147043][ T29] audit: type=1400 audit(1737187609.503:2047): avc: denied { search } for pid=14604 comm="syz.7.1791" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.176788][ T29] audit: type=1400 audit(1737187609.513:2048): avc: denied { search } for pid=14604 comm="syz.7.1791" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.198010][T14649] fuse: Unknown parameter 'fd0x0000000000000003' [ 733.198904][ T29] audit: type=1400 audit(1737187609.523:2049): avc: denied { write search } for pid=14604 comm="syz.7.1791" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.227593][ T29] audit: type=1400 audit(1737187609.523:2050): avc: denied { add_name search } for pid=14604 comm="syz.7.1791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 733.249087][ T29] audit: type=1400 audit(1737187609.523:2051): avc: denied { create } for pid=14604 comm="syz.7.1791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 733.269565][ T29] audit: type=1400 audit(1737187609.562:2052): avc: denied { recv } for pid=5484 comm="dhcpcd" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 733.294938][ T29] audit: type=1400 audit(1737187609.592:2053): avc: denied { read } for pid=14638 comm="syz.9.1798" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 733.317740][ T29] audit: type=1400 audit(1737187609.592:2054): avc: denied { read open } for pid=14638 comm="syz.9.1798" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 733.341945][ T29] audit: type=1400 audit(1737187609.702:2055): avc: denied { read write } for pid=14639 comm="syz.8.1796" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 733.365432][ T29] audit: type=1400 audit(1737187609.702:2056): avc: denied { read write open } for pid=14639 comm="syz.8.1796" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 733.580265][T14640] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 733.588045][T14640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 733.596256][T14640] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 733.604046][T14640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 733.744671][T14656] netlink: 'syz.5.1797': attribute type 9 has an invalid length. [ 734.248861][T14603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.487316][ T5868] usbhid 8-1:0.0: can't add hid device: -71 [ 734.493336][ T5868] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 734.528634][ T5868] usb 8-1: USB disconnect, device number 23 [ 734.696935][T14645] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 734.738385][T14648] vxcan2: entered allmulticast mode [ 735.340287][T14603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.452586][T14603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.629609][T14603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.876660][T14603] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.183383][T14666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.243725][T14669] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 736.426685][T14670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14670 comm=syz.7.1801 [ 736.444484][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1801'. [ 736.460675][T14670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.513610][T14670] vxcan4: entered allmulticast mode [ 736.530049][T14670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.536914][T14670] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 736.547819][T14670] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 736.586440][ T5866] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 736.998784][ T5866] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 737.006989][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.029271][ T5866] usb 3-1: config 0 has no interface number 0 [ 737.035626][ T5866] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 737.165807][ T5866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 737.191005][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.321972][ T5866] usb 3-1: config 0 descriptor?? [ 737.324919][T14681] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 737.334989][T14681] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 737.344625][T14681] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 737.440935][T14681] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 737.526022][ T5866] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 738.167541][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 738.167562][ T29] audit: type=1400 audit(1737187614.602:2256): avc: denied { module_request } for pid=14688 comm="syz.5.1804" kmod="crypto-rfc7539(chacha20,poly1305)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 738.282801][ T29] audit: type=1400 audit(1737187614.622:2257): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.397540][ T29] audit: type=1400 audit(1737187614.872:2258): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.509126][ T29] audit: type=1400 audit(1737187614.872:2259): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.546987][ T29] audit: type=1400 audit(1737187614.882:2260): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.574410][ T29] audit: type=1400 audit(1737187614.882:2261): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.600110][ T29] audit: type=1400 audit(1737187614.892:2262): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.625765][ T29] audit: type=1400 audit(1737187614.892:2263): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.652810][ T29] audit: type=1400 audit(1737187614.892:2264): avc: denied { recv } for pid=7409 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.658880][ T7909] usb 3-1: Failed to submit usb control message: -110 [ 738.737601][ T7909] usb 3-1: unable to send the bmi data to the device: -110 [ 738.744844][ T7909] usb 3-1: unable to get target info from device [ 738.752671][ T29] audit: type=1400 audit(1737187614.912:2265): avc: denied { recv } for pid=5190 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 738.837570][ T7909] usb 3-1: could not get target info (-110) [ 738.843515][ T7909] usb 3-1: could not probe fw (-110) [ 741.357919][T10366] usb 3-1: USB disconnect, device number 38 [ 743.177340][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1813'. [ 743.276380][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 743.276398][ T29] audit: type=1400 audit(1737187619.601:2449): avc: denied { read write open } for pid=7409 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.308139][ T29] audit: type=1400 audit(1737187619.601:2450): avc: denied { ioctl } for pid=7409 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.333997][ T29] audit: type=1400 audit(1737187619.621:2451): avc: denied { execmem } for pid=14715 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 743.353472][ T29] audit: type=1400 audit(1737187619.641:2452): avc: denied { read write } for pid=6571 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.377944][ T29] audit: type=1400 audit(1737187619.641:2453): avc: denied { read write open } for pid=6571 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.403183][ T29] audit: type=1400 audit(1737187619.641:2454): avc: denied { ioctl } for pid=6571 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.428894][ T29] audit: type=1400 audit(1737187619.691:2455): avc: denied { read } for pid=14729 comm="syz.8.1813" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 743.450377][ T29] audit: type=1400 audit(1737187619.691:2456): avc: denied { read open } for pid=14729 comm="syz.8.1813" path="net:[4026532829]" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 743.745478][T14736] netlink: 'syz.2.1810': attribute type 9 has an invalid length. [ 744.528264][ T29] audit: type=1400 audit(1737187619.691:2457): avc: denied { create } for pid=14729 comm="syz.8.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 744.588257][ T29] audit: type=1400 audit(1737187619.701:2458): avc: denied { setopt } for pid=14729 comm="syz.8.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 744.610555][T14741] fuse: Unknown parameter 'fd0x0000000000000003' [ 744.715993][T14733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14733 comm=syz.9.1812 [ 744.732195][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1812'. [ 745.140606][T14733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.163114][T14746] vxcan2: entered allmulticast mode [ 745.225873][T14746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.243385][T14746] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 745.257004][T14746] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 745.755333][T14749] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 745.868508][T14749] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 746.008712][T14749] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 746.082928][T14749] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 746.873391][T14758] netlink: 'syz.7.1816': attribute type 2 has an invalid length. [ 747.571642][T14762] io-wq is not configured for unbound workers [ 747.588721][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.601169][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.134797][T14769] netlink: 'syz.2.1818': attribute type 9 has an invalid length. [ 748.315665][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 748.315682][ T29] audit: type=1400 audit(1737187624.531:2653): avc: denied { name_bind } for pid=14753 comm="syz.2.1818" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 748.452211][ T29] audit: type=1400 audit(1737187624.541:2654): avc: denied { node_bind } for pid=14753 comm="syz.2.1818" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 748.473204][ T29] audit: type=1400 audit(1737187624.561:2655): avc: denied { read write } for pid=8309 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.497601][ T29] audit: type=1400 audit(1737187624.561:2656): avc: denied { read write open } for pid=8309 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.522847][ T29] audit: type=1400 audit(1737187624.561:2657): avc: denied { ioctl } for pid=8309 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.549756][ T29] audit: type=1400 audit(1737187624.591:2658): avc: denied { recv } for pid=14740 comm="syz.8.1815" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 748.588727][ T29] audit: type=1400 audit(1737187624.641:2659): avc: denied { read write } for pid=7343 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.638685][ T29] audit: type=1400 audit(1737187624.641:2660): avc: denied { read write open } for pid=7343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.698822][ T29] audit: type=1400 audit(1737187624.641:2661): avc: denied { ioctl } for pid=7343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.754181][ T29] audit: type=1400 audit(1737187624.741:2662): avc: denied { read write } for pid=14763 comm="syz.5.1820" name="mouse0" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 749.211671][T14779] netlink: 'syz.7.1822': attribute type 21 has an invalid length. [ 749.219733][T14779] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1822'. [ 749.909284][T14778] 9pnet_fd: Insufficient options for proto=fd [ 751.279022][ T25] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 751.509085][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 751.533073][ T25] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 751.643938][ T25] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 751.929203][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 751.939119][ T25] usb 9-1: config 1 has no interface number 0 [ 751.945323][ T25] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.957764][ T25] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 751.969114][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 751.970801][ T25] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 751.989711][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.047529][ T25] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 752.255607][ T25] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 752.756772][ T5868] usb 9-1: USB disconnect, device number 21 [ 752.772054][ T5868] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 753.060868][T14816] loop6: detected capacity change from 0 to 64 [ 753.157446][ C1] blk_print_req_error: 5 callbacks suppressed [ 753.157467][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 753.182095][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.191292][ C1] buffer_io_error: 4 callbacks suppressed [ 753.191308][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.270053][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.279294][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.298987][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.308201][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.320704][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 753.320719][ T29] audit: type=1400 audit(1737187629.850:3029): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 753.337220][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.361592][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.404171][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.413416][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.466546][ T29] audit: type=1400 audit(1737187629.890:3030): avc: denied { recv } for pid=5868 comm="kworker/0:5" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 753.492419][ T5865] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 753.617115][ T29] audit: type=1400 audit(1737187629.900:3031): avc: denied { ioctl } for pid=14806 comm="syz.7.1829" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 753.769504][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.789438][ T5865] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 753.867625][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.293074][ T29] audit: type=1400 audit(1737187629.910:3032): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.13 dest=56792 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 754.378870][T14826] overlayfs: failed to resolve './file1': -2 [ 859.399272][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 859.406293][ C1] rcu: 0-...!: (1 GPs behind) idle=5194/1/0x4000000000000000 softirq=64550/64551 fqs=2 [ 859.417996][ C1] rcu: (detected by 1, t=10506 jiffies, g=46345, q=424 ncpus=2) [ 859.425749][ C1] Sending NMI from CPU 1 to CPUs 0: [ 859.425779][ C0] NMI backtrace for cpu 0 [ 859.425793][ C0] CPU: 0 UID: 0 PID: 7908 Comm: kworker/u8:18 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 859.425818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 859.425834][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 859.425862][ C0] RIP: 0010:do_raw_spin_lock+0x10/0x2c0 [ 859.425891][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 56 <41> 55 41 54 55 53 48 89 fb 48 83 c7 04 48 83 ec 68 48 c7 44 24 08 [ 859.425910][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000082 [ 859.425926][ C0] RAX: dffffc0000000000 RBX: ffffffff9aac7920 RCX: ffffffff8175e32e [ 859.425940][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff9aac7920 [ 859.425954][ C0] RBP: 0000000000000006 R08: 0000000000000000 R09: fffffbfff2dca798 [ 859.425972][ C0] R10: ffffffff96e53cc7 R11: 0000000000000005 R12: dffffc0000000000 [ 859.425986][ C0] R13: ffff88802940b340 R14: 1ffff92000000fa4 R15: ffffffff9aac7918 [ 859.426000][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 859.426020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.426034][ C0] CR2: 000000110c27928e CR3: 000000007de36000 CR4: 00000000003526f0 [ 859.426048][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 859.426060][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 859.426073][ C0] Call Trace: [ 859.426081][ C0] [ 859.426092][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 859.426117][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 859.426137][ C0] ? nmi_handle+0x1ac/0x5d0 [ 859.426159][ C0] ? do_raw_spin_lock+0x10/0x2c0 [ 859.426184][ C0] ? default_do_nmi+0x6a/0x160 [ 859.426205][ C0] ? exc_nmi+0x170/0x1e0 [ 859.426224][ C0] ? end_repeat_nmi+0xf/0x53 [ 859.426256][ C0] ? hlock_class+0x4e/0x130 [ 859.426284][ C0] ? do_raw_spin_lock+0x10/0x2c0 [ 859.426309][ C0] ? do_raw_spin_lock+0x10/0x2c0 [ 859.426334][ C0] ? do_raw_spin_lock+0x10/0x2c0 [ 859.426359][ C0] [ 859.426365][ C0] [ 859.426371][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 859.426395][ C0] ? debug_object_activate+0x149/0x4a0 [ 859.426418][ C0] debug_object_activate+0x149/0x4a0 [ 859.426440][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 859.426463][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 859.426488][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 859.426513][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.426539][ C0] ? __pfx_advance_sched+0x10/0x10 [ 859.426560][ C0] enqueue_hrtimer+0x25/0x3c0 [ 859.426588][ C0] __hrtimer_run_queues+0x903/0xae0 [ 859.426618][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 859.426645][ C0] ? read_tsc+0x9/0x20 [ 859.426674][ C0] hrtimer_interrupt+0x392/0x8e0 [ 859.426707][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 859.426732][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 859.426759][ C0] [ 859.426766][ C0] [ 859.426773][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.426803][ C0] RIP: 0010:kasan_save_track+0x22/0x30 [ 859.426827][ C0] Code: 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb 89 f7 be 01 00 00 00 e8 4c ff ff ff 65 48 8b 15 54 39 07 7e 8b 92 c8 05 00 00 <89> 43 04 89 13 5b c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 [ 859.426845][ C0] RSP: 0018:ffffc900034d7aa8 EFLAGS: 00000286 [ 859.426861][ C0] RAX: 00000000071c0254 RBX: ffff888035eac9b0 RCX: ffff888062a2b8e0 [ 859.426874][ C0] RDX: 0000000000001ee4 RSI: 00000000601f76c8 RDI: 00000000ecde722f [ 859.426887][ C0] RBP: 0000000000000001 R08: ffffffff90ec231e R09: ffff88823bbc4ee0 [ 859.426900][ C0] R10: ffffc900034d7758 R11: 0000000000000b92 R12: ffff888141adf780 [ 859.426914][ C0] R13: 0000000000000820 R14: 0000000000000001 R15: ffff888141adf780 [ 859.426934][ C0] ? kasan_save_track+0x14/0x30 [ 859.426956][ C0] __kasan_slab_alloc+0x89/0x90 [ 859.426984][ C0] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 859.427009][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 859.427031][ C0] ? __alloc_skb+0x2b1/0x380 [ 859.427062][ C0] __alloc_skb+0x2b1/0x380 [ 859.427090][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 859.427118][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 859.427143][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.427169][ C0] ? lock_acquire+0x2f/0xb0 [ 859.427189][ C0] ? nsim_dev_trap_report_work+0x1cc/0xd00 [ 859.427212][ C0] nsim_dev_trap_report_work+0x2af/0xd00 [ 859.427239][ C0] process_one_work+0x9c5/0x1ba0 [ 859.427266][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 859.427287][ C0] ? __pfx_process_one_work+0x10/0x10 [ 859.427308][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.427338][ C0] ? assign_work+0x1a0/0x250 [ 859.427358][ C0] worker_thread+0x6c8/0xf00 [ 859.427384][ C0] ? __pfx_worker_thread+0x10/0x10 [ 859.427406][ C0] kthread+0x2c1/0x3a0 [ 859.427430][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.427453][ C0] ? __pfx_kthread+0x10/0x10 [ 859.427479][ C0] ret_from_fork+0x45/0x80 [ 859.427498][ C0] ? __pfx_kthread+0x10/0x10 [ 859.427524][ C0] ret_from_fork_asm+0x1a/0x30 [ 859.427559][ C0] [ 859.427772][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g46345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 859.943871][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 859.953863][ C1] rcu: RCU grace-period kthread stack dump: [ 859.959812][ C1] task:rcu_preempt state:R running task stack:28176 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 859.971609][ C1] Call Trace: [ 859.974899][ C1] [ 859.977843][ C1] __schedule+0xe58/0x5ad0 [ 859.982287][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 859.987513][ C1] ? __pfx___schedule+0x10/0x10 [ 859.992382][ C1] ? schedule+0x298/0x350 [ 859.996722][ C1] ? __pfx_lock_release+0x10/0x10 [ 860.002022][ C1] ? lock_acquire+0x2f/0xb0 [ 860.006556][ C1] ? schedule+0x1fd/0x350 [ 860.010901][ C1] schedule+0xe7/0x350 [ 860.014991][ C1] schedule_timeout+0x124/0x280 [ 860.019872][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 860.025265][ C1] ? __pfx_process_timeout+0x10/0x10 [ 860.030685][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 860.036501][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 860.041986][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 860.046795][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 860.052112][ C1] ? rcu_gp_init+0xc82/0x1630 [ 860.056896][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 860.062119][ C1] rcu_gp_kthread+0x271/0x380 [ 860.066835][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 860.072048][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.077266][ C1] ? __kthread_parkme+0x148/0x220 [ 860.082338][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 860.087603][ C1] kthread+0x2c1/0x3a0 [ 860.091712][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.096925][ C1] ? __pfx_kthread+0x10/0x10 [ 860.101529][ C1] ret_from_fork+0x45/0x80 [ 860.105954][ C1] ? __pfx_kthread+0x10/0x10 [ 860.110583][ C1] ret_from_fork_asm+0x1a/0x30 [ 860.115394][ C1] [ 860.118425][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 860.124755][ C1] CPU: 1 UID: 0 PID: 71 Comm: kworker/u8:4 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 860.135430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 860.145490][ C1] Workqueue: events_unbound toggle_allocation_gate [ 860.152009][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 860.158698][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 860.178314][ C1] RSP: 0018:ffffc9000213f998 EFLAGS: 00000293 [ 860.184397][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e191c [ 860.192386][ C1] RDX: ffff88801cb90000 RSI: ffffffff818e18f6 RDI: 0000000000000005 [ 860.200375][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 860.208354][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 860.216417][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 860.224399][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 860.233336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.240018][ C1] CR2: 00007f3668b69ae0 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 860.247997][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.255972][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 860.263966][ C1] Call Trace: [ 860.267245][ C1] [ 860.270092][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 860.276474][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 860.281703][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 860.287194][ C1] ? timekeeping_advance+0x72e/0xa90 [ 860.292487][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 860.298141][ C1] ? __asan_memcpy+0x3c/0x60 [ 860.302848][ C1] ? rcu_is_watching+0x12/0xc0 [ 860.307720][ C1] ? update_process_times+0x178/0x2d0 [ 860.313207][ C1] ? __pfx_update_process_times+0x10/0x10 [ 860.318957][ C1] ? update_wall_time+0x1c/0x40 [ 860.324022][ C1] ? tick_nohz_handler+0x376/0x530 [ 860.329189][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 860.334819][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 860.340237][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 860.345983][ C1] ? read_tsc+0x9/0x20 [ 860.350105][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 860.355272][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 860.361451][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 860.367282][ C1] [ 860.370219][ C1] [ 860.373157][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.379333][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 860.385416][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 860.391498][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 860.397585][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 860.403678][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 860.408723][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 860.413762][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 860.418894][ C1] text_poke_bp_batch+0x22b/0x760 [ 860.423948][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 860.429506][ C1] ? __jump_label_patch+0x1db/0x400 [ 860.434729][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 860.441009][ C1] text_poke_finish+0x30/0x40 [ 860.445700][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 860.451697][ C1] jump_label_update+0x1d7/0x400 [ 860.456707][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 860.462649][ C1] static_key_enable+0x1a/0x20 [ 860.467452][ C1] toggle_allocation_gate+0xfc/0x260 [ 860.472771][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 860.478678][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 860.484151][ C1] ? process_one_work+0x921/0x1ba0 [ 860.489278][ C1] ? lock_acquire+0x2f/0xb0 [ 860.493788][ C1] ? process_one_work+0x921/0x1ba0 [ 860.498912][ C1] process_one_work+0x9c5/0x1ba0 [ 860.503873][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 860.509540][ C1] ? __pfx_process_one_work+0x10/0x10 [ 860.514924][ C1] ? rcu_is_watching+0x12/0xc0 [ 860.519722][ C1] ? assign_work+0x1a0/0x250 [ 860.524332][ C1] worker_thread+0x6c8/0xf00 [ 860.528947][ C1] ? __pfx_worker_thread+0x10/0x10 [ 860.534095][ C1] kthread+0x2c1/0x3a0 [ 860.538452][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.543751][ C1] ? __pfx_kthread+0x10/0x10 [ 860.548445][ C1] ret_from_fork+0x45/0x80 [ 860.552874][ C1] ? __pfx_kthread+0x10/0x10 [ 860.557476][ C1] ret_from_fork_asm+0x1a/0x30 [ 860.562282][ C1]